1,437 articles
Threat IntelCVE-2026-126806 in WWBN AVideo (Cross-Site Scripting) allows remote attackers to trigger arbitrary code execution. Patch: Version 29.7.1 and later.
FortinetCVE-2026-126150 in Fortinet Weak password recovery mechanism for forgotten pas (Input Validation) allows remote attackers to trigger arbitrary code executi
Threat IntelCVE-2026-126148 in A Improper neutralization of special elements used i (OS Command Injection) allows remote attackers to trigger arbitrary code execution.
FortinetCVE-2026-126156 in Fortinet Authorization bypass (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security
Threat IntelCVE-2026-126147 in A Improper limitation of a pathname to a restricted (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-126164 in A Improper neutralization of special elements used i (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch:
FortinetCVE-2026-126251 in Fortinet Incorrect authorization vulnerability in Fortinet (Authorization Bypass) allows remote attackers to trigger arbitrary code exec
Threat IntelCVE-2026-76954 in An improper neutralization of special elements use (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: Ve
FortinetCVE-2026-126229 in Fortinet Authorization bypass (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security
FortinetCVE-2026-126170 in Fortinet Improper encoding or escaping of output vulnerabil (Input Validation) allows remote attackers to trigger arbitrary code executi
FortinetCVE-2026-126253 in Fortinet Authentication bypass by primary weakness vulnerab (Security Vulnerability) allows remote attackers to trigger arbitrary code e
FortinetCVE-2026-126254 in Fortinet Numeric truncation error vulnerability in Fortinet (Security Vulnerability) allows remote attackers to trigger arbitrary code e
FortinetCVE-2026-126257 in Fortinet Use of hard-coded password vulnerability in Fortin (Security Vulnerability) allows remote attackers to trigger arbitrary code e
Threat IntelCVE-2026-126263 in A Improper neutralization of special elements used i (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch:
FortinetCVE-2026-126259 in Fortinet Missing authentication for critical function vulne (Missing Authentication) allows remote attackers to trigger arbitrary code e
Threat IntelCVE-2026-126262 in A Improper neutralization of special elements used i (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch:
Data BreachForensic analysis of the data breach impacting Baker Tilly: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Data BreachCritical vulnerability in Active ScreenConnect Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review a
Threat IntelCVE-2026-126812 in BlueprintUE Self-Hosted Edition (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 4.3
RansomwareCritical vulnerability in Who Runs Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and
Threat IntelCritical vulnerability in French Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and re
Threat IntelCritical vulnerability in SG Core System & Services (Input Validation) allows remote adversaries to compromise system integrity. Review analysis and remedi
AWS CloudTechnical architectural analysis of Amazon AWS cloud workload protection, IAM integrity controls, and enterprise boundary defense.
Crypto / Web3Forensic analysis of the security incident impacting Enterprise Infrastructure: smart contract mechanics, fund flows, and defensive hardening.