Cloud & Identity Security Writer

Aisha Noor

Aisha covers identity providers, SaaS security posture and the long tail of cloud misconfiguration. She maintains our hardening guide series.

167 articlesUpdated 30 Oct 2026

Identity securitySaaS postureCloud hardeningLinkedIn

Articles by Aisha Noor

ThreatsCloud & SaaSCritical
AWS Enterprise Services OS Command Injection Flaw Disclosed
CVE-2026-79916 in AWS Enterprise Services (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.10.5-lts and
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSHigh
PandasTools Agno Vulnerability Disclosed
CVE-2026-119050 in PandasTools Agno (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.1.11 and later.
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSCritical
Yamaha wireless LAN router NWR100 provided by Yama OS Command Injection Flaw Disclosed
CVE-2026-97854 in Yamaha wireless LAN router NWR100 provided by Yama (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Pa
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
This vulnerability exists in the Radius Xenia M2M SQL Injection Flaw Disclosed
CVE-2026-114358 in This vulnerability exists in the Radius Xenia M2M (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: Ve
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
In openEQUELLA OS Command Injection Flaw Disclosed
CVE-2026-66088 in In openEQUELLA (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 2026.1 and later.
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
Signal K Server Missing Authentication Flaw Disclosed
CVE-2026-118690 in Signal K Server (Missing Authentication) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.33.0 and later.
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
Ultimate Deserialization of Untrusted Data vulnerability in Deserialization Flaw Disclosed
CVE-2026-115968 in Ultimate Deserialization of Untrusted Data vulnerability in (Deserialization) allows remote attackers to trigger arbitrary code executio
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
The che-machine-exec service constructs a shell co OS Command Injection Flaw Disclosed
CVE-2026-114278 in The che-machine-exec service constructs a shell co (OS Command Injection) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Dell PowerProtect Data Domain, Feature Release ver Authentication Bypass Flaw Disclosed
CVE-2026-86400 in Dell PowerProtect Data Domain, Feature Release ver (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
The Pie Register Premium plugin for WordPress is v Unrestricted File Upload Flaw Disclosed
CVE-2026-84999 in The Pie Register Premium plugin for WordPress is v (Unrestricted File Upload) allows remote attackers to trigger arbitrary code execution
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Sunhillo SureLine Vulnerability Disclosed
CVE-2026-112352 in Sunhillo SureLine (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 9.1.5 and later.
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaS
Electrum Vulnerability Disclosed
CVE-2026-117603 in Electrum (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 4.7.2 and later.
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Agno Vulnerability Disclosed
CVE-2026-35002 in Agno (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.3.24 and later.
Aisha Noor27 Oct 202610 min read
ThreatsCloud & SaaSCritical
The Qode Membership plugin for WordPress is vulner Authentication Bypass Flaw Disclosed
CVE-2026-92885 in The Qode Membership plugin for WordPress is vulner (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor27 Oct 202610 min read
ThreatsCloud & SaaSCritical
Google Path Traversal and Missing Authorization in cloud- Path Traversal Flaw Disclosed
CVE-2026-93328 in Google Path Traversal and Missing Authorization in cloud- (Path Traversal) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor27 Oct 202610 min read
ThreatsCloud & SaaSCritical
The Datawiza Proxy Auth Plugin WordPress plugin b Privilege Escalation Flaw Disclosed
CVE-2026-115214 in The Datawiza Proxy Auth Plugin WordPress plugin b (Privilege Escalation) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor26 Oct 202610 min read
ThreatsCloud & SaaSHigh
Parse Server Authentication Bypass Flaw Disclosed
CVE-2026-116163 in Parse Server (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 8.6.102 and later.
Aisha Noor26 Oct 202610 min read
ThreatsCloud & SaaSHigh
GoogleAuthController Snipe-IT Authorization Bypass Flaw Disclosed
CVE-2026-116199 in GoogleAuthController Snipe-IT (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 8.6.3 a
Aisha Noor26 Oct 202610 min read
ThreatsCloud & SaaSCritical
When a post is published, Postiz treats a media pa Path Traversal Flaw Disclosed
CVE-2026-115932 in When a post is published, Postiz treats a media pa (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch:
Aisha Noor25 Oct 202610 min read
ThreatsCloud & SaaSCritical
Python has added a denylist for known compromised Vulnerability Disclosed
CVE-2026-115557 in Python has added a denylist for known compromised (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Aisha Noor25 Oct 202610 min read
ThreatsCloud & SaaSCritical
Unitree Security vulnerability has been detected in Unitre Command Injection Flaw Disclosed
CVE-2026-115995 in Unitree Security vulnerability has been detected in Unitre (Command Injection) allows remote attackers to trigger arbitrary code executi
Aisha Noor25 Oct 202610 min read
ThreatsCloud & SaaSCritical
Vulnerability in the Oracle Java SE, Oracle GraalV Vulnerability Disclosed
CVE-2026-114820 in Vulnerability in the Oracle Java SE, Oracle GraalV (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Aisha Noor25 Oct 202610 min read
ThreatsCloud & SaaSCritical
Postiz signs its session, invitation and password Vulnerability Disclosed
CVE-2026-115933 in Postiz signs its session, invitation and password (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Aisha Noor25 Oct 202610 min read
ThreatsCloud & SaaSHigh
UA_DataType_fromStructureDescription Open62541 Integer Overflow Flaw Disclosed
CVE-2026-116014 in UA_DataType_fromStructureDescription Open62541 (Integer Overflow) allows remote attackers to trigger arbitrary code execution. Patch: Ve
Aisha Noor24 Oct 202610 min read