Topic
614 articles
KubernetesCVE-2026-105312 in A Kubernetes tenant with create permission on Consol (Privilege Escalation) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-9589 in Missing authorization in the configuration cascade (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. P
Threat IntelCVE-2026-43845 in A Vulnerability in the password reset mechanism coul (Input Validation) allows remote attackers to trigger arbitrary code execution. Patc
Threat IntelCVE-2026-43844 in A Vulnerability in the proprietary protocol could al (Input Validation) allows remote attackers to trigger arbitrary code execution. Patc
Threat IntelCVE-2026-77932 in DB-GPT (Missing Authentication) allows remote attackers to trigger arbitrary code execution. Patch: Version 0.8.2 and later.
Threat IntelCVE-2026-77936 in Letta (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 0.16.8 and later.
Threat IntelCVE-2026-112776 in Craft CMS from (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 5.11.0.
Threat IntelCVE-2026-109437 in Cognition (Missing Authentication) allows remote attackers to trigger arbitrary code execution. Patch: Version 0.13.0 and later.
Threat IntelCVE-2026-112780 in Grav from (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.2.2.
Threat IntelCVE-2026-112779 in Grav API plugin (grav-plugin-api) (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 1
Threat IntelCVE-2026-111057 in Mercury (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security patch release.
Threat IntelCVE-2026-111058 in Mercury (Missing Authorization) allows remote attackers to trigger arbitrary code execution. Patch: Version 3.2.6 and later.
GoogleCVE-2026-81867 in Google Cloud Enterprise Services (Deserialization) allows remote attackers to trigger arbitrary code execution. Patch: Version 2026-06 an
Threat IntelCVE-2026-78162 in Apache Deserialization of Untrusted Data vulnerability in (Deserialization) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-108983 in Web Vulnerability is in Web Server default connection (OS Command Injection) allows remote attackers to trigger arbitrary code execution
GoogleCVE-2026-79707 in Google Cloud Enterprise Services (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.21.0.
Threat IntelCVE-2026-102503 in Missing Authentication for Critical Function (CWE- (Missing Authentication) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-103091 in Missing Authorization (CWE-862) and Initialization (Information Disclosure) allows remote attackers to trigger arbitrary code execution.
Threat IntelCVE-2026-110372 in Brainstorm Incorrect Privilege Assignment vulnerability in Br (Security Vulnerability) allows remote attackers to trigger arbitrary code
MicrosoftCVE-2026-58201 in Azure Enterprise Services (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.1.2
Threat IntelCVE-2026-111998 in Vanus (Security Vulnerability) allows remote attackers to trigger arbitrary code execution. Patch: Version 0.9.0 and later.
Threat IntelCVE-2026-109894 in Improper Neutralization of Special Elements used i (SQL Injection) allows remote attackers to trigger arbitrary code execution. Patch: V
GoogleCVE-2026-19759 in Google Cloud Enterprise Services (Authorization Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 2026-
Threat IntelCVE-2026-112005 in WhoDB (Path Traversal) allows remote attackers to trigger arbitrary code execution. Patch: Version 0.135.0 and later.