Vulnerability - it-daily.net - Daily relevant IT news for decision-makers

Added to KEV Catalog

CISA Flags Actively Exploited Vulnerabilities in Langflow and Trend Micro

27. May, 2026 - 07:26

The U.S. Cybersecurity and Infrastructure Security Agency (Cybersecurity and Infrastructure Security Agency) has added two newly identified vulnerabilities affecting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) catalog. U.S. federal agencies are required to apply patches by June 4, 2026.

CVSS 10 Alert

Critical Cisco Vulnerability Breaks Tenant Isolation

23. May, 2026 - 07:33

A critical vulnerability rated CVSS 10.0 is undermining tenant isolation in Cisco Secure Workload. Administrators are being urged to patch affected REST APIs immediately to prevent potential privilege escalation attacks.

Patch incoming

Zero-day in PAN-OS: Attackers hijack Palo Alto firewalls

06. May, 2026 - 17:16

A critical vulnerability in PAN-OS is already being actively exploited. Palo Alto Networks is working on patches, with the first round expected on May 13.

Critical WordPress plugin bug

WordPress security flaw: Hackers target Breeze Cache plugin

24. April, 2026 - 15:52

A critical vulnerability in the WordPress plugin Breeze Cache allows attackers to take over entire websites. More than 400,000 installations are affected.

Classified as a zero-day vulnerability

Over 1,300 Microsoft SharePoint servers remain unprotected despite patch

22. April, 2026 - 15:45

More than 1,300 publicly accessible Microsoft SharePoint servers remain vulnerable to a critical spoofing security flaw that is already being actively exploited by threat actors.

Tax returns and ID cards

Fiverr data leak: Private documents exposed on Google

15. April, 2026 - 11:15

A misconfigured Cloudinary instance is leaking private user documents from the freelance platform, which are being indexed by Google. The researcher who discovered the issue has been waiting for a response from the company for over 40 days.

Risk rising fast

AI vulnerabilities hit record high as security gaps widen

19. March, 2026 - 18:30

The rapid proliferation of artificial intelligence is delivering not just efficiency gains but also a fast-growing set of security challenges. A recent analysis by TrendAI reveals that vulnerabilities in the AI ecosystem are expanding significantly faster than in the broader software landscape, and many organizations are struggling to keep

Fewer false positives promised

OpenAI launches Codex Security for vulnerability detection

09. March, 2026 - 14:52

Developed under the codename “Aardvark,” Codex Security aims to replace traditional SAST tools and already earned 14 CVE assignments during its beta.

Max Verstappen and others

Security vulnerability exposed Formula 1 driver data

27. October, 2025 - 16:16

A security flaw in the FIA’s IT systems allowed three security researchers to access confidential information, including personal data belonging to Max Verstappen and other Formula 1 drivers.

All windows versions affected

Critical Windows SMB vulnerability being actively exploited in attacks

21. October, 2025 - 11:21

US cybersecurity agency CISA warns of active exploitation of a vulnerability in the Windows SMB protocol. Attackers can use it to gain SYSTEM-level privileges.