[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2026-110457":3,"landing-trending":41,"landing-articles":126},{"id":4,"cve_id":5,"summary":6,"published":7,"cvss_data":8,"is_remote":18,"cwes":19,"cpes":21,"technologies":22,"references":23,"score":25,"epss_score":26,"epss_percentile":27,"is_kev":28,"cisa_kev_date_added":29,"cisa_kev_due_date":29,"cisa_ssvc":30,"exploits":40},403953,"CVE-2026-110457","A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device.","2026-10-14T06:17:00Z",{"cvss_v3.1":9},{"scope":10,"version":11,"baseScore":12,"attackVector":13,"baseSeverity":14,"vectorString":15,"integrityImpact":16,"userInteraction":16,"attackComplexity":17,"availabilityImpact":16,"privilegesRequired":16,"confidentialityImpact":14},"UNCHANGED","3.1",3.7,"NETWORK","LOW","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","NONE","HIGH",true,[20],"CWE-22",[],[],[24],"https:\u002F\u002Fcommunity.ui.com\u002Freleases\u002FSecurity-Advisory-Bulletin-070-070\u002Fe7ffc9fa-9129-4a90-b5e3-d597c5ee7a73",0.39,0.00267,0.17551,false,null,{"timestamp":31,"automatable":32,"tech_impact":33,"exploitation":34,"cisa_decision":35,"cisa_remediation_timeline":39},"2026-10-14T14:24:13.481558Z","no","partial","none",{"vector":36,"decision":37,"priority":38},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-14T17:31:19.514729\u002F","track_star","medium","60D",[],{"count":42,"next":43,"previous":29,"results":44},234,"http:\u002F\u002Fweb:8606\u002Fapi\u002Ftrending_attacks\u002F?page=2&sorted_by=-published_at",[45,55,63,69,77,86,94,102,111,118],{"id":42,"title":46,"summary":47,"published_at":48,"severity":49,"vendor":50,"products":51},"Multiple Vulnerabilities in Adobe Commerce \u002F B2B  & Magento Open Source - Unauthenticated Arbitrary Code Execution (RCE) & Authorization Bypass in the B2B Module","Adobe Commerce (formerly Magento Commerce) and its open-source edition, Magento Open Source, are widely used e-commerce platforms for building and operating online stores. The B2B module adds business-to-business sales capabilities such as company accounts and custom catalogs.\r\n\r\nCVE-2026-103849\r\n\r\nAn unauthenticated remote code execution vulnerability classified as CWE-1336 (Improper Neutralization of Special Elements). It allows arbitrary code execution on an affected installation without any authentication, user interaction, or privileges, and is rated 10.0 (critical) by Adobe's CNA. It was published in Adobe Security Bulletin APSB26-153 on October 13, 2026, which provides security fixes for Adobe Commerce \u002F Magento Open Source versions 2.4.4 through 2.4.9 (October 2026 isolated security fixes) and for the 2.4.10 line. Adobe has not published technical details; no exploitation in the wild was known as of October 13, 2026.\r\n\r\nCVE-2026-92909\r\n\r\nAn Incorrect Authorization vulnerability (CWE-863) affecting the Adobe Commerce B2B module (versions 1.3.3 through 1.5.3 and earlier 2026 builds). Exploitation does not require authentication or user interaction and could result in arbitrary code execution in the context of the current user; it is rated 9.8 (critical) by the Adobe CNA. Stores without the B2B module are primarily exposed through CVE-2026-103849 instead. The vulnerability is fixed by the October 2026 update released with APSB26-153; no exploitation is known as of the publication date. Adobe additionally recommends applying the separate CVE-2026-75650 hotfix alongside the October isolated patch.","2026-10-14T12:25:07.011797Z",4,"Adobe",[52,53,54],"Adobe Commerce","Adobe Commerce B2B","Magento Open Source",{"id":56,"title":57,"summary":58,"published_at":59,"severity":49,"vendor":60,"products":61},233,"Ivanti Xtraction - Authenticated SSRF Leaking EPMM Connector Credentials","Ivanti Xtraction is a web-based, no-code IT reporting and BI platform that consolidates data from multiple tools via pre-built connectors into real-time dashboards (Ivanti).\r\n\r\nCVE-2026-106042\r\n\r\nAn External Control of File Name or Path (CWE-73) vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and capture the EPMM (Endpoint Manager Mobile) connector credentials transmitted by the application. Ivanti rates it 9.9 (Critical). Ivanti disclosed it in its October 13, 2026 advisory and reported no known exploitation at publication; administrators should upgrade to Xtraction 2026.4 (available via the Ivanti ILS portal) and rotate any EPMM connector credentials used with the application. (Strix CVE record, SecurityOnline, Dark Web Informer)","2026-10-14T08:03:26.423130Z","Ivanti",[62],"Ivanti Xtraction",{"id":64,"title":65,"summary":66,"published_at":59,"severity":49,"vendor":60,"products":67},232,"Ivanti Neurons Patch for Intune & Xtraction - Exposed Endpoint Leaks Auth Secrets & Authenticated SSRF Leaking EPMM Connector Credentials","Ivanti Neurons Patch for Intune is a cloud service that extends Microsoft Intune with third-party application patching, publishing pre-tested updates directly into Intune with no extra infrastructure (Ivanti). Ivanti Xtraction is a web-based, no-code IT reporting and BI platform that consolidates data from multiple tools via pre-built connectors into real-time dashboards (Ivanti).\r\n\r\nCVE-2026-106042\r\n\r\nAn External Control of File Name or Path (CWE-73) vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and capture the EPMM (Endpoint Manager Mobile) connector credentials transmitted by the application. Ivanti rates it 9.9 (Critical). Ivanti disclosed it in its October 13, 2026 advisory and reported no known exploitation at publication; administrators should upgrade to Xtraction 2026.4 (available via the Ivanti ILS portal) and rotate any EPMM connector credentials used with the application. (Strix CVE record, SecurityOnline, Dark Web Informer)\r\n\r\nCVE-2026-109412\r\n\r\nAn exposed dangerous endpoint (CWE-749) in Ivanti Neurons Patch for Intune, a cloud service, allows a remote authenticated attacker to leak sensitive authentication information, including credentials tied to the Microsoft Entra ID application registration used for Intune publication. Ivanti rates it 9.9 (Critical) with vector CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H. It was disclosed in Ivanti's October 2026 security update; as a cloud service the fix is applied by Ivanti, and the vendor recommends rotating the client secret associated with the Microsoft Entra ID application registration used for Intune publication. No exploitation was reported at disclosure. (Strix CVE record, Dark Web Informer, CVE ThreatInt record)",[68,62],"Ivanti Neurons Patch for Intune",{"id":70,"title":71,"summary":72,"published_at":73,"severity":49,"vendor":74,"products":75},231,"Ivanti Connect Secure — Unauthenticated Auth Bypass to RCE","An authentication bypass by spoofing in Ivanti Connect Secure before 25.1.3.0 (from 22.8 onward, except 22.8R2.5) lets a remote, unauthenticated attacker run arbitrary commands on the appliance, and it is being actively exploited.","2026-10-13T16:04:00.158042Z","ivanti",[76],"connect_secure",{"id":78,"title":79,"summary":80,"published_at":81,"severity":49,"vendor":82,"products":83},230,"Multiple Vulnerabilities in SAP Cloud SDK for Python & NetWeaver Application Server - OAuth2 SSRF Credential Exfiltration & Unauthenticated Rogue Component Registration","The SAP Cloud SDK for Python is a software development kit used to build extensions and applications on SAP Business Technology Platform (BTP), including multi-tenant applications that authenticate against SAP using OAuth2 client credentials. The SAP NetWeaver Application Server is the core runtime for ABAP-based SAP systems such as SAP S\u002F4HANA; its Message Server is a central component that handles load balancing and internal communication between application servers in a cluster.\r\n\r\nCVE-2026-58240\r\n\r\nNicknamed \"S4GET\" by the Onapsis Research Labs, is a critical pre-authentication vulnerability in the SAP NetWeaver Message Server (CVSS 9.8). The Message Server does not sufficiently validate the authenticity of internal application server components during registration, so an unauthenticated attacker with network access can register an unauthorized component and interfere with internal SAP traffic. The flaw affects kernel versions 9.16, 9.18, 9.19, and 9.20 — meaning every S\u002F4HANA 2025 system and earlier releases moved to those kernels, as well as S\u002F4HANA Cloud Private Edition. Onapsis states that successful exploitation yields full remote code execution as the \u003Csid>adm OS-level user on every application server in the cluster, with high impact on confidentiality, integrity, and availability. Notably, the flaw is triggered through the same public port that SAP GUI clients use to connect, so it cannot be firewalled away without breaking end-user logon. It was patched on SAP's September 2026 Patch Day (September 8, 2026) via SAP Security Note 3759472, which should be applied immediately. No active in-the-wild exploitation had been observed as of disclosure.\r\n\r\nCVE-2026-89111\r\n\r\nCritical OAuth2 server-side request forgery (SSRF) vulnerability in the SAP Cloud SDK for Python, affecting multi-tenant SAP BTP applications and rated 10.0\u002F10 by SAP's advisory (GHSA-4mv3-jxxm-9cx2, published October 13, 2026). An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing the application's client credentials to be exfiltrated — potentially allowing the attacker to impersonate the application against SAP BTP services. All versions of the sap-cloud-sdk pip package below 0.45.2 are affected; the fix is to upgrade to version 0.45.2 or later. As an interim measure, allowlisting valid tenant subdomains can mitigate the risk on unpatched deployments. No public proof-of-concept exploit is known, and the issue is not listed in the CISA Known Exploited Vulnerabilities catalog.","2026-10-13T15:03:22.177405Z","SAP",[84,85],"SAP Cloud SDK for Python","SAP NetWeaver Application Server",{"id":87,"title":88,"summary":89,"published_at":90,"severity":49,"vendor":91,"products":92},229,"Danfoss AK-SM 8xxA Series - Authentication Bypass with Privileged Access","The Danfoss AK-SM 8xxA Series are industrial refrigeration system managers used in commercial refrigeration installations such as supermarkets and cold chains, providing monitoring, alarm, and control of refrigeration and HVAC equipment, with a web-based interface for remote access.\r\n\r\nCVE-2025-41450\r\n\r\nAn improper authentication vulnerability (CWE-305, authentication bypass) exists in the Danfoss AK-SM 8xxA Series, allowing a remote attacker to gain privileged access without valid credentials. Per Danfoss's advisory, exploitation lets an attacker generate a web report that discloses internal IP addresses, usernames, and store names. The issue affects all AK-SM 8xxA Series devices running firmware prior to version 4.2; the flaw is fixed in release R4.2, published by Danfoss on 24 March 2025, so users should update to version 4.2 or later. The CVE was published on 8 May 2025 with Danfoss acting as the CVE Numbering Authority. Public reporting indicates attackers chained CVE-2025-41450 with CVE-2025-41451 to compromise Danfoss refrigeration controllers in roughly 350 French supermarkets (notably Intermarché and Coopérative U stores), triggering synchronized defrost cycles and destroying food inventory; however, none of the related Danfoss CVEs were listed in CISA's Known Exploited Vulnerabilities catalog as of October 2026.","2026-10-13T12:22:42.479095Z","Danfoss",[93],"AK-SM",{"id":95,"title":96,"summary":97,"published_at":98,"severity":49,"vendor":99,"products":100},228,"PeerTube - Stored XSS via federated SVG storyboard","GHSA-jwcf-xj6w-xqm5\r\n\r\nA remote, unauthenticated PeerTube instance can federate a video whose storyboard declares an image\u002Fpng content type but actually points to a .svg URL. The federation image pipeline skips the SVG sanitizer used by the standard upload path, allowing a raw \u003Cscript> to be embedded in the SVG.\r\nUser interaction is required: the victim must click on a storyboard link (not displayed in the official PeerTube client) for the script to execute.","2026-10-13T07:47:22.943333Z","",[101],"PeerTube",{"id":103,"title":104,"summary":105,"published_at":106,"severity":49,"vendor":107,"products":108},227,"GitLab CE\u002FEE - 2FA Bypass via Forged WebAuthn Device Response & Unauthenticated RCE","CVE-2026-0723\r\n\r\nAn unchecked return value (CWE-252) flaw in GitLab CE\u002FEE could have allowed an attacker with existing knowledge of a victim's credential ID to bypass two-factor authentication by submitting forged device responses. It affects all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2, and is rated high severity (CVSS 7.4, vector CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N, source: GitLab CNA record at CVE.org). It was reported through GitLab's HackerOne bug bounty program and fixed in the January 21, 2026 patch release; users should upgrade to 18.6.4, 18.7.2, 18.8.2 or above. (CVE.org record, BleepingComputer)\r\n\r\nCVE-2026-97229\r\n\r\nA maximum-severity (CVSS 10.0) integer overflow in GitLab's CI\u002FCD Regular Expression Compiler — the component that parses, compiles, and evaluates regular expressions in projects' pipeline configuration files — allows an unauthenticated remote attacker to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI\u002FCD configuration. It affects GitLab CE\u002FEE versions 19.2 before 19.2.8, 19.3 before 19.3.4, and 19.4 before 19.4.2, and was reported through the HackerOne bug bounty program by researcher joaxcar. GitLab.com and Dedicated instances are already patched; self-managed instances should upgrade immediately to 19.4.2, 19.3.4, or 19.2.8 (released October 8–12, 2026), and restrict external access to GitLab management interfaces if patching cannot be done within hours. (GitLab Docs, BleepingComputer, securityonline.info, TechJack Solutions)","2026-10-12T13:40:16.623097Z","GitLab",[109,110],"Enterprise Edition (EE)","GitLab Community Edition (CE)",{"id":112,"title":113,"summary":114,"published_at":115,"severity":49,"vendor":116,"products":117},226,"WordPress Bricksforge Plugin - Unauthenticated Arbitrary File Upload to RCE","Bricksforge is a commercial WordPress plugin that extends the Bricks visual website builder with advanced features such as animations, advanced forms, and scrolling video sequences.\r\n\r\nCVE-2026-85097\r\n\r\nUnauthenticated arbitrary file upload vulnerability (CWE-434) affecting Bricksforge versions up to and including 3.1.8.9. The flaw stems from insufficient validation of the attacker-controlled url field inside the temporaryFileUploads parameter during form submission: while the plugin correctly validates MIME types at initial upload, it later trusts client-supplied file metadata. An unauthenticated attacker can obtain a valid nonce from the bricksforge_regenerate_nonce AJAX endpoint, upload a GIF\u002FPHP polyglot file that passes the MIME check, then submit a form whose server-side path points to the validated image while the url field ends in a .php extension — resulting in arbitrary PHP code execution (RCE) and full site takeover. Patchstack reports the flaw is under active exploitation in the wild (first detected October 7, 2026, via the \u002Fwp-json\u002Fbricksforge\u002Fv1\u002Fform_submit and admin-ajax.php endpoints), and rates it at the maximum CVSS score of 10.0 (The Hacker News, Strix, Threat Intelligence CVE DB). The issue was published on October 8, 2026, with the CNA being Wordfence; patched in version 3.1.8.10 (The Hacker News, PSIRT). Public PoC exploit code is circulating (Vulners). Remediation: update Bricksforge to 3.1.8.10 or later immediately; audit sites for uploaded PHP files in upload directories and rogue admin accounts.","2026-10-12T10:01:45.206151Z","Bricksforge",[116],{"id":119,"title":120,"summary":121,"published_at":122,"severity":49,"vendor":123,"products":124},225,"Ahsay AhsayCBS Replication Receiver - Unauthenticated OS Command Injection (RCE)","CVE-2026-105134\r\n\r\nHighly severe security flaw affecting the AhsayCBS backup software. It allows hackers to take complete control of a server from a distance without needing any usernames or passwords. Attackers exploit a weakness in the system to install malicious programs, such as hidden cryptocurrency miners that disguise themselves as legitimate Windows files to avoid detection. To fix this issue and secure the server, it is critical to update the software to version 10.3.4 or higher and block unknown internet access to the management page.","2026-10-12T08:26:26.589325Z","Ahsay",[125],"AhsayCBS",{"count":127,"next":128,"previous":29,"results":129},29,"http:\u002F\u002Fweb:8606\u002Fapi\u002Farticles\u002F?page=2&sorted_by=-published_at",[130,137,145,152,159,167,171,178,185,192],{"id":127,"title":131,"summary":132,"published_at":133,"type":134,"link":135,"image_url":136},"Manage External Security Across All Your Entities","Centralize the management of entities, users and external security resources while maintaining strict data isolation with Patrowl.","2026-09-15T00:00:00Z","security tips","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fmulti-entity-external-security-how-structure-governance-group-level","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F8b2c0cc5eb-1789551467\u002Fvisu_1_multi_tenancy_dark_1x.webp",{"id":138,"title":139,"summary":140,"published_at":141,"type":142,"link":143,"image_url":144},28,"Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34","Tax law, finance, legislation: Bruce Schneier shows how AI could hack human rule systems just as easily as it hacks software.","2026-09-14T00:00:00Z","hacks","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fbruce-schneier-def-con-34","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F5c616d9db4-1789462598\u002Fai-hacker.en.png",{"id":146,"title":147,"summary":148,"published_at":149,"type":134,"link":150,"image_url":151},27,"Exposure Management: definition, stakes, and how it works","Vulnerabilities, misconfigurations, poorly managed identities: understand what Exposure Management is and why it matters in 2026.","2026-09-10T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fdefinition-exposure-management","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F06170638a9-1789050834\u002Fexposure.management.definition.en.png",{"id":153,"title":154,"summary":155,"published_at":156,"type":142,"link":157,"image_url":158},26,"DGFiP Cyberattack 2026: Inside the Attacker","Two distinct attacks hit France","2026-08-17T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fdgfip-cyberattack-2026-inside-attacker-mind","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002Fdc38d33696-1787055371\u002Fdgfip-2026.png",{"id":160,"title":161,"summary":162,"published_at":163,"type":164,"link":165,"image_url":166},25,"CVE-2026-64638: XSS2Shell, a WordPress Login Vulnerability","Pre-auth XSS on wp-login.php, patched August 6. What is actually exploitable, and how to read it in your Patrowl report.","2026-08-10T00:00:00Z","cve","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fxss2shell-critical-wordpress-login-vulnerability-2026","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F904e61748b-1786369212\u002Fxss2shell.png",{"id":168,"title":169,"summary":169,"published_at":163,"type":164,"link":170,"image_url":99},24,"CVE-2026-64638 : XSS2Shell, faille du login WordPress","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fcve-2026-64638-xss2shell-faille-login-wordpress",{"id":172,"title":173,"summary":174,"published_at":175,"type":164,"link":176,"image_url":177},23,"How Agentic AI Hunts Down CVEs Before Attackers Do","38 vulnerability sources monitored around the clock, pentester-validated proof of exploitability, an alert within hours. See how it works.","2026-08-05T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fproactive-threat-hunting-agentic-ai-cve","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F804988ce7b-1785930160\u002Fproactive-threat-hunting-how-agentic-ai-tracks-cves.png",{"id":179,"title":180,"summary":181,"published_at":182,"type":142,"link":183,"image_url":184},22,"AI Agent Incident: OpenAI HuggingFace — Risks and Lessons","An autonomous AI agent escaped its sandbox via a JFrog Artifactory zero-day, compromised HuggingFace via privilege escalation and stolen credentials. Reconstructed timeline and security lessons.","2026-07-31T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fai-agent-incident-openai-huggingface-risks","[Image URL from Kirby]",{"id":186,"title":187,"summary":188,"published_at":189,"type":134,"link":190,"image_url":191},21,"SaaS Under Watch: What Your SDLC Doesn","Your pipeline is green. Your real exposure may have changed without you knowing it. The complete guide for software vendors.","2026-07-29T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fsecuring-saas-application-software-vendor","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F20d6ec0cd0-1785331401\u002Fapplication-security.png",{"id":193,"title":194,"summary":195,"published_at":196,"type":164,"link":197,"image_url":198},18,"Wp2shell: WordPress Security Flaws","Deep dive into wp2shell vulnerabilities (CVE-2026-63030 & CVE-2026-60137) in WordPress 7.0.2. Detection guide and fixes to secure your sites.","2026-07-20T00:00:00Z","https:\u002F\u002Fpatrowl.io\u002Fen\u002Fblog\u002Fwp2shell-critical-wordpress-vulnerabilities","https:\u002F\u002Fpatrowl.io\u002Fmedia\u002Fsite\u002F97aa11e60b-1784565821\u002Fminiature-wp2shell.png"]