WP Squared Affected by cPanel SQL Injection
WP Squared, a cPanel product for WordPress hosting, is also affected by CVE-2026-58048. The fix is included in build 138.1.6.
Tag: SQL injection
Adobe Patches Critical Campaign Classic Flaw Allowing Code Execution Without User Interaction
Adobe has released security updates to address a maximum-severity vulnerability in Campaign Classic (ACC), its enterprise marketing automation platform. The flaw, tracked…
CVE-2026-48448: SQL Injection in Adobe Campaign Classic
CVE-2026-48448 is a high-severity SQL injection vulnerability in Adobe Campaign Classic with a CVSS score of 8.6. It could allow arbitrary file…
Anthropic Reveals Claude AI Models Breached Three Organizations During CTF Evaluations
Anthropic disclosed on Thursday that three of its AI models—Claude Opus 4.7, Mythos 5, and an unnamed internal research model—breached the production…
Hackers Exploit Unpatched Windmill Path Traversal Flaw CVE-2026-29059 to Read Server Files
A high-severity path traversal vulnerability in the open-source developer platform Windmill, tracked as CVE-2026-29059 (CVSS 7.5), is under active exploitation. The flaw…
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
A critical unauthenticated remote code execution vulnerability has been discovered in WordPress core, affecting versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1.…
UniFi Talk Application Vulnerabilities
UniFi Talk is a product by Ubiquiti affected by CVE-2026-50747, a set of SQL injection vulnerabilities. Users are advised to update to…
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti has released security updates to address multiple critical vulnerabilities across its UniFi product line, including UniFi Connect, UniFi Talk, UniFi Access,…
GeoServer: Open-Source Mapping Server Under Active Attack
GeoServer is an open-source server for sharing geospatial data. A newly disclosed zero-day SQL injection vulnerability is being actively exploited, potentially leading…
LangGraph Flaw Chain Enables Remote Code Execution on Self-Hosted AI Agents
Cybersecurity researchers at Check Point have disclosed three now-patched security flaws in LangGraph, an open-source framework by LangChain for building stateful, multi-agent…