Sponsored Partner · Sample
CrowdStrike Falcon â AI-Native Endpoint ProtectionActive Advisories
50
2 active feeds
Critical Threats
17
12 high severity
Last Sync
04:46:40
2026-10-28
Top critical & high-severity threats, every week.
No spam. Unsubscribe anytime. SecOpsPulse may include sponsored security tool recommendations.
Find the exact utility for active incident containment, detection engineering, AWS cloud audits, or compliance SLAs.
Author and lint Sigma YAML rules, map MITRE ATT&CK techniques, and auto-translate into Splunk SPL, Microsoft Sentinel KQL, and Elastic queries.
Parse, defang, and classify malicious IPs, domains, and URLs from threat text. Export instantly to STIX 2.1, Snort/Suricata, iptables, and Zeek.
Audit AWS IAM JSON documents for 20+ dangerous privilege escalation paths (PassRole, CreateAccessKey) and auto-harden to least privilege.
Compute mandatory CVE remediation deadlines across CISA BOD 22-01, SOC 2, and PCI-DSS with 1-click calendar (.ics) and Jira exports.
Establish P1-P4 escalation thresholds and instantly draft Slack war room announcements, SEC Form 8-K disclosures, and customer status briefs.
Lint CI/CD YAML for multiline script injection, unpinned action tags, and pull_request_target checkout vulnerabilities with 1-click auto-hardening.
Audit API endpoints against BOLA, broken authentication, and SSRF. Export runnable curl penetration testing commands and posture scorecards.
Systematically map threats using STRIDE across architectural components and score risk with quantitative DREAD calculations.
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. This is a critical threat mapped to CVE-2026-48356, CVE-2026-111497; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
OS Command Injection Vulnerability in HiRDB. This is a critical threat mapped to CVE-2026-82119; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Stack-based Buffer Overflow Vulnerability in HiRDB. This is a critical threat mapped to CVE-2026-82118; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Authentication Bypass by Spoofing Vulnerability in HiRDB. This is a critical threat mapped to CVE-2026-82117; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Missing Authentication for Critical Function Vulnerability in HiRDB. This is a critical threat mapped to CVE-2026-82116; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This is a critical threat mapped to CVE-2026-76939; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This is a critical threat mapped to CVE-2026-76938; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This is a critical threat mapped to CVE-2026-76937; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This is a critical threat mapped to CVE-2026-76936; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This is a critical threat mapped to CVE-2026-76935; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This is a critical threat mapped to CVE-2026-76934; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This is a critical threat mapped to CVE-2026-76933; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This is a critical threat mapped to CVE-2026-76932; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. This is a low threat mapped to CVE-2026-117494; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Stored cross-site scripting (XSS) in BloX widgets. This is a low threat mapped to CVE-2026-117493; security leaders should validate exposure, prioritize patching, and verify compensating controls.
The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. This is a low threat mapped to CVE-2026-107147; security leaders should validate exposure, prioritize patching, and verify compensating controls.
The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. This is a critical threat mapped to CVE-2026-107146; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. This is a low threat mapped to CVE-2026-107145; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPosts() reads the order parameter and invoke... This is a low threat mapped to CVE-2026-102789; security leaders should validate exposure, prioritize patching, and verify compensati...
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the value of the sort-by URL parameter is retrieved using a stri... This is a low threat mapped to CVE-2026-102788; security leaders should validate exposure, prioritize patching, and verify compensati...
Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5 This is a low threat mapped to CVE-2026-102787; security leaders should validate exposure, prioritize patching, and verify compensating controls.
The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qode_membership_ch... This is a critical threat mapped to CVE-2026-92885; security leaders should validate exposure, prioritize patching, and verify compen...
Recommended Tool
This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC This is a medium threat mapped to CVE-2026-65213; security leaders should validate exposure, prioritize patching, and verify compensating controls.
This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system. This is a high threat mapped to CVE-2026-65211; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges. This is a high threat mapped to CVE-2026-65220; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands. This is a high threat mapped to CVE-2026-65219; security leaders should validate exposure, prioritize patching, and...
Recommended Tool
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role. This is a medium threat mapped to CVE-2026-65210; security leaders should validate exposure, prioritize patching, and verify compensating controls.
The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. This is a low threat mapped to CVE-2026-18451; security leaders should validate exposure, prioritize patching, and verify compensating controls.
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. This is a critical threat mapped to CVE-2026-18450; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. This is a high threat mapped to CVE-2026-18449; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
An OS command injection vulnerability exists because of insufficient input filtering. This is a high threat mapped to CVE-2026-16521; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
An OS command injection vulnerability exists in OnCell G3150A-LTE Series. This is a high threat mapped to CVE-2026-111461; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. This is a high threat mapped to CVE-2026-111460; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). This is a high threat mapped to CVE-2026-111459; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forget_password_link' parameter in all versions up to, and including, 4.61.0 due to in... This is a medium threat mapped to CVE-2026-10511; security leaders should validate exposure, prioritize patching, and verify compensa...
An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. This is a high threat mapped to CVE-2026-107472; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation. This is a medium threat mapped to CVE-2026-101034; security leaders should validate exposure, prioritize patching,...
The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and including, 6.2.5 via deserialization of untrusted input thr... This is a high threat mapped to CVE-2026-75891; security leaders should validate exposure, prioritize patching, and verify compensati...
Recommended Tool
### Summary `qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array without encoding it, even though keys are encoded by default. A key that contains `&` (or... This is a low threat mapped to CVE-2026-110910; security leaders should validate exposure, prioritize patching, and verify compensatin...
A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of... This is a high threat mapped to CVE-2026-106174; security leaders should validate exposure, prioritize patching, and verify compensat...
Recommended Tool
Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an appli...
The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenticity of incoming payment notifications and, until the gateway is configured, aut... This is a medium threat mapped to CVE-2026-103359; security leaders should validate exposure, prioritize patching, and verify compens...
The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the authenticity of its payment webhook, validating the request signature against a key t... This is a low threat mapped to CVE-2026-103325; security leaders should validate exposure, prioritize patching, and verify compensati...
Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-read endpoint with a hard-coded unprefixed path. In deployments configured with UR... This is a medium threat mapped to CVE-2026-117472; security leaders should validate exposure, prioritize patching, and verify compens...
Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo device and passed it to the Duo client without an allowlist or ex... This is a medium threat mapped to CVE-2026-117471; security leaders should validate exposure, prioritize patching, and verify compens...
Psono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAuthn challenge after assertion verification. An unauthenticated remote attacker who possessed the use... This is a medium threat mapped to CVE-2026-117470; security leaders should validate exposure, prioritize patching, and verify compens...
Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with... This is a medium threat mapped to CVE-2026-117469; security leaders should validate exposure, prioritize patching, and verify compensa...
Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a device code. An authenticated remote attacker holding a res... This is a medium threat mapped to CVE-2026-117468; security leaders should validate exposure, prioritize patching, and verify compens...
The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title in all versions up to, and in... This is a high threat mapped to CVE-2026-111820; security leaders should validate exposure, prioritize patching, and verify compensat...
Recommended Tool
The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying on a validation secre... This is a critical threat mapped to CVE-2026-103332; security leaders should validate exposure, prioritize patching, and verify compe...
Recommended Tool