SecurityWeek

Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability

Exploit for "Bad Epoll" Linux kernel vulnerability (CVE-2026-46242) can lead to root access on desktops, servers, and Android ...
SecurityWeek

‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access

DirtyClone, tracked as CVE-2026-43503, is a Linux kernel vulnerability that allows any local user to gain root privileges.
Dark Reading

CitrixBleed-ing Again? NetScaler Vulnerability Under Attack

Attackers wasted little time targeting the latest memory disclosure bug in Citrix NetScaler, after researchers published a ...
The Hacker News

Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure

CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled ...
The Hacker News

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

CISA added CVE-2026-45659 SharePoint Server RCE to KEV following confirmed exploitation, requiring U.S. agencies to patch by ...
Opinion

High-severity vulnerability in Linux caused by a single faulty character

Researchers have analyzed a high-severity vulnerability in Linux that’s able to escalate untrusted users to root by exploiting a bug you don’t often see: a single errant character inside the kernel.

VulNow Becomes a CVE Numbering Authority under ENISA Root

VulNow B.V., a predictive software supply chain risk intelligence platform, today announced its formal appointment as a CVE™ (Common Vulnerabilities and Exposures) Numbering Authority (CNA) under the ...
Forbes

The World Still Needs A CVE Program

For the last 25 years since its inception, the CVE Program (Common Vulnerabilities and Exposures) continues to be the dominant way of referencing security vulnerabilities and an important cornerstone ...
Forbes

CVE Program Funding Reinstated—What It Means And What To Do Next

Forbes contributors publish independent expert analyses and insights. Kate O’Flaherty is a cybersecurity and privacy journalist. U.S. President Donald Trump has cut funding for the global database of ...
Threat Post

Mitre Takes On Critics, Set To Revamp CVE Vulnerability Reporting

Mitre Corporation will introduce a pilot program for classifying CVEs in response to critics who contend the agency is failing to keep pace with a massive influx of CVE number requests. Mitre ...
CSOonline

Beyond CVE: The hunt for other sources of vulnerability intel

Were the CVE program to be discontinued, security teams would have a hard time finding one resource that would function with the same impact across the board. Here are current issues of relying on CVE ...
CSOonline

What is CVE, its definition and purpose?

CVE stands for Common Vulnerabilities and Exposures. It is a program launched in 1999 by MITRE, a nonprofit that operates research and development centers sponsored by the federal government, to ...