Automated cyber signal feeds.
CVE ID :CVE-2026-87900 Published : Sept. 23, 2026, 8:17 p.m. | 55 minutes ago Description :Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts. Severity:…
CVE ID :CVE-2026-84502 Published : Sept. 23, 2026, 6:47 p.m. | 24 minutes ago Description :A flaw was found in Red Hat Ansible Automation Platform’s automation- controller. The Project scm_url field is not validated against values that begin with a dash…
CVE ID :CVE-2026-90901 Published : Sept. 23, 2026, 6:42 p.m. | 29 minutes ago Description :Joomla Extension – joomshaper.com – Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 – The checkout.searchGuestUser endpoint allowed querying guest checkout…
CVE ID :CVE-2026-84474 Published : Sept. 23, 2026, 6:41 p.m. | 30 minutes ago Description :A flaw was found in Red Hat Ansible Automation Platform’s automation- controller. The provisioning-callback secret (host_config_key) is exposed to users holding only the read-level view_jobtemplate permission…
CVE ID :CVE-2026-82368 Published : Sept. 23, 2026, 6:40 p.m. | 31 minutes ago Description :Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A…
CVE ID :CVE-2026-90902 Published : Sept. 23, 2026, 6:39 p.m. | 32 minutes ago Description :Joomla Extension – joomshaper.com – Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 – The coupon bulk update task (administrator/index.php?option=com_easystore&task=coupon.couponBulkUpdate) took…
CVE ID :CVE-2026-77987 Published : Sept. 22, 2026, 8:43 p.m. | 22 minutes ago Description :A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated the scheme and host of a…
CVE ID :CVE-2026-67615 Published : Sept. 22, 2026, 8:30 p.m. | 35 minutes ago Description :openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated non-guest user to execute arbitrary code by exploiting Java deserialization in the…
CVE ID :CVE-2026-91018 Published : Sept. 22, 2026, 8:25 p.m. | 40 minutes ago Description :lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system. Severity:…
CVE ID :CVE-2026-95814 Published : Sept. 22, 2026, 8:21 p.m. | 44 minutes ago Description :Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain read, write, delete, and attachment access…