I
Oct 3, 2026Internet-Exposed RDP Is Still the Ransomware On-Ramp the Gunra Advisory Warns About
Internet-Exposed RDP Is Still the Ransomware On-Ramp the Gunra Advisory Warns About The...
Oct 3, 20263 min read0 reactions0 comments
Back to articles
Tag archive
#vulnerabilities
Y
Oct 3, 2026YesWiki 9 CVEs — CVSS 8.6 SQL Injection Can Dump Your Entire Database
Nine vulnerabilities hit YesWiki on October 2, 2026. The lead flaw is CVE-2026-104457 (CVSS 8.6) —...
Oct 3, 20261 min read0 reactions0 comments
U
Oct 3, 2026UTMStack Cluster — 7 CVEs, Peak CVSS 9.9 Missing Auth on STOMP Command WebSocket
A single authenticated user with any role can execute arbitrary OS commands on every monitored...
Oct 3, 20261 min read0 reactions0 comments
W
Oct 2, 2026WordPress Auth Bypass Cluster — 4 CVSS 9.8, Full Site Takeover via Plugin Flaws
Four WordPress plugins dropped CVSS 9.8 authentication bypass vulnerabilities on the same day. All...
Oct 2, 20261 min read0 reactions0 comments
G
Oct 2, 2026Ghost CMS Mass Disclosure — 6 CVEs Including CVSS 8.1 Staff Session Bypass
A Ghost staff user with valid credentials can log into any other staff account using only the...
Oct 2, 20261 min read0 reactions0 comments
C
Oct 2, 2026CVE-2026-67401 Analysis — cPanel & WHM EmailTrack SQL Injection, From Mail Account to Root
Vulnerability Overview Item Detail CVE ID CVE-2026-67401 Component cPanel &...
Oct 2, 20265 min read0 reactions0 comments
M
Oct 2, 2026Mooncake Mass Disclosure — CVSS 9.8 Arbitrary Memory Read/Write in KV Cache Transfer Engine
A crafted TCP packet to Mooncake's transfer data port is enough to read and write arbitrary process...
Oct 2, 20261 min read0 reactions0 comments
D
Oct 1, 2026Deno CVE-2026-103473 — CVSS 8.1 Command Injection in node:child_process on Windows
If your Deno app on Windows passes untrusted input to spawn, spawnSync, or exec with shell: true —...
Oct 1, 20261 min read0 reactions0 comments
D
Oct 1, 2026Dockhand CVE-2026-53988 — CVSS 10.0 Unauthenticated Webhook Auth Bypass
An unsigned webhook request is enough to trigger a stack redeployment on Dockhand versions before...
Oct 1, 20261 min read0 reactions0 comments
C
Sep 30, 2026Cisco SD-WAN Manager CVE-2026-76504 — CVSS 9.8 Auth Bypass via URI Encoding, Actively Exploited
Cisco has warned of active exploitation of CVE-2026-76504 — a CVSS 9.8 authentication bypass in Cisco...
Sep 30, 20261 min read0 reactions0 comments
F
Sep 30, 2026Five vulnerabilities in AiSOC (the open-source SOC platform) were disclosed today.
Five vulnerabilities in AiSOC (the open-source SOC platform) were disclosed today. The worst one —...
Sep 30, 20261 min read0 reactions0 comments
L
Sep 30, 2026LightLLM Mass Disclosure — 2 CVSS 9.8 Unauthenticated RCE in LLM Serving Framework
Two unauthenticated CVSS 9.8 RCEs in LightLLM — the LLM serving framework used with LLaMA, Mistral,...
Sep 30, 20262 min read0 reactions0 comments