@thehackerwire.bsky.social🟠 CVE-2026-96662 - High (7.5)
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for Wor...
https://www.thehackerwire.com/vulnerability/CVE-2026-96662/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-91136 - High (7.5)
The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and in...
https://www.thehackerwire.com/vulnerability/CVE-2026-91136/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-108161 - High (7.5)
FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::downlo...
https://www.thehackerwire.com/vulnerability/CVE-2026-108161/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-105885 - High (8.8)
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object ...
https://www.thehackerwire.com/vulnerability/CVE-2026-105885/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-108549 - High (8.1)
cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adap...
https://www.thehackerwire.com/vulnerability/CVE-2026-108549/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-108546 - High (7.5)
Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handle...
https://www.thehackerwire.com/vulnerability/CVE-2026-108546/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-108553 - High (7.5)
OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows com...
https://www.thehackerwire.com/vulnerability/CVE-2026-108553/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-108551 - Critical (9.8)
openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows att...
https://www.thehackerwire.com/vulnerability/CVE-2026-108551/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-108550 - High (8.8)
SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService a...
https://www.thehackerwire.com/vulnerability/CVE-2026-108550/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-104398 - Critical (9.8)
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for Wo...
https://www.thehackerwire.com/vulnerability/CVE-2026-104398/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-103071 - High (7.5)
Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You P...
https://www.thehackerwire.com/vulnerability/CVE-2026-103071/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-106609 - High (7.5)
Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Explo...
https://www.thehackerwire.com/vulnerability/CVE-2026-106609/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🔴 CVE-2026-105889 - Critical (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...
https://www.thehackerwire.com/vulnerability/CVE-2026-105889/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@webrecordmedia.bsky.socialHaftalık Güvenlik Zafiyeti Gündemi #7
@vpnlab.ioPublic exploit gives root on Linux machines running AnyDesk 8.0.2
A working exploit runs code as root through AnyDesk 8.0.2 on port 7070 without a password. The June fix had no CVE. How to check and update.
@techupscale.comVulnerability Watch, October 10, 2026: 14 critical CVEs and 50 new vendor and CERT advisories
14 critical CVEs · 50 advisories · NIST NVD, CERTs & vendors
@theperimetersite.bsky.socialIt's noon on Saturday, October 10, and if you happen to be a US federal employee handling infrastructure, you're likely feeling a very specific kind of dread.
@hapsis.bsky.socialMicrosoft Patches Exploited Entra ID Vulnerability
@securityonline.bsky.socialDiscover the latest JetBrains software vulnerabilities, including TeamCity RCE bugs and Exposed SQLi flaws. Apply security patches immediately.
#JetBrains #Vulnerability #TeamCity #CyberSecurity #CVE2026108474
@theperimetersite.bsky.socialThe gap between a patch being released and a server being popped has shrunk to a window so small you can't even fit a morning coffee in it.