Automated cyber signal feeds.
CVE ID :CVE-2026-93355 Published : Sept. 28, 2026, 7:26 p.m. | 23 minutes ago Description :LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by…
Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics…
CVE ID :CVE-2026-101110 Published : Sept. 28, 2026, 7:16 p.m. | 32 minutes ago Description :Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 – site’s books() function reads the field and direction request parameters and…
CVE ID :CVE-2026-101108 Published : Sept. 28, 2026, 7:16 p.m. | 32 minutes ago Description :Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 – site reads the order_field and order_direction sort parameters at three separate…
CVE ID :CVE-2026-100752 Published : Sept. 28, 2026, 7:16 p.m. | 32 minutes ago Description :Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 – site builds the ORDER BY clause of three separate frontend…
What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those actors. This guide covers the limits of conventional provisioning, the…
CVE ID :CVE-2026-101060 Published : Sept. 27, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description :python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP redirects without re-validating the…
CVE ID :CVE-2026-101045 Published : Sept. 27, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description :Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata…
CVE ID :CVE-2026-101043 Published : Sept. 27, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description :pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project’s pnpm-workspace.yaml.…
CVE ID :CVE-2026-88778 Published : Sept. 27, 2026, 5:16 p.m. | 2 hours, 28 minutes ago Description :Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37…