@thehackerwire.bsky.social🔴 CVE-2026-105207 - Critical (9.8)
ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and exte...
https://www.thehackerwire.com/vulnerability/CVE-2026-105207/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-105215 - Critical (9.1)
ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login...
https://www.thehackerwire.com/vulnerability/CVE-2026-105215/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-105213 - High (8.2)
ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authent...
https://www.thehackerwire.com/vulnerability/CVE-2026-105213/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-105212 - High (7.5)
ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted L...
https://www.thehackerwire.com/vulnerability/CVE-2026-105212/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-105211 - High (8.1)
ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows una...
https://www.thehackerwire.com/vulnerability/CVE-2026-105211/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-105210 - High (8.2)
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hos...
https://www.thehackerwire.com/vulnerability/CVE-2026-105210/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-105209 - Critical (9.6)
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability:...
https://www.thehackerwire.com/vulnerability/CVE-2026-105209/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-105123 - High (8.8)
W (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that allow...
https://www.thehackerwire.com/vulnerability/CVE-2026-105123/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-103628 - Critical (9.6)
Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to...
https://www.thehackerwire.com/vulnerability/CVE-2026-103628/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-103626 - Critical (9.6)
Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allow...
https://www.thehackerwire.com/vulnerability/CVE-2026-103626/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-103625 - High (8.8)
Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute...
https://www.thehackerwire.com/vulnerability/CVE-2026-103625/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-103624 - High (8.3)
Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed ...
https://www.thehackerwire.com/vulnerability/CVE-2026-103624/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-103622 - High (8.8)
Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execut...
https://www.thehackerwire.com/vulnerability/CVE-2026-103622/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-51916 - High (7.5)
TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_...
https://www.thehackerwire.com/vulnerability/CVE-2026-51916/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-51907 - High (8.1)
In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal ...
https://www.thehackerwire.com/vulnerability/CVE-2026-51907/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-67989 - High (7.5)
crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regu...
https://www.thehackerwire.com/vulnerability/CVE-2026-67989/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-103956 - Critical (10)
Missing authentication for critical function in the authentication dependency in Loom for AWS bef...
https://www.thehackerwire.com/vulnerability/CVE-2026-103956/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-103958 - High (7.6)
Server-side request forgery in the tool server and remote agent connection handling in Loom for A...
https://www.thehackerwire.com/vulnerability/CVE-2026-103958/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-96940 - High (8.8)
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privi...
https://www.thehackerwire.com/vulnerability/CVE-2026-96940/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-104019 - Critical (9)
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distributi...
https://www.thehackerwire.com/vulnerability/CVE-2026-104019/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
