Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.
Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-71362
WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.
Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-5430
(No further detail was provided by the source for this advisory - see the link below for the full notice.)
Source: PHP.net — https://www.php.net/index.php#2026-09-24-2
(No further detail was provided by the source for this advisory - see the link below for the full notice.)
Source: PHP.net — https://www.php.net/index.php#2026-09-24-3
