Unauthenticated Admin Access Discovered: CVE-2026-23800 Actively Threatens Modular DS WordPress Sites
Executive Summary CVE ID: CVE-2026-23800Product: Modular DS – modular-connector (WordPress plugin component)Vulnerability Type: Incorrect Privilege Assignment /…
continue reading..
EasyDiscuss Joomla Component Exposed: Stored XSS Vulnerabilities Allow Malicious Script Execution Across User Sessions
Product: EasyDiscuss (Joomla discussion/forum component)Vendor: StackIdeasAffected Area: User profile avatar text handling and forum post renderingImpact: Stored…
continue reading..
Critical Windows Security Vulnerabilities: LSASS Remote Code Execution and VBS Enclave Privilege Escalation (CVE-2026-20854 & CVE-2026-20876)
CVE-2026-20854 affects the Windows Local Security Authority Subsystem Service (LSASS), a critical process responsible for handling user…
continue reading..
Critical Windows Kernel Privilege Escalation via Graphics Component Use-After-Free (CVE-2026-20822)
Product Name: Microsoft WindowsAffected Component: Windows Graphics Component (Microsoft Graphics Kernel Subsystem)Vulnerability Type: Elevation of Privilege (Use-After-Free)Attack…
continue reading..
Critical Microsoft Office Remote Code Execution Vulnerabilities in Word and Excel (CVE-2026-20944, CVE-2026-20955, CVE-2026-20957)
CVE-2026-20944, CVE-2026-20955, and CVE-2026-20957 are critical remote code execution vulnerabilities affecting Microsoft Word and Microsoft Excel, posing…
continue reading..
CVE-2026-20952 and CVE-2026-20953 Two Critical Remote Code Execution Vulnerabilities in Microsoft Office
CVE-2026-20952 and CVE-2026-20953 are critical remote code execution (RCE) vulnerabilities affecting Office. Both vulnerabilities carry a CVSS…
continue reading..
Cisco Patches Actively Exploited AsyncOS Zero-Day in Email Security Appliances
Cisco has fixed a serious zero-day flaw (CVE-2025-20393) in its AsyncOS software that attackers have been actively…
continue reading..
OPSWAT Unit 515 Discovers Critical Unauthenticated Remote Vulnerabilities in Delta DVP PLCs Affecting Industrial Control Systems
Multiple critical vulnerabilities were identified in Delta DVP-12SE11T PLCs running firmware prior to v2.16. These flaws exist…
continue reading..
Silent Packets, Sudden Crashes: Wireshark Parser Flaws That Can Bring Analysis to a Halt
Product: WiresharkWhere the issue lives: Protocol dissectors (the small parsers that decode each protocol layer)What breaks: Input…
continue reading..
