https://cybersecuretoday.com/article/mozilla-pontoon-dashboard-stored-xss-address-reparsing CyberSecureToday en 2026-10-18T02:23:00.000Z Stored XSS on Mozilla Pontoon Localization Dashboards Enabled Administrative Account Takeover https://cybersecuretoday.com/article/ibm-cloud-portal-critical-sql-injection CyberSecureToday en 2026-10-18T02:22:00.000Z Critical SQL Injection in IBM Cloud Portal Infrastructure Allowed Database Exfiltration https://cybersecuretoday.com/article/nintendo-switch-wireless-multiplayer-dhcp-stack-buffer-overflow CyberSecureToday en 2026-10-18T02:21:00.000Z Nintendo Switch Local Wireless Multiplayer Flaw Allowed Remote Pre-Auth Stack Buffer Overflows https://cybersecuretoday.com/article/mariadb-connect-engine-file-privilege-bypass CyberSecureToday en 2026-10-18T02:20:00.000Z MariaDB CONNECT Storage Engine Flaw Bypassed FILE Privilege and secure_file_priv Controls https://cybersecuretoday.com/article/mariadb-drop-package-mysql-procs-priv-privilege-escalation CyberSecureToday en 2026-10-18T02:19:00.000Z MariaDB DROP PACKAGE Defect Leaves Orphaned Grants in mysql.procs_priv Enabling Privilege Escalation https://cybersecuretoday.com/article/mariadb-sysrefcursor-uaf-geospatial-rce CyberSecureToday en 2026-10-18T02:18:00.000Z MariaDB Critical RCE Chain Exploits SYS_REFCURSOR Use-After-Free and ST_Area Over-Read https://cybersecuretoday.com/article/wordpress-rest-api-bbpress-private-forum-disclosure CyberSecureToday en 2026-10-18T02:17:00.000Z WordPress REST API Flaw Exposed Hidden and Private bbPress Forum Content to Unauthenticated Scraping https://cybersecuretoday.com/article/libcurl-http2-stream-upload-use-after-free-cve-2026-92392 CyberSecureToday en 2026-10-18T02:16:00.000Z libcurl HTTP/2 Streaming Upload Use-After-Free Flaw Exposes Client Applications to Memory Corruption https://cybersecuretoday.com/article/aws-amplify-cli-velocity-template-prototype-pollution-rce CyberSecureToday en 2026-10-18T02:15:00.000Z AWS Amplify CLI Prototype Pollution Flaw in Velocity Template Engine Enabled Local Code Execution https://cybersecuretoday.com/article/r3-artifactory-corda-cbdc-supply-chain-takeover CyberSecureToday en 2026-10-18T02:10:00.000Z R3 Artifactory Takeover Exposes Corda Enterprise and Central Bank Digital Currency Supply Chain https://cybersecuretoday.com/article/rubygems-gem-transfer-privilege-escalation-organization-takeover CyberSecureToday en 2026-10-18T01:45:00.000Z RubyGems Flaw in Gem Transfer Flow Allowed Organization Admins to Hijack Owner Rights and Evict Founders https://cybersecuretoday.com/article/anthropic-claude-nist-elliptic-curve-seeds-solved CyberSecureToday en 2026-10-18T00:35:00.000Z Claude Solves 25-Year NIST Elliptic Curve Mystery, Debunking NSA Backdoor Theories https://cybersecuretoday.com/article/lmcache-insecure-deserialization-root-rce-cve-2026-105192 CyberSecureToday en 2026-10-17T23:00:00.000Z LMCache Insecure Deserialization Flaw Exposes vLLM AI Inference Nodes to Unauthenticated Root RCE https://cybersecuretoday.com/article/cisco-nx-os-nx-api-heap-buffer-overflow-rce-cve-2026-76471 CyberSecureToday en 2026-10-17T23:00:00.000Z Cisco NX-OS Heap Buffer Overflow in NX-API Allows Unauthenticated Root Code Execution https://cybersecuretoday.com/article/adobe-commerce-magento-blockstrap-template-injection-cve-2026-103849 CyberSecureToday en 2026-10-17T23:00:00.000Z Adobe Commerce BlockStrap Template Injection Flaw Allows Unauthenticated Storefront Takeover https://cybersecuretoday.com/article/windows-ole-untrusted-pointer-dereference-rce-cve-2026-96924 CyberSecureToday en 2026-10-17T23:00:00.000Z Windows OLE Untrusted Pointer Dereference Flaw Enables Network-Based Remote Code Execution https://cybersecuretoday.com/article/thermo-fisher-torrent-suite-path-traversal-cve-2026-107777 CyberSecureToday en 2026-10-17T23:00:00.000Z Thermo Fisher Torrent Suite Path Traversal Flaw Exposes Clinical Genomics Servers to File Exfiltration https://cybersecuretoday.com/article/phpmyfaq-authentication-bypass-cve-2026-111911 CyberSecureToday en 2026-10-17T18:30:00.000Z PhpMyFAQ Authentication Bypass Flaw Disclosed https://cybersecuretoday.com/article/zoneminder-os-command-injection-cve-2026-102608 CyberSecureToday en 2026-10-17T18:30:00.000Z ZoneMinder OS Command Injection Flaw Disclosed https://cybersecuretoday.com/article/connectwise-cloud-backup-credential-compromise-microsoft-365-tenants CyberSecureToday en 2026-10-17T16:00:00.000Z ConnectWise Cloud Backup Credential Leak Weaponized to Hijack Microsoft 365 Tenants https://cybersecuretoday.com/article/microsoft-sharepoint-cryptographic-token-forgery-cve-2026-102866 CyberSecureToday en 2026-10-17T16:00:00.000Z Microsoft SharePoint Cryptographic Signature Verification Flaw CVE-2026-102866 Enables Token Forgery and Account Takeover https://cybersecuretoday.com/article/google-chrome-angle-buffer-overflow-flaw-cve-2026-110152 CyberSecureToday en 2026-10-17T16:00:00.000Z Google Chrome Emergency Update Resolves Critical ANGLE Graphics Buffer Overflow Flaw CVE-2026-110152 https://cybersecuretoday.com/article/palo-alto-networks-cortex-xsoar-command-injection-cve-2026-0313 CyberSecureToday en 2026-10-17T16:00:00.000Z Palo Alto Networks Patches Critical Command Injection Flaw CVE-2026-0313 in Cortex XSOAR Security Automation Engines https://cybersecuretoday.com/article/microsoft-partner-center-privilege-escalation-cve-2026-96207 CyberSecureToday en 2026-10-17T16:00:00.000Z Microsoft Patches Maximum-Severity CVSS 10.0 Privilege Escalation Flaw CVE-2026-96207 in Partner Center Cloud Service https://cybersecuretoday.com/article/claude-agent-sdk-cli-argument-injection-cve-2026-96620 CyberSecureToday en 2026-10-17T06:30:00.000Z Claude Agent SDK Argument Injection Flaw Enables Command Execution via MCP Configuration https://cybersecuretoday.com/article/cisa-ics-advisory-eclipse-milo-opc-ua-icsa-26-288-01 CyberSecureToday en 2026-10-17T06:30:00.000Z Eclipse Milo OPC UA Flaws Let Low-Privileged Actors Bypass Method Authorization https://cybersecuretoday.com/article/mage-oss-oauth-session-bypass-flaw-cve-2026-111823 CyberSecureToday en 2026-10-17T06:30:00.000Z Mage OSS Critical Authentication Bypass Flaw CVE-2026-111823 Exposes Enterprise ETL Data Pipelines to Remote Takeover https://cybersecuretoday.com/article/cisa-ics-advisory-thermo-fisher-torrent-suite-icsma-26-288-01 CyberSecureToday en 2026-10-17T06:30:00.000Z Thermo Fisher Torrent Suite Flaws Expose Genomic Sequencing Labs to Authentication Bypass https://cybersecuretoday.com/article/cert-in-ai-agents-breach-production-data-ciad-2026-0049 CyberSecureToday en 2026-10-16T18:00:00.000Z Autonomous AI Agents Infiltrate Live Production Systems in Escalating Exploitation Wave Across Indian Enterprises