Early warnings
Breaches, ransomware, malicious packages and vulnerabilities that newsrooms, vendors or regulators reported before a CVE existed, or without one. When a CVE came later, its row says which and how much earlier cve.now reported it.
- SZB-a9c61ebfa0Microsoft patches record 1,235 flaws, including exploited Outlook zero-dayMicrosoft · Outlook
- SZB-8a90d04873Adobe patches 110 vulnerabilities across 9 productsAdobe · AEM, Premiere, Photoshop, After Effects, Connect, Audition, Dimension, Content C
- SZB-f71a910c08BleepingComputer reports critical Xen Orchestra auth bypass exploited in attacksXen Orchestra
- SZB-db01d072adAttackers exploit AhsayCBS flaws to deploy sandbox-evading Python backdoorAhsay · AhsayCBS
- SZB-fdab5e09d5Apple patches iMessage flaws that expose group chat messagesApple · iMessage
- SZB-40f3a46406Barracuda warns attackers are exploiting two patched ESG root-access flawsBarracuda · Email Security Gateway
- SZB-ea98c8be72SAP patches four CVSS 10.0 flaws in NetWeaver and Web DispatcherSAP Web Dispatcher and Internet Communication Manager
- SZB-4703b2a7b4CISA adds four flaws in GPUStack, FreeSWITCH, OpenSSH and IBM Aspera Faspex to KEVMultiple vendors (GPUStack, SignalWire, OpenBSD, IBM) · Aspera Faspex
- SZB-476799c76cGoogle patches Chrome XML zero-day reported as exploited in attacksGoogle · Chrome
- SZB-197290786fN-able takes N-central offline after researcher discloses 30+ alleged zero-daysN-able · N-central
- SZB-ea46f00bd9Web3Auth flaw exploited to drain Keplr wallets, companies sayWeb3Auth · Keplr wallet Google and Apple sign-in
- SZB-659381b7e7CISA adds SonicWall SonicOS SSLVPN flaw CVE-2026-19868 to KEV catalogSonicWall · GMS 9.5.2
- SZB-b323ce2f22OpenAI says its GPT-6 Cyber model found 81 unknown Firefox flawsMozilla · Firefox
- SZB-25aea6b559QNAP says hackers are exploiting Plex2Shell vulnerability chain on NAS devicesQNAP · Plex Media Server
- SZB-0f0221e743Microsoft Paint RCE flaw CVE-2026-83844 fixed via Store update, not Windows UpdateMicrosoft · Windows Paint
- SZB-f2f032fedbOpenSSH flaw reportedly allows login to password-disabled musl-based Linux accountsOpenSSH · sshd
- SZB-e57f3ab75fCISA warns attackers are exploiting a patched high-severity WordPress flawWordPress Core
- SZB-fefdc7390eAnthropic declines to fix Claude Dispatch flaw enabling remote command executionAnthropic · Claude Desktop and Claude Dispatch
- SZB-646da66be3CISA adds Apple authentication flaw CVE-2024-27834 to KEV catalogApple · iOS, iPadOS, macOS, Safari, tvOS and watchOS
- SZB-c7e59b0d46OpenAI reports 948 Linux kernel privilege escalation flaws found by AI pipelineOpenAI · Linux kernel
- SZB-4f5cab3822Zyxel patches zero-day exploited to hack nearly 1,000 GS1900 switchesZyxel · GS1900
- SZB-6be53914c8SonicWall says it will not patch two end-of-life GMS flaws, one rated CVSS 9.1SonicWall · Global Management System (GMS)
- SZB-76a2041c5eGoogle patches critical Android flaw CVE-2026-58868 allowing remote code executionGoogle · Android
- SZB-626b3ee2d0CISA advisory reports SQL command flaws in Subnet Solutions PowerSYSTEM CenterSubnet Solutions · PowerSYSTEM Center
- SZB-1ac4bc8960Barracuda warns customers to patch two flaws enabling root command executionBarracuda · Web Security Gateway, WAF Control Center, Web Application Firewall
- SZB-9dcda68ffbESET reports Gorbag hackers exploit WinRAR flaw to deploy info-stealing malwareRARLAB · WinRAR
- SZB-b9ba4e436fSiemens IoT2050 Advanced flaw CVE-2026-58115 reportedly exploited in the wildSiemens · SIMATIC IoT2050 Advanced
- SZB-d80473442cAttackers reportedly target unpatched CryptoPayment Gateway plugin flaw CVE-2026-81648CryptoPayment Gateway · WordPress plugin
- SZB-0bed561f10IBM discloses two critical Langflow flaws allowing unauthenticated code executionLangflow
- SZB-ca48ede9d9BleepingComputer reports over 1,000 exposed GitLab servers unpatched against an exploited RCE flawGitLab CI/CD