Automated cyber signal feeds.
CVE ID :CVE-2026-101045 Published : Sept. 27, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description :Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata…
CVE ID :CVE-2026-101043 Published : Sept. 27, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description :pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project’s pnpm-workspace.yaml.…
CVE ID :CVE-2026-88778 Published : Sept. 27, 2026, 5:16 p.m. | 2 hours, 28 minutes ago Description :Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37…
CVE ID :CVE-2026-88773 Published : Sept. 27, 2026, 5:16 p.m. | 2 hours, 28 minutes ago Description :Inconsistent interpretation of HTTP requests (‘HTTP Request/Response smuggling’) vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23,…
CVE ID :CVE-2026-82901 Published : Sept. 26, 2026, 7:16 p.m. | 20 minutes ago Description :The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the ‘uacf7_wpcf7_mail_components’ function…
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain aimed…
CVE ID :CVE-2026-85984 Published : Sept. 26, 2026, 6:16 p.m. | 1 hour, 19 minutes ago Description :The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mo_wp_login_intent parameter in all versions up to,…
CVE ID :CVE-2026-77203 Published : Sept. 26, 2026, 6:16 p.m. | 1 hour, 20 minutes ago Description :The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is…
CVE ID :CVE-2026-97163 Published : Sept. 26, 2026, 3:16 p.m. | 4 hours, 19 minutes ago Description :Joomla Extension – lomart.fr – Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 Severity: 10.0 | CRITICAL Visit the link for more details,…
CVE ID :CVE-2026-100372 Published : Sept. 25, 2026, 8:17 p.m. | 1 hour, 12 minutes ago Description :ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory…