TL;DR Attackers chained two Zammad zero-day flaws to break into the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21. The pair, CVE-2026-102489 and CVE-2026-102490, took the int…

TL;DR A Sharp printer vulnerability, now tracked as CVE-2024-58388, lets unauthenticated attackers read any file on the device. Exploit details and a working proof-of-concept have been public sinc…

Researchers published 2,652 new CVEs between September 28 and October 4, 2026. This weekly CVE report, built from CVE Watchtower data, tracks seven flaws with confirmed exploitation. Daily Cyberse…

TL;DR Attackers have begun CVE-2026-21589 exploitation against self-managed Atlassian servers. Researchers at watchTowr published a full technical breakdown and working proof-of-concept for the ar…

TL;DR Attackers are exploiting two unauthenticated stored XSS flaws in Ninja Forms and WPC Product Bundles for WooCommerce, according to Patchstack. The WordPress XSS campaign plants a script that…

Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products.

Between October 5 and 11, 2026, CVE Watchtower logged 3,255 new vulnerabilities. This weekly CVE report highlights six exploited flaws that Daily Cybersecurity’s intelligence sources surface…

CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.

The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites.

TL;DR Ivanti disclosed CVE-2026-104935 on October 13, 2026, and confirmed the flaw is already exploited in the wild. The Ivanti Connect Secure vulnerability lets a remote, unauthenticated attacker…