Category Wire

Automated cyber signal feeds.

CVE-2026-6721 – Multiple Vulnerabilities in IBM Concert Software

​CVE ID :CVE-2026-6721 Published : Sept. 23, 2026, 8:45 p.m. | 27 minutes ago Description :IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is incorporated into OS commands, resulting in arbitrary command execution…

CVE-2026-87900 – WP Toolkit for cPanel Argument Injection

​CVE ID :CVE-2026-87900 Published : Sept. 23, 2026, 8:17 p.m. | 55 minutes ago Description :Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts. Severity:…

CVE-2026-84502 – Automation-controller: automation-controller-container: automation-controller: project scm_url argument injection into `git ls-remote –upload-pack` yields rce on the controller-task control-plane pod

​CVE ID :CVE-2026-84502 Published : Sept. 23, 2026, 6:47 p.m. | 24 minutes ago Description :A flaw was found in Red Hat Ansible Automation Platform’s automation- controller. The Project scm_url field is not validated against values that begin with a dash…

CVE-2026-84474 – Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioning-callback host match

​CVE ID :CVE-2026-84474 Published : Sept. 23, 2026, 6:41 p.m. | 30 minutes ago Description :A flaw was found in Red Hat Ansible Automation Platform’s automation- controller. The provisioning-callback secret (host_config_key) is exposed to users holding only the read-level view_jobtemplate permission…