NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers

BACKGROUND
1 SIGNALFIRST DETECTED 14 April 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
Other feeds and industry voices
1 Oct
CVE-2026-65660: a SharePoint flaw that never writes a file to disk

<h1> CVE-2026-65660: a SharePoint flaw that never writes a file to disk </h1> <p>Most incident response playbooks for a web server compromise start with the file system. Analysts

REPORT · WHAT · Dev.toOPEN STORY
5 May
Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API

A critical security vulnerability in Weaver (Fanwei) E-cology, an enterprise office automation (OA) and collaboration platform, has come under active exploitation in the wild. The

REPORT · HOW · The Hacker NewsOPEN STORY
14 May
Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks

Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed

REPORT · WHAT · BleepingComputerOPEN STORY
21 Jul
Critical SharePoint RCE flaw exploited to steal machine keys

Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are

REPORT · WHAT · BleepingComputerOPEN STORY
15 Sept
Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability,

REPORT · WHAT · The Hacker NewsOPEN STORY
10 Jul
Hackers exploit critical auth bypass in Gitea Docker image

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user,

REPORT · HOW · BleepingComputerOPEN STORY
15 May
CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits

The U.S.Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed vulnerability impacting Cisco Catalyst SD-WAN Controller to its Known Exploited

REPORT · WHAT · The Hacker NewsOPEN STORY
30 Apr
Critical cPanel and WHM bug exploited as a zero-day, PoC now available

The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been leveraged in attempts since

REPORT · WHAT · BleepingComputerOPEN STORY
Sources
The Hacker News

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →