Microsoft warns of active exploitation of a Zimbra Collaboration Suite flaw
The unauthenticated CVE-2026-73570 flaw in Zimbra’s SNMP notifications allows command execution on vulnerable mail servers. A fix has been available since July.
Tag CVE-2021-31886
Three JFrog Artifactory Flaws Actively Exploited to Gain Administrator Access
Security researchers have recorded attacks against self-hosted JFrog Artifactory servers in which attackers exploited three patched vulnerabilities to gain administrative privileges and establish persistence.
SAP Fixes Two Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
SAP released fixes for CVE-2026-44756 with a CVSS score of 10.0 and CVE-2026-58240 with a CVSS score of 9.8. According to Onapsis, both vulnerabilities can be exploited remotely without authentication.
Plex Urges Users to Quickly Update Server and Desktop App
Plex fixed undisclosed security issues in Media Server and the Plex Desktop app. The company recommends switching to the new versions as soon as possible.
Claude Code Exploit Ported an Older Flaw Between WAGO PLCs in a Lab
According to two reports, researchers used Claude Code to adapt an existing exploit for the older CVE-2021-31886 vulnerability from one WAGO PLC to a related model. This was neither a new vulnerability nor a confirmed attack in operation.
PaperCut NG/MF Vulnerabilities Are Being Actively Exploited; Vendor Releases Third Emergency Patch
PaperCut confirmed incidents involving the active exploitation of two vulnerabilities in PaperCut NG and MF systems. Organizations should deploy Emergency Patch Release 3, restrict public access, and check for indicators of compromise.
PaperCut Releases Emergency Patch Release 2 for Actively Exploited Flaws
PaperCut confirmed the active exploitation of two flaws in NG and MF. Emergency Patch Release 2 is also intended for organizations that already deployed the original emergency fix.