Topic
85 articles
Threat IntelCVE-2026-116769 in Secure CVE-2026-116769 is an authentication bypass vulner (Authentication Bypass) allows remote attackers to trigger arbitrary code exec
Threat IntelCVE-2026-120447 in HotGo (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.15.1 and later.
GoogleCVE-2026-100169 in Google Cloud Enterprise Services (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 5.3
MicrosoftCVE-2026-84458 in Azure Enterprise Services (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 7.1.2 and l
Threat IntelCVE-2026-119096 in The Uncanny Toolkit for LearnDash plugin for WordP (Authentication Bypass) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-86400 in Dell PowerProtect Data Domain, Feature Release ver (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
CMS SecurityCVE-2026-92885 in The Qode Membership plugin for WordPress is vulner (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-116163 in Parse Server (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 8.6.102 and later.
Threat IntelCVE-2026-97785 in AAD Improper authentication in AAD App Proxy (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch:
MicrosoftCVE-2026-69854 in Azure Enterprise Services (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security pat
Threat IntelCVE-2026-111691 in WIMOOR (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch release.
Threat IntelCVE-2026-111692 in DataBuff ai-apm-web (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 0.1.10 and later
Cyber AttackA critical default join key flaw in R3's JFrog Artifactory granted full administrative control over 269 repositories, including Corda Enterprise and CBDC builds.
Threat IntelCVE-2026-111911 in PhpMyFAQ (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 4.1.9 and later.
MicrosoftMicrosoft patches a critical cryptographic signature verification flaw in SharePoint Server (CVE-2026-102866) that permits token tampering and full administrative impersonation.
OT / SCADACISA Advisory ICSMA-26-288-01 warns of critical authentication bypass and execution vulnerabilities in Thermo Fisher Torrent Suite software used in clinical genomic sequencing.
Active ExploitA vulnerability was detected in Ahsay AhsayCBS up to 10.3.2.
CMS SecurityWordPress security advisory resolves a high-severity privilege escalation flaw in SimpleForm (CVE-2026-104748) allowing unauthenticated users to register as admin.
Threat IntelApache Airflow releases security fix for CVE-2026-75156 in the Flask-AppBuilder provider, patching an OAuth2 role-mapping flaw leading to admin privilege escalation.
GoogleGoogle Cloud updates authentication libraries for CVE-2026-19410 where improper audience validation allowed external OIDC tokens to impersonate IAM service accounts.
Threat IntelIvanti discloses critical vulnerability CVE-2026-104935 in Connect Secure and Policy Secure gateways allowing pre-auth SAML remote code execution.
OT / SCADARockwell Automation and CISA disclose a critical vulnerability in FactoryTalk View SE human-machine interface software allowing unauthenticated operators to bypass security.
Agentic AIA critical vulnerability in LiteLLM AI Proxy allows unauthenticated actors to forge JWT tokens and hijack enterprise foundational model pipelines.
OT / SCADASiemens ProductCERT discloses a critical authentication bypass vulnerability in SIMATIC WinCC Open Architecture SCADA web interfaces affecting critical infrastructure.