https://cybersecuretoday.com/article/canonical-improper-certificate-validation-in-the-https-liste-security-vulnerability-cve-20 CyberSecureToday en 2026-11-01T22:30:00.000Z Canonical Improper certificate validation in the HTTPS liste Vulnerability Disclosed (CVE-2026-112816) https://cybersecuretoday.com/article/flowise-security-vulnerability-cve-2026-119978 CyberSecureToday en 2026-11-01T22:30:00.000Z Flowise Vulnerability Disclosed (CVE-2026-119978) https://cybersecuretoday.com/article/in-jetbrains-toolbox-app-security-vulnerability-cve-2026-118697 CyberSecureToday en 2026-11-01T22:30:00.000Z In JetBrains Toolbox App Vulnerability Disclosed (CVE-2026-118697) https://cybersecuretoday.com/article/sms-unauthenticated-privilege-escalation-in-sms-alert-security-vulnerability-cve-2026-1163 CyberSecureToday en 2026-11-01T22:30:00.000Z SMS Unauthenticated Privilege Escalation in SMS Alert Vulnerability Disclosed (CVE-2026-116386) https://cybersecuretoday.com/article/prefab-ui-s-generative-ui-sandbox-runs-caller-supp-code-injection-cve-2026-120338 CyberSecureToday en 2026-11-01T22:30:00.000Z Prefab UI's Generative UI sandbox runs caller-supp Code Injection Flaw Disclosed (CVE-2026-120338) https://cybersecuretoday.com/article/improper-neutralization-of-special-elements-used-i-sql-injection-cve-2026-62048 CyberSecureToday en 2026-11-01T22:30:00.000Z Improper Neutralization of Special Elements used i SQL Injection Flaw Disclosed (CVE-2026-62048) https://cybersecuretoday.com/article/widget-author-remote-code-execution-rce-in-widget-optio-code-injection-cve-2026-116852 CyberSecureToday en 2026-11-01T18:30:00.000Z Widget Author Remote Code Execution (RCE) in Widget Optio Code Injection Flaw Disclosed (CVE-2026-116852) https://cybersecuretoday.com/article/leadsnap-unauthenticated-php-object-injection-in-leadsnap-deserialization-cve-2026-90888 CyberSecureToday en 2026-11-01T18:30:00.000Z LeadSnap Unauthenticated PHP Object Injection in LeadSnap < Deserialization Flaw Disclosed (CVE-2026-90888) https://cybersecuretoday.com/article/the-beta9-worker-serves-the-sandbox-file-api-from-path-traversal-cve-2026-120307 CyberSecureToday en 2026-11-01T18:30:00.000Z The Beta9 worker serves the sandbox file API from Path Traversal Flaw Disclosed (CVE-2026-120307) https://cybersecuretoday.com/article/beta9-turns-each-shell-command-in-a-tenant-image-d-privilege-escalation-cve-2026-120306 CyberSecureToday en 2026-11-01T18:30:00.000Z Beta9 turns each shell command in a tenant image d Privilege Escalation Flaw Disclosed (CVE-2026-120306) https://cybersecuretoday.com/article/mariadb-corporation-mariadb-server-access-control-subsystem-access-control-mariadb-drop-pa CyberSecureToday en 2026-11-01T18:30:00.000Z MariaDB Dangling PACKAGE BODY Grants in mysql.procs_priv Cause Privilege Escalation https://cybersecuretoday.com/article/a-beta9-tenant-can-attach-a-volume-when-deploying-a-path-traversal-cve-2026-120308 CyberSecureToday en 2026-11-01T18:30:00.000Z A Beta9 tenant can attach a volume when deploying a Path Traversal Flaw Disclosed (CVE-2026-120308) https://cybersecuretoday.com/article/themerex-deserialization-of-untrusted-data-vulnerability-in-deserialization-cve-2026-11952 CyberSecureToday en 2026-11-01T14:30:00.000Z ThemeREX Deserialization of Untrusted Data vulnerability in Deserialization Flaw Disclosed (CVE-2026-119526) https://cybersecuretoday.com/article/funnelkit-unauthenticated-php-object-injection-in-funnelkit-deserialization-cve-2026-39738 CyberSecureToday en 2026-11-01T14:30:00.000Z FunnelKit Unauthenticated PHP Object Injection in FunnelKit Deserialization Flaw Disclosed (CVE-2026-39738) https://cybersecuretoday.com/article/transliterator-unauthenticated-sql-injection-in-transliterator-sql-injection-cve-2026-3973 CyberSecureToday en 2026-11-01T14:30:00.000Z Transliterator Unauthenticated SQL Injection in Transliterator <= SQL Injection Flaw Disclosed (CVE-2026-39732) https://cybersecuretoday.com/article/the-pdf-invoice-for-woocommerce-drag-and-drop-te-deserialization-cve-2026-109220 CyberSecureToday en 2026-11-01T14:30:00.000Z The PDF Invoice for WooCommerce + Drag and Drop Te Deserialization Flaw Disclosed (CVE-2026-109220) https://cybersecuretoday.com/article/ibm-cloud-enterprise-portal-subsystems-sql-injection-ibm-sqli-2026 CyberSecureToday en 2026-11-01T14:30:00.000Z Critical SQL Injection on IBM Enterprise Cloud Web Infrastructure https://cybersecuretoday.com/article/jpom-security-vulnerability-cve-2026-120201 CyberSecureToday en 2026-11-01T14:30:00.000Z Jpom Vulnerability Disclosed (CVE-2026-120201) https://cybersecuretoday.com/article/the-wp-booking-system-booking-calendar-plugin-fo-input-validation-cve-2026-116557 CyberSecureToday en 2026-11-01T10:30:00.000Z The WP Booking System - Booking Calendar plugin fo Input Validation Flaw Disclosed (CVE-2026-116557) https://cybersecuretoday.com/article/the-popup-builder-create-highly-converting-mobi-missing-authorization-cve-2026-89270 CyberSecureToday en 2026-11-01T10:30:00.000Z The Popup Builder – Create highly converting, mobi Missing Authorization Flaw Disclosed (CVE-2026-89270) https://cybersecuretoday.com/article/the-project-manager-ai-powered-project-managemen-unrestricted-file-upload-cve-2026-116512 CyberSecureToday en 2026-11-01T10:30:00.000Z The Project Manager – AI Powered Project Managemen Unrestricted File Upload Flaw Disclosed (CVE-2026-116512) https://cybersecuretoday.com/article/the-uncanny-toolkit-for-learndash-plugin-for-wordp-authentication-bypass-cve-2026-119096 CyberSecureToday en 2026-11-01T10:30:00.000Z The Uncanny Toolkit for LearnDash plugin for WordP Authentication Bypass Flaw Disclosed (CVE-2026-119096) https://cybersecuretoday.com/article/aj-report-security-vulnerability-cve-2026-120209 CyberSecureToday en 2026-11-01T10:30:00.000Z AJ-Report Vulnerability Disclosed (CVE-2026-120209) https://cybersecuretoday.com/article/azure-enterprise-services-path-traversal-cve-2026-70009 CyberSecureToday en 2026-11-01T10:30:00.000Z Azure Enterprise Services Path Traversal Flaw Disclosed (CVE-2026-70009) https://cybersecuretoday.com/article/wavlink-security-vulnerability-has-been-detected-in-wavlin-input-validation-cve-2026-12019 CyberSecureToday en 2026-11-01T06:30:00.000Z WAVLINK Security vulnerability has been detected in WAVLIN Input Validation Flaw Disclosed (CVE-2026-120195) https://cybersecuretoday.com/article/rockwell-automation-cisa-allen-bradley-controllogix-compactlogix-plcs-information-disclosu CyberSecureToday en 2026-11-01T06:30:00.000Z CISA and Rockwell Automation Issue Urgent Directives to Sever Public Internet Exposure of Industrial PLCs https://cybersecuretoday.com/article/european-supervisory-authorities-eba-eiopa-esma-digital-operational-resilience-act-regulat CyberSecureToday en 2026-11-01T06:30:00.000Z EU DORA Enters Active Enforcement: European Supervisory Authorities Launch Audits and Register of Information Ingestion https://cybersecuretoday.com/article/u-s-securities-and-exchange-commission-sec-material-cybersecurity-incidents-item-informati CyberSecureToday en 2026-11-01T06:30:00.000Z SEC Form 8-K Analysis: Cloud Misconfiguration and Unencrypted Blob Storage Fuel Surge in Material Data Breaches https://cybersecuretoday.com/article/wavlink-vulnerability-has-been-found-in-wavlink-wl-wn530be-input-validation-cve-2026-12019 CyberSecureToday en 2026-11-01T06:30:00.000Z WAVLINK Vulnerability has been found in WAVLINK WL-WN530BE Input Validation Flaw Disclosed (CVE-2026-120198) https://cybersecuretoday.com/article/d-link-vulnerability-was-identified-in-d-link-dir-505-memory-corruption-cve-2026-120189 CyberSecureToday en 2026-11-01T06:30:00.000Z D-Link Vulnerability was identified in D-Link DIR-505 Memory Corruption Flaw Disclosed https://cybersecuretoday.com/article/unsupported-when-assigned-javanativemessaged-deserialization-cve-2026-118636 CyberSecureToday en 2026-11-01T02:30:00.000Z **UNSUPPORTED WHEN ASSIGNED**  JavaNativeMessageD Deserialization Flaw Disclosed https://cybersecuretoday.com/article/aws-enterprise-services-security-vulnerability-cve-2026-95699 CyberSecureToday en 2026-10-31T22:30:00.000Z AWS Enterprise Services Vulnerability Disclosed https://cybersecuretoday.com/article/cloudflare-q3-threat-report-network-ddos-attacks-surge-38-percent CyberSecureToday en 2026-10-31T21:30:00.000Z Cloudflare Q3 Threat Telemetry: Network-Layer DDoS Attacks Surge 38% to Record 18.2 Million Incidents https://cybersecuretoday.com/article/gitee-repository-scan-exposed-cloud-ai-api-credentials-audit CyberSecureToday en 2026-10-31T21:15:00.000Z Security Audit Uncovers 26,400 Live Cloud and Enterprise AI API Keys Exposed in Public Gitee Repositories https://cybersecuretoday.com/article/volt-typhoon-silent-train-mesh-cisco-sd-wan-zero-day-cve-2026-20127 CyberSecureToday en 2026-10-31T21:00:00.000Z Volt Typhoon Weaponizes 'Silent Train' Multi-Hop Relay Mesh to Infiltrate Cisco SD-WAN Control Planes https://cybersecuretoday.com/article/telegram-android-voice-call-memory-corruption-rce-device-takeover CyberSecureToday en 2026-10-31T20:30:00.000Z Critical Telegram for Android Voice Call Memory Corruption Flaw Enables Remote Device Takeover https://cybersecuretoday.com/article/drupal-commerce-core-critical-authorization-bypass-cve-2026-118539 CyberSecureToday en 2026-10-31T20:00:00.000Z Drupal Commerce Core Critical Authorization Bypass Flaw Under Active Exploitation (CVE-2026-118539) https://cybersecuretoday.com/article/wordpress-core-upgrade-window-staging-race-condition-rce-cve-2026-119977 CyberSecureToday en 2026-10-31T19:30:00.000Z WordPress Core Upgrade-Window Staging Race Condition RCE Draws 63,000 Attacks in 24 Hours (CVE-2026-119977) https://cybersecuretoday.com/article/teamviewer-reverse-screen-geometry-buffer-overflow-rce-cve-2026-111585 CyberSecureToday en 2026-10-31T19:00:00.000Z TeamViewer Vulnerability Inverts Remote Threat Model: Host Buffer Overflow Attacks Connecting Technicians (CVE-2026-111585) https://cybersecuretoday.com/article/linux-kernel-ipv4-tcp-use-after-free-rce-cve-2026-98432 CyberSecureToday en 2026-10-31T18:30:00.000Z Critical Linux Kernel IPv4 TCP Use-After-Free Flaw Enables Remote Root RCE (CVE-2026-98432) https://cybersecuretoday.com/article/the-acadlix-lms-ai-quiz-maker-online-exam-cou-path-traversal-cve-2026-103882 CyberSecureToday en 2026-10-31T18:30:00.000Z The Acadlix LMS – AI Quiz Maker, Online Exam & Cou Path Traversal Flaw Disclosed https://cybersecuretoday.com/article/rbi-assume-breach-framework-exposed-credentials-payment-infrastructure CyberSecureToday en 2026-10-31T18:15:00.000Z RBI Mandates 'Assume Breach' Standard for Exposed Credentials Across Digital Payment Infrastructure https://cybersecuretoday.com/article/cert-in-ciad-2026-0046-nbfc-fintech-disbursement-api-exploitation CyberSecureToday en 2026-10-31T17:00:00.000Z CERT-In Issues Critical Advisory CIAD-2026-0046: Threat Actors Weaponize NBFC and FinTech Disbursement APIs https://cybersecuretoday.com/article/chainalysis-internal-tools-compromise-agentic-ai-identity-leak CyberSecureToday en 2026-10-31T16:00:00.000Z Chainalysis Discloses Breach of Internal Customer Tooling via Offensive Agentic AI Techniques https://cybersecuretoday.com/article/trezor-safe-5-hardware-cellular-implant-supply-chain-tampering CyberSecureToday en 2026-10-31T14:30:00.000Z Supply Chain Alert: Hardware Cellular Implant Discovered Inside Tampered Trezor Safe 5 Wallets https://cybersecuretoday.com/article/the-simpleform-form-maker-to-chat-apps-with-quiz-unrestricted-file-upload-cve-2026-118235 CyberSecureToday en 2026-10-31T14:30:00.000Z The SimpleForm – Form Maker to Chat Apps with Quiz Unrestricted File Upload Flaw Disclosed https://cybersecuretoday.com/article/binance-6-billion-hot-wallet-breach-stablecoin-freeze CyberSecureToday en 2026-10-31T12:30:00.000Z Binance Suffers $6.4 Billion Multi-Chain Hot Wallet Theft; On-Chain Coalition Freezes $3 Billion in Stablecoins https://cybersecuretoday.com/article/vapor-panda-artex-multi-agent-ai-cyber-espionage-campaign CyberSecureToday en 2026-10-31T11:15:00.000Z Chinese Threat Group Vapor Panda Deploys ARTEX Multi-Agent AI Framework to Infiltrate Global Infrastructure https://cybersecuretoday.com/article/azure-enterprise-services-security-vulnerability-cve-2026-62874 CyberSecureToday en 2026-10-31T10:30:00.000Z Azure Enterprise Services Vulnerability Disclosed https://cybersecuretoday.com/article/claude-code-cursor-marketplace-trojanized-ssh-backdoor CyberSecureToday en 2026-10-31T10:00:00.000Z Trojanized Claude Code Extension on Cursor Marketplace Injects Reverse SSH Tunnel Backdoor https://cybersecuretoday.com/article/openai-chatgpt-shared-link-session-hijack-data-exfiltration CyberSecureToday en 2026-10-31T08:30:00.000Z OpenAI Patches Critical ChatGPT Shared-Link Flaw Permitting Session Hijacking and Private Chat Theft https://cybersecuretoday.com/article/in-server-mode-pgadmin-4-locks-an-internal-account-security-vulnerability-cve-2026-116238 CyberSecureToday en 2026-10-31T06:30:00.000Z In server mode pgAdmin 4 locks an internal account Vulnerability Disclosed https://cybersecuretoday.com/article/pgadmin-4-s-import-export-data-tool-wraps-a-user-s-os-command-injection-cve-2026-116241 CyberSecureToday en 2026-10-31T02:30:00.000Z PgAdmin 4's Import/Export Data tool wraps a user's OS Command Injection Flaw Disclosed