Emerging Threats

• Emerging Threats

Emerging Threat: GeoServer Zero-Day SQL Injection via jsonArrayContains

An unauthenticated SQL injection in GeoServer’s jsonArrayContains filter function lets attackers inject arbitrary SQL through public WMS and WFS endpoints, reaching remote code execution on privileged database hosts.

• Emerging Threats

Emerging Threat: (CVE-2026-19478) GitLab Unauthenticated Project Deletion via GraphQL Directive

A code injection flaw in GitLab’s GraphQL directive handling lets unauthenticated attackers modify or delete public projects and user data on self-managed instances.

• Emerging Threats

Emerging Threat: (CVE-2026-26035) FortiWeb Admin Authentication Bypass via RADIUS Admin Groups

An improper authentication flaw in FortiWeb’s remote RADIUS admin group handling lets an unauthenticated attacker log in to the appliance’s management interface and take administrative control.

• Emerging Threats

Emerging Threat: (CVE-2026-71362) Adobe Commerce Account Takeover via Session Identity Flaw

An incorrect authorization flaw in Adobe Commerce and Magento Open Source lets an unauthenticated attacker switch a customer session to another account, exposing the victim’s personal data.

• Emerging Threats

Emerging Threat: (CVE-2026-72766) n8n Arbitrary File Read and SSRF via Send Email Node

A type confusion flaw in n8n’s Send Email node lets crafted workflow input reach the mail library as a file path or URL, exposing local files and enabling SSRF.

• Emerging Threats

Emerging Threat: (CVE-2026-20349) Cisco ASA and FTD Denial of Service via Remote Access SSL VPN

A flaw in the Remote Access SSL VPN service of Cisco ASA and FTD software lets an unauthenticated attacker reload the device, knocking firewalls and VPN gateways offline.

• Emerging Threats

Emerging Threat: (CVE-2026-10579) JBoss EAP Authentication Bypass via PicketLink SAML

An authentication bypass in PicketLink Federation lets an unauthenticated attacker forge SAML assertions and sign in to JBoss EAP applications as any user, including administrators.

• Emerging Threats

Emerging Threat: (CVE-2026-34265) SAP NetWeaver ABAP Memory Corruption via DIAG Protocol Parsing

A memory corruption flaw in SAP NetWeaver Application Server ABAP lets an unauthenticated attacker crash the system or disclose sensitive system information through crafted DIAG protocol traffic.

• Emerging Threats

Emerging Threat: (CVE-2026-58048) cPanel & WHM Database Privilege Escalation via Database Rename

A privilege escalation flaw in cPanel & WHM’s database management lets any authenticated hosting account execute database commands with full administrative privileges, exposing every database on the server.

• Emerging Threats

Emerging Threat: (CVE-2026-60004) Gitea Remote Code Execution via diffpatch Git Hooks

A code injection flaw in Gitea’s diffpatch endpoint lets a user with repository write access install a Git hook and run arbitrary shell commands as the Gitea service account.