Omnivore API Authentication Bypass in Apple Sign-In (CVE-2026-82454)
A CVSS 9.3 authentication bypass in Apple Sign-In leads this run, plus two qs library CVEs.
In this digest
Security Intel Feed
Page 49 of 93
A CVSS 9.3 authentication bypass in Apple Sign-In leads this run, plus two qs library CVEs.
In this digest
A critical directory traversal vulnerability in Cloud Commander has been identified with a CVSS score of 9.3.
Read digestA CVSS 7.5 unauthenticated authentication bypass in SAML Single Sign-On through version 5.4.6 headlines this run.
In this digest
VulnCheck reveals factory surveillance implants in ZBT routers, plus a CVSS 10.0 argocd-mcp auth bypass and a BookStack RCE via ZIP polyglot.
In this digest
Sigma Forms Pro suffers a critical unauthenticated arbitrary file upload vulnerability with CVSS 9.8.
In this digest
A critical Linux kernel flaw CVE-2026-80714 with CVSS 9.8 affects connection syncing and demands urgent attention.
In this digest
A critical SQL injection vulnerability impacts IBM Concert versions 1.0.0 through 2.3.1, posing serious risks.
In this digest
CVE-2026-81532 is a critical memory overwrite flaw in MongoDB BI Connector's ODBC driver, posing serious risks.
In this digest
A CVSS 8.8 out-of-bounds read in Google Chrome V8 headlines today's CVE roundup, alongside XXE, Graylog parser, and MariaDB SQL injection flaws.
In this digest
McKesson breach exposes data on tens of millions of patients, a supply-chain worm hits npm, and Berlin rejects extortion after state network data theft.
In this digest
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check