Topic

Vulnerability Disclosure: news, advisories and analysis

3 articlesUpdated 23 Oct 2026

CyberSecureToday covers Vulnerability Disclosure across 3 articles published between 14 Sep 2026 and 23 Oct 2026. The coverage includes 3 analysis or guidance pieces.

Stories on Vulnerability Disclosure most often intersect with Cyber Resilience Act, ENISA and OpenCode, with Technology, Cloud & SaaS the most affected sector. The most recent story, “OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection”, was published 23 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ResearchCloud & SaaS
OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection
A critical vulnerability in OpenCode allows malicious Model Context Protocol servers to execute arbitrary shell commands on Windows and WSL hosts during OAuth.
Priya Raman23 Oct 202612 min read
InsightsCloud & SaaS
EU Cyber Resilience Act Enforces Mandatory Automated SBOMs and 24-Hour Flaw Disclosures for Connected Devices
The European Union Cyber Resilience Act enters critical enforcement phases, requiring hardware OEMs and software vendors to maintain machine-readable SBOMs and report actively exploited flaws within 24 hours.
CST Editorial Desk8 Oct 20268 min read
InsightsCloud & SaaS
EU Cyber Resilience Act 24-Hour Vulnerability Reporting Rules Take Effect for Vendors
The EU CRA’s early reporting mandate is now in effect, requiring manufacturers to report actively exploited vulnerabilities to ENISA and CSIRTs within 24 hours.
Tom Verhoeven14 Sep 20266 min read

Latest coverage

OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection

EU Cyber Resilience Act Enforces Mandatory Automated SBOMs and 24-Hour Flaw Disclosures for Connected Devices

EU Cyber Resilience Act 24-Hour Vulnerability Reporting Rules Take Effect for Vendors