CVE-2026-109688 is a critical SQL Injection vulnerability in Link Whisper INC's Link Whisper Free plugin, affecting versions prior to 0.9.8. The flaw allows an attacker to perform Blind SQL Injection due to improper neutralization of special elements in SQL commands. This vulnerability can lead to high confidentiality impact and low availability impact without requiring user interaction or privileges.
CVE-2026-107416 is an authorization bypass vulnerability in Webba Plugins Webba Booking affecting versions from initial releases up to 6.5.2. The flaw allows unauthorized users to bypass access controls by exploiting a user-controlled key, potentially leading to unauthorized data access. The vulnerability has a high severity score of 7.5 and does not require privileges or user interaction to exploit.
CVE-2026-109702 is a high-severity stored cross-site scripting (XSS) vulnerability in maxfoundry Social Share Buttons up to version 1.31. It arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts that execute in users' browsers. This vulnerability affects versions from 0 up to and including 1.31.
A cyberattack disrupted refrigeration systems at approximately 700 French supermarkets, affecting equipment from Danfoss, Copeland, and Dixell brands. The attackers manipulated refrigeration controllers to extend defrost cycles, causing food spoilage and fires. The affected devices include older, end-of-life models no longer receiving patches, as well as some current devices with outdated firmware. The attack's origin and method of access remain unclear, and no group has claimed responsibility or issued ransom demands. French authorities and vendors are working on mitigation, urging operators to disconnect affected devices from the internet and use secure VPNs for remote access.
Sparx Systems Enterprise Architect version 17.1 is affected by an XML External Entity (XXE) injection vulnerability in its XSLT Debugger feature. This flaw allows processing of external entities from crafted XML files containing a DOCTYPE with external DTD references, enabling an attacker to read arbitrary files on the victim's filesystem. The vulnerability has a high severity with a CVSS 4.0 score of 8.2. Attempts to contact the vendor for remediation information were unsuccessful, and no patch information is currently available.
CVE-2026-110723 affects the Eclipse Connected Services Platform's api-gateway component in versions 1.1.1 through 1.7.3. The default rate-limit key resolver uses the leftmost element of the X-Forwarded-For header to identify clients, but this header value is not validated against trusted proxies. This allows an attacker to bypass rate limiting by supplying unique header values, effectively obtaining unlimited independent rate-limit buckets.
The Aoki infostealer malware has recently evolved to target credentials from AI coding assistants such as Claude, OpenAI's Codex, Cursor, Codeium, and Gemini. It steals API keys, tokens, and session files that could allow attackers to impersonate legitimate users and access connected repositories, cloud services, and CI/CD pipelines. In addition to AI-related credentials, Aoki collects data from browsers, cryptocurrency wallets, password managers, messaging apps, gaming platforms, VPN and FTP clients. The stolen data is sent to command-and-control servers. This indicates that AI credentials are increasingly valuable to cybercriminals, alongside traditional targets like payment card data and cryptocurrency wallets.
CVE-2026-110724 is a vulnerability in Eclipse Connected Services Platform's api-gateway component up to version 1.7.3. The default rate-limit key resolver uses the leftmost element of the X-Forwarded-For header to identify clients, but this header value is not validated against trusted proxies. This allows an attacker to bypass rate limiting by supplying unique header values, effectively obtaining unlimited independent rate-limit buckets.
CVE-2026-109698 is a critical SQL Injection vulnerability in Kitae Park Mang Board WP, affecting versions prior to 2.4.5. The flaw allows an attacker to inject malicious SQL commands due to improper neutralization of special elements in SQL queries. This vulnerability has a high CVSS score of 9.3, indicating network exploitable, low attack complexity, no privileges or user interaction required, and impacts confidentiality and availability. No official patch or remediation information is provided in the input data.
CVE-2026-109692 is a Missing Authorization vulnerability in the ThemeGrill User Registration plugin affecting versions from initial through 5.2.8. The flaw allows exploitation due to incorrectly configured access control security levels. It has a CVSS 3.1 score of 7.1, indicating high severity with low attack complexity and requiring low privileges but no user interaction. The vulnerability impacts confidentiality and integrity but not availability.
CVE-2026-109693 is an Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC's Fluent CRM plugin. It allows privilege escalation, potentially enabling an attacker with limited privileges to gain higher-level access. The vulnerability affects Fluent CRM versions from initial releases up to 3.2.5. The CVSS 3.1 score is 8.8, indicating a high severity with network attack vector, low attack complexity, and no user interaction required.
CVE-2026-79837 is a high-severity vulnerability in Hewlett Packard Enterprise's HPE NonStop SQL/MX UDR SERVER involving improper input validation. This flaw may allow a crafted message to cause process termination, service disruption, or memory corruption, leading to undefined behavior.
CVE-2026-110726 affects Eclipse Connected Services Platform's api-gateway component up to version 1.7.3. The default rate-limit key resolver uses the leftmost element of the X-Forwarded-For header, which is attacker-controlled and not validated against trusted proxies. This allows attackers to bypass request-rate limiting by using unique header values to create unlimited independent rate-limit buckets.
Law enforcement authorities from 17 countries in Latin America and Europe arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) via online messaging groups. The operation, named International Effort Confluencia, involved multiple coordinated actions between March and September 2026. Investigators executed 127 search warrants, rescued a child victim, and seized large quantities of abusive material. The operation highlights the use of messaging platforms for grooming, abuse coordination, and illegal content distribution. Previous related operations have also targeted CSAM distribution networks globally.
CVE-2026-79836 is a medium severity vulnerability in Hewlett Packard Enterprise's HPE NonStop SQL/MX Run-Time Statistics component. It involves improper input validation that can lead to memory corruption and null pointer dereference. Exploitation of this flaw may cause process crashes, denial of service (DoS), or information disclosure.
CVE-2026-8145 is a medium severity vulnerability in the WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices for WordPress. It allows unauthenticated attackers to register as any existing WholesaleX role due to missing validation on the 'wholesalex_registration_role' parameter in the 'process_registration' function. This improper privilege management affects all versions up to and including 3.0.8. A partial patch was introduced in version 2.3.8, but versions up to 3.0.8 remain vulnerable.
CVE-2026-79835 is a low-severity vulnerability in the Hewlett Packard Enterprise HPE Nonstop KMS Server caused by improper input validation. A specially crafted input message can trigger a buffer overflow condition. The vulnerability does not impact confidentiality or integrity but can cause availability issues. No affected versions or patch information are provided. There are no known exploits in the wild at this time.
CikaBika Bot is a Rust-based Remote Access Trojan (RAT) distributed via phishing emails containing malicious document-themed lures. It uses Discord channels for command-and-control (C&C) communications and provides attackers with capabilities including system reconnaissance, remote command execution, process management, file upload/download, and surveillance functions such as screenshots and camera streaming. The malware employs a multi-stage infection chain involving a decoy document, PowerShell scripts, and DLL sideloading to evade detection and bypass User Account Control (UAC). Data exfiltration is facilitated through Ngrok tunnels. The malware leverages legitimate services like Discord and Ngrok to mask its operations.
CVE-2026-79834 is a high-severity vulnerability in Hewlett Packard Enterprise's HPE NonStop SQL/MX SQLCAT component. It involves improper input validation (CWE-20) that may allow an unauthenticated user to execute unauthorized commands. The vulnerability has a CVSS 3.1 base score of 7.4, indicating significant impact on confidentiality, integrity, and availability. No specific affected versions or patch information is provided, and no known exploits are reported in the wild.
CVE-2026-79833 is a high-severity vulnerability in Hewlett Packard Enterprise's HPE NonStop ANSI SQLUTIL component. It involves an uncaught exception that may be triggered remotely by an unauthenticated actor, causing the affected service to terminate unexpectedly and resulting in a denial of service condition.