Security Advisories
150 advisoriesCVE-2026-72811
2026-08-19
Critical SQL Injection Vulnerability in SiYuan Allows Remote Code Execution (CVE-2026-72811)
A critical SQL injection vulnerability in SiYuan versions <= v3.7.2 allows attackers to execute arbitrary SQL commands via crafted input in backlink/mention searches, potentially leading to data compromise or system takeover.
Read full advisory →CVE-2026-19188
2026-08-19
Critical OS Command Injection Vulnerability in Haiwell IoT Cloud HMI Gateway (CVE-2026-19188)
A critical OS command injection vulnerability in Haiwell IoT Cloud HMI Gateway allows remote attackers to execute arbitrary commands with root privileges via the Net Check feature. Immediate patching is required to mitigate exploitation risks.
Read full advisory →CVE-2024-27253
2026-08-18
Critical Privilege Escalation in IBM DOORS Next (CVE-2024-27253)
A critical vulnerability in IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 allows authenticated users to bypass security restrictions and perform unauthorized actions. Immediate remediation is required to prevent potential exploitation.
Read full advisory →CVE-2026-73299
2026-08-18
Critical Code Execution Vulnerability in Prompty and Nunjucks Libraries (CVE-2026-73299)
A critical code execution vulnerability in prompty and nunjucks libraries allows attackers to execute arbitrary JavaScript via malicious .prompty templates. Fixed in versions 0.1.5 and 2.0.0-beta.5.
Read full advisory →CVE-2026-48362
2026-08-18
Critical OS Command Injection Vulnerability in ColdFusion (CVE-2026-48362)
A critical OS command injection vulnerability in ColdFusion allows remote attackers to execute arbitrary code without user interaction. Immediate patching is required to mitigate the high-risk exposure.
Read full advisory →CVE-2026-27302
2026-08-18
Critical Vulnerability in Adobe Campaign Products Allows Arbitrary Code Execution (CVE-2026-27302)
A critical vulnerability (CVSS 10.0) in Adobe Campaign Classic and Adobe Campaign allows arbitrary code execution due to incorrect authorization. Exploitation requires no user interaction. Immediate patching is strongly recommended.
Read full advisory →CVE-2026-71398
2026-08-18
Critical Vulnerability in Adobe Campaign Classic Allows Arbitrary Code Execution (CVE-2026-71398)
Adobe Campaign Classic contains a critical authorization flaw (CVE-2026-71398) enabling remote code execution without user interaction. Immediate patching is required for all affected deployments.
Read full advisory →CVE-2026-72898
2026-08-17
Critical SQL Injection Vulnerability in Metabase Allows Unauthorized Administrator Access (CVE-2026-72898)
A critical SQL injection vulnerability in Metabase enables remote, unauthenticated attackers to execute arbitrary database queries and gain administrator privileges. Immediate patching is required for all affected deployments.
Read full advisory →CVE-2026-65667
2026-08-17
Critical Privilege Escalation Vulnerability in Microsoft Teams (CVE-2026-65667)
A critical authorization flaw in Microsoft Teams allows remote attackers to escalate privileges. All platform users are affected. Immediate patching is required to mitigate severe risk.
Read full advisory →CVE-2026-56162
2026-08-17
Critical Privilege Escalation Vulnerability in Azure SQL Database (CVE-2026-56162)
A critical vulnerability in Azure SQL Database allows network-based attackers to bypass authentication and escalate privileges. With a CVSS score of 10.0, this flaw requires immediate mitigation for all affected deployments.
Read full advisory →CVE-2026-65553
2026-08-17
Critical RCE Vulnerability in WordPress Spider Analyser Plugin (CVE-2026-65553)
A critical unauthenticated remote code execution vulnerability (CVE-2026-65553) affects Spider Analyser WordPress plugin versions ≤2.1.3. Immediate patching is required to mitigate severe exploitation risks.
Read full advisory →CVE-2026-63508
2026-08-16
Critical Authentication Bypass in Microsoft Planetary Computer Pro (CVE-2026-63508)
A critical authentication bypass vulnerability in Microsoft Planetary Computer Pro allows remote attackers to escalate privileges. Immediate patching is required for all affected deployments.
Read full advisory →Get These Delivered to Your Inbox
Subscribe to receive advisories as soon as they are published — filtered to your environment.