CVE-2026-34260 2

Vulnerability (CVE)

Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws

Ivanti, Fortinet, n8n, SAP, and VMware released fixes for vulnerabilities that could allow authentication bypass and arbitrary code execution, led by a critical Ivanti Xtraction flaw (CVE-2026-8043, CVSS 9.6) that lets a remote authenticated attacker read...

Vulnerabilities & Patching

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

Cyber Risks The Hacker News

Microsoft disclosed CVE-2026-42897, a spoofing bug stemming from a cross-site scripting flaw with a CVSS score of 8.1 affecting on-premise Exchange Server, which is under active exploitation in the wild. Microsoft is offering a temporary mitigation through...

Vulnerabilities & Patching