Articles
Newsflash
3 Nov 2026 Business and Enterprise Solutions
Joomla: unauthenticated SQL injection in Gridbox

In Gridbox component for Joomla versions prior to 2.20.4.2 a critical severity vulnerability CVE-2026-102788 was detected. This vulnerability allows an unauthenticated attacker to inject SQL commands through the sort-by parameter on store product list pages. To address this issue, users should upgrade Gridbox to version 2.20.4.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-102788.

Read more
CMS
3 Nov 2026 Business and Enterprise Solutions
Mautic: unrestricted file upload in campaign import leads to remote code execution

In Mautic versions 7.0.0 and later prior to 7.2.2 a critical severity vulnerability CVE-2026-115188 was detected. This vulnerability allows an authenticated user to upload arbitrary files, including server-side scripts, and execute code on the server. To address this issue, users should upgrade Mautic to version 7.2.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-115188.

Read more
Marketing Automation
3 Nov 2026 Infrastructure and Network
Consul: cross-namespace authorization bypass in consul-k8s ACL binding rules

In Consul (consul-k8s) versions 0.42.0 and later prior to 2.1.0 and 1.8.18 a critical severity vulnerability CVE-2026-110720 was detected. This vulnerability allows an attacker to obtain elevated Consul privileges. To address this issue, users should upgrade consul-k8s to version 2.1.0 or 1.8.18 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-110720.

Read more
Networking
3 Nov 2026 Business and Enterprise Solutions
Joomla: unauthenticated SQL injection in DJ-Classifieds

In DJ-Classifieds component for Joomla versions prior to 3.11.3 a critical severity vulnerability CVE-2026-105604 was detected. This vulnerability allows an unauthenticated attacker to inject SQL commands through the frontend search. To address this issue, users should upgrade DJ-Classifieds to version 3.11.3 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-105604.

Read more
CMS
3 Nov 2026 DevOps
Rancher: credential leak to cloud providers through the meta proxy

In Rancher versions prior to 2.15.3, 2.14.7, 2.13.11, 2.12.15, and 2.11.19 a critical severity vulnerability CVE-2026-88811 was detected. This vulnerability allows Rancher credentials passed through the meta proxy to be leaked to cloud providers. To address this issue, users should upgrade Rancher to version 2.15.3, 2.14.7, 2.13.11, 2.12.15, or 2.11.19 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-88811.

Read more
Developer Tools
2 Nov 2026 DevOps
Gitea: SSH certificate principal lookup allows authentication as another user

In Gitea versions prior to 28.2.0 a high severity vulnerability CVE-2026-109553 was detected. This vulnerability allows an attacker to authenticate as another user by registering that user’s public key as their own principal when a user certificate authority is trusted. To address this issue, users should upgrade Gitea to version 28.2.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-109553.

Read more
Developer Tools
Case Studies