Max severity Adobe ColdFusion flaw now exploited in attacks

Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to ...
SecurityWeek

Critical Cursor AI IDE Flaws Could Lead to OS-Level Remote Code Execution

The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.

CISA: Microsoft SharePoint RCE flaw now actively exploited

CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution ...
SecurityWeek

Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability

Cisco confirmed that hackers are exploiting CVE-2026-20230, a Unified CM vulnerability allowing privilege escalation to root.