CVE ID :CVE-2026-96451 Published : Oct. 3, 2026, 4:16 p.m. | 3 hours, 16 minutes ago Description :Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1. Severity: 8.8…
CVE ID :CVE-2026-103065 Published : Oct. 3, 2026, 3:16 p.m. | 4 hours, 16 minutes ago Description :Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a…
The U.K.’s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing’s state security service. In a “Security Service Espionage Alert” issued on September 30, 2026,…
The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and Carbon Black Threat…
CVE ID :CVE-2026-105115 Published : Oct. 3, 2026, 2:16 p.m. | 5 hours, 16 minutes ago Description :OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes without authentication.…
CVE ID :CVE-2026-75937 Published : Oct. 2, 2026, 8:33 p.m. | 55 minutes ago Description :A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the…
CVE ID :CVE-2026-82039 Published : Oct. 2, 2026, 8:17 p.m. | 1 hour, 11 minutes ago Description :UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows authenticated attackers to inject arbitrary SQL by supplying malicious assetType and groupName values…
CVE ID :CVE-2026-39718 Published : Oct. 2, 2026, 8:17 p.m. | 1 hour, 11 minutes ago Description :Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This issue affects Wallstreet: from n/a through 2.8.6. Severity: 8.8 | HIGH…
CVE ID :CVE-2026-104988 Published : Oct. 2, 2026, 8:17 p.m. | 1 hour, 11 minutes ago Description :A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without…
CVE ID :CVE-2026-104019 Published : Oct. 2, 2026, 8:17 p.m. | 1 hour, 11 minutes ago Description :OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before…