Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.23 before 2.3.26 contains a missing authorization vulnerability in Codestar backup AJAX actions csf-export, csf-import and csf-reset. Shop Managers can read the csf_backup_nonce from the settings page and supply arbitrary option names via the 'unique' parameter to read, overwrite or delete WordPress options, including modifying wp_user_roles to escalate to administrator.
CVE-2025-71450 is a buffer under-read vulnerability in the ini_parse_stream() function of the inih library before revision r63. It occurs when processing an INI file or string containing an overlong line followed by an embedded NUL byte, allowing reading of memory just before the buffer. This can cause undefined behavior detected by memory sanitizers.
This content discusses the concept of Identity-Defined Reachability (IDR), a security model aimed at aligning service reachability strictly with current authorisation states. It addresses the challenge where network reachability, identity policy, and application permissions often become unsynchronized, potentially leaving services reachable even after authority is revoked. IDR proposes that a usable path to a protected service exists only while the relationship is authorised, verified cryptographically, and contextually valid. The model builds on Zero Trust principles and aims to reduce exposure and connectivity friction, especially in environments with rapid changes driven by AI and distributed applications. The discussion highlights practical difficulties such as shared connections and legacy systems that complicate enforcement. This is a conceptual and strategic discussion rather than a report of a specific vulnerability or active threat.
A security update for Red Hat Hardened Images RPMs addresses multiple vulnerabilities in the openshell package, including CVE-2026-111061. This particular flaw in the russh component allows an attacker communicating with the SSH agent locally or via agent forwarding to cause resource exhaustion by spawning long-lived tasks that are not properly rolled back, leading to denial of service. The update includes fixed RPMs for openshell and related packages.
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer and Network Systems Inventory Tracking Application allows SQL Injection.
This issue affects Inventory Tracking Application: through 2026-10-16.
Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 7 Extended Lifecycle Support. These include arbitrary code execution via heap- and stack-based buffer overflows, data integrity issues from integer overflow, information disclosure, SSRF, denial of service, and double-free/use-after-free in Python bindings. Red Hat has issued an important security advisory with updates addressing these issues.
In September 2026, online fashion retailer Revolve suffered a data breach impacting at least 180,000 customers. Hackers accessed the company's online shopping platform and stole personal information including names, addresses, payment card numbers, and expiration dates of customers who had saved this data. The breach did not disrupt operations or customer service. Revolve promptly initiated incident response, contained the breach, and engaged law enforcement and cybersecurity experts. Affected individuals were notified but were not offered free credit monitoring services. The company has not disclosed the attacker identity or attack method.
The atlassian-wallboard-plugin1 npm package contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions 57.3.1, 58.4.0, 59.3.1 and 60.0.0.
Improper validation of RunEndEncoded arrays in the ArrayData interface can allow reading data beyond the bounds of the child values array.
Users are recommended to upgrade to versions 60.1.0, 59.3.2, 58.4.1, 57.3.2 which fixes the issue.
Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1 - Sourcerer can restrict PHP in articles according to article-author trust; the exact creator and last-editor rule varies by release. Articles Anywhere can insert the text or full layout of one article into another. In the affected combination, when Articles Anywhere processes an inclusion before Sourcerer and Force Content Triggers is off, the included article's Sourcerer code can be evaluated using the enclosing article's trusted identity rather than the included article's own identity. The resulting gap is between the authority of the article supplying the code and the authority used to decide whether to run it. Ordinary Articles Anywhere output is not itself the issue.
A vulnerability was discovered in Intelbras IP cameras that allowed remote disabling of the device by exploiting the firmware update process. The cameras did not require authentication or validate firmware files before updating, enabling anyone on the same Wi-Fi network to repeatedly trigger reboots and keep the camera offline indefinitely. This affects several Intelbras models sharing the same firmware. Intelbras has released a firmware update to fix this issue. Users are advised to update their firmware promptly and secure their home networks and devices to prevent exploitation.
Google has introduced a new $250,000 top-tier reward in its Cloud Vulnerability Reward Program for security research demonstrating full administrative control over Google Cloud organizations or projects. This reward targets high-impact architectural vulnerabilities that allow attackers to gain roles/owner privileges or complete IAM control without relying on pre-existing access, compromised credentials, or social engineering. The program also evaluates remote code execution in Borg, Google's production infrastructure, under strict rules to prevent impact on service availability or data. Researchers must prove unauthorized access using a designated service account, ensuring safe and controlled testing.
Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1 - An administrator can disable output of user email addresses or usernames in Users Anywhere. In affected code, attributes supplied inside a {user} or [email] / [username] tag can change those plugin settings for that render. For example, [email allow_output_email="1"] can display an email address even when Allow output of email is set to No. This bypasses the personal-data output setting; it does not bypass a separate policy that disallows Users Anywhere tags from the content source altogether.
A security vulnerability (CVE-2026-32597) in the Python JWT library (pyjwt) allows acceptance of unknown 'crit' header extensions, violating RFC 7515 section 4.1.11 requirements. This issue affects certain Red Hat Enterprise Linux 8.6 packages and has been rated with an Important security impact by Red Hat. A security update is available to address this issue.
CVE-2026-114364 is an SQL injection vulnerability in Apache Syncope affecting versions 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.8, and 4.1.0-M0 through 4.1.3. It is an incomplete fix of a previous vulnerability (CVE-2026-77051) that allows an administrator with sufficient privileges to execute arbitrary SQL commands via unsanitized opEvent parameters. Users are advised to upgrade to versions 4.0.9 or 4.1.4 to remediate this issue.