Adobe ColdFusion leads seven CVEs now confirmed exploited
Seven flaws are now confirmed exploited: an Adobe ColdFusion path traversal and a wave of Joomla file-upload RCEs, all on CISA KEV this week. Patch by exposure first.
Category
CVE
8 posts tagged CVE.
SharePoint and SimpleHelp: two CVEs now confirmed exploited
Two flaws are now confirmed exploited: a Microsoft SharePoint code-execution bug and a SimpleHelp auth bypass, both on CISA KEV this week. Patch them before your CVSS queue.
CVE digest: Cisco, Ubiquiti, PTC and Lantronix exploited in the wild
Four flaws now confirmed exploited, added to CISA's KEV the week of June 29, 2026: Cisco Unified CM, Ubiquiti UniFi OS, PTC Windchill and Lantronix. What to patch first.
CVE digest: Splunk, Joomla JCE and LiteSpeed exploited in the wild
Three flaws now confirmed exploited, added to CISA's KEV the week of June 22, 2026: Splunk Enterprise, the Joomla JCE editor and a LiteSpeed cPanel plugin. What to patch first.
CVE digest: six KEV additions hit Oracle, Ivanti, Cisco and Chrome
CISA added six CVEs to KEV in the week of June 15, 2026: Oracle PeopleSoft, Ivanti Sentry, Cisco SD-WAN, Arista, Chrome and LiteLLM. Scores and what to patch first.
What is a CVE? Definition, ID format, and what to do about them
What a CVE is, who assigns the IDs, how the numbering works, and how to act on the 40,000+ published each year. A plain-language guide for IT and security teams.
Weekly CVE Digest 2026-06-09: Linux, Android, Magento, SolarWinds
Four CVEs hit CISA KEV this week: Linux, Android, Magento RCE, and SolarWinds DoS. See which patch cuts the most risk against confirmed exploitation.
CVSS vs EPSS vs KEV: how to prioritize CVEs that matter
CVSS vs EPSS vs KEV: three signals that rank vulnerabilities differently. Why CloudKey patches KEV-listed CVEs first, EPSS-elevated next, CVSS last.