Topic
466 articles
AWS CloudCVE-2026-55563 in AWS Enterprise Services (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 0.65.0 and lat
Threat IntelCVE-2026-120276 in WAVLINK Weakness has been identified in WAVLINK WN536AX6-A (Command Injection) allows remote attackers to trigger arbitrary code executi
Threat IntelCVE-2026-120277 in WAVLINK Security vulnerability has been detected in WAVLIN (Command Injection) allows remote attackers to trigger arbitrary code executi
MicrosoftCVE-2026-69435 in Azure Enterprise Services (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Vendor securi
MicrosoftCVE-2026-77900 in Azure Enterprise Services (Missing Authentication) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security pa
Threat IntelCVE-2026-112816 in Canonical Improper certificate validation in the HTTPS liste (Security Vulnerability) allows remote attackers to trigger arbitrary code
Threat IntelCVE-2026-119978 in Flowise (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.1.4 and later.
Threat IntelCVE-2026-118697 in In JetBrains Toolbox App (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.9.1 and
Threat IntelCVE-2026-116386 in SMS Unauthenticated Privilege Escalation in SMS Alert (Security Vulnerability) allows remote attackers to trigger arbitrary code executi
Threat IntelCVE-2026-120338 in Prefab UI's Generative UI sandbox runs caller-supp (Code Injection) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-62048 in Improper Neutralization of Special Elements used i (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: Ve
Threat IntelCVE-2026-116852 in Widget Author Remote Code Execution (RCE) in Widget Optio (Code Injection) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-90888 in LeadSnap Unauthenticated PHP Object Injection in LeadSnap < (Deserialization) allows remote attackers to trigger arbitrary code execution
Threat IntelCVE-2026-120307 in The Beta9 worker serves the sandbox file API from (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch: V
Threat IntelCVE-2026-120306 in Beta9 turns each shell command in a tenant image d (Privilege Escalation) allows remote attackers to trigger arbitrary code execution. P
Threat IntelMARIADB-DROP-PACKAGE-PRIVESC in MariaDB Corporation MariaDB Server Access Control Subsystem (Access Control) allows remote attackers to trigger arbitrary c
Threat IntelCVE-2026-120308 in A Beta9 tenant can attach a volume when deploying a (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-119526 in ThemeREX Deserialization of Untrusted Data vulnerability in (Deserialization) allows remote attackers to trigger arbitrary code executio
Threat IntelCVE-2026-39738 in FunnelKit Unauthenticated PHP Object Injection in FunnelKit (Deserialization) allows remote attackers to trigger arbitrary code execution
Threat IntelCVE-2026-39732 in Transliterator Unauthenticated SQL Injection in Transliterator <= (SQL Injection) allows remote attackers to trigger arbitrary code execu
Threat IntelCVE-2026-109220 in The PDF Invoice for WooCommerce + Drag and Drop Te (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch:
Cyber AttackIBM-SQLI-2026 in IBM Cloud Enterprise Portal Subsystems (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security
Threat IntelCVE-2026-120201 in Jpom (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.11.12 and later.
Threat IntelCVE-2026-116557 in The WP Booking System - Booking Calendar plugin fo (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch