#unpatched


Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Sep 27, 2026 // 12:28

Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, […]

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

Sep 24, 2026 // 23:37

A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A […]

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

Sep 23, 2026 // 14:28

A use-after-free in the Linux kernel’s AF_UNIX socket subsystem can be used to escape a container and gain root on the host, security firm DepthFirst […]

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

Sep 23, 2026 // 14:17

A use-after-free in the Linux kernel’s AF_UNIX socket subsystem can be used to escape a container and gain root on the host, security firm DepthFirst […]

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Sep 5, 2026 // 23:58

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store’s server […]

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Sep 5, 2026 // 20:02

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently […]

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Sep 1, 2026 // 19:02

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic […]

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

Aug 26, 2026 // 15:00

The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura’s HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary […]

Unpatched Calix flaw lets hackers bypass NAT to expose internal devices

Aug 25, 2026 // 01:37

An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers used by multiple U.S. broadband providers allows remote, unauthenticated attackers to create port-forwarding rules that […]

Unpatched GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

Aug 14, 2026 // 00:08

A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, […]

1 2 Next