CVE-2026-80378: Improper Authorization

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper authorization...

CVE-2026-81210: Authorization Bypass Through User-Controlled Key

IBM DataStage on Cloud Pak for Data 5.4.0.0 concatenates three caller-supplied strings into a String.format path on the shared /ds-storage RWX PVC and returns the file with no project ACL — pure IDOR plus traversal. Read is constrained to files named job.log/error.log, but DataStage job logs...

PT-2026-89286

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

PT-2026-89632

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A path traversal issue allows a remote authenticated attacker to overwrite ruleset files belonging to other tenants. Path traversal is a flaw that allows an attacker to access or...

PT-2026-89624

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description Improper authorization allows a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges. RabbitMQ is a message broker that...

CVE-2026-82099: Improper Neutralization of Special Elements used in an OS Command

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

Outbound Public IP Addresses Used by Veeam Data Cloud

Update: 2026-10-19 We're delaying the Veeam Data Cloud outbound public IP address change to allow customers more time to update their configuration without losing connectivity. The new IP range will become active on 2026-11-06, instead of 2026-10-12. The legacy IP range will be retired on...

EUVD-2026-75187

Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets...

CVE-2026-71807

In RuoYi-Cloud-Plus = 2.6.2 in the ruoyi-workflow module, multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether the current user is the task handler/related user. Authenticated low-privileged remote attackers can read sensitive...

CVE-2026-88001 Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, server-side web fetches did not reapply WEBFETCHFILTERLIST or private-address controls to HTTP redirect destinations when AIOHTTPCLIENTALLOWREDIRECTS was enabled. An authenticated user...

CVE-2026-88001

Open WebUI versions 0.9.5 through 0.11.1 contained a server-side request forgery (SSRF) weakness in its web-fetch functionality. When AIOHTTP_CLIENT_ALLOW_REDIRECTS was enabled, HTTP redirect destinations were not revalidated against WEB_FETCH_FILTER_LIST or private-address controls. An authentic...

Threat matrix: Mapping threats across cloud web applications

In this article 1. Overview 2. Technique Catalog 3. Privilege Escalation 4. Mitigation and protection guidance 5. References 6. Learn more Microsoft introduces the cloud web applications threat matrix, a MITRE ATT &CK-aligned framework that helps defenders understand, prioritize, and mitigate...

securityonion v3.3.0-20260908

Security Onion Security Onion is a free and open Linux distribution for threat hunting, enterprise security monitoring, and log management. It includes a comprehensive suite of tools designed to work together to provide visibility into your network and host activity. ✨ Features Security Onion...

no-cloud (0.0.8) potentially affected by CVE-2026-55073 via weasyprint (0.34.0)

weasyprint PYPI version 0.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - no-cloud 0.0.8 Source cves: CVE-2026-55073 Source advisory: OSV:GHSA-JF6Q-CHMF-3H3V...

Passkey-themed social engineering leads to identity and cloud compromise

In this article 1. Attack chain overview 2. Attribution 3. Mitigation and protection guidance 4. Learn more Microsoft Security Research is tracking active cloud-based intrusions spanning multiple accounts in which unusual sign-ins were followed by threat actor-added authentication methods,...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ac.intave:samples (>=0.0.4, <=0.0.13) +13832 more potentially affected by CVE-2026-87877 via com.github.luben:zstd-jni (>=1.3.8-5, <=1.5.7-13)

com.github.luben:zstd-jni MAVEN version =1.3.8-5, =0.0.1, =0.0.4, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.3.5, =1.3.7 and more Source cves: CVE-2026-87877 Source advisory: SNYK:JAVA-COMGITHUBLUBEN-19659617...

CVE-2026-47837

A flaw was found in Spring Cloud Config Server. This vulnerability allows an unauthenticated remote attacker to send webhook requests to the /monitor endpoint without validation. This lack of authentication for a critical function could lead to a denial of service DoS condition, making the server...

Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise

How default keys, unauthenticated MCP sessions, and custom code guardrails expose cloud AI infrastructure to root-level remote code execution and IAM theft...

Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file. Work around: Until a fixed version is deployed, avoid running Checkov over untrusted content, an...

AZL-100917 CVE-2026-83530 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9

A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...