Critical Avada WordPress theme flaw enables zero-click RCE
2026-08-27T01:23:23Z•7c2596eb58cfb5f5d13099380ffb135a323aefc1eba348cef3e8629a5cc058db
AppleAvadaCISAChinese-espionageDDoSECC-bypassGPUThorGiteaMicrosoft SharePointNVIDIAPhaaSRowhammerUbiquitiWordPressactive-exploitationcyberattackdata-breachhealthcarenpmphishingprivilege-escalationproxy-networkremote-code-executionvulnerability
What happened
Security news roundup covering critical vulnerabilities and active exploitation in WordPress Avada, Microsoft SharePoint, Gitea, and Ubiquiti products; GPU Rowhammer attacks against NVIDIA ECC; phishing and malware infrastructure abuse; espionage proxy disruption; cyberattacks affecting healthcare and technology organizations; data breaches; and major DDoS activity against Norwegian government services.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 7c2596eb58cfb5f5d13099380ffb135a323aefc1eba348cef3e8629a5cc058db
- Enrichment time
- 2026-08-27T01:23:23Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.