CVE-2026-4020 2

Vulnerability (CVE)

Hackers Exploit Gravity SMTP Word Press Plugin Bug to Expose API Keys

Threat actors are exploiting CVE-2026-4020, a medium-severity information disclosure flaw (CVSS 5.3) in the Gravity SMTP WordPress plugin installed on about 100,000 sites, using unauthenticated HTTP GET requests to a REST API endpoint at...

Vulnerabilities & Patching

⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More

Cyber Risks The Hacker News

A campaign codenamed FortiBleed has targeted Fortinet FortiGate firewall and SSL VPN gateway devices worldwide since at least February 2026, with SOCRadar identifying over 80,000 devices whose working usernames and passwords were tested by suspected...

Malware