An access control flaw in the ServiceNow AI Platform lets an unauthenticated user create, modify, or delete instance data through GraphQL, beyond what the platform intended.
Read more about Emerging Threat: (CVE-2026-86858) ServiceNow AI Platform Unauthenticated Privilege Escalation via GraphQLAn escaping flaw in the Next.js ImageResponse API lets attacker-supplied values break out into SVG markup and execute code on the server generating the image.
Read more about Emerging Threat: (CVE-2026-94545) Next.js Remote Code Execution via ImageResponse SVG InjectionAn authorization flaw in the Umbraco CMS Content Delivery API lets an anonymous caller read the full contents of protected pages through unprotected pages that reference them.
Read more about Emerging Threat: (CVE-2026-69197) Umbraco CMS Protected Content Disclosure via Delivery API ExpansionA flaw in the Core component of Oracle WebLogic Server lets an unauthenticated attacker with network access over T3 or IIOP take full control of the server.
Read more about Emerging Threat: (CVE-2026-70756) Oracle WebLogic Server Takeover via T3 and IIOPAn SQL injection flaw in the email parsing logic of Cisco AsyncOS lets an unauthenticated attacker send a crafted message and execute commands as root on the appliance.
Read more about Emerging Threat: (CVE-2026-76461) Cisco Secure Email Gateway Root RCE via Email ParsingAn unauthenticated PHP object injection flaw in The Events Calendar plugin for WordPress lets attackers execute code on the server through comments submitted on event pages.
Read more about Emerging Threat: (CVE-2026-78006) The Events Calendar Remote Code Execution via PHP Object InjectionToday we’re announcing the CyCognito MCP server. It makes your attack surface data available to any AI client that speaks the Model Context Protocol, so you can search assets and issues and pull the full record behind both.
Read more about Introducing the CyCognito MCP Server: Full Exposure Context, On DemandA memory corruption flaw in SAP’s Extended Passport processing lets an unauthenticated attacker execute operating system commands as the SAP system account, giving full control of the underlying host.
Read more about Emerging Threat: (CVE-2026-44756) SAP Remote Code Execution via Extended Passport ProcessingAn unauthenticated file read flaw in MikroTik RouterOS WebFig lets a remote attacker traverse out of the web namespace and read root-owned configuration files, including stored credentials.
Read more about Emerging Threat: (CVE-2026-67281) MikroTik RouterOS Unauthenticated File Read via WebFigAn unrestricted file upload flaw in elFinder lets an attacker slip PHP files past MIME filtering during ZIP extraction, achieving remote code execution on the underlying web server.
Read more about Emerging Threat: (CVE-2026-81891) elFinder Remote Code Execution via ZIP Extraction MIME Bypass