Unauthenticated DoS in OpenAPI validation via CVE-2026-63462
CVE-2026-63462 enables unauthenticated single-request denial of service through OpenAPI validation errors.
Read digestSecurity Intel Feed
Cyber Hose
Page 55 of 93
NLTK 3.10.0–3.10.2 Remote Code Execution via AllowlistUnpickler
A CVSS 8.7 RCE in NLTK 3.10.0–3.10.2 headlines this run, alongside a SiYuan arbitrary file deletion advisory.
In this digest
TRENDnet TEW-821DAP Critical Stack-Based Buffer Overflow
A CVSS 9.3 TRENDnet router stack overflow headlines this CVE-only digest, joined by Netty TLS hostname-verification bypass and AVideo authentication issues.
In this digest
CVE-2026-78003: Mailgun for WordPress SSRF
A CVSS 9.8 unauthenticated SSRF in Mailgun for WordPress headlines this run, plus Apache InLong and CloudStack RCE flaws.
In this digest
- CVE-2026-78003 — CVSS 9.8 — Mailgun for WordPress through 2.2.0 - Unauthenticated Server-Side Request Forgery
- CVE-2026-63046 — CVSS 8.8 — Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials
- CVE-2026-50112 — CVSS 8.8 — Apache CloudStack: RCE and SSRF in direct download, metalink and NFS template
GeoTools Critical SQL Injection via OGC Filters
A CVSS 9.8 GeoTools SQL injection headlines this digest, joined by WPeMatico privilege escalation and Combodo iTop XSS advisories.
In this digest
xShop 3.0.3 Critical RCE via Unrestricted File Upload
xShop 3.0.3 suffers a critical remote code execution vulnerability via unrestricted file upload with CVSS 9.1.
In this digest
Attackers Target CI/CD Pipelines in SDLC Supply Chains
Unit 42 research reveals attackers targeting CI/CD pipelines and developer tools, plus multiple CVSS 8.8 CVEs in FileWiki, LeafWiki, and Combodo iTop.
In this digest
Broadcom discloses 91 Spring CVEs affecting 209,569 tracked components
Broadcom revealed 91 Spring Framework CVEs including a critical CVSS 9.2 deserialization flaw in Spring for GraphQL.
In this digest
Critical CVE-2026-77234 in FreeRTOS-Kernel timer command handling
A CVSS 9.3 vulnerability in FreeRTOS-Kernel timer command handling poses a severe risk of improper input validation.
In this digest
Beacon CRM AWS Key Breach Exposes Data From 1,500 UK Charities
Beacon CRM breach exposes data from 1,500 UK charities, while a CVSS 10.0 Azure SQL privilege escalation flaw and multiple Incus CVEs round out this run.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check