ThemeREX Gutentype users: CRITICAL CVE-2026-62046 (≤2.1.12) allows object injection via deserialization. Patch status unconfirmed — check advisories, update ASAP. https://radar.offseq.com/threat/cve-2026-62046-deserialization-of-untrusted-data-in-themerex-group-gutentype-f4d0a8ac3919ab35 #OffSeq ...

ThemeREX Booklovers plugin (<=2.13.0) hit by CRITICAL object injection flaw (CVE-2026-62045, CVSS 9.8). Review your installs & restrict exposure until patched. https://radar.offseq.com/threat/cve-2026-62045-deserialization-of-untrusted-data-in-themerex-group-booklovers-71a61b206a138f37 #OffSeq #C...

Privasys ra-tls-clients <0.5.0 hit by CRITICAL origin validation bug (CVE-2026-108269, CVSS 9.1) — attackers can relay genuine quotes. Upgrade to 0.5.0+ now! https://radar.offseq.com/threat/cve-2026-108269-cwe-346-origin-validation-error-in-privasys-ra-tls-clients-1e6de81a7e6f2eb8 #OffSeq #CVE202...

JetBrains Exposed <1.5.1 hit by CRITICAL SQL injection (CVSS 9.8). Attackers can run arbitrary SQL — upgrade to 1.5.1+ ASAP to protect your database. https://radar.offseq.com/threat/cve-2026-108474-cwe-89-in-jetbrains-exposed-73385fdc0142aed6 #OffSeq #JetBrains #Vuln

PX-lab Zombify ≤1.7.7 has a CRITICAL flaw (CVE-2026-94503) enabling web shell upload and full system compromise. No patch — restrict upload features now. https://radar.offseq.com/threat/cve-2026-94503-unrestricted-upload-of-file-with-dangerous-type-in-px-lab-zombify-8e6fe0b08d444b23 #OffSeq #CVE2...

CRITICAL RCE vulnerability targets Citrix NetScaler ADC & Gateway. Immediate patching is a must to block remote code execution. Check Citrix advisories for guidance. https://radar.offseq.com/threat/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately-9fd45a98dc5afb78 #OffSeq #Citrix #N...

Apple iCloud CRITICAL vulnerability disclosed. Apple says no security risk; details & PoC coming soon. No patch, no exploits reported. Monitor for updates. https://radar.offseq.com/threat/apple-icloud-critical-vulnerability-full-technical-details-coming-soon-4e7a26fe66456323 #OffSeq #Apple #iCloud

CVE-2026-88131: Microsoft Dataverse deserialization bug (CRITICAL, CVSS 9.8) enables unauthenticated RCE. Patch immediately using Microsoft’s fix: https://radar.offseq.com/threat/cve-2026-88131-cwe-502-deserialization-of-untrusted-data-in-microsoft-microsoft-dataverse-eba5097c3e4671bb #OffSeq #Mi...

Infoblox NIOS 9.0.x – 9.1.0 hit by CRITICAL CVE-2026-107510. High-priv users can escalate via argument injection. Limit admin access & watch for patches. https://radar.offseq.com/threat/cve-2026-107510-vulnerability-in-infoblox-nios-dd277637e9e73e9d #OffSeq #Vulnerability

Chrome 155 addresses 247 vulnerabilities, including 4 CRITICAL use-after-free flaws (CVE-2026-106382, - 106197, - 106358, - 106347). Update Chrome now on Windows, macOS & Linux for protection. https://radar.offseq.com/threat/chrome-155-update-patches-247-vulnerabilities-28750e8d96fdecb9 #OffSeq #...

25 Android vulnerabilities patched in Oct 2026, incl. 7 CRITICAL — System bug allows local privilege escalation without user action. Update devices now for protection. https://radar.offseq.com/threat/androids-october-2026-updates-patch-25-vulnerabilities-6aec37e2cd84fef5 #OffSeq #Android #Security

CRITICAL code injection in smarty-php Smarty (CVE-2026-82531) lets attackers run PHP code remotely. Update to 4.5.8/5.8.5 now to stay protected. https://radar.offseq.com/threat/cve-2026-82531-improper-control-of-generation-of-code-code-injection-in-smarty-php-smarty-eb57bcca29bb7350 #OffSeq #CVE ...

TOTOLINK X6000R (9.4.0cu.652_B20230116) faces CRITICAL OS command injection (CVE-2026-105484). Remote attackers can fully compromise devices. Restrict access & monitor now. https://radar.offseq.com/threat/cve-2026-105484-os-command-injection-in-totolink-x6000r-ffaed0dcf0c90a02 #OffSeq #CVE #IoTSe...

Totolink A3002MU faces a CRITICAL stack overflow (CVE-2026-105285, CVSS 10). Remote RCE possible — public exploit exists. Restrict admin access & monitor until a patch is out. https://radar.offseq.com/threat/cve-2026-105285-stack-based-buffer-overflow-in-totolink-a3002mu-7f5ef0e4ed321bf1 #OffSeq ...

ShinyHunters leader arrested in Jordan after FBIJobs.gov hack. HIGH severity: 140+ orgs breached, $70M+ extorted. Work with law enforcement if affected. https://radar.offseq.com/threat/alleged-shinyhunters-leader-arrested-in-jordan-8f1de6762038dd06 #OffSeq #Cybercrime #ThreatIntel

CRITICAL: AhsayCBS <10.3.4 vulnerable to unauthenticated OS command injection (CVE-2026-105134). Remote exploit = full compromise. Upgrade to 10.3.4 now. https://radar.offseq.com/threat/a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-1032-cve-2026-105134-a9f0def985d0c48e #OffSeq #Vulnerability #Ahs...

CVE-2026-105221: gist RubyGem <6.1.0 has a CRITICAL SSL validation flaw. Attackers can steal GitHub credentials via intercepted API traffic. Upgrade to 6.1.0+ ASAP. https://radar.offseq.com/threat/cve-2026-105221-improper-certificate-validation-in-defunkt-gist-a4b1b7125f9195f8 #OffSeq #CVE2026105...

LaraDashboard <1.4.8 has a HIGH severity flaw: settings.view users can access sensitive secrets via API. Patch to 1.4.8+ now. https://radar.offseq.com/threat/laradashboard-before-148-contains-an-incorrect-authorization-vulnerability-that-allows-authenticated-16249131d2f6c23b #OffSeq #Vulnerabilit...

AhsayCBS 10.3.0 – 10.3.2 hit by CRITICAL OS command injection (CVE-2026-105134). Remote code execution possible — exploit is public. Upgrade to 10.3.4+ immediately. https://radar.offseq.com/threat/cve-2026-105134-os-command-injection-in-ahsay-ahsaycbs-a9df873cc55c0ce9 #OffSeq #Vulnerability #CVE

CRITICAL: SQL Injection in Unlimited Elements For Elementor (<2.0.21). Sites at risk — monitor for fixes & restrict access. https://radar.offseq.com/threat/cve-2026-103355-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-3504f0f6c5f88104 #OffSeq #WordPress #SQLI...