CVE-2026-59190: CWE-639: Authorization Bypass Through User-Controlled Key in getgrav grav
A vulnerability in grav-plugin-admin versions 1.10.52 and earlier allows an authenticated user with admin.users permission to change any user's password, including the super administrator's, without…
Read the full articleYou might also wanna read
CVE-2026-48800 Bypass: Path Traversal Vulnerability Discovered in Notepad++ v8.9.6.1
## Vulnerability Summary **Product**: Notepad++ v8.9.6.1 (latest patched version) **Type**: CWE-42 (Path Traversal) / CWE-59 (Improper Link
github.com·1mo ago
WAF - WAF Release - 2026-04-30 - Emergency
This emergency release introduces a new rule to block a cPanel & WHM Authentication Bypass related to CVE-2026-41940. Key Findings CVE-2026-
CVE-2026-25177: Why Patching Active Directory Alone Isn't Enough for Security
CVE-2026-25177 is a high-severity privilege escalation flaw in Microsoft Active Directory Domain Services that can let an authenticated doma
hendryadrian.com·24d ago
Critical Pre-Auth RCE Vulnerability (CVE-2026-8037) Discovered in Progress Kemp LoadMaster — CVSS 9.8
Critical Progress Kemp LoadMaster Vulnerability Enables Pre-Auth Remote Code Execution – Patch Now Before Attackers Do + Video - "Undercode
undercodetesting.com·10d ago
CVE-2026-8037: Critical Unauthenticated RCE in Progress Kemp LoadMaster Actively Exploited
CVE-2026-8037: Unauthenticated RCE in Progress Kemp LoadMaster – Patch Now or Get Pwned + Video - "Undercode Testing": Monitor hackers like
undercodetesting.com·6d ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.