Automated cyber signal feeds.
CVE ID :CVE-2026-48975 Published : Sept. 21, 2026, 6:17 p.m. | 42 minutes ago Description :HomeBox is a home inventory and organization system. Prior to 0.26.0, MaintenanceEntryRepository.Update and MaintenanceEntryRepository.Delete in backend use UpdateOneID(id) and DeleteOneID(id) without verifying that the maintenance entry…
CVE ID :CVE-2026-88855 Published : Sept. 20, 2026, 6:16 p.m. | 25 minutes ago Description :Joomla Extension – OrdaSoft.com – Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 – The extensions saveGallery() passes form data through…
CVE ID :CVE-2026-88856 Published : Sept. 20, 2026, 6:16 p.m. | 25 minutes ago Description :Joomla Extension – OrdaSoft.com – Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 – The extensions updateOSGallery(), reached via task=update_osgallery,…
CVE ID :CVE-2026-88857 Published : Sept. 20, 2026, 6:16 p.m. | 25 minutes ago Description :Joomla Extension – OrdaSoft.com – Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 – The extensions saveWatermark() copied an uploaded…
CVE ID :CVE-2026-88854 Published : Sept. 20, 2026, 6:16 p.m. | 25 minutes ago Description :Joomla Extension – OrdaSoft.com – Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 – The extensions showSearchResult() and showSearchResultAjax() read the textsearch/searchText…
CVE ID :CVE-2026-94036 Published : Sept. 20, 2026, 4:16 p.m. | 2 hours, 25 minutes ago Description :A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus…
Three researchers at the security firm Hacktron used Anthropic’s Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository. The chain began with a bug in…
A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actually be exploited in your environment? Mythos-class AI is compressing the time between disclosure and…
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in breach research, including Verizon’s annual Data Breach Investigations Report. This article explains what identity visibility…
CVE ID :CVE-2026-93985 Published : Sept. 19, 2026, 12:16 p.m. | 6 hours, 17 minutes ago Description :OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed member access to constructor…