https://cyberdeltaforce.ai/news/3667fa29b62efb0b7f99 CyberDeltaForce en 2026-08-30T00:16:34.530Z CVE-2026-76197: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabilit https://cyberdeltaforce.ai/news/48d97fd333759232c2ce CyberDeltaForce en 2026-08-30T00:16:33.390Z CVE-2026-76193: Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the co https://cyberdeltaforce.ai/news/fa124326d25c908b6983 CyberDeltaForce en 2026-08-29T17:17:58.060Z CVE-2026-82460: Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly valid https://cyberdeltaforce.ai/news/6a5ec30b2c692d18a7bf CyberDeltaForce en 2026-08-29T20:16:31.840Z CVE-2026-15369: The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3 https://cyberdeltaforce.ai/news/b0143e8ca0646b2e6234 CyberDeltaForce en 2026-08-29T13:16:38.877Z CVE-2026-82448: Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrar https://cyberdeltaforce.ai/news/51c78cc8c32ab1f5486e CyberDeltaForce en 2026-08-28T21:16:15.740Z CVE-2026-7329: An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0 https://cyberdeltaforce.ai/news/f5e15acbb808ca90df5c CyberDeltaForce en 2026-08-28T21:16:15.740Z CVE-2026-7557: An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12. https://cyberdeltaforce.ai/news/0a6f3a5b19b826a68584 CyberDeltaForce en 2026-08-28T21:16:15.740Z CVE-2026-8709: An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a https://cyberdeltaforce.ai/news/2ba9aa1e53adbe9bfe68 CyberDeltaForce en 2026-08-28T21:16:15.740Z CVE-2026-9190: An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypas https://cyberdeltaforce.ai/news/ca568cfa288240f7c031 CyberDeltaForce en 2026-08-28T21:16:15.740Z CVE-2026-9192: An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote a https://cyberdeltaforce.ai/news/f8d54153119a56e4214c CyberDeltaForce en 2026-08-28T21:16:15.740Z CVE-2026-9193: An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated https://cyberdeltaforce.ai/news/71c663d98c997af3a8c5 CyberDeltaForce en 2026-08-28T21:16:15.740Z CVE-2026-9195: A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an https://cyberdeltaforce.ai/news/93dd2165f53ee33b7010 CyberDeltaForce en 2026-08-28T12:21:09.753Z CVE-2023-49105: An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the use https://cyberdeltaforce.ai/news/77c0265b516814c2afda CyberDeltaForce en 2026-08-29T12:16:48.753Z CVE-2026-78207: exceljs through 4.4.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype k https://cyberdeltaforce.ai/news/dda32cced16455cea755 CyberDeltaForce en 2026-08-29T12:16:47.010Z CVE-2026-77915: rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with https://cyberdeltaforce.ai/news/2afaa77900b3b7172460 CyberDeltaForce en 2026-08-29T12:16:41.163Z CVE-2026-14494: The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handle_form_submis https://cyberdeltaforce.ai/news/1c5cb4b0c03939fff83d CyberDeltaForce en 2026-08-28T20:17:32.190Z CVE-2026-47117: OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used b https://cyberdeltaforce.ai/news/2d1af18a892455d9e62d CyberDeltaForce en 2026-08-28T20:17:32.030Z CVE-2026-47103: Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary code by supp https://cyberdeltaforce.ai/news/479aef1da6cf0fcdefe0 CyberDeltaForce en 2026-08-30T05:16:58.407Z CVE-2026-15980: The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5. This is due to missing author https://cyberdeltaforce.ai/news/d6b04d4a85104ee10e31 CyberDeltaForce en 2026-08-29T14:16:38.767Z CVE-2026-82456: argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOK https://cyberdeltaforce.ai/news/51c4a55cbfdff03dd42f CyberDeltaForce en 2026-08-29T14:16:38.480Z CVE-2026-82454: The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppl https://cyberdeltaforce.ai/news/9d54d5248fa0f9547aea CyberDeltaForce en 2026-08-29T14:16:38.210Z CVE-2026-82452: rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in the https://cyberdeltaforce.ai/news/68c099dfa6167c794edf CyberDeltaForce en 2026-08-29T04:18:08.953Z CVE-2026-82078: An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates https://cyberdeltaforce.ai/news/edd6f396b0dcb33aec36 CyberDeltaForce en 2026-08-29T04:18:06.417Z CVE-2026-74820: ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unaut https://cyberdeltaforce.ai/news/8ea04bf0b749dd99dac4 CyberDeltaForce en 2026-08-29T04:18:05.523Z CVE-2026-48996: Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter does not https://cyberdeltaforce.ai/news/62c164dca5f67cc50902 CyberDeltaForce en 2026-08-29T04:18:05.230Z CVE-2026-19318: A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary c https://cyberdeltaforce.ai/news/a6d4e48846649e034b66 CyberDeltaForce en 2026-08-29T04:18:05.100Z CVE-2026-19315: A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sen https://cyberdeltaforce.ai/news/07fefc4dc43d910272d1 CyberDeltaForce en 2026-08-29T04:18:04.957Z CVE-2026-19313: An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sendin https://cyberdeltaforce.ai/news/c9ff6dacadaffdc83c65 CyberDeltaForce en 2026-08-29T04:18:04.793Z CVE-2026-18886: ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable https://cyberdeltaforce.ai/news/b6dae67fd79dbbbdab53 CyberDeltaForce en 2026-08-29T04:18:04.627Z CVE-2026-18885: ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthe https://cyberdeltaforce.ai/news/5f99d945964b66d8072b CyberDeltaForce en 2026-08-29T04:18:02.250Z CVE-2026-13086: A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware O https://cyberdeltaforce.ai/news/19d61687827a28dcd291 CyberDeltaForce en 2026-08-29T03:17:10.997Z CVE-2026-80428: ILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel endpoint at components/ILIAS/AuthShibboleth/resource https://cyberdeltaforce.ai/news/93654b1d6d5168e0b150 CyberDeltaForce en 2026-08-29T03:17:08.807Z CVE-2026-65956: KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the https://cyberdeltaforce.ai/news/e5aa0daa4c8d79f788a7 CyberDeltaForce en 2026-08-29T17:18:00.057Z CVE-2026-82475: iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. https://cyberdeltaforce.ai/news/6d60ab059a6f470424a1 CyberDeltaForce en 2026-08-29T17:17:59.910Z CVE-2026-82474: Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specif https://cyberdeltaforce.ai/news/da91f54d61462cdc766f CyberDeltaForce en 2026-08-29T17:17:59.770Z CVE-2026-82473: KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudC https://cyberdeltaforce.ai/news/e2604e18ad05aa76518c CyberDeltaForce en 2026-08-29T17:17:59.623Z CVE-2026-82472: Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API creden https://cyberdeltaforce.ai/news/7ccad7ff0df58c377ab0 CyberDeltaForce en 2026-08-29T17:17:58.910Z CVE-2026-82466: Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in users to authenticate as any o https://cyberdeltaforce.ai/news/60bd7ee2207d4eef609a CyberDeltaForce en 2026-08-29T17:17:58.490Z CVE-2026-82463: pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. https://cyberdeltaforce.ai/news/0fcdaa21ad1d48dc8eae CyberDeltaForce en 2026-08-29T17:17:58.207Z CVE-2026-82461: pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak realm and client roles. Attack https://cyberdeltaforce.ai/news/82f24e0e463acfdb57e8 CyberDeltaForce en 2026-08-30T07:17:21.673Z CVE-2026-80721: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in iso_conn After iso_conn_de https://cyberdeltaforce.ai/news/896d94c76a8ea2df9510 CyberDeltaForce en 2026-08-30T07:17:21.197Z CVE-2026-80598: In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt decompress_lznt() does not vali https://cyberdeltaforce.ai/news/5d13ec4fe3e7ebd59fa9 CyberDeltaForce en 2026-08-29T23:17:23.443Z CVE-2026-78002: A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending https://cyberdeltaforce.ai/news/b4d9f9f21b05a4ce3efd CyberDeltaForce en 2026-08-29T23:17:23.010Z CVE-2026-6471: Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating https://cyberdeltaforce.ai/news/638c9e4e34021e844e9a CyberDeltaForce en 2026-08-29T23:17:21.723Z CVE-2026-6464: Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error inject https://cyberdeltaforce.ai/news/679ffd026be44ba3cc1d CyberDeltaForce en 2026-08-29T23:17:21.280Z CVE-2026-19385: Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system https://cyberdeltaforce.ai/news/d47fb0b24cf59729fe0b CyberDeltaForce en 2026-08-29T23:17:20.843Z CVE-2026-18408: Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time executio https://cyberdeltaforce.ai/news/7002fcc919a1ea50f667 CyberDeltaForce en 2026-08-29T23:17:19.520Z CVE-2026-16239: Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via https://cyberdeltaforce.ai/news/eb2e307667bbc82a6a7d CyberDeltaForce en 2026-08-29T23:17:19.083Z CVE-2026-16238: Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the https://cyberdeltaforce.ai/news/f213f2065c45c30fd892 CyberDeltaForce en 2026-08-29T23:17:18.653Z CVE-2026-15742: Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating https://cyberdeltaforce.ai/news/8d0f5ddd2e871046892b CyberDeltaForce en 2026-08-29T23:17:18.190Z CVE-2026-15741: SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks https://cyberdeltaforce.ai/news/d1b79fdff1b0aa7dc810 CyberDeltaForce en 2026-08-29T13:16:38.643Z CVE-2026-82447: Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environme https://cyberdeltaforce.ai/news/b1080469704001ad9398 CyberDeltaForce en 2026-08-28T21:16:15.740Z CVE-2026-9203: A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged rol https://cyberdeltaforce.ai/news/9b608dab4bea39cc8caa CyberDeltaForce en 2026-08-28T12:16:30.257Z CVE-2026-5097: The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to, and including, 2.4.17. This is https://cyberdeltaforce.ai/news/282e109552f4b0836025 CyberDeltaForce en 2026-08-29T12:16:58.940Z CVE-2026-82252: gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodul https://cyberdeltaforce.ai/news/d36f8acc2abfd3a679f0 CyberDeltaForce en 2026-08-29T12:16:55.640Z CVE-2026-81678: AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses fr https://cyberdeltaforce.ai/news/66023be2e8c322505b94 CyberDeltaForce en 2026-08-29T12:16:53.833Z CVE-2026-80192: @better-auth/sso before 1.6.27 (and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line) contains two domain-ownership fla https://cyberdeltaforce.ai/news/8a440041becf02e5f374 CyberDeltaForce en 2026-08-29T12:16:50.300Z CVE-2026-78209: exceljs through 4.4.0 fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence e https://cyberdeltaforce.ai/news/62f4a036fe9a34778e64 CyberDeltaForce en 2026-08-29T04:18:07.147Z CVE-2026-81522: A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An a https://cyberdeltaforce.ai/news/4fdcbe03b27bc975c910 CyberDeltaForce en 2026-08-29T04:18:06.563Z CVE-2026-78008: A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a d https://cyberdeltaforce.ai/news/8bbf49cfdaf83c54d7c1 CyberDeltaForce en 2026-08-29T03:17:10.490Z CVE-2026-79921: amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and https://cyberdeltaforce.ai/news/df4942eef055fd0298d9 CyberDeltaForce en 2026-08-29T17:17:58.773Z CVE-2026-82465: pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.validateLogoutRequest(). When an https://cyberdeltaforce.ai/news/81d5962a72c44f7853e8 CyberDeltaForce en 2026-08-28T21:17:10.720Z CVE-2026-18348: Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attack https://cyberdeltaforce.ai/news/0f39dbbc46ff40aba749 CyberDeltaForce en 2026-08-28T21:17:10.720Z CVE-2026-17535: Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS imag https://cyberdeltaforce.ai/news/7580d28b4755cfed1c17 CyberDeltaForce en 2026-08-28T21:16:15.740Z CVE-2026-11739: A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and https://cyberdeltaforce.ai/news/2b2cd12f32ae30a84b51 CyberDeltaForce en 2026-08-28T21:16:15.740Z CVE-2026-11814: A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local netwo https://cyberdeltaforce.ai/news/b2e0c6138de5322acc51 CyberDeltaForce en 2026-08-28T20:17:32.383Z CVE-2026-47285: Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose https://cyberdeltaforce.ai/news/5880d66321ae0310c567 CyberDeltaForce en 2026-08-28T14:01:00.000Z Why a cryptographic inventory is key for addressing the quantum computing threat https://cyberdeltaforce.ai/news/432fbd497a2551bb5828 CyberDeltaForce en 2026-08-28T12:07:24.000Z Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth https://cyberdeltaforce.ai/news/d52d9c046d26721dbc6b CyberDeltaForce en 2026-08-29T16:25:03.000Z Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE https://cyberdeltaforce.ai/news/7dc6f84191c070d1fd8c CyberDeltaForce en 2026-08-28T20:19:22.000Z Hundreds of OpenAI Agents Invaded Hugging Face Servers https://cyberdeltaforce.ai/news/35cb6884486c2d6587ad CyberDeltaForce en 2026-08-28T11:30:00.000Z Key Reasons Why Identity Fabric Matters in 2026 https://cyberdeltaforce.ai/news/3feb5b7e0971201423b1 CyberDeltaForce en 2026-08-28T10:58:29.000Z China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access https://cyberdeltaforce.ai/news/152328adc86dfb28aa06 CyberDeltaForce en 2026-08-28T09:45:15.000Z Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server https://cyberdeltaforce.ai/news/ac0b3a955fd5d4f5906c CyberDeltaForce en 2026-08-28T14:00:10.000Z AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up? https://cyberdeltaforce.ai/news/ae60baa67f264b26a092 CyberDeltaForce en 2026-08-28T16:36:47.000Z 68-year-old imprisoned after making $1.3 million by pirating IPTV services