Emerging Threats

• Emerging Threats

Emerging Threat: (CVE-2026-10579) JBoss EAP Authentication Bypass via PicketLink SAML

An authentication bypass in PicketLink Federation lets an unauthenticated attacker forge SAML assertions and sign in to JBoss EAP applications as any user, including administrators.

• Emerging Threats

Emerging Threat: (CVE-2026-34265) SAP NetWeaver ABAP Memory Corruption via DIAG Protocol Parsing

A memory corruption flaw in SAP NetWeaver Application Server ABAP lets an unauthenticated attacker crash the system or disclose sensitive system information through crafted DIAG protocol traffic.

• Emerging Threats

Emerging Threat: (CVE-2026-58048) cPanel & WHM Database Privilege Escalation via Database Rename

A privilege escalation flaw in cPanel & WHM’s database management lets any authenticated hosting account execute database commands with full administrative privileges, exposing every database on the server.

• Emerging Threats

Emerging Threat: (CVE-2026-60004) Gitea Remote Code Execution via diffpatch Git Hooks

A code injection flaw in Gitea’s diffpatch endpoint lets a user with repository write access install a Git hook and run arbitrary shell commands as the Gitea service account.

• Emerging Threats

Emerging Threat: (July 2026 Release) Apache Traffic Server Denial of Service and Access Control Bypass

Apache Traffic Server’s July 2026 security release patches dozens of flaws across its plugin surface, with the most severe letting unauthenticated attackers crash proxy tiers and bypass access controls.

• Emerging Threats

Emerging Threat: (CVE-2026-6949) Samba DNS Server Crash via TSIG Name Compression

An out-of-bounds write in Samba’s internal DNS server lets an unauthenticated attacker crash a domain controller’s DNS process with a single crafted TSIG packet.

• Emerging Threats

Emerging Threat: (CVE-2026-14512, CVE-2026-14446) IBM WebSphere Application Server Unauthenticated Code Execution and Privilege Escalation

Two unauthenticated flaws in IBM WebSphere Application Server traditional let remote attackers execute arbitrary code or escalate privileges through the administrative console.

• Emerging Threats

Emerging Threat: (CVE-2026-10818) WPForms Pro Arbitrary File Upload Leading to Remote Code Execution

A flaw in the chunked upload handler of WPForms Pro lets an unauthenticated attacker leave executable files on a WordPress server, opening a path to remote code execution.

• Emerging Threats

Emerging Threat: (CVE-2026-60358) Oracle Access Manager Takeover via Authentication Engine

A flaw in the Authentication Engine of Oracle Access Manager lets an unauthenticated attacker take over the single sign-on service that fronts an organization’s internal applications.

• Emerging Threats

Emerging Threat: Oracle WebLogic Server Multiple Critical RCE Vulnerabilities (July 2026 CPU)

Oracle’s July 2026 Critical Patch Update fixes multiple flaws in WebLogic Server’s Core component, several letting an unauthenticated attacker fully take over the server over T3, IIOP, HTTP, and SOAP.