Threat IntelIn JetBrains Datalore Authorization Bypass Flaw Disclosed (CVE-2026-123279)
CVE-2026-123279 in In JetBrains Datalore (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 2026.4 and late
Topic
614 articles
Threat IntelCVE-2026-123279 in In JetBrains Datalore (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 2026.4 and late
Threat IntelCVE-2026-123294 in In JetBrains Hub (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 2026.2.52556 and l
CMS SecurityCVE-2026-107622 in The BuddyForms plugin for WordPress is vulnerable (Privilege Escalation) allows remote attackers to trigger arbitrary code execution. Pa
CMS SecurityCVE-2026-114630 in The ELEX WordPress HelpDesk & Customer Ticketing S (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-120844 in Incorrect Privilege Assignment vulnerability in mi (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-119516 in Mamunur Deserialization of Untrusted Data vulnerability in (Deserialization) allows remote attackers to trigger arbitrary code execution
Threat IntelCVE-2026-88800 in The MDJM Event Management and Mobile Events Manage (Missing Authentication) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-63774 in Insufficient input validation in the PowerSYSTEM C (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: Ve
Threat IntelCVE-2026-63017 in PowerSYSTEM Incorrect authorization in PowerSYSTEM Center allo (Authorization Bypass) allows remote attackers to trigger arbitrary code e
Threat IntelCVE-2026-73116 in Apache Insufficiently Protected Credentials vulnerability (Input Validation) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-111489 in A Static credential embedded in the mobile app has b (Missing Authentication) allows remote attackers to trigger arbitrary code executio
Threat IntelCVE-2026-111490 in Insecure direct object reference (IDOR) vulnerabil (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-111494 in Incorrect validation of TLS certificates in the Ma (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-119757 in BTCPay Server (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.4.2 and later.
Threat IntelCVE-2026-82907 in ExternalLoginKeysManager Authentication Bypass by Capture-replay in Externa (Security Vulnerability) allows remote attackers to trigger a
Threat IntelCVE-2026-83542 in Apache Improper Control of Generation of Code ('Code Inje (Code Injection) allows remote attackers to trigger arbitrary code execution. P
GoogleCVE-2026-85297 in Google Cloud Enterprise Services (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.1
Threat IntelCVE-2026-117691 in A Flaw was found in the SAML HTTP-Redirect binding i (Security Vulnerability) allows remote attackers to trigger arbitrary code executio
DevSecOpsCVE-2026-105769 in Github.com/chainguard-dev/kaniko (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.
Threat IntelCVE-2026-121489 in Improper Limitation of a Pathname to a Restricted (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch: V
Threat IntelCVE-2026-73098 in Apache Improper control of dynamically-loaded code vulner (Input Validation) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-73099 in Apache Cross-Site Request Forgery (CSRF) vulnerability in (Cross-Site Request Forgery) allows remote attackers to trigger arbitrary code
Threat IntelCVE-2026-73117 in HTTP Improper Neutralization of CRLF Sequences in HTTP (Security Vulnerability) allows remote attackers to trigger arbitrary code executi
Threat IntelCVE-2026-96677 in Improper Neutralization of Input During Web Page G (Cross-Site Scripting) allows remote attackers to trigger arbitrary code execution. Pa