Threat Research - Page 4 of 6 - Safe Security
SAFE Named a Leader in the 2026 Liminal Index for Cyber TPRM. Get the Report →
Book a demo

Threat Research

Threat Research CVE-2026-2652 | MLflow Authentication Bypass – Unauthenticated Access to FastAPI Routes Severity: HIGH | CVSS: 8.6 | Published: May 15, 2026 | Fixed: mlflow 3.10.0 Introduction This document illustrates an Authentication Bypass vulnerability in MLflow – an open-source Machine… SAFE Safe Security Sep 5, 2026 6 min read
Threat Research Artifactory Admin Access, Langflow RCE, and Rails Exploitation Reshape This Week’s CVE Priorities Attackers are concentrating on vulnerabilities that provide more than an initial foothold. This week’s highest-priority CVEs affect systems embedded in software delivery, application infrastructure, and remote access, where… Threat Research Team Safe Security Sep 2, 2026 8 min read
Threat Research New Exploitation Signals Put Oracle, GitLab, and Zimbra in Focus This week’s exploitation activity spans enterprise middleware, development platforms, collaboration software, remote-access infrastructure, and AI tooling. Oracle HTTP Server and WebLogic Proxy CVE-2026-21962 moved into active exploitation, GitLab… Threat Research Team Safe Security Aug 25, 2026 10 min read
Threat Research Lazarus Windows Zero-Day, vCenter RCE, and Cisco VPN Exploitation Lead This Week’s CVE Priorities This week’s exploitation activity spans zero-day privilege escalation, persistent access, service disruption, and enterprise application compromise. Lazarus exploited Windows CVE-2026-68820 to elevate privileges to SYSTEM and deploy the… Threat Research Team Safe Security Aug 18, 2026 8 min read
Threat Research Metabase Zero-Day, TeamCity RCE, and Gunra’s Fortinet Exploitation Lead This Week’s Vulnerability Priorities This week’s exploitation activity spans enterprise analytics, CI/CD infrastructure, AI workflow platforms, application delivery, and enterprise edge infrastructure. Metabase disclosed an actively exploited zero-day vulnerability, now tracked as… Threat Research Team Safe Security Aug 11, 2026 11 min read
Threat Research N-able RMM Compromise, SonicWall Ransomware Intrusions, and OWAReaper Persistence Lead This Week’s CVE Priorities This week’s exploitation activity is concentrated on technologies that already hold administrative trust across enterprise environments. Attackers exploited N-able N-central to obtain remote administrative access and use the… Threat Research Team Safe Security Aug 4, 2026 10 min read
Threat Research Windchill Extortion, Webmail Espionage, and cPanel Attacks Lead This Week’s CVE Priorities This week’s exploitation activity is concentrated around known vulnerabilities affecting exposed enterprise platforms, with attackers targeting systems that provide access to sensitive data, privileged administration, and business-critical infrastructure.… Threat Research Team Safe Security Jul 28, 2026 9 min read
Threat Research wp2shell, SonicWall Zero-Days, and ServiceNow RCE Drive This Week’s CVE Priorities This week’s exploitation activity shows how quickly newly disclosed vulnerabilities can move from patch release to real-world attacks. WordPress wp2shell moved from disclosure and public availability of exploits… Threat Research Team Safe Security Jul 21, 2026 8 min read
Threat Research Roundcube Espionage and CMS Webshell Campaigns Drive This Week’s CVE Priorities This week’s strongest signals cluster around internet-facing platforms, including webmail systems, CMS deployments, plugins, extensions, and application components. From Roundcube exploitation linked to espionage to large-scale webshell campaigns… Threat Research Team Safe Security Jul 14, 2026 7 min read
Threat Research Weekly CVE Threat Landscape: Exploitation Clusters Around Enterprise Control Points This week’s CVE activity is concentrated around systems that attackers can use as entry points: Citrix NetScaler ADC and Gateway, Microsoft SharePoint Server and Langflow. These are systems… Threat Research Team Safe Security Jul 8, 2026 6 min read
Threat Research Known CVEs, Active Risk: Collaboration and Infrastructure Platforms Back in Focus This week’s CVE activity is shaped more by older vulnerabilities that remain exploitable in real environments than by disclosure volume alone. The strongest signals span collaboration platforms, network… Threat Research Team Safe Security Jun 30, 2026 7 min read
Threat Research Fortinet, Cisco, and Splunk Lead This Week’s CVE Priorities This week’s vulnerability exploitation activity is concentrated on systems that provide attackers with useful leverage: security appliances, network controllers, observability platforms, and widely deployed web components. These are… Threat Research Team Safe Security Jun 23, 2026 5 min read