The Roundcube security update fixes 12 webmail flaws, including a zero-click stored XSS and an SSRF bypass. Update to 1.6.19 or 1.7.4 now.

Related Posts:

• CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild
• MikroTrick PoC: RouterOS Admin Rights Exploited In Wild
• AI Agent Coordination: The Unprecedented OpenAI Breakout

The post Roundcube Security Update Fixes 12 Webmail Flaws appeared first on Daily CyberSecurity.

An ASUS Control Center vulnerability, CVE-2026-75754 (CVSS 10), gives unauthenticated attackers a root shell. Update to v3.1.0.9 now.

Related Posts:

• CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild
• MikroTrick PoC: RouterOS Admin Rights Exploited In Wild
• AI Agent Coordination: The Unprecedented OpenAI Breakout

The post CVE-2026-75754 (CVSS 10): ASUS Control Center Root RCE appeared first on Daily CyberSecurity.

CVE-2026-83548, a critical SonicWall SMA1000 vulnerability, is exploited in the wild. The pre-authentication SSRF flaw scores a maximum 10.0 CVSS.

Related Posts:

• Critical Google Chrome Vulnerabilities Patched in New Update
• CVE-2026-80047: Hugging Face Transformers Library Vulnerability
• CVE-2026-68162: Linux Kernel Root Escalation PoC Public

The post CVE-2026-83548 Exploited: SMA1000 SSRF Hits 10.0 appeared first on Daily CyberSecurity.

A public PoC for CVE-2026-64849, an unauthenticated MLflow SSRF (CVSS 9.3), is now live. watchTowr reports exploitation attempts. Patch to 3.15.0.

Related Posts:

• CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1)
• CVE-2026-75045: Unauthenticated Attacker Could Download YouTrack Database Backups
• GeoServer Unauthenticated SQL Injection (CVSS 9.8) Exploited in the Wild, PoC Public

The post PoC Discloses for CVE-2026-64849: watchTowr Sees Attacks on MLflow SSRF appeared first on Daily CyberSecurity.

Roundcube fixes a webmail RCE flaw and an SSRF filter bypass in versions 1.6.18 and 1.7.3. Update your mail server now.

Related Posts:

• CVE-2026-19188: Haiwell HMI Gateway Flaw Lets Attackers Execute Arbitrary OS Commands With Root Privileges (CVSS 10.0)
• Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation
• Citrix NetScaler Pre-Auth RCE CVE-2026-8452 Gets Public Exploit Code

The post Roundcube Patches RCE and SSRF Flaws in 1.6.18 and 1.7.3 appeared first on Daily CyberSecurity.

Progress patched 10 MarkLogic Server vulnerabilities, including auth bypass and privilege escalation flaws rated up to CVSS 9.9. Details inside.

Related Posts:

• Zero-Click File Drop Hits Xiaomi ShareMe: PoC Public
• CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution
• MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed

The post MarkLogic Server Security Bulletin Patches 10 Vulnerabilities, With CVSS Scores Up to 9.9 appeared first on Daily CyberSecurity.