Security researcher Olivier Laflamme has disclosed two critical vulnerabilities affecting the Unitree G1 EDU humanoid robot that could allow root remote code execution through network and Bluetooth attack paths.
ServiceNow has patched four vulnerabilities affecting its AI Platform, including three critical flaws rated CVSS 10.0 that could allow unauthenticated attackers to execute code or SQL statements.
CISA adds the critical Gitea remote code execution vulnerability CVE 2026 60004 to its Known Exploited Vulnerabilities catalog following reports of active exploitation.
GitLab CVE-2026-19478 is being actively exploited after disclosure, allowing unauthenticated attackers to modify or delete public projects under certain conditions.
Security researchers have observed exploitation attempts targeting SAP Commerce Cloud vulnerability CVE 2026 58231 only days after SAP released a patch for the critical remote code execution flaw.
Security researchers warn that a newly disclosed GeoServer zero day SQL injection vulnerability is being actively targeted and could lead to remote code execution on vulnerable systems.
SAP has released security patches for multiple critical vulnerabilities, including a maximum severity flaw in Commerce Cloud that could allow unauthenticated attackers to execute arbitrary code.
Metabase has released security updates after confirming active exploitation of a zero day vulnerability that allows attackers to gain administrator access without authentication.
HashiCorp, Veeam, and Django have released security updates addressing 11 vulnerabilities, including critical flaws affecting Terraform MCP Server, Veeam Service Provider Console, and GeoDjango.
cPanel has patched a critical privilege escalation flaw alongside two additional security issues affecting database access, HTTP request handling, and Exim mail server components.
Adobe has released security updates for Adobe Campaign Classic and Adobe Bridge, addressing critical vulnerabilities that could allow arbitrary code execution, privilege escalation, and file system access.
CISA has added the actively exploited Microsoft SharePoint vulnerability CVE 2026 58644 to its Known Exploited Vulnerabilities catalog and urged organizations to apply security updates immediately.