Topic

Account Takeover: news, advisories and analysis

3 articlesUpdated 4 Oct 2026

CyberSecureToday covers Account Takeover across 3 articles published between 19 Sep 2026 and 4 Oct 2026. The coverage includes 3 vulnerability advisories. 3 advisories are rated critical or high severity.

Stories on Account Takeover most often intersect with Kiteworks, Kiteworks Email Protection Gateway and Kiteworks Core, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Kiteworks Email Protection Gateway Flaw Lets Unauthenticated Attackers Run Code as Root”, was published 4 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Kiteworks Email Protection Gateway Flaw Lets Unauthenticated Attackers Run Code as Root
Kiteworks fixed a CVSS 10 root code-execution flaw in Email Protection Gateway (CVE-2026-54154) and three 9.8 account takeovers. Upgrade EPG and Core to 9.5.1.
Daniel Okafor4 Oct 20266 min read
ThreatsCloud & SaaSHigh
LiteLLM JWT Flaw Lets Unverified Tokens Seize Proxy Admin Accounts, No Fix Yet
LiteLLM CVE-2026-93355 lets a signed JWT with an unverified email claim seize any account, including proxy_admin. No fix yet; cache-leak and SSRF CVEs patched.
Aisha Noor3 Oct 20266 min read
ThreatsCloud & SaaSCritical
Siemens Mendix SAML Single Sign-On Flaw Exposes Enterprise Cloud Portals to Account Takeover
Siemens and CISA issue advisory ICSA-26-258-06 for Mendix SAML module vulnerability CVE-2026-80465 allowing unauthenticated remote attackers to hijack enterprise SSO accounts.
Priya Raman19 Sep 20269 min read

Latest coverage

Kiteworks Email Protection Gateway Flaw Lets Unauthenticated Attackers Run Code as Root

LiteLLM JWT Flaw Lets Unverified Tokens Seize Proxy Admin Accounts, No Fix Yet

Siemens Mendix SAML Single Sign-On Flaw Exposes Enterprise Cloud Portals to Account Takeover