CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access
Cisco has released updates to address a maximum-severity authentication bypass flaw in Catalyst SD-WAN Controller that it said has been exploited in limited attacks. The vulnerability, tracked as CVE- ...
-
The Hacker News
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories
Everything is still on fire. This week feels dumb in the worst way — bad links, weak checks, fake help desks, shady forum posts, and people turning supply chain attacks into some cursed little game fo ...
-
CybersecurityNews
New Critical Exim Mailer Allows Remote Attacker to Execute Arbitrary Code
A critical vulnerability in the widely used Exim mail server allows unauthenticated attackers to execute arbitrary code and fully compromise exposed servers. Federico Kirschbaum, head of the Security ...
-
The Hacker News
Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
The Belarus-aligned threat group known as Ghostwriter has been attributed to a fresh set of attacks targeting governmental organizations in Ukraine. Active since at least 2016, Ghostwriter has been li ...
-
cert.pl
Vulnerability in Verint Verba software
Vulnerability in Verint Verba software CVE ID CVE-2026-21730 Publication date 14 May 2026 Vendor Verint Product Verba Vulnerable versions All before 10.0.6 Vulnerability type (CWE) Improper Neutraliza ...
-
cert.pl
Vulnerability in WEBCON BPS software
Vulnerability in WEBCON BPS software CVE ID CVE-2026-1630 Publication date 14 May 2026 Vendor WEBCON Product WEBCON BPS Vulnerable versions From 2026.1.1.45 below 2026.1.3.109From 2025.1.1.87 before 2 ...
-
cert.pl
Vulnerabilities in Comarch ERP Optima software
Vulnerabilities in Comarch ERP Optima software CVE ID CVE-2025-68420 Publication date 14 May 2026 Vendor Comarch Product ERP Optima Vulnerable versions All before 2026.4 Vulnerability type (CWE) Incor ...
-
CybersecurityNews
Critical GitLab Vulnerabilities Enables XSS and Unauthenticated DoS Attacks
Threat actors are constantly hunting for infrastructure weaknesses, and a newly discovered batch of vulnerabilities in GitLab just handed them a dangerous roadmap. On May 13, 2026, GitLab rolled out e ...
-
The Hacker News
PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure
Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open-source multi-agent orchestration framework, within four hours of public disclos ...
-
CybersecurityNews
Palo Alto PAN-OS 0-Day Exploited to Execute Arbitrary Code With Root Privileges on Firewalls
A critical vulnerability in Palo Alto Networks PAN-OS is putting enterprise firewalls at risk, allowing unauthenticated attackers to execute arbitrary code with root privileges. Tracked as CVE-2026-03 ...