Automated cyber signal feeds.
Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store’s server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5.…
CVE ID :CVE-2026-0799 Published : Sept. 5, 2026, 6:48 p.m. | 24 minutes ago Description :In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but…
JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. “Cadence users should immediately revoke…
Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions. The vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability…
Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach at its shipping provider ShipMonk. The exposed information includes customer names, email addresses, phone numbers, shipping addresses, and order numbers…
CVE ID :CVE-2026-86196 Published : Sept. 5, 2026, 1:18 p.m. | 5 hours, 54 minutes ago Description :Grav API plugin versions before 1.0.20 build password reset links from the untrusted Host header in the forgot-password endpoint, allowing unauthenticated attackers to redirect reset…
CVE ID :CVE-2026-85786 Published : Sept. 4, 2026, 8:17 p.m. | 50 minutes ago Description :Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause a denial of service via a crafted compressed Ion…
CVE ID :CVE-2026-61699 Published : Sept. 4, 2026, 8:17 p.m. | 50 minutes ago Description :nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.7.1, revocation is the only in-band mechanism that isolates a compromised/offboarded host…
CVE ID :CVE-2026-53932 Published : Sept. 4, 2026, 8:17 p.m. | 50 minutes ago Description :laravel-backup-restore restores database backups made with spatie Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database restore. This issue has…
CVE ID :CVE-2026-81939 Published : Sept. 4, 2026, 7:17 p.m. | 1 hour, 50 minutes ago Description :A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside…