CyberHighConfirmedAccelerating
8.3
Threat actors exploit high-severity Zimbra RCE vulnerability to compromise 270+ servers
BleepingComputer·about 12 hours ago
CyberConfirmedHighDevelopingFeatured
7.8
Active exploitation of critical Oracle WebLogic vulnerability CVE-2026-21962
Threat actors are actively exploiting a CVSS 10.0 vulnerability in Oracle WebLogic Server Proxy Plug-in, allowing unauthenticated remote code execution or data manipulation. The flaw enables unauthorized access via HTTP requests, posing a severe risk to enterprise infrastructure relying on these components.
Score Breakdown
Mosaic Score7.8
Confidence0.9
Significance0.8
Source credibility0.6
Related signals
8 foundCyberHighConfirmedAccelerating
8.3
Critical Keycloak vulnerability CVE-2026-18963 enables unauthenticated account takeover
The Hacker News·1 day ago
CyberNotableConfirmedDeveloping
7.0
Marimo notebook vulnerability CVE-2026-75149 allows unauthorized MCP command execution
The Hacker News·about 8 hours ago
CyberNotableConfirmedDeveloping
7.0
NemoClaw vulnerability enables DNS rebinding attacks against local Ollama instances
The Hacker News·about 8 hours ago
CyberNotableConfirmedDeveloping
6.6
Security risks of IP-to-hostname obfuscation in SSRF mitigation
SANS Internet Storm CenterLO·about 8 hours ago
CyberNotableEmergingDeveloping
6.4
Assessment of Iranian cyber-offensive capabilities targeting US critical infrastructure
The Hill·IR · US·about 8 hours ago
CyberNotableConfirmedDeveloping
6.0
CISA mandates urgent patching of actively exploited Zimbra Collaboration Suite vulnerability
BleepingComputer·US·1 day ago
CyberNotableConfirmedDeveloping
5.8
Critical vulnerability in Unisoc chipsets enables remote root access via video call
LibertateaLO·CN·about 14 hours ago