Cyber alerts

3,020 results

July 2026

Published Thursday 9 July 2026 (11:59) (updated 9 July 2026)

Microsoft SharePoint Remote Code Execution Vulnerability CVE-2026-33112

Successful exploitation of CVE-2026-33112 could allow an authorised attacker to achieve remote code execution on SharePoint servers via authenticated network access

CC-4809 Medium

Published Tuesday 7 July 2026 (03:32) (updated 7 July 2026)

BeyondTrust Releases Security Advisory for Remote Support & Privileged Remote Access

Advisory addresses 2 critical impact and 2 high impact vulnerabilities

CC-4808 Medium

Published Friday 3 July 2026 (10:21) (updated 3 July 2026)

Active Exploitation of CVE-2026-48282 in Adobe ColdFusion

Successful exploitation could lead to arbitrary code execution in the context of the current user

CC-4807 Medium

Published Thursday 2 July 2026 (03:18) (updated 2 July 2026)

Critical Vulnerabilities in UltraVNC Repeater Component

The critical vulnerabilities could allow a remote attacker either to obtain administrative control of the service through a hard-coded credential (CVE-2026-7839) or achieve unauthenticated arbitrary code execution (CVE-2026-7840)

CC-4806 Medium

Published Thursday 2 July 2026 (01:50) (updated 2 July 2026)

Active Exploitation of CVE-2026-45659 in Microsoft SharePoint

Successful exploitation of CVE-2026-45659 could allow an authorised attacker to achieve remote code execution on SharePoint servers via authenticated network access

CC-4805 Medium

Published Wednesday 1 July 2026 (02:19) (updated 3 July 2026)

Active Exploitation of CVE-2026-8451 in Citrix NetScaler ADC and NetScaler Gateway

Successful exploitation of CVE-2026-8451 could allow unauthenticated memory disclosure in NetScaler appliances when configured as a SAML IDP

June 2026

CC-4804 Medium

Published Tuesday 30 June 2026 (02:46) (updated 30 June 2026)

SimpleHelp Releases Advisory for Authentication Bypass Vulnerability in SimpleHelp RMM

Successful exploitation of CVE-2026-48558 could allow a remote, unauthenticated attacker to bypass authentication and gain full administrative “Technician” access to managed endpoints

CC-4803 High

Published Monday 29 June 2026 (04:26) (updated 29 June 2026)

Exploited Critical Vulnerability in the Oracle Payments Component of Oracle E-Business Suite

CVE-2026-46817 could allow unauthenticated remote takeover of Oracle Payments

CC-4802 Medium

Published Thursday 25 June 2026 (03:59) (updated 25 June 2026)

FFmpeg Releases Update for Vulnerability in MagicYUV Decoder

Successful exploitation of CVE‑2026‑8461 could allow a DoS condition or RCE via crafted media files processed by applications that embed FFmpeg codecs

CC-4801 Medium

Published Thursday 25 June 2026 (02:28) (updated 26 June 2026)

Exploitation of Critical Vulnerability in Lantronix Serial-to-Ethernet Device Servers

Successful exploitation of CVE-2025-67038 could lead to unauthenticated OS command injection