CVEFeed Newsroom – Latest Cybersecurity Updates

  1. Home
  2. CVE News

The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.

CVE News RSS Feed
  • Daily CyberSecurity
CVE-2026-24765: PHPUnit Vulnerability Exposes CI/CD Pipelines to RCE

The maintainers of PHPUnit, the industry-standard testing framework for PHP, have released a critical security update to address a high-severity vulnerability that turns the testing process itself int ...

Published Date: Jan 29, 2026 (10 hours, 15 minutes ago)
CVE-2026-24765 CVE-2026-24858 CVE-2026-21509 CVE-2026-20045
  • Daily CyberSecurity
CVE-2026-24002: Critical Sandbox Escape Turns Grist Spreadsheets into RCE Weapons

A seemingly innocent spreadsheet formula could be the key to compromising entire organizations, thanks to a critical vulnerability uncovered by Cyera Research Labs in Grist-Core. The flaw, tracked as ...

Published Date: Jan 29, 2026 (10 hours, 33 minutes ago)
CVE-2026-23830 CVE-2026-24765 CVE-2026-24858 CVE-2025-14988 CVE-2026-21509 CVE-2026-0994 CVE-2026-24002 CVE-2026-20045 CVE-2026-0695 CVE-2025-61937 ...+12 more CVE
  • Daily CyberSecurity
The “Zeroplayer” Arsenal: WinRAR Flaw CVE-2025-8088 Weaponized by Spies

Timeline of notable observed exploitation | Image: GTIG A critical vulnerability in one of the world’s most popular file archivers has become a favorite weapon for government spies and cybercriminals ...

Published Date: Jan 29, 2026 (11 hours, 5 minutes ago)
CVE-2026-24858 CVE-2026-21509 CVE-2026-24002 CVE-2026-20045 CVE-2025-8088
  • TheCyberThrone
Dissecting CVE-2026-22709: The Zombie Exploit in Node.js vm2

January 29, 2026CVE-2026-22709 represents a critical sandbox escape vulnerability in the widely used vm2 Node.js library, allowing attackers to achieve remote code execution (RCE) on host systems.This ...

Published Date: Jan 29, 2026 (11 hours, 27 minutes ago)
CVE-2026-24858 CVE-2026-22709
  • Daily CyberSecurity
CVE-2026-23830: Critical SandboxJS Flaw (CVSS 10) Allows Total Sandbox Escape

A perfect storm of missing checks has led to a maximum-severity vulnerability in SandboxJS, a library designed to safely execute untrusted JavaScript code. Tracked as CVE-2026-23830, the flaw carries ...

Published Date: Jan 29, 2026 (12 hours, 41 minutes ago)
CVE-2026-23830 CVE-2026-24858 CVE-2025-14988 CVE-2026-21509 CVE-2026-0994 CVE-2026-20045 CVE-2026-0695 CVE-2025-61937 CVE-2025-37186 CVE-2025-52691 ...+5 more CVE
  • Daily CyberSecurity
CVE-2025-14988: Critical 9.8 Vulnerability hits ibaPDA Industrial Software

A critical security vulnerability has been identified in ibaPDA, a core data acquisition system used in industrial environments to monitor and analyze process data. Tracked as CVE-2025-14988, the flaw ...

Published Date: Jan 29, 2026 (12 hours, 47 minutes ago)
CVE-2026-23830 CVE-2026-24858 CVE-2025-14988 CVE-2026-21509 CVE-2026-0994 CVE-2026-20045 CVE-2026-0695 CVE-2025-61937 CVE-2025-37186 CVE-2025-52691 ...+4 more CVE
  • The Cyber Express
Malicious Open Source Software Packages Neared 500,000 in 2025

Malicious open source software packages have become a critical problem threatening the software supply chain. That’s one of the major takeaways of a new report titled “State of the Software Supply Cha ...

Published Date: Jan 28, 2026 (16 hours, 28 minutes ago)
CVE-2025-55182 CVE-2024-37079 CVE-2024-3094
  • The Register
Everybody is WinRAR phishing, dropping RATs as fast as lightning

Come one, come all. Everyone from Russian and Chinese government goons to financially motivated miscreants is exploiting a long-since-patched WinRAR vuln to bring you infostealers and Remote Access Tr ...

Published Date: Jan 28, 2026 (18 hours, 4 minutes ago)
CVE-2025-8088
  • BleepingComputer
New sandbox escape flaw exposes n8n instances to RCE attacks

Two vulnerabilities in the n8n workflow automation platform could allow attackers to fully compromise affected instances, access sensitive data, and execute arbitrary code on the underlying host. Iden ...

Published Date: Jan 28, 2026 (19 hours, 16 minutes ago)
CVE-2026-1470 CVE-2026-0863 CVE-2026-21858
  • reddit.com
CVE-2025-40551: SolarWinds WebHelpDesk RCE Deep-Dive and Indicators of Compromise

Let us know your cookie preferences Reddit uses cookies and similar technologies to: Keep the website operational and running properly Prevent fraud and abuse Monitor site usage and performance metric ...

Published Date: Jan 28, 2026 (20 hours, 13 minutes ago)
CVE-2025-40551

Filters

Filter news that are affecting your technology stack
Showing 10 of 9475 Results