Provided courtesy of White Hat Security – https://whitehat.eu
19 – 24 Oct 2026 Two recently disclosed PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have received critical CVSS scores of 9.2. These flaws in PHP’s memory management and error handling can allow unauthenticated remote code execution (RCE), potentially affecting websites running popular platforms such as WordPress, …
12 – 18 Oct 2026 A dangerous file doesn’t become safe just because its warning label disappears. Our latest CVE of the Week highlights CVE-2026-96951 (CVSS 8.8), a Windows Shell vulnerability that allows attackers to bypass Mark of the Web (MotW) protections. A specially crafted …
05 – 11 Oct 2026 Read-only access. Full admin privileges? Our latest CVE of the Week explores CVE-2026-21589, a critical vulnerability affecting self-hosted Atlassian products, including Jira, Confluence, and Bitbucket. Attackers can access sensitive configuration files without authentication – potentially turning a simple file-read flaw …
28 Sept – 04 Oct 2026 A high-severity vulnerability in Microsoft SharePoint Server has recently drawn attention. CVE-2026-65660 is a CWE-94 code injection vulnerability that can allow an authenticated attacker to execute arbitrary code on an affected SharePoint Server. The vulnerability has a CVSS 3.1 …
21 – 27 Sept 2026 What happens when the security infrastructure itself becomes the target? This week’s CVE of The Week covers CVE-2026-93616, a critical Check Point zero-day vulnerability with a CVSS score of 9.8 — exploited in targeted attacks before a patch was available. …
14 – 20 Sept 2026 What if an unauthenticated user could read your sensitive data from the GitLab server? This week’s CVE of the Week highlights CVE-2026-85706 in GitLab – a critical CVSS 10.0 flaw that could allow unauthenticated attackers to read arbitrary files from …
07 – 12 Sept 2026 A critical CVSS 10.0 vulnerability puts thousands of Internet-facing SAP systems potentially at risk. Our latest CVE of the Week covers CVE-2026-44756, a buffer overflow vulnerability in the SAP Kernel that could enable remote attackers to execute code with administrative …
24 – 30 Aug 2026 What if your AI assistant could be tricked into handing your data to an attacker? This week’s CVE of the Week looks at CVE-2026-24301 (CoSnitch), a CVSS 8.8 vulnerability in Microsoft Copilot combining automatic prompt execution, data exfiltration and persistent …
17 – 23 Aug 2026 AI platforms are increasingly becoming attractive targets for attackers. CVE-2026-9198 affects IBM Langflow OSS and chains security flaws that can lead to unauthenticated Remote Code Execution (RCE). With public PoCs available and the vulnerability already exploited in the wild, affected …