Articles
Newsflash
27 Aug 2026 Data Management and Analytics
Apache Airflow: Improper Scope Handling Leads to Credential Exposure

In Apache Airflow versions before 22.3.0 a medium severity vulnerability CVE-2026-68868 was detected. This vulnerability allows an attacker to resolve another team’s Connection or Variable, obtaining its credentials in full. To address this issue, users should upgrade Apache Airflow to version 22.3.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-68868.

Read more
Data Analytics
27 Aug 2026 Business and Enterprise Solutions
Joomla: Improper Access Control in Cotton Cloud

In Cotton Cloud component for Joomla versions earlier than 2.0.3 a medium severity vulnerability CVE-2026-67284 was detected. This vulnerability allows authenticated users to perform unauthorized file operations on files owned by other users. To address this issue, users should upgrade Cotton Cloud to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-67284.

Read more
CMS
27 Aug 2026 Business and Enterprise Solutions
Joomla: Unauthenticated remote code execution in Fabrik

In Fabrik component for Joomla versions before 4.6.8 a critical severity vulnerability CVE-2026-67282 was detected. This vulnerability allows an unauthenticated attacker to execute arbitrary code. To address this issue, users should upgrade Fabrik to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-67282.

Read more
CMS
27 Aug 2026 Business and Enterprise Solutions
WooCommerce: Arbitrary Order Total Reduction in Wallet System for WooCommerce

In Wallet System for WooCommerce component for WooCommerce versions before 2.7.10 a medium severity vulnerability CVE-2026-15045 was detected. This vulnerability allows authenticated customers to arbitrarily reduce their own order total without paying the merchant. To address this issue, users should upgrade Wallet System for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15045.

Read more
E-commerce
27 Aug 2026 Data Management and Analytics
SQLite: SQL Injection Vulnerability

In SQLite in affected versions a medium severity vulnerability CVE-2025-41771 was detected. This vulnerability allows an authenticated attacker to perform a SQL injection. To address this issue, users should upgrade SQLite to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-41771.

Read more
Database
26 Aug 2026 Data Management and Analytics
Kibana: Authorization Bypass and Unauthorized Data Modification in AI Assistant

In Kibana versions up to 8.16.2.a medium severity vulnerability CVE-2026-78581 was detected. This vulnerability allows an authenticated attacker to access or modify AI Assistant conversations they do not own, leading to unauthorized data modification and potential information disclosure. This occurs due to an Authorization Bypass Through User-Controlled Key (CWE-639) flaw. By referencing another user’s AI Assistant conversation identifier, an attacker can bypass Access Control Lists (ACLs) and interact with that conversation (CAPEC-1). However, successful exploitation requires the attacker to obtain or guess this specific, hard-to-guess identifier. To address this issue, users should upgrade Kibana to a patched version Elastic Kibana versions 8.16.3 and 8.17.2.. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-78581.

Read more
Data Analytics
Case Studies