CVE ID :CVE-2026-69102 Published : Aug. 11, 2026, 6:04 p.m. | 11 minutes ago Description :MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.properties that allows unauthenticated attackers to forge valid JWT tokens and authenticate…
CVE ID :CVE-2026-72713 Published : Aug. 11, 2026, 5:53 p.m. | 22 minutes ago Description :XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying…
CVE ID :CVE-2026-48413 Published : Aug. 11, 2026, 5:52 p.m. | 23 minutes ago Description :Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form…
CVE ID :CVE-2026-71362 Published : Aug. 11, 2026, 5:52 p.m. | 23 minutes ago Description :Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to…
CVE ID :CVE-2026-10754 Published : Aug. 10, 2026, 5:38 p.m. | 31 minutes ago Description :Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls. Severity: 8.6…
AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fixes, and control risk at human speed. When software output jumps 10 to 50 times, the problem is…
CVE ID :CVE-2026-72730 Published : Aug. 10, 2026, 5:17 p.m. | 51 minutes ago Description :Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the Rich Text Editor rendered a chat-transcript username as HTML, allowing stored cross-site…
CVE ID :CVE-2026-71576 Published : Aug. 10, 2026, 5:17 p.m. | 51 minutes ago Description :A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising…
Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain called StormEncryptor. The use of StormEncryptor marks a shift from the adversary’s previous use of Medusa ransomware, the Microsoft Threat…
CVE ID :CVE-2026-19348 Published : Aug. 9, 2026, 11:16 a.m. | 8 hours, 46 minutes ago Description :A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilter_conf&function=set&act=add&name=test&enable=1. Performing a manipulation…