LIVE · cybersecurity feed
Live wire
Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security MissedCISA gives feds 3 days to fix actively exploited Ray RCE bugNASA Ground Control Software Flaw Enables Unauthenticated CommandsCVE-2026-19478 · Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)LLMs and Contextual IntegrityCISA: Windows Task Host flaw now exploited by ransomware gangsGitLab Patches Critical Code Injection VulnerabilityCybersecurity jobs available right now: August 18, 2026CVE-2026-19478 · Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public ProjectsSnowflake GitHub Actions Flaw Allows Command Injection

plugin

CVE-2026-15748critical

Forminator WordPress Plugin Vulnerable to Remote Code Execution

A critical vulnerability in the Forminator WordPress plugin, used by over 600,000 sites, allows unauthenticated attackers to execute arbitrary code. This is achieved by exploiting a flaw that permits the upload of malicious PHP files. The vulnerability has a high severity rating.