🕵️ RESEARCH & DEEP DIVES
ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th) — SANS ISC
light0011 cms Chapter Controller ChapterController.class.php authorizationA s... — CVE ThreatInt
light0011 cms UEditor controller.php catchimage server-side request forgeryA ... — CVE ThreatInt
light0011 cms Query Builder ChapterController.class.php searchChapter sql inj... — CVE ThreatInt
Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 a... — CVE ThreatInt
An insecure Apache configuration in ConfigServer Security & Firewall maps /us... — CVE ThreatInt
Missing authorization vulnerability has been discovered in 2Checkout payment ... — CVE ThreatInt
Out-of-bounds read vulnerability in Samsung Opensource Escargot allows Overre... — CVE ThreatInt
light0011 cms Chapter Controller ChapterController.class.php _initialize auth... — CVE ThreatInt
Microsoft Entra ID Elevation of Privilege VulnerabilityAuthentication bypass ... — CVE ThreatInt
Power Automate Elevation of Privilege VulnerabilityServer-side request forger... — CVE ThreatInt
Azure Cosmos DB Spoofing VulnerabilityAuthorization bypass through user-contr... — CVE ThreatInt
Microsoft Azure Active Directory B2C Elevation of Privilege VulnerabilityAuth... — CVE ThreatInt
Copilot Studio Elevation of Privilege VulnerabilityImproper verification of c... — CVE ThreatInt
Azure AI Language Elevation of Privilege VulnerabilityMissing authentication ... — CVE ThreatInt
Microsoft Fabric Elevation of Privilege VulnerabilityMissing authorization in... — CVE ThreatInt
Microsoft Discovery Studio Information Disclosure VulnerabilityImproper neutr... — CVE ThreatInt
MOOS-IvP Critical RCE via Buffer Overflows (CVE-2026-85437) — thehackerwire.com (discovered)
Am I overly cautious to prohibit sending credentials by email? — r/cybersecurity
US - TAA and Electric Critical Infrastructure restrictions — r/cybersecurity