Cyber alerts

3,014 results

April 2026

Published Thursday 30 April 2026 (11:34) (updated 30 April 2026)

Critical Vulnerability in cPanel and Web Host Manager (WHM)

CVE-2026-41940 could allow unauthenticated remote attackers to gain unauthorised access on the affected cPanel management console

CC-4773 Medium

Published Wednesday 22 April 2026 (01:16) (updated 22 April 2026)

Oracle Releases April 2026 Critical Patch Update Advisory

Scheduled advisory includes 481 security updates across multiple Oracle product families

CC-4772 Medium

Published Thursday 16 April 2026 (02:03) (updated 16 April 2026)

Cisco Releases Security Advisories for Critical Vulnerabilities in Identity Services Engine

An authenticated attacker could exploit the vulnerabilities to achieve remote code execution

CC-4771 Medium

Published Wednesday 15 April 2026 (03:48) (updated 24 April 2026)

Microsoft Releases April 2026 Security Updates

Scheduled updates for Microsoft products address 165 vulnerabilities, including CVE‑2026‑32201, an exploited spoofing vulnerability affecting SharePoint Server

CC-4770 Medium

Published Tuesday 14 April 2026 (11:47) (updated 14 April 2026)

Axios Releases Security Update to Address Critical Vulnerability

CVE‑2026‑40175 could be used in an attack chain to allow for remote code execution or full cloud compromise

CC-4769 Medium

Published Monday 13 April 2026 (02:37) (updated 13 April 2026)

Adobe Releases Security Update to Address a Vulnerability in Acrobat and Reader

CVE‑2026‑34621 could allow arbitrary code execution via malicious PDF files opened in vulnerable Adobe Acrobat or Reader installations.

CC-4768 Medium

Published Thursday 9 April 2026 (01:20) (updated 9 April 2026)

Mitel Releases Security Advisory for MiCollab

A critical SQL injection vulnerability could allow a remote unauthenticated attacker to access system information and execute arbitrary SQL database commands

CC-4767 Medium

Published Tuesday 7 April 2026 (04:03) (updated 7 April 2026)

Progress Releases Security Updates for ShareFile Storage Zones Controller (SZC)

Successful exploitation could allow an unauthenticated remote attacker to access on-prem storage zones controller’s configuration pages, potentially leading to changes in system configuration and remote code execution

CC-4766 High

Published Tuesday 7 April 2026 (11:20) (updated 7 April 2026)

Exploitation of Zero-Day Vulnerability in FortiClient EMS

CVE-2026-35616 could allow an unauthenticated attacker to perform remote code execution (RCE)

CC-4765 Medium

Published Thursday 2 April 2026 (03:09) (updated 2 April 2026)

Google Releases Security Update for Chrome

Updates include 21 security fixes, including one that addresses an exploited high severity vulnerability (CVE-2026-5281)