16 – 22 Mar 2026 This week’s CVE of the Week is about a Local Privilege Escalation (LPE) vulnerability in default installations of Ubuntu Desktop 24.04 and later versions. CVE-2026-3888 (CVSS score: 7.8), identified by the Qualys Threat Research Unit, could allow an unprivileged local …

09 – 15 Mar 2026 Hewlett Packard Enterprise has published an urgent security advisory addressing a critical vulnerability (CVE-2026-23813), this our new CVE of the Week. The Aruba Networking AOS-CX operating system used on CX-series campus and data center switches. This flaw is particularly concerning …

02 – 08 Mar 2026 Our CVE of the Week is about Cisco Secure Firewall Management Center (FMC) Software, which is an administrative nerve center for managing critical Cisco network security solutions. Critical vulnerability has been found with the CVSS score of 10 in CVE-2026-20131. …

23 Feb – 01 Mar 2026 In this week’s CVE of the Week, we’ll be looking at a high security flaw of improper authentication in Microsoft Windows Admin Center that allows an authorized attacker to elevate privileges over a network. Windows Admin Center is a …

16 – 22 Feb 2026 CVE-2026-22769 is a critical vulnerability affecting Dell’s RecoverPoint for Virtual Machines. RecoverPoint for Virtual Machines is a solution maintained by Dell to offer hypervisor-level backup and recovery for virtual machines and it is commonly used by enterprises. Exploiting this vulnerability …

9 – 15 Feb 2026 In this week’s CVE of the Week, we’ll be looking at one of the vulnerabilities updated during Microsoft’s February 2026 Patch Tuesday. CVE-2026-21510 is a protection mechanism failure that could allow an unauthorized attacker to bypass a security feature affecting …

2 – 8 Feb 2026 Earlier this week, a security advisory reported a high-severity vulnerability in Notepad++, rated CVSS 7.7. But first of all, what is Notepad++? For those who may not be familiar with it, Notepad++ is a free, open-source text and source code …

26 Jan – 1 Feb 2026 This week’s CVE of the Week highlights an actively exploited security feature bypass vulnerability in Microsoft Office. Microsoft Office is an office suite and a family of client software, server software, and services developed by Microsoft.It’s one of the …

12 – 18 Jan 2026 This week’s CVE of the Week is about the recent remote code execution vulnerability in Cisco’s Unified Communications (CM) products and Webex Calling Dedicated Instance, that has been actively exploited as a zero-day. This vulnerability is due to improper validation …

12 – 18 Jan 2026 Our CVE of the Week series continues with an AI Agent vulnerability that affected ServiceNow, one of the most popular cloud-based platforms for IT and business process automation. The CVE-2025-12420 vulnerability, assigned with a CVSS 4.0 score of 9.3, allows …