Technology & Cybersecurity Intelligence
Tech News Hub
Curated security alerts, vulnerabilities, operating-system updates, cloud and AI news, and vendor advisories from trusted sources.
Last updated
17 Oct 2026, 8:13 PM
Next refresh
18 Oct 2026, 8:00 AM
Automatically refreshed twice daily
Critical Vulnerabilities
openSUSE FreeIPMI Moderate Security Threat Advisory 2026-11797-1
An update that solves 6 vulnerabilities can now be installed.
Critical Vulnerabilities
Actively Exploited Critical
CVE-2020-8599: Trend Micro Apex One and OfficeScan
Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2020-11651: SaltStack Salt
SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2020-10189: Zoho ManageEngine
Zoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution. Required action: Apply updates per vendor instructions.
Critical Vulnerabilities
Actively Exploited Critical
CVE-2019-18988: TeamViewer Desktop
TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations. If an attacker were…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2020-3950: VMware Multiple Products
VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2021-35211: SolarWinds Serv-U
SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution. Required action: Apply updates per vendor instructions.
Critical Vulnerabilities
Actively Exploited Critical
CVE-2020-24557: Trend Micro Apex One, OfficeScan, and Worry-Free Business Security
Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2020-11652: SaltStack Salt
SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2021-40539: Zoho ManageEngine
Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution. Required action: Apply updates…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2017-6327: Symantec Symantec Messaging Gateway
Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2020-3992: VMware ESXi
VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2020-10148: SolarWinds Orion
SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands. Required action: Apply updates per vendor…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2020-8468: Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents
Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2017-16651: Roundcube Roundcube Webmail
Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default. Required…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2021-27561: Yealink Device Management
Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution. Required action: Apply updates per vendor instructions.