https://cybersecuretoday.com/article/azure-enterprise-services-access-control-cve-2026-83944 CyberSecureToday en 2026-10-23T18:30:00.000Z Azure Enterprise Services Access Control Flaw Disclosed https://cybersecuretoday.com/article/azure-enterprise-services-path-traversal-cve-2026-70200 CyberSecureToday en 2026-10-23T18:30:00.000Z Azure Enterprise Services Path Traversal Flaw Disclosed https://cybersecuretoday.com/article/improper-certificate-validation-vulnerability-in-t-security-vulnerability-cve-2026-107685 CyberSecureToday en 2026-10-23T14:30:00.000Z Improper Certificate Validation vulnerability in t Vulnerability Disclosed https://cybersecuretoday.com/article/agenticseek-security-vulnerability-cve-2026-115727 CyberSecureToday en 2026-10-23T14:30:00.000Z AgenticSeek Vulnerability Disclosed https://cybersecuretoday.com/article/hallo-initialization-of-a-resource-with-an-insecure-defa-privilege-escalation-cve-2026-257 CyberSecureToday en 2026-10-23T10:30:00.000Z Hallo Initialization of a Resource with an Insecure Defa Privilege Escalation Flaw Disclosed https://cybersecuretoday.com/article/deserialization-of-untrusted-data-vulnerability-in-deserialization-cve-2026-112862 CyberSecureToday en 2026-10-23T10:30:00.000Z Deserialization of Untrusted Data vulnerability in Deserialization Flaw Disclosed https://cybersecuretoday.com/article/an-authentication-bypass-vulnerability-in-the-publ-missing-authentication-cve-2026-19677 CyberSecureToday en 2026-10-23T06:30:00.000Z An authentication bypass vulnerability in the publ Missing Authentication Flaw Disclosed https://cybersecuretoday.com/article/aws-enterprise-services-server-side-request-forgery-cve-2026-12944 CyberSecureToday en 2026-10-23T06:30:00.000Z AWS Enterprise Services Server-Side Request Forgery Flaw Disclosed https://cybersecuretoday.com/article/aad-improper-authentication-in-aad-app-proxy-authentication-bypass-cve-2026-97785 CyberSecureToday en 2026-10-23T02:30:00.000Z AAD Improper authentication in AAD App Proxy Authentication Bypass Flaw Disclosed https://cybersecuretoday.com/article/the-system-control-service-on-affected-kiloview-e3-os-command-injection-cve-2026-107861 CyberSecureToday en 2026-10-23T02:30:00.000Z The system control service on affected Kiloview E3 OS Command Injection Flaw Disclosed https://cybersecuretoday.com/article/no-description-provided-input-validation-cve-2026-79869 CyberSecureToday en 2026-10-22T22:30:00.000Z No description provided Input Validation Flaw Disclosed https://cybersecuretoday.com/article/velocloud-orchestrator-vco-on-prem-has-a-securit-sql-injection-cve-2026-114625 CyberSecureToday en 2026-10-22T22:30:00.000Z VeloCloud Orchestrator (VCO) on-prem has a securit SQL Injection Flaw Disclosed https://cybersecuretoday.com/article/fintech-nbfc-api-security-hardening-guide-bola-zero-trust CyberSecureToday en 2026-10-22T19:45:00.000Z Banking & NBFC API Security Advisory: Hardening FinTech Endpoints Against BOLA and Data Leaks https://cybersecuretoday.com/article/rbi-it-governance-nbfc-scale-based-cybersecurity-compliance-playbook CyberSecureToday en 2026-10-22T19:30:00.000Z RBI IT Governance & Cybersecurity Master Direction for NBFCs: Implementation Playbook https://cybersecuretoday.com/article/litellm-supply-chain-backdoor-token-exposure CyberSecureToday en 2026-10-22T19:10:00.000Z LiteLLM Pipeline Hijacked in Software Supply Chain Attack Deploying InfoStealer and RAT https://cybersecuretoday.com/article/meta-25-billion-privacy-penalty-cambridge-analytica CyberSecureToday en 2026-10-22T19:05:00.000Z Meta Ordered to Pay $25 Billion After New Mexico Court Finds Consumer Privacy Deceptions https://cybersecuretoday.com/article/opencode-mcp-oauth-remote-code-execution CyberSecureToday en 2026-10-22T19:00:00.000Z OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection https://cybersecuretoday.com/article/sentry-nextjs-security-vulnerability-cve-2026-114139 CyberSecureToday en 2026-10-22T18:30:00.000Z @sentry/nextjs Vulnerability Disclosed https://cybersecuretoday.com/article/pillow-out-of-bounds-read-cve-2026-96639 CyberSecureToday en 2026-10-22T18:30:00.000Z Pillow Out-of-Bounds Read Flaw Disclosed https://cybersecuretoday.com/article/mem0-sql-injection-cve-2026-115324 CyberSecureToday en 2026-10-22T14:30:00.000Z Mem0 SQL Injection Flaw Disclosed https://cybersecuretoday.com/article/php-improper-control-of-filename-for-include-require-s-security-vulnerability-cve-2026-112 CyberSecureToday en 2026-10-22T14:30:00.000Z PHP Improper Control of Filename for Include/Require S Vulnerability Disclosed https://cybersecuretoday.com/article/openremote-missing-authorization-cve-2026-114661 CyberSecureToday en 2026-10-22T06:30:00.000Z OpenRemote Missing Authorization Flaw Disclosed https://cybersecuretoday.com/article/totolink-flaw-has-been-found-in-totolink-a950rg-security-vulnerability-cve-2026-114575 CyberSecureToday en 2026-10-22T06:30:00.000Z TOTOLINK Flaw has been found in TOTOLINK A950RG Vulnerability Disclosed https://cybersecuretoday.com/article/gitlab-onigmo-regex-integer-overflow-rce-cve-2026-110264 CyberSecureToday en 2026-10-22T04:45:00.000Z GitLab Patches Maximum-Severity CVSS 10.0 Unauthenticated RCE Flaw Spanning 12 Years of Releases https://cybersecuretoday.com/article/php2shell-core-runtime-memory-corruption-rce-cve-2026-109618-cve-2026-109619 CyberSecureToday en 2026-10-22T04:45:00.000Z Critical 'PHP2Shell' Core Runtime Flaws Trigger Unauthenticated RCE Across Millions of Web Servers https://cybersecuretoday.com/article/totolink-weakness-has-been-identified-in-totolink-ex200-memory-corruption-cve-2026-114383 CyberSecureToday en 2026-10-22T02:30:00.000Z TOTOLINK Weakness has been identified in TOTOLINK EX200 Memory Corruption Flaw Disclosed https://cybersecuretoday.com/article/vulnerability-in-the-oracle-java-se-oracle-graalv-missing-authentication-cve-2026-91403 CyberSecureToday en 2026-10-22T02:30:00.000Z Vulnerability in the Oracle Java SE, Oracle GraalV Missing Authentication Flaw Disclosed https://cybersecuretoday.com/article/apache-traffic-server-s-experimental-tsmemcache-pl-missing-authentication-cve-2026-111811 CyberSecureToday en 2026-10-21T22:30:00.000Z Apache Traffic Server's experimental tsmemcache pl Missing Authentication Flaw Disclosed https://cybersecuretoday.com/article/apache-traffic-server-forwarded-a-malformed-302-re-security-vulnerability-cve-2026-111816 CyberSecureToday en 2026-10-21T22:30:00.000Z Apache Traffic Server forwarded a malformed 302 re Vulnerability Disclosed