Threats — Cybersecurity Threats

559 articlesUpdated 31 Oct 2026

ThreatsCloud & SaaSCritical

Thales Stack-based buffer overflow and missing authorizat Stack Buffer Overflow Flaw Disclosed

CVE-2026-78403 in Thales Stack-based buffer overflow and missing authorizat (Stack Buffer Overflow) allows remote attackers to trigger arbitrary code execu

31 Oct 202610 min read

Aisha Noor

ThreatsCloud & SaaSBreaking
Ivanti Connect Secure Vulnerability Exploited in Wild Attacks
CVE-2026-111357 in Ivanti Connect Secure (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security pat
CST Editorial Desk31 Oct 202610 min read
ThreatsCloud & SaaSBreaking
Ivanti Connect Secure Input Validation Flaw Exploited in Wild Attacks
CVE-2026-118527 in Ivanti Connect Secure (Input Validation) allows remote attackers to trigger active system exploitation. Patch: Vendor security patch rel
CST Editorial Desk31 Oct 202610 min read
ThreatsCloud & SaaSHigh
Vsftpd Vulnerability Disclosed
CVE-2026-119568 in Vsftpd (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.0.5 and later.
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSCritical
In Teltonika Networks RUTOS devices running versio OS Command Injection Flaw Disclosed
CVE-2026-82104 in In Teltonika Networks RUTOS devices running versio (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Pa
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSCritical
A Vulnerability allowing an unauthenticated attacker Deserialization Flaw Disclosed
CVE-2023-22793 in A Vulnerability allowing an unauthenticated attacker (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSCritical
AWS Enterprise Services OS Command Injection Flaw Disclosed
CVE-2026-79916 in AWS Enterprise Services (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.10.5-lts and
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSBreaking
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Vulnerability Exploited in Wild Attacks
CVE-2026-76418 in Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (Security Vulnerability) allows remote attackers to trigger active syste
CST Editorial Desk30 Oct 202610 min read
ThreatsCloud & SaaSHigh
PandasTools Agno Vulnerability Disclosed
CVE-2026-119050 in PandasTools Agno (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.1.11 and later.
Aisha Noor30 Oct 202610 min read
ThreatsCloud & SaaSCritical
Yamaha wireless LAN router NWR100 provided by Yama OS Command Injection Flaw Disclosed
CVE-2026-97854 in Yamaha wireless LAN router NWR100 provided by Yama (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Pa
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
This vulnerability exists in the Radius Xenia M2M SQL Injection Flaw Disclosed
CVE-2026-114358 in This vulnerability exists in the Radius Xenia M2M (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: Ve
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
In openEQUELLA OS Command Injection Flaw Disclosed
CVE-2026-66088 in In openEQUELLA (OS Command Injection) allows remote attackers to trigger arbitrary code execution. Patch: Version 2026.1 and later.
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
Signal K Server Missing Authentication Flaw Disclosed
CVE-2026-118690 in Signal K Server (Missing Authentication) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.33.0 and later.
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaS
Broadcom VMware ESX Vulnerability Exploited in Wild Attacks
CVE-2026-41709 in Broadcom VMware ESX (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security patch
CST Editorial Desk29 Oct 202610 min read
ThreatsCloud & SaaSCritical
Ultimate Deserialization of Untrusted Data vulnerability in Deserialization Flaw Disclosed
CVE-2026-115968 in Ultimate Deserialization of Untrusted Data vulnerability in (Deserialization) allows remote attackers to trigger arbitrary code executio
Aisha Noor29 Oct 202610 min read
ThreatsCloud & SaaSCritical
The che-machine-exec service constructs a shell co OS Command Injection Flaw Disclosed
CVE-2026-114278 in The che-machine-exec service constructs a shell co (OS Command Injection) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Dell PowerProtect Data Domain, Feature Release ver Authentication Bypass Flaw Disclosed
CVE-2026-86400 in Dell PowerProtect Data Domain, Feature Release ver (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
The Pie Register Premium plugin for WordPress is v Unrestricted File Upload Flaw Disclosed
CVE-2026-84999 in The Pie Register Premium plugin for WordPress is v (Unrestricted File Upload) allows remote attackers to trigger arbitrary code execution
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Sunhillo SureLine Vulnerability Disclosed
CVE-2026-112352 in Sunhillo SureLine (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 9.1.5 and later.
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Google Brotli Vulnerability Exploited in Wild Attacks
CVE-2026-111497 in Google Brotli (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Version 1.2.0.
CST Editorial Desk28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Adobe Commerce and Magento Unrestricted File Upload Flaw Exploited in Wild Attacks
CVE-2026-48356 in Adobe Commerce and Magento (Unrestricted File Upload) allows remote attackers to trigger active system exploitation. Patch: Vendor securi
CST Editorial Desk28 Oct 202610 min read
ThreatsCloud & SaaS
Electrum Vulnerability Disclosed
CVE-2026-117603 in Electrum (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 4.7.2 and later.
Aisha Noor28 Oct 202610 min read
ThreatsCloud & SaaSCritical
Agno Vulnerability Disclosed
CVE-2026-35002 in Agno (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.3.24 and later.
Aisha Noor27 Oct 202610 min read
ThreatsCloud & SaaSCritical
The Qode Membership plugin for WordPress is vulner Authentication Bypass Flaw Disclosed
CVE-2026-92885 in The Qode Membership plugin for WordPress is vulner (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor27 Oct 202610 min read