Automated cyber signal feeds.
CVE ID :CVE-2026-88773 Published : Sept. 27, 2026, 5:16 p.m. | 2 hours, 28 minutes ago Description :Inconsistent interpretation of HTTP requests (‘HTTP Request/Response smuggling’) vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23,…
CVE ID :CVE-2026-82901 Published : Sept. 26, 2026, 7:16 p.m. | 20 minutes ago Description :The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the ‘uacf7_wpcf7_mail_components’ function…
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain aimed…
CVE ID :CVE-2026-85984 Published : Sept. 26, 2026, 6:16 p.m. | 1 hour, 19 minutes ago Description :The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mo_wp_login_intent parameter in all versions up to,…
CVE ID :CVE-2026-77203 Published : Sept. 26, 2026, 6:16 p.m. | 1 hour, 20 minutes ago Description :The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is…
CVE ID :CVE-2026-97163 Published : Sept. 26, 2026, 3:16 p.m. | 4 hours, 19 minutes ago Description :Joomla Extension – lomart.fr – Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 Severity: 10.0 | CRITICAL Visit the link for more details,…
CVE ID :CVE-2026-100372 Published : Sept. 25, 2026, 8:17 p.m. | 1 hour, 12 minutes ago Description :ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory…
CVE ID :CVE-2026-100368 Published : Sept. 25, 2026, 8:17 p.m. | 1 hour, 12 minutes ago Description :CliInvoke is a .NET library for invoking command-line programs, and its `CliInvoke.Specializations` packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt.…
CVE ID :CVE-2026-100391 Published : Sept. 25, 2026, 8:13 p.m. | 1 hour, 16 minutes ago Description :MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy routes due to missing and incomplete destination validation in the d query…
CVE ID :CVE-2026-100389 Published : Sept. 25, 2026, 8:13 p.m. | 1 hour, 16 minutes ago Description :GestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP connector’s attachment handling that fails to skip blocked file extensions. Unauthenticated…