CVE Feed
- CVE-2026-97858 – Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes October 16, 2026
- CVE-2026-97470 – Tourfic <= 3.0.1 – Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer Role October 16, 2026
- CVE-2026-90821 – Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller October 16, 2026
- CVE-2026-18516 – Improper Encoding or Escaping of Output in Crafty Controller October 16, 2026
- CVE-2026-111413 – WordPress aThemeArt theme Helper plugin <= 1.0.8 – Cross Site Request Forgery (CSRF) vulnerability October 16, 2026
- CVE-2026-111593 – Rejected reason: This CVE ID was reserved for a re October 16, 2026
- CVE-2026-110287 – Devolutions Server Improper Access Control October 16, 2026
- CVE-2026-110804 – Devolutions Server Improper Access Control of JIT Elevation Settings October 16, 2026
- CVE-2026-110805 – Devolutions Server PingOne Server-Side Request Forgery October 16, 2026
- CVE-2026-110806 – Devolutions Server Add-on Properties Incorrect Authorization October 16, 2026
- CVE-2026-107617 – Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials October 16, 2026
- CVE-2026-105664 – Guangzhou Juan IoT Technology EseeCloud Observable Response Discrepancy October 16, 2026
- CVE-2026-63619 – Apache Kylin: Missing authorization and path-confinement on system meta dump October 16, 2026
- CVE-2026-64610 – Apache Kylin: Redis unsafe Java deserialization October 16, 2026
- CVE-2026-64959 – Apache Kylin: Missing authentication on certain cache API endpoints October 16, 2026
- CVE-2026-63618 – Apache Kylin: Low-Privilege Config Exposure October 16, 2026
- CVE-2026-68571 – Apache Kylin: JDBC URL Whitelist Verification Bypass October 16, 2026
- CVE-2026-111409 – WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 – Broken Access Control vulnerability October 16, 2026
- CVE-2026-111555 – Luksmeta: missing slot-range validation permits out-of-gap device i/o October 16, 2026
Microsoft Security
- The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime October 14, 2026Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling tools and infrastructure for large-scale phishing. In collaboration with law enforcement agencies and other partners worldwide, Microsoft’s Digital Crimes Unit (DCU) facilitated a disruption of the ecosystem. The post The hidden […]Microsoft Threat Intelligence and Microsoft Digital Crimes Unit
- Post-quantum authentication: Why organizations should start testing certificate ecosystems now October 8, 2026Prepare for post-quantum authentication by testing certificate ecosystems now. Learn how Microsoft’s PQC TLS Pilot Program helps advance future readiness. The post Post-quantum authentication: Why organizations should start testing certificate ecosystems now appeared first on Microsoft Security Blog.Microsoft Security Research, Lora Randolph, Tahmina Ahmad and Karina Sirota Goodley
- 3 lessons from frontier AI vulnerability research October 7, 2026Read how How Microsoft Security's FORGE Lab is scaling vulnerability research from Windows to the Linux kernel. The post 3 lessons from frontier AI vulnerability research appeared first on Microsoft Security Blog.Taesoo Kim
- CISO perspectives on managing vulnerability risks in the age of AI October 6, 2026Learn how CISOs can mitigate cybersecurity risks and increase resilience in the age of AI-powered vulnerability management. The post CISO perspectives on managing vulnerability risks in the age of AI appeared first on Microsoft Security Blog.Freddy Dezeure and Sesha Mani
- Insights from the 2026 Microsoft Digital Defense Report October 1, 2026Read highlights from the 2026 Microsoft Digital Defense Report, which reflects a security environment that continues to grow more interconnected. The post Insights from the 2026 Microsoft Digital Defense Report appeared first on Microsoft Security Blog.Terrell Cox



