Topic

CWE-1390

2 articlesUpdated 3 Oct 2026

ThreatsCloud & SaaSHigh
Microsoft Exchange Server Flaw Lets Authenticated Users Read Other Mailboxes, Forcing a Reissued September Security Update (CVE-2026-96940)
Exchange Server CVE-2026-96940 lets authenticated users read other mailboxes. Microsoft rates it Exploitation More Likely. Install the September 2026 v2 SU.
Daniel Okafor3 Oct 20265 min read
ThreatsCloud & SaaSHigh
LiteLLM JWT Email Fallback Lets Unverified Login Tokens Take Over Proxy Admin Accounts, With No Fix Released
LiteLLM CVE-2026-93355 lets a signed JWT with an unverified email claim seize any account, including proxy_admin. No fix yet; cache-leak and SSRF CVEs patched.
Aisha Noor3 Oct 20266 min read