A critical Ghostscript vulnerability, CVE-2026-39919 (CVSS 9.8), allows remote code execution via crafted PDFs. Update Ghostscript to 10.08.0 now.

Related Posts:

• SAP Security Patch Day October 2026 Fixes CVSS 10 Cloud SDK Flaw and Three More Critical Bugs
• IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service
• Discourse Vulnerabilities Let Attackers Hijack Pages for Every Visitor and Read Server Files

The post Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution appeared first on Daily CyberSecurity.

This weekly CVE report tracks 2,825 new flaws and 9 exploited vulnerabilities, verified against CISA KEV. WordPress, F5, Citrix and Check Point lead.

Related Posts:

• Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs
• Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV
• Weekly CVE Report: Daily Cybersecurity Beats CISA KEV on Exploited Flaws

The post Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026) appeared first on Daily CyberSecurity.

New Kapibala WordPress exploitation attacks steal records. GreyNoise warns that Kapibala WordPress exploitation hits governments.

Related Posts:

• Operation RapidRust APT36 Campaign Targets Governments
• NightEagle APT GhostContainer Attacks Target Russia
• Google Undercover Analyst Infiltrates Hacking Gang

The post Kapibala WordPress Exploitation Attacks Hit Governments appeared first on Daily CyberSecurity.

This weekly CVE report tracks 4,378 new flaws and 10 exploited vulnerabilities, checked against the live CISA KEV catalog. See which bugs to patch first.

Related Posts:

• Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV
• Weekly CVE Report: Daily Cybersecurity Beats CISA KEV on Exploited Flaws
• Weekly CVE Report: 11 Exploited Flaws Added to KEV

The post Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs appeared first on Daily CyberSecurity.