Topic
2 articles
CyberSecureToday covers CWE-863 across 2 articles published between 25 Sep 2026 and 27 Sep 2026.
The coverage includes 2 vulnerability advisories. 2 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.
Stories on CWE-863 most often intersect with Google Cloud, Cloud Service Mesh and GKE, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Google Cloud Service Mesh Vulnerability Exposes Protected Endpoints to RBAC Authorization Bypass CVE-2026-73513”, was published 27 Sep 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
GoogleGoogle Cloud Bulletin GCP-2026-057 warns of an Envoy Proxy safe_regex parsing flaw in Cloud Service Mesh causing negative RBAC authorization policies to fail open.
Active ExploitAdobe and CISA warn of active exploitation targeting CVE-2026-71362 in Adobe Commerce and Magento, enabling unauthenticated manipulation of checkout orders and customer data.