Positive Technologies has identified six new trending vulnerabilities currently exploited in real-world attacks. These security flaws affect JetBrains TeamCity, TrueConf Server, Microsoft SharePoint Server, Windows, and Zimbra Collaboration Suite. The company tracks these threats to help organizations prioritize patching via its MaxPatrol VM system.
The JetBrains TeamCity vulnerability (CVE-2026-63077, CVSS 9.8) allows unauthenticated remote code execution. It impacts local servers prior to versions 2025.11.7 and 2026.1.3. Over 30,000 organizations use the platform, and thousands of instances remain exposed online. Users are advised to update or apply the security plugin immediately.
TrueConf Server is affected by two vulnerabilities (CVE-2026-72529 and CVE-2026-72530) that allow attackers to gain full control over the server and access databases. Microsoft SharePoint Server faces a critical authentication bypass flaw (CVE-2026-55040, CVSS 9.1) in its JWT token validation mechanism, which could lead to full administrative access.
A Windows driver vulnerability (CVE-2026-68820, CVSS 7.0) in the AFD.sys component affects approximately one billion devices. It allows privilege escalation to SYSTEM level and has been linked to the Lazarus APT group. Additionally, the Zimbra Collaboration Suite is vulnerable to remote code execution (CVE-2026-73570, CVSS 8.9), with hundreds of instances already compromised.
