Topic
614 articles
Threat IntelCVE-2026-109220 in The PDF Invoice for WooCommerce + Drag and Drop Te (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch:
Cyber AttackIBM-SQLI-2026 in IBM Cloud Enterprise Portal Subsystems (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security
Threat IntelCVE-2026-120201 in Jpom (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.11.12 and later.
Threat IntelCVE-2026-116557 in The WP Booking System - Booking Calendar plugin fo (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch
Threat IntelCVE-2026-89270 in The Popup Builder – Create highly converting, mobi (Missing Authorization) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-116512 in The Project Manager – AI Powered Project Managemen (Unrestricted File Upload) allows remote attackers to trigger arbitrary code executio
Threat IntelCVE-2026-119096 in The Uncanny Toolkit for LearnDash plugin for WordP (Authentication Bypass) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-120209 in AJ-Report (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.7.1 and later.
MicrosoftCVE-2026-70009 in Azure Enterprise Services (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch rele
Threat IntelCVE-2026-120195 in WAVLINK Security vulnerability has been detected in WAVLIN (Input Validation) allows remote attackers to trigger arbitrary code executio
Gov / DefenseCISA-AA-ROCKWELL-2026 in Rockwell Automation & CISA Allen-Bradley ControlLogix & CompactLogix PLCs (Information Disclosure) allows remote attackers to trig
VulnerabilityEU-DORA-REG-2022-2554 in European Supervisory Authorities (EBA, EIOPA, ESMA) Digital Operational Resilience Act (Regulation EU 2022/2554) (Information Disc
VulnerabilitySEC-8K-ITEM105 in U.S. Securities and Exchange Commission (SEC) Material Cybersecurity Incidents (Item (Information Disclosure) allows remote attackers to
Threat IntelCVE-2026-120198 in WAVLINK Vulnerability has been found in WAVLINK WL-WN530BE (Input Validation) allows remote attackers to trigger arbitrary code executio
Threat IntelCVE-2026-120189 in D-Link Vulnerability was identified in D-Link DIR-505 (Memory Corruption) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-118636 in **UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageD (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch:
AWS CloudCVE-2026-95699 in AWS Enterprise Services (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 9 and later.
Threat IntelCVE-2026-103882 in The Acadlix LMS – AI Quiz Maker, Online Exam & Cou (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-118235 in The SimpleForm – Form Maker to Chat Apps with Quiz (Unrestricted File Upload) allows remote attackers to trigger arbitrary code executio
MicrosoftCVE-2026-62874 in Azure Enterprise Services (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security pa
Threat IntelCVE-2026-116238 in In server mode pgAdmin 4 locks an internal account (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-116241 in PgAdmin 4's Import/Export Data tool wraps a user's (OS Command Injection) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-78403 in Thales Stack-based buffer overflow and missing authorizat (Stack Buffer Overflow) allows remote attackers to trigger arbitrary code execu
Active ExploitCVE-2026-111357 in Ivanti Connect Secure (Security Vulnerability) allows remote attackers to trigger active system exploitation. Patch: Vendor security pat