Announcements

CVE-2026-78477 (matched: wordpress)

  • 25th August 2026
A security vulnerability has been found in the Jawn theme for WordPress, with all versions up to and including 1.4.2 affected. This flaw lets unauthenticated attackers (people who do not have any existing login credentials for your site) gain full administrator access to your WordPress admin area. That means an unauthorized person could take full ...
Continue reading

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

  • 25th August 2026
A security vulnerability has been identified in the Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in, a tool used by some websites to route traffic between their public web servers and backend application systems.The flaw stems from improper access controls for the tool, meaning it does not properly limit who can access the data it ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 25th August 2026
A security advisory focused on hardening Microsoft SharePoint has been published by MyCERT on 20 July 2026, following the identification of new attempts to exploit the platform. Microsoft SharePoint is a widely used tool for team collaboration, document storage, and internal team workflow management.These active exploitation attempts mean any user ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 25th August 2026
On July 22, 2026, cybersecurity authorities published an advisory for a security vulnerability affecting Microsoft Active Directory Federation Services (AD FS), a Microsoft tool used to manage user logins and control access to digital services like websites, apps, and internal company tools. The flaw is classified as insufficient granularity of ...
Continue reading