Two critical unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances are currently being actively exploited in the wild, allowing for remote code execution. Security firm watchTowr disclosed this threat on September 26, highlighting the immediate risk…
Reports mentioning watchTowr
WSO2 API Manager is currently facing active exploitation attempts targeting a critical security vulnerability that allows for the bypass of JSON Web Token (JWT) authentication, enabling attackers to forge administrative tokens and gain unauthorized access.
A critical security vulnerability within GitLab, identified as CVE-2026-19478, has been actively exploited by attackers within days of its public disclosure, according to a report by watchTowr. This vulnerability, which carries a high CVSS score of 9.4, represents a severe…
Two critical vulnerabilities affecting the open-source artificial intelligence (AI) platform MLflow and the open-source SCADA/HMI software FUXA are currently being targeted by malicious actors. Independent security researchers from watchTowr and VulnCheck have reported observing active scanning and exploitation attempts…
A critical vulnerability in Microsoft Office SharePoint, designated CVE-2026-50522, is currently under active exploitation, according to a July 2026 report by watchTowr. This flaw, which carries a CVSS score of 9.8, involves the deserialization of untrusted data within SharePoint Server.