Topic
614 articles
Threat IntelCVE-2026-116163 in Parse Server (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 8.6.102 and later.
Threat IntelCVE-2026-116199 in GoogleAuthController Snipe-IT (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 8.6.3 a
Threat IntelCVE-2026-115932 in When a post is published, Postiz treats a media pa (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-115557 in Python has added a denylist for known compromised (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-115995 in Unitree Security vulnerability has been detected in Unitre (Command Injection) allows remote attackers to trigger arbitrary code executi
Threat IntelCVE-2026-114820 in Vulnerability in the Oracle Java SE, Oracle GraalV (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-115933 in Postiz signs its session, invitation and password (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-116014 in UA_DataType_fromStructureDescription Open62541 (Integer Overflow) allows remote attackers to trigger arbitrary code execution. Patch: Ve
Threat IntelCVE-2026-94075 in Tribulant Deserialization of Untrusted Data vulnerability in (Deserialization) allows remote attackers to trigger arbitrary code executio
Threat IntelCVE-2026-115889 in Wasmtime (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 36.0.19 and later.
Threat IntelCVE-2026-115931 in Postiz lets a signed-in user ask the backend to ru (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Active ExploitCVE-2026-110447 in Collabora Online – Built-in CODE Server (OS Command Injection) allows remote attackers to trigger active system exploitation. Patch: Ver
MicrosoftCVE-2026-83944 in Azure Enterprise Services (Access Control) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch rele
MicrosoftCVE-2026-70200 in Azure Enterprise Services (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch rele
Threat IntelCVE-2026-107685 in Improper Certificate Validation vulnerability in t (Security Vulnerability) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-115727 in AgenticSeek (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch release.
Threat IntelCVE-2026-25784 in Hallo Initialization of a Resource with an Insecure Defa (Privilege Escalation) allows remote attackers to trigger arbitrary code executi
Threat IntelCVE-2026-112862 in Deserialization of Untrusted Data vulnerability in (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-19677 in An authentication bypass vulnerability in the publ (Missing Authentication) allows remote attackers to trigger arbitrary code execution.
AWS CloudCVE-2026-12944 in AWS Enterprise Services (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.10.0
Threat IntelCVE-2026-97785 in AAD Improper authentication in AAD App Proxy (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch:
Threat IntelCVE-2026-107861 in The system control service on affected Kiloview E3 (OS Command Injection) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-79869 in No description provided (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch rele
Threat IntelCVE-2026-114625 in VeloCloud Orchestrator (VCO) on-prem has a securit (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: V