Everything Malware Chronicle has reported about NVD: 4 stories, newest first. Part of our Vulnerabilities coverage.
A critical authorization flaw in Adobe Commerce and Magento Open Source allows attackers to run code without user interaction, affecting versions through 2026-sep.
A critical flaw in the SaltStack docs repository allows malicious fork pull requests to execute code and steal secrets, requiring an immediate commit update.
OTRS CVE-2026-78357 allows stolen JWTs to remain valid for up to 16 hours even after user accounts are disabled or passwords change.
IBM i versions 7.3 through 7.6 contain a critical vulnerability in the HTTP Server Administration web application that allows remote authenticated attackers to execute arbitrary code.