CVE-2026-4670 2

Vulnerability (CVE)

Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass

Progress Software released updates for two MOVEit Automation flaws: CVE-2026-4670, a 9.8-rated authentication bypass, and CVE-2026-5174, a 7.7-rated improper input validation bug that could allow privilege escalation. Progress said the flaws may allow...

Vulnerabilities & Patching

⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, Web Socket Skimmers and More

Cyber Risks The Hacker News

Attackers have weaponized CVE-2026-6973, an improper input validation flaw in Ivanti Endpoint Manager Mobile (EPMM) that lets authenticated users with administrative privileges run code remotely, and are actively exploiting a zero-day memory corruption...

Vulnerabilities & Patching