Vulnerabilities
Does CVE-2026-106626 Allow High-Priv Users to Run Code in AEM?
A critical input validation flaw in Adobe Experience Manager lets privileged attackers execute code without any user interaction.
Sandbox Gazette Patch Watch Desk
The Sandbox Gazette Patch Watch Desk is the part of the Sandbox Gazette newsroom that covers software flaws, vendor advisories and patches. It is a newsroom desk, not a single person. Sections: Vulnerabilities. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 24 articles so far. See the editorial policy or report an error.
Vulnerabilities
How Does AEM's CVSS 10.0 Auth Flaw Enable Remote Code Execution Without Interaction?
A critical authorization flaw in Adobe Experience Manager enables remote code execution without user interaction, affecting multiple supported versions.
Vulnerabilities
Is CVE-2026-75994's 9.6 CVSS score warning of critical ColdFusion auth flaws?
A critical authorization flaw in Adobe ColdFusion 2023 and 2025 permits arbitrary code execution without user interaction.
Vulnerabilities
How does CVE-2026-105895 enable zero-click RCE in Adobe AEM 6.5-25?
A critical input validation flaw in Adobe Experience Manager 6.5 allows remote code execution without user interaction, posing severe risks to affected systems.
Vulnerabilities
Does Risesoft-y9 Path Traversal Flaw Allow Remote Code Execution?
Unauthenticated attackers can write arbitrary files to Risesoft-y9 systems via a high-severity path traversal flaw in versions 9.6.5 through 9.6.11.
Vulnerabilities
How does a CVSS 9.3 UVR5 path flaw enable unauthenticated OS commands in GPT-SoVITS?
Attackers can run server commands in GPT-SoVITS by manipulating output folder paths in the UVR5 module, posing a severe risk to unpatched installations.
Vulnerabilities
How Skipping One Header Grants Full Admin Access in Wukong_HRM
A critical flaw in Wukong_HRM lets attackers bypass authentication entirely, gaining full control over employee data and HR records without credentials.
Vulnerabilities
Are SonicWall SMA 1000 Appliances Vulnerable to Critical SSRF Attacks?
Attackers are targeting a maximum-severity server-side request forgery flaw in SonicWall SMA 1000 security management appliances.
Vulnerabilities
Why does IBM Db2 Mirror for i 7.4-7.6 face a 9.9 CVSS critical flaw allowing code execution?
IBM Db2 Mirror for i versions 7.4 through 7.6 face a critical flaw where authenticated users can bypass validation to run code.
Vulnerabilities
How does CVE-2026-39919 let attackers run code on servers via malicious PDFs?
Wordfence researchers found a heap buffer overflow in Ghostscript that allows remote code execution via malicious PDF files.
Vulnerabilities
How Thelia 2.6 Flaws Allow Admins to Execute Remote Code
CERT/CC advisory details multiple vulnerabilities in Thelia 2.6.0 and 2.6.1 that enable remote code execution and other serious risks for e-commerce platforms.
Vulnerabilities
Can Qilin and Settra Groups Hide Unauthorized Access via CVE-2026-0257?
Threat groups like Qilin and Settra are exploiting a Palo Alto authentication bypass to create stealthy, unauthorized remote access sessions.
Vulnerabilities
How Does Unauthenticated PHP Object Injection Threaten WooCommerce Sites?
A critical flaw in Booster for WooCommerce allows attackers to execute code without logging in, posing a severe risk to online stores.
Vulnerabilities
WatchTowr Labs Details Unauthenticated RCE Chain in PaperCut MF Software
Researchers disclose a chain of flaws allowing remote code execution without credentials, noting that vendor patching complicates remediation efforts.
Vulnerabilities
How Does Fragnesia Vulnerability Affect AWS Linux Kernel ESP-in-TCP Security?
AWS security bulletins report a local privilege escalation issue involving ESP-in-TCP protocols within the Linux Kernel, requiring immediate attention from IT teams.
Vulnerabilities
How Privasys RA-TLS Clients Let Attackers Spoof Secure Enclave Connections
A critical flaw in older Privasys RA-TLS clients allows attackers to relay valid enclave quotes, bypassing security checks until version 0.5.0.
Vulnerabilities
How a Broken Preview Link in TinaCMS Lets Hackers Steal Editor Access
A critical flaw in TinaCMS versions prior to 3.14.0 allows attackers to hijack admin sessions through manipulated preview links, granting full content control.
Vulnerabilities
Is Your Site at Risk From ThemeREX Smash's Critical Object Injection Bug?
A CVSS 9.8 deserialization bug in ThemeREX Smash up to version 1.12.0 permits object injection and potential remote code execution on affected sites.
Vulnerabilities
How can WPCOM Member flaws let hackers log in as admins using social IDs?
The WPCOM Member plugin for WordPress allows unauthenticated attackers to impersonate any user, including administrators, by bypassing security controls in versions up to 1.7.27.
Vulnerabilities
How does IBM Guardium’s missing authentication flaw allow remote takeover?
Unauthenticated attackers can run arbitrary container images and seize control of managed edge clusters in specific IBM Guardium versions.
Vulnerabilities
How can attackers bypass Sipay PrestaShop crypto checks via CVE-2026-86405?
Sipay PrestaShop Virtual POS Module versions below 26.9.1 contain a critical vulnerability allowing attackers to spoof cryptographic signatures.
Vulnerabilities
Why does IBM Guardium 12.0-12.2 face critical CVE-2026-75875 path traversal risk?
A critical flaw in IBM Guardium Data Protection versions 12.0 through 12.2 allows remote attackers to execute arbitrary code without authentication.
Vulnerabilities
Does IBM Guardium SQL Injection Flaw Expose Data Protection Systems?
A critical vulnerability in IBM Guardium allows remote attackers to execute unauthorized SQL commands on affected versions.
Vulnerabilities
Is Your IoT Infrastructure Vulnerable to AWS coreMQTT Heap Overflow?
AWS confirms a heap out-of-bounds read in coreMQTT MQTT5 property parsing, posing risks to embedded systems using the library.