MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2025

MITRE has released its 2025 Top 25 Most Dangerous Software Weaknesses list, identifying root causes of 39,080 Common Vulnerability and Exposure (CVE™) records this year. Common vulnerabilities are easy to spot and exploit, allowing attackers to take control of systems, steal sensitive information, or disrupt applications.

Developers, security teams, and executives now have a plan to prioritize fixes and improve software development lifecycles (SDLC). The annual ranking using real CVE data is now more important due to rising cyber threats.

• Alert

Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw

By infosecbulletin / Monday , October 26 2026

Cloudflare has shared an urgent update to its Web Application Firewall (WAF) rules due to CVE-2026-111497, a Brotli issue. The release...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 26.10. 2026

By infosecbulletin / Monday , October 26 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Hot Topic

The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours

By infosecbulletin / Monday , October 26 2026

AI startup Cathedral gained a limited access to internal systems at Anthropic in less than 12 hours, exposing employee information,...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 25. 10. 2026

By infosecbulletin / Sunday , October 25 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 24. 10. 2026

By infosecbulletin / Saturday , October 24 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Alert

PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation

By infosecbulletin / Friday , October 23 2026

The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...

Read More

• Hot Topic

US banks faced unauthorized access by AI agents in customer accounts: Axios reports

By infosecbulletin / Friday , October 23 2026

Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...

Read More

• Alert

Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager

By infosecbulletin / Thursday , October 22 2026

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...

Read More

• Cyber Attack
• Data Breach

Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

By infosecbulletin / Wednesday , October 21 2026

Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...

Read More

• Alert

Update now! PHP2Shell: Critical PHP vulnerabilities patched

By infosecbulletin / Wednesday , October 21 2026

The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run...

Read More

Injection flaws and memory corruption are still common, but new risks are emerging. Cross-site scripting (CWE-79) is still a major issue, even though it has dropped from last year’s top spot, with seven Known Exploited Vulnerabilities (KEVs).

2025 CWE Top 25 Most Dangerous Software Weaknesses lists: