Threat Intelligence Database

This entry is a daily security news update from the SANS Internet Storm Center (ISC) titled 'ISC Stormcast For Thursday, September 10th, 2026.' It provides general information and links to a podcast and classes but does not describe any specific security threat or vulnerability.

CVE-2026-87803 is an authorization bypass vulnerability in the Countly Server DBViewer component. It arises from improper detection of nested aggregation stages in the aggregation stage sanitizer. This flaw allows a non-admin user with DBViewer read permission to inject forbidden MongoDB operators, enabling unauthorized cross-collection data access, including sensitive information like password-reset tokens.

CVE-2026-78303 is a medium severity vulnerability in the SP Property extension for Joomla by joomshaper.com. Versions 1.0.0 through 4.1.3 are affected. The issue involves unvalidated email destination and form manipulation in booking requests, where the recipient routing relied on client-submitted hidden fields. This could allow insertion of sensitive information into sent data.

The T4 Page Builder extension for Joomla versions 1.0.0 through 2.2.0 contains a vulnerability that allows unauthenticated attackers to send emails via an open mail relay through the front-end JSON editor's contact AJAX endpoint. This endpoint lacks authentication, CSRF protection, captcha enforcement (if no captcha plugin is enabled), and rate limiting, enabling attackers to control the recipient, subject, and HTML body of the email, which is sent from the site's configured sender identity.

CVE-2026-78302 is a high-severity stored cross-site scripting (XSS) vulnerability in the SP Property extension for Joomla by joomshaper.com. Versions 1.0.0 through 4.1.3 are affected. The vulnerability arises from multiple template files in frontend views and administrator list tables that render attributes and text values directly into HTML without proper contextual escaping, allowing unauthenticated attackers to inject malicious scripts.

A vulnerability in the SP Property extension for Joomla versions 1.0.0 through 4.1.3 allows unauthorized users to perform gallery image management actions without proper access control or CSRF protection. This flaw enables file removal with arbitrary paths and uploading of unverified file types.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the SP Property extension for Joomla versions 1.0.0 through 4.1.3. The vulnerability affects the property booking and agent contact form submission endpoints, which process POST requests without verifying Joomla session anti-CSRF tokens. This flaw could allow attackers to perform unauthorized actions on behalf of authenticated users.

An unauthenticated SQL injection vulnerability exists in the SP Property extension for Joomla versions 1.0.0 through 4.1.3. The vulnerability arises from unsafe concatenation of user-supplied parameters into SQL queries in the property search and map filtering features, allowing attackers to perform blind SQL injection attacks.

The Redux Framework WordPress plugin is vulnerable to stored cross-site scripting (XSS) via the Slider field in User Profile settings in versions up to and including 4.5.13.1. The vulnerability arises from insufficient input sanitization and improper output escaping, allowing authenticated users with Subscriber-level access or higher to inject malicious scripts into their profiles. These scripts execute when an Administrator views the attacker's profile page.

The Aruba HiSpeed Cache plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in all versions up to and including 3.0.14. This vulnerability arises from insufficient input sanitization and output escaping of post content, allowing authenticated users with Contributor-level access or higher to inject malicious scripts. These scripts execute when any user views the affected page, potentially compromising user interactions.