Three distinct vulnerabilities, each with a maximum CVSS score of 10.0, allow anyone on the Internet to execute code on your ServiceNow servers without any authentication. An absolute emergency for the thousands of organizations using the platform.
Aug 31, 2026 19 3
The Unitree G1 EDU humanoid robot, a star in research labs, can be compromised and remotely activated via two critical vulnerabilities—one of which doesn’t even require being on the same network, just being within Bluetooth range.
Aug 31, 2026 25 4
The CISA has just added six new entries to its KEV (Known Exploited Vulnerabilities) catalog. These include vulnerabilities in NetScaler (Citrix), the Linux kernel, and Microsoft SQL Server—all actively exploited in real-world conditions.
Aug 28, 2026 2 1
Attackers are actively exploiting vulnerabilities in on-premises SharePoint Server to gain Farm Administrator rights and steal IIS machine keys to maintain access even after applying a patch.
Aug 25, 2026 4 1
The CISA adds three SharePoint vulnerabilities to its KEV catalog - confirmed exploitation in the wild. Two other critical flaws remain on the table. What to patch, and quickly.
Jul 17, 2026 18 3
