CVE-2026-12710

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration versions from 2025-04-28 to 2026-04-04 allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required...

EUVD-2026-64241

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration versions from 2025-04-28 to 2026-04-04 allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required...

CVE-2026-12710 Missing Authorization in Application Integration QueryEngineTask

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration versions from 2025-04-28 to 2026-04-04 allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required...

CVE-2026-12710 Missing Authorization in Application Integration QueryEngineTask

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration versions from 2025-04-28 to 2026-04-04 allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required...

CVE-2026-12710

CVE-2026-12710 is a Missing Authorization vulnerability in the QueryEngineTask component of Google Cloud Application Integration , affecting versions from 2025-04-28 to 2026-04-04. An external attacker with no privileges or user interaction can access sensitive internal data over the network. The...

CVE-2026-76057 AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an...

Automated-Data-and-Code-Quality-Controller

codesentry Static analysis for Python and JavaScript. Finds i...

PT-2026-79519

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration versions from 2025-04-28 to 2026-04-04 allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required...

CVE-2026-12710: Missing Authorization

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration versions from 2025-04-28 to 2026-04-04 allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required...

Wazuh and AI For Enhanced SOC Workflows

Artificial Intelligence AI has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making...

CVE-2026-61397

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication plugin and Google OAuth integration. This issue affects Apache CloudStack: from 4.19.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to...

WordPress YayCurrency plugin < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration vulnerability

Unauthenticated Order and Vendor Financial Data Disclosure via Dokan Integration vulnerability discovered by Shivamani Vastrala in WordPress Plugin YayCurrency versions 3.3.5...

SUSE CVE-2026-74965

Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-63004: Server-Side Request Forgery (SSRF)

Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon and integration subsystem passes the operator-controlled parameters.url value from src/lib/addons/webhook.ts and the Slack, Microsoft Teams, Datadog, and New Relic integrations to Addon.fetchRetry i...

CVE-2026-61397: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication plugin and Google OAuth integration. This issue affects Apache CloudStack: from 4.19.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to...

Kibana 9.1.x < 9.4.5 / 9.5.x < 9.5.1 Privilege Escalation (ESA-2026-128)

The version of Kibana installed on the remote host is 9.1.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-128 advisory. - Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege...

PT-2026-80230

Summary Unleash's addon/integration subsystem lets an operator configure a webhook and the Slack, Microsoft Teams, Datadog, and New Relic integrations with a target url parameter. Whenever a subscribed feature-flag event fires, the Unleash server itself issues an HTTP request to that configured...

wagtail-embedvideos (5.1.0), wagtail-reoako (2.1.1) +2 more potentially affected by unknown CVE via wagtail (5.1.3)

wagtail PYPI version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-embedvideos 5.1.0 - wagtail-reoako 2.1.1 - wagtail-spa-integration =2.1.0, =2.1.3 - wagtail-treemodeladmin 1.8.0 Source cves: unknown CVE...

wagtail-embedvideos (5.1.0), wagtail-reoako (2.1.1) +2 more potentially affected by CVE-2026-55468 via wagtail (5.1.3)

wagtail PYPI version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-embedvideos 5.1.0 - wagtail-reoako 2.1.1 - wagtail-spa-integration =2.1.0, =2.1.3 - wagtail-treemodeladmin 1.8.0 Source cves: CVE-2026-554...

wagtail-embedvideos (5.1.0), wagtail-reoako (2.1.1) +2 more potentially affected by CVE-2026-54262 via wagtail (5.1.3)

wagtail PYPI version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-embedvideos 5.1.0 - wagtail-reoako 2.1.1 - wagtail-spa-integration =2.1.0, =2.1.3 - wagtail-treemodeladmin 1.8.0 Source cves: CVE-2026-542...