CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence…
Tag: file upload
SP Page Builder: JoomShaper Page Builder
SP Page Builder by JoomShaper is a Joomla page builder affected by CVE-2026-48908, an unrestricted file upload vulnerability allowing unauthenticated PHP code…
CVE-2026-33691: Progress Kemp LoadMaster WAF Bypass via Whitespace Padding
A high-severity flaw in Progress Kemp LoadMaster allows WAF bypass by using whitespace padding in filenames to circumvent file upload extension checks.