Announcements

WSO2 Multiple Products: WSO2 Multiple Products Path Traversal Vulnerability

  • 27th September 2026

WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.

Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-5430

Continue reading

WordPress Core: WordPress Core Remote File Inclusion Vulnerability

  • 27th September 2026
WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.Source: CISA Known Exploited Vulnerabilities Catalog — ...
Continue reading

Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability

  • 27th September 2026

Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.

Source: CISA Known Exploited Vulnerabilities Catalog — https://nvd.nist.gov/vuln/detail/CVE-2026-65660

Continue reading

MikroTik RouterOS: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

  • 27th September 2026
Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.Source: CISA Known Exploited Vulnerabilities Catalog — ...
Continue reading