Daily Vulnerability Brief

05 June 2026

CVE-2026-20245

Urgent: Cisco SD-WAN Software Vulnerability Could Let Attackers Take Control

A serious security flaw has been found in Cisco's SD-WAN Manager software that could allow attackers with certain access to take full control of the system. This matters because it could lead to unauthorised changes and disruptions in your network.

05 June 2026

CVE-2026-3300

Critical Security Flaw Found in Everest Forms Pro WordPress Plugin

A serious security weakness has been found in the Everest Forms Pro plugin for WordPress, allowing attackers to run harmful code on your website without needing to log in. This affects all versions up to 1.9.12 and could let hackers take control of your site if you use the plugin's calculation features.

04 June 2026

CVE-2026-23479

Important Security Fix for Redis Software to Prevent Remote Attacks

A serious security flaw has been found in Redis, a common software used to manage data quickly. This flaw could allow attackers to take control of affected systems remotely. A fix is available, so it is important to update to the latest version to stay safe.

04 June 2026

CVE-2026-20230

Important Cisco Phone System Vulnerability Could Let Attackers Gain Full Control

A serious security flaw has been found in Cisco's Unified Communications Manager, a system used to manage business phone calls. This flaw could let attackers remotely take control of the system if a specific feature is enabled. It is important to check if your organisation uses this system and take steps to protect it.

04 June 2026

New Security Risk Highlights Importance of Choosing the Right Cybersecurity Service

A recent report highlights a serious security weakness that could allow hackers to take control of systems through common technologies like Windows, VPNs, and firewalls. This shows why small organisations should carefully select managed detection and response (MDR) providers to protect against such threats.

03 June 2026

CVE-2026-45247

Critical Security Flaw in Mirasvit Full Page Cache Warmer for Magento

A critical security vulnerability has been found in the Mirasvit Full Page Cache Warmer plugin for Magento 2. This flaw allows attackers to run harmful code on your website without needing to log in, potentially compromising your business data and website operations.

03 June 2026

CVE-2026-8206

Critical WordPress Plugin Flaw Could Let Hackers Take Over Your Website

A serious security flaw has been found in the Kirki plugin for WordPress that could allow attackers to reset passwords and take control of user accounts, including admin accounts. This matters because it could let someone hijack your website without needing to log in first.

02 June 2026

CVE-2025-48595

Urgent Android Security Flaw Could Let Hackers Take Control

A serious security flaw in the Android operating system's core framework has been found and is already being exploited by attackers. This flaw allows hackers to run harmful code on affected devices without needing the user to do anything, potentially giving them full control over the device.

02 June 2026

CVE-2022-0492

Important Linux Security Flaw Could Let Hackers Gain Control

A serious security weakness has been found in the Linux operating system kernel that could allow attackers to gain higher access rights than they should have. This flaw is actively being exploited and affects many systems using Linux, which is common in small business servers and cloud services.

02 June 2026

CVE-2025-8088

Critical WinRAR Flaw Lets Hackers Run Harmful Code on Windows PCs

A serious security flaw in the Windows version of WinRAR has been found and actively exploited by attackers. This flaw allows hackers to run harmful software by tricking users into opening specially crafted archive files. Since many small businesses use Windows and WinRAR, this vulnerability could put your organisation at risk.

01 June 2026

CVE-2024-21182

Urgent Security Issue Found in Oracle WebLogic Server

A serious security flaw has been found in Oracle WebLogic Server that could allow attackers to access sensitive data without needing a password. This vulnerability is actively being exploited and affects certain versions of the software commonly used in business environments.

01 June 2026

CVE-2026-0826

Critical Security Flaw Found in Poly Voice Devices Could Let Hackers Take Control

A serious security weakness has been found in certain Poly Voice products running on Linux. This flaw could allow attackers to run harmful software remotely, potentially compromising your phone system and business communications.

01 June 2026

CVE-2026-8732

Critical Security Flaw in WP Maps Pro Plugin Could Let Hackers Take Over Your Website

A serious security weakness has been found in the WP Maps Pro plugin for WordPress that could allow attackers to create an administrator account without permission. This means hackers could gain full control of your website, potentially leading to data loss or damage.

31 May 2026

CVE-2026-43284

Important Linux Security Fix for Network Data Handling

A serious security flaw has been found and fixed in the Linux operating system's handling of certain encrypted network data packets. This could allow attackers to run harmful code remotely, potentially taking control of affected systems. Small businesses using Linux servers or devices should ensure their systems are updated to stay protected.

31 May 2026

CVE-2026-43500

Important Linux Kernel Security Fix for Data Handling Vulnerability

A serious security issue has been found and fixed in the Linux operating system kernel that could allow attackers to run harmful code remotely or gain higher access privileges. This matters because many small businesses use Linux-based systems, and if not updated, they could be at risk.

31 May 2026

CVE-2026-35616

Critical Security Flaw Found in Fortinet FortiClient EMS Software

A serious security weakness has been found in Fortinet FortiClient EMS versions 7.4.5 and 7.4.6. This flaw could let hackers run harmful commands without needing to log in, potentially leading to stolen information or other damage. Small businesses using this software should act quickly to protect themselves.

30 May 2026

CVE-2022-28368

Critical Security Flaw in Dompdf Could Let Hackers Take Over Your Website

A serious security weakness has been found in Dompdf, a tool used to convert web pages into PDF files. This flaw could allow hackers to run harmful code on your website, potentially leading to full control of your systems. Small businesses using Dompdf, especially within platforms like WordPress or Linux servers, should act quickly to protect themselves.

30 May 2026

CVE-2026-3055

Critical Security Flaw Found in Citrix NetScaler Devices

A serious security weakness has been discovered in Citrix NetScaler devices used for secure remote access. This flaw could allow attackers to access sensitive information or take control of the system, posing a significant risk to organisations relying on these devices.

30 May 2026

CVE-2026-4257

Critical Security Flaw Found in Popular WordPress Contact Form Plugin

A serious security weakness has been found in the Contact Form by Supsystic plugin for WordPress. This flaw could allow attackers to take control of your website without needing to log in, potentially leading to data theft or damage. Small organisations using this plugin should act quickly to protect their sites.

29 May 2026

CVE-2026-0257

VPN Security Flaw in Palo Alto Networks Could Let Attackers Bypass Login

A security weakness has been found in the VPN software used by Palo Alto Networks, which could allow attackers to connect without proper login. This matters because it could let unauthorised people access your organisation’s network remotely.

29 May 2026

CVE-2026-26194

Security Flaw Found in Gogs Git Service Could Let Hackers Run Code

A serious security flaw has been found in Gogs, a popular tool for managing code projects. This flaw could let attackers run harmful commands on your system if you use an older version of Gogs. It’s important to update to the latest version to keep your data and systems safe.

29 May 2026

CVE-2026-39987

Critical Security Flaw in Marimo Python Notebook Allows Remote Code Execution

A serious security weakness has been found in Marimo, a Python notebook tool used for interactive coding. This flaw lets attackers run commands on your system without logging in, potentially taking full control. The issue affects versions before 0.23.0 and has been fixed in the latest update.

28 May 2026

CVE-2024-39930

Critical Security Flaw in Gogs Software Could Let Attackers Take Control

A serious security weakness has been found in Gogs, a software tool used for managing code repositories. This flaw could allow someone with access to the system to run harmful commands remotely, potentially taking control of the affected computer. This matters because it could lead to data loss or disruption if exploited.

28 May 2026

CVE-2024-39932

Critical Security Flaw Found in Gogs Software Used for Code Management

A serious security weakness has been found in Gogs, a tool some businesses use to manage software code. This flaw could let attackers run harmful commands on your system if they have access, potentially leading to data loss or system damage.

28 May 2026

CVE-2024-39933

New Security Flaw Found in Gogs Software Could Let Attackers Run Code

A security weakness has been reported in Gogs, a tool some small organisations use to manage software projects. This flaw could allow someone with access to the system to run harmful commands remotely. It is important to check if you use this software and take steps to protect your organisation.

27 May 2026

CVE-2026-45321

Critical Security Issue Found in TanStack Software Packages

A serious security problem was found in many TanStack software packages used in web development. Attackers managed to publish harmful versions of these packages that can steal credentials, posing a risk to organisations using them. This issue is actively being exploited, so urgent action is needed.

27 May 2026

CVE-2026-8398

Critical Security Issue Found in Daemon Tools Lite Installation Files

A serious security problem has been found in certain versions of Daemon Tools Lite for Windows. Between early April and early May 2026, the official installation files were tampered with to include harmful software. This means users who installed or updated the program during that time may have unknowingly put their computers at risk.

27 May 2026

CVE-2026-48027

Critical Security Issue Found in Nx Console Software

A critical security problem was found in a popular software tool called Nx Console, used by developers. A malicious version was briefly available, potentially exposing users to harm. Immediate action is recommended to protect your organisation.

26 May 2026

CVE-2026-45659

Important Microsoft SharePoint Security Update to Prevent Remote Attacks

A serious security flaw has been found in Microsoft Office SharePoint that could let attackers run harmful software remotely. This matters because SharePoint is commonly used by many small organisations to manage documents and collaborate, so the risk of data loss or disruption is real if the flaw is not fixed.

26 May 2026

Urgent Patch Needed for Active Security Flaw in Drupal Websites

A serious security flaw in Drupal, a popular website platform, is being actively exploited by attackers. This vulnerability allows hackers to run harmful commands on affected websites, potentially leading to data theft or website damage. Immediate action is recommended to protect your site.

25 May 2026

CVE-2026-26980

Critical Security Flaw Found in Ghost Website Software

A serious security weakness has been found in Ghost, a popular website management tool used by many small businesses. This flaw allows attackers to access sensitive information without needing to log in. It has already been used to attack hundreds of sites, so updating the software is essential.

25 May 2026

Urgent: New Security Flaws Found in Linux and Routers Could Let Hackers In

Recent reports reveal serious security weaknesses in Linux systems and common routers that hackers can exploit immediately. These flaws could allow attackers to take control of devices or create botnets, posing risks to small businesses relying on these technologies.

24 May 2026

CVE-2023-7101

High Risk in Excel File Parsing Could Let Hackers Run Code

A serious security flaw has been found in a common tool used to read Excel files in some software. This flaw could allow attackers to run harmful code on your computer if you open a malicious Excel file. It’s important for small organisations to be aware and take steps to protect themselves.

24 May 2026

CVE-2026-31431

Important Linux Kernel Security Fix for Encryption Vulnerability

A serious security flaw has been found and fixed in the Linux kernel's encryption system. This flaw could allow attackers to run harmful code remotely, putting your systems at risk. It is important for organisations using Linux-based systems to ensure they have applied the latest updates to stay protected.

24 May 2026

CVE-2026-48172

Critical Security Flaw in LiteSpeed cPanel Plugin Could Let Hackers Take Over Your Server

A serious security weakness has been found in the LiteSpeed User-End cPanel Plugin that could allow attackers to gain full control of affected servers. This flaw is actively being exploited, meaning hackers are already using it to run harmful commands as the highest-level user.

23 May 2026

CVE-2026-9082

Important Security Update for Drupal Websites: SQL Injection Vulnerability

A security flaw has been found in Drupal, a popular website platform, that could allow attackers to access or control your website's data. This vulnerability is actively being exploited, so it is important for organisations using Drupal to take action quickly.

23 May 2026

CVE-2023-7102

Critical Security Flaw Found in Barracuda Email Security Appliances

A serious security weakness has been found in certain Barracuda Email Security Gateway (ESG) appliances that could allow attackers to take control remotely. This matters because many small organisations use these devices to protect their email, and if not fixed, it could lead to data breaches or disruption.

23 May 2026

CVE-2026-24479

Critical Security Flaw in HUSTOF Software Could Let Hackers Take Control

A serious security weakness has been found in HUSTOF, an open-source system used for programming contests and training. This flaw could allow attackers to run harmful code on the server by uploading specially crafted files. It is important to check if your organisation uses this software and update it promptly to avoid risks.

22 May 2026

CVE-2025-34291

Critical Security Flaw in Langflow AI Software Could Let Hackers Take Over Your System

A serious security weakness has been found in Langflow, an AI-related software used by some businesses. This flaw lets attackers hijack user accounts and run harmful code remotely, potentially taking full control of affected systems. It is actively being exploited, so urgent action is needed.

22 May 2026

CVE-2026-34926

Urgent Security Issue Found in Trend Micro Apex One Software

A serious security flaw has been found and actively exploited in Trend Micro Apex One, a popular security product used by many organisations. This means attackers can potentially access sensitive parts of your system if the software is not updated or protected properly.

22 May 2026

CVE-2026-45498

Microsoft Defender Vulnerability Could Disrupt Your Security Software

A new vulnerability in Microsoft Defender has been identified that could allow attackers to cause the software to stop working properly. This issue is actively being exploited, meaning attackers are using it in the wild. It is important for small businesses using Microsoft Defender to take action to reduce the risk.

21 May 2026

CVE-2008-4250

Critical Microsoft Windows Vulnerability Actively Exploited

A serious security flaw in older Microsoft Windows systems has been confirmed as actively exploited by attackers. This vulnerability allows remote hackers to run harmful code on affected computers, posing a significant risk to organisations still using these versions.

21 May 2026

CVE-2009-1537

Urgent: Microsoft DirectX Vulnerability Actively Exploited

A serious security weakness in Microsoft DirectX, a common Windows component, is being actively exploited by attackers. This vulnerability allows harmful files to run dangerous code on affected computers, posing a risk to organisations using older Windows systems.

21 May 2026

CVE-2010-0806

Important Security Flaw Found in Older Microsoft Internet Explorer Versions

A serious security weakness has been confirmed in older versions of Microsoft Internet Explorer, which hackers are actively exploiting. This flaw could allow attackers to take control of affected computers remotely, making it important for organisations still using these browsers to act quickly.

20 May 2026

CVE-2010-0249

Important Security Alert: Microsoft Internet Explorer Vulnerability

A serious security flaw affecting older versions of Microsoft Internet Explorer has been officially recognised as actively exploited by attackers. This vulnerability could allow hackers to take control of affected computers remotely, posing a significant risk to organisations still using these outdated browsers.

20 May 2026

CVE-2009-3459

Urgent: Adobe Acrobat and Reader Security Flaw Being Exploited

A serious security flaw in older versions of Adobe Acrobat and Reader has been confirmed as actively exploited by attackers. This vulnerability allows hackers to run harmful code on your computer through a malicious PDF file. It is important for organisations using these products to take immediate action to protect their systems.

20 May 2026

CVE-2026-41091

Urgent: Microsoft Defender Vulnerability Could Let Attackers Gain Higher Access

A serious security flaw has been found in Microsoft Defender that could allow attackers with some access to your computer to increase their control. This vulnerability is actively being exploited, so it is important for organisations using Microsoft Defender to act quickly.

19 May 2026

CVE-2026-31635

High-Risk Linux Kernel Vulnerability Could Allow Privilege Escalation

A serious security flaw has been found and fixed in the Linux operating system kernel, which could allow attackers to gain higher access rights than they should have. This matters because many small businesses use Linux servers or devices, and if unpatched, this vulnerability could be exploited to take control of systems.

19 May 2026

New Windows Security Flaw Could Let Hackers Take Full Control

A new security flaw has been found in Windows that can let attackers gain full control of a computer, even if it is fully updated. This is serious because it allows hackers to do almost anything on the affected system.

19 May 2026

New Linux Security Flaw Could Let Hackers Gain Full Control

A new security flaw called DirtyDecrypt has been found in Linux systems that could allow hackers to gain full control of affected computers. This matters because Linux is commonly used in many small business systems and AI applications, and an exploit is already available.

18 May 2026

CVE-2026-8043

Critical Security Flaw Found in Ivanti Xtraction Software

A serious security weakness has been found in Ivanti Xtraction software versions before 2026.2. This flaw could let attackers access sensitive files and add harmful web content, potentially exposing your organisation to data leaks and attacks on users.

18 May 2026

CVE-2026-42945

Critical NGINX Vulnerability Could Cause Website Crashes and Security Risks

A serious security flaw has been found in NGINX web server software that can cause website crashes and potentially allow attackers to run harmful code. This matters because many small businesses use NGINX to manage their websites, and if not fixed, it could disrupt services or lead to data breaches.

18 May 2026

CVE-2023-30253

High-Risk Security Flaw Found in Dolibarr Software

A serious security weakness has been found in Dolibarr, a popular business management software. This flaw could let someone with access to the system run harmful code, potentially causing damage or stealing information. Small organisations using Dolibarr should take steps to protect themselves.

17 May 2026

CVE-2024-48760

Critical Security Flaw in GestioIP Could Let Hackers Take Control

A serious security weakness has been found in GestioIP version 3.5.7, a tool used for managing IP addresses. This flaw allows attackers to upload harmful files that can take control of the system remotely. It is important because it could let hackers run commands on your system without permission.

17 May 2026

CVE-2025-6793

Critical Security Flaw in Marvell QConvergeConsole Could Allow File Deletion and Data Exposure

A serious security weakness has been found in Marvell QConvergeConsole software that could let attackers remotely delete important files and access sensitive information without needing to log in. This matters because it can disrupt your systems and expose private data.

17 May 2026

CVE-2026-0265

Important Security Flaw in Palo Alto Networks Firewalls Could Let Attackers Bypass Login

A serious security weakness has been found in Palo Alto Networks firewall software that could allow attackers to bypass login controls if a specific cloud authentication feature is enabled. This matters because it could let unauthorised users access your network management settings, potentially compromising your security.

16 May 2026

CVE-2026-20182

Critical Cisco SD-WAN Vulnerability Allows Remote Admin Access

A serious security flaw has been found and fixed in Cisco's Catalyst SD-WAN Controller that could let attackers bypass login controls and gain high-level access to network settings. This is important because it affects how securely your network is managed and could allow attackers to change your network without permission.

16 May 2026

CVE-2026-42897

Urgent: Microsoft Exchange Server Vulnerability Being Actively Exploited

A serious security flaw in Microsoft Exchange Server has been found and is currently being exploited by attackers. This vulnerability allows hackers to trick users and potentially gain access to your network through crafted emails. It is important for organisations using Exchange Server to act quickly to protect themselves.

16 May 2026

CVE-2026-20127

Critical Security Flaw in Cisco SD-WAN Controllers Could Let Attackers Take Control

A serious security weakness has been found in Cisco SD-WAN Controllers that could allow attackers to bypass login controls and gain high-level access to your network management system. This matters because it could let attackers change your network settings without permission, potentially disrupting your business or exposing sensitive information.

14 May 2026

CVE-2026-46300

New Linux Vulnerability Could Let Hackers Take Full Control

A new security flaw has been found in the Linux operating system used by many small business devices like network storage (NAS) and AI systems. This flaw could allow attackers to gain full control of affected devices, which is serious but can be managed with proper updates and checks.

14 May 2026

CVE-2020-13949

Important Security Update: Apache Thrift Vulnerability Could Disrupt Your Services

A serious security weakness has been found in Apache Thrift software used in some business applications. This flaw could allow attackers to overload systems, causing them to crash and stop working. It is important to check if your systems use this software and apply updates to prevent disruption.

14 May 2026

CVE-2025-14179

Important Security Update for PHP Users to Prevent Data Breaches

A serious security flaw has been found in certain versions of PHP software that could allow attackers to access or change your business data without permission. This matters because many websites and applications use PHP, and if not fixed, it could lead to data theft or disruption.

13 May 2026

CVE-2026-31705

Critical Linux Kernel Vulnerability Affecting File Sharing Services

A critical security flaw has been found and fixed in the Linux kernel's file sharing component, which could allow attackers to overwrite memory and potentially take control of affected systems. This matters because many small organisations use Linux-based servers or devices for file sharing and could be at risk if not updated.

13 May 2026

CVE-2026-31718

Critical Linux File Sharing Vulnerability Fixed – Important Patch Needed

A serious security flaw has been fixed in the Linux kernel's file sharing system that could allow attackers to cause crashes or run harmful code remotely. This matters because many small organisations use Linux servers for file sharing, and unpatched systems could be at risk.

13 May 2026

CVE-2026-33117

Critical Security Flaw in Microsoft Azure Software Could Let Hackers Bypass Protections

A serious security weakness has been found in Microsoft Azure software that could allow hackers to bypass important security checks remotely. This could put small businesses using Microsoft cloud services or related software at risk if not addressed quickly.

12 May 2026

CVE-2026-41940

Critical Security Flaw in cPanel Could Let Hackers Access Your Website Control Panel

A serious security weakness has been found in cPanel, a popular tool used to manage websites and hosting. This flaw lets attackers bypass login security and access the control panel without permission, potentially putting your website and data at risk.