Vulnerabilities
Defend Windows LSASS from CVE-2026-96219: Critical Unauthenticated RCE Flaw Demands Immediate Action
An unauthenticated out-of-bounds write flaw in Windows LSASS allows remote attackers to execute code, rated critical by the NVD.
Malware Chronicle Exposure Desk
The Malware Chronicle Exposure Desk is the part of the Malware Chronicle newsroom that covers software flaws, vendor advisories and patches. It is a newsroom desk, not a single person. Sections: Vulnerabilities. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 27 articles so far. See the editorial policy or report an error.
Vulnerabilities
Vulnerabilities
Patch AEM 6.5 Now to Block Critical Stored XSS Flaw CVE-2026-106629
Adobe Experience Manager 6.5 faces a critical stored cross-site scripting flaw that allows attackers to hijack user sessions and escalate privileges.
Vulnerabilities
Block Crafted Links Targeting Adobe AEM XSS Flaw CVE-2026-83662
A critical reflected cross-site scripting flaw in Adobe Experience Manager allows attackers to hijack sessions when users click malicious URLs.
Vulnerabilities
Update Adobe Commerce and Magento Open Source Now to Fix Critical Zero-Click RCE Vulnerability
A critical authorization flaw in Adobe Commerce and Magento Open Source allows attackers to run code without user interaction, affecting versions through 2026-sep.
Vulnerabilities
Block Fork-Triggered CI Builds to Stop SaltStack Docs Secret Theft
A critical flaw in the SaltStack docs repository allows malicious fork pull requests to execute code and steal secrets, requiring an immediate commit update.
Vulnerabilities
Patch OTRS 7.0-2025 to invalidate JWTs immediately after disabling accounts or changing passwords
OTRS CVE-2026-78357 allows stolen JWTs to remain valid for up to 16 hours even after user accounts are disabled or passwords change.
Vulnerabilities
Patch SAP MII 15.4 and 15.5 to Block Critical Privilege Escalation
A critical flaw in SAP Manufacturing Integration and Intelligence allows admins to hijack the underlying Java server, risking full system compromise.
Vulnerabilities
IBM i 7.3-7.6 Users Must Patch HTTP Server Admin to Block Critical RCE CVE-2026-96119
IBM i versions 7.3 through 7.6 contain a critical vulnerability in the HTTP Server Administration web application that allows remote authenticated attackers to execute arbitrary code.
Vulnerabilities
Update PraisonAI to 1.6.59 to Patch Critical CVE-2026-57118 Auth Bypass Flaw
A critical flaw in PraisonAI allows attackers to list agents and consume resources without credentials. Version 1.6.59 fixes the issue.
Vulnerabilities
Edimax BR-6208AC Firmware Has Critical Remote Code Execution Flaw
A critical vulnerability in unsupported Edimax router firmware allows remote attackers to execute commands via a publicly available exploit.
Vulnerabilities
Update Neo4j GraphQL to 7.6.4 to Block Unauthenticated Cypher Access in Critical Vulnerability
Developers using @neo4j/graphql must update to version 7.6.4 immediately to stop unauthenticated access to protected Cypher fields.
Vulnerabilities
GitLab Self-Managed Admins Must Upgrade Immediately to Fix Critical CI/CD Regex RCE Vulnerability
GitLab issues urgent fixes for a maximum-severity flaw in its CI/CD regex compiler that allows attackers to run code without logging in.
Vulnerabilities
Update AnyDesk Linux to 8.0.3 to Stop Remote Root Compromise
A heap buffer overflow in AnyDesk 8.0.2 allows attackers to execute commands with root privileges before user approval. Version 8.0.3 patches the flaw.
Vulnerabilities
Patch SonicWall SMA1000 Now: SSRF Probes Detected Days After Release
Threat intelligence firms detected exploitation attempts against a maximum-severity flaw in SonicWall appliances three days after the vendor issued a patch.
Vulnerabilities
Verify AI Patches Against Maintainer Tests Before Deployment
Northwestern researchers found AI fixes often fail developer checks, posing risks for automated remediation workflows.
Vulnerabilities
Secure Your GlobalProtect VPN Against Active Ransomware Exploitation
Threat groups bypass Palo Alto authentication to enter networks stealthily. Verify your remote access logs immediately to detect unauthorized sessions.
Vulnerabilities
Update rtMedia to 4.7.14+ to Block Critical Path Traversal in WordPress, BuddyPress, and bbPress
A critical path traversal vulnerability in rtMedia versions through 4.7.13 allows attackers to access restricted files on WordPress, BuddyPress, and bbPress installations.
Vulnerabilities
Remove Agnaistic Agnai 1.0.555 to Stop Unauthenticated Admin Takeover
A critical flaw in Agnaistic Agnai allows attackers to seize full control using hardcoded credentials and a public JWT secret.
Vulnerabilities
Upgrade Wine House WordPress Theme to 3.20+ to Stop Remote PHP Execution
ThemeREX's Wine House theme versions up to 3.20 contain a critical CVE-2026-62053 flaw allowing remote attackers to execute arbitrary PHP code without logging in.
Vulnerabilities
Stylemix uListing 2.2.0 Users Urged to Update Against Critical CVE-2026-62031 SQLi
Unauthenticated SQL injection in Stylemix uListing versions 2.2.0 and earlier allows attackers to execute arbitrary code.
Vulnerabilities
Update Privasys Enclave OS Now to Block Critical TLS Quote Relay Attack on Confidential VMs
A critical flaw in Privasys Enclave OS allows attackers to bypass attestation checks by relaying TLS quotes, requiring immediate updates to specific versions.
Vulnerabilities
Apply openPDC Docker Patch 2.9.477 or 2.9.482 Now to Stop Critical Fixed Credential Breach
A critical flaw in openPDC Docker images allows attackers with network access to seize full administrative control using fixed credentials that do not expire.
Vulnerabilities
Update WooCommerce 3D Configurator to 2.16.3 to Fix Critical No-Auth RCE in CVE-2026-103889
A flaw in the 3D Product Configurator for WooCommerce allows attackers to execute code on servers without logging in or providing credentials.
Vulnerabilities
Patch ThemeREX Hygia Plugin Immediately to Block Critical Object Injection Flaw
A critical deserialization vulnerability in the Hygia plugin through version 1.21.0 allows object injection, posing severe risks to WordPress sites.