Oracle Essbase (July 2026 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the July 2026 Critical Patch Update CPU. It is, therefore, affected by: - Apache Log4j's JsonTemplateLayout, in versions up to and including 2.25.3, produces invalid JSON output when log events contain...

Oracle WebLogic Server (July 2026 CPU)

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core...

Oracle GoldenGate 23.x < 23.26.3.0.0 (July 2026 CPU)

The 23.x version of GoldenGate installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate component: Service Manager. Easily exploitable vulnerability allows low privileged...

Oracle WebLogic Server Multiple Vulnerabilities (July 2026 CPU) (12.2.1.4.0 / 14.1.2.0.0)

The 12.2.1.4.0 and 14.1.2.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that a...

CVE-2026-14881

creationtimestamp| type| source ---|---|--- 2026-07-22 20:55:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrb7ilrmpy2q 2026-07-22 21:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrb7qnhc6z2f 2026-07-24 04:46:08+00:00| seen|...

CVE-2026-59886

creationtimestamp| type| source ---|---|--- 2026-07-22 17:06:11+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrasnz6yqp2o 2026-07-22 17:06:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mraso4k6za2m...

Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs

Apple has moved to address a security flaw in its Hide My Email service that enabled users' real email addresses to be unmasked, effectively undermining the feature's privacy guarantees. 404 Media reported Tuesday that a fix for the issue was deployed by Apple on July 3, 2026, after more than a...

CVE-2026-64606

creationtimestamp| type| source ---|---|--- 2026-07-21 14:23:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr5z4u3qzw2f 2026-07-21 15:06:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr63jgvx2w2q 2026-07-21 15:38:04+00:00| seen|...

Oracle Critical Patch Update Advisory - July 2026

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...

CVE-2026-47198

creationtimestamp| type| source ---|---|--- 2026-07-20 22:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4c6mw66j22 2026-07-20 22:16:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4d2rwowl2e...

wp2shell Aftermath: The First Critical Unauthenticated WordPress Core RCE in Nearly a Decade

On Friday, July 17, 2026, the WordPress Security Team released security updates for WordPress Core addressing two vulnerabilities that, when chained together, can lead to unauthenticated remote code execution. The chain, now commonly referred to as wp2shell , was discovered and reported by Adam...

Microsoft Edge (Chromium) < 150.0.4078.80 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 150.0.4078.80. It is, therefore, affected by multiple vulnerabilities as referenced in the July 16, 2026 advisory. - Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker...

Exploit for CVE-2026-63030

wp2shell: WordPress Batch RCE A technical breakdown of CVE-20...

CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild

Overview On July 14, 2026, Microsoft published a security advisory addressing CVE-2026-58644, a critical remote code execution RCE vulnerability affecting on-premises Microsoft SharePoint Server deployments. The vulnerability, which carries a CVSS v3.1 score of 9.8 Critical, results from the...

CVE-2026-12705

creationtimestamp| type| source ---|---|--- 2026-07-17 17:55:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqud3r4mxv2j 2026-07-28 16:51:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-07...

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the fixes by July 19, 2026. T...

Security Updates for Microsoft PowerPoint Products C2R (July 2026)

The Microsoft PowerPoint Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. CVE-2026-55043, CVE-2026-55120, CVE-2026-55123 Note that...

Security Updates for Microsoft Office Products C2R (July 2026)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-55045 - Use after free in Microsoft Office allows an unauthorized attacker...

CVE-2025-60357

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:06+00:00| seen| Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg 2026-07-16 19:00:06+00:00| seen| Telegram/IvSTlctOWtnn6SGIxP1ow0rL8sm88KiToGZPow6lWPATWQM 2026-07-17 00:00:10+00:00| published-proof-of-concept|...

CVE-2026-54733

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrn26pxli2a 2026-07-16 16:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrou4dsoi2o 2026-07-17 17:12:45+00:00| seen|...