Announcements

Progress LoadMaster: Progress LoadMaster Command Injection Vulnerability

  • 10th August 2026
A command injection vulnerability has been identified in Progress LoadMaster. This flaw allows unauthenticated attackers, meaning anyone without a valid login for the system, to run any arbitrary commands they want directly on the LoadMaster appliance. The vulnerability exists because the system does not properly filter unsanitized input sent to ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 10th August 2026
On July 20, 2026, cybersecurity agency MyCERT released a security advisory focused on hardening Microsoft SharePoint, following the discovery of new active exploitation methods for the platform.SharePoint is a widely used tool that many organizations rely on to store internal files, collaborate on projects, and share business content. When new ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 10th August 2026
A security advisory was published on July 22, 2026, for a vulnerability found in Microsoft Active Directory Federation Services (AD FS), a common tool used to manage user logins and access permissions across systems.The flaw is described as insufficient granularity of access control, meaning the service’s access rules are not precise enough to ...
Continue reading

MA-1473.072026: MyCERT Advisory - Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

  • 10th August 2026
A security advisory was published on July 22, 2026, for a vulnerability found in Microsoft SharePoint Server, a common platform businesses use to store, share, and collaborate on work documents and internal data. The flaw is classified as a missing authentication issue for a critical server function. This means the function that should require ...
Continue reading