Openwave Webtop vulnerability CVE-2026-111793 is exploited in the wild, per JPCERT/CC. Upgrade Webtop Media Transcoder to 1.1.22.0 or later.

Related Posts:

• QNAP Warns NAS Users as Exploited Plex2Shell Vulnerabilities Hit Plex Media Server
• WP Duplicate Vulnerability CVE-2026-123751 Exploited in the Wild, No Patch Available
• PoC Published for Hugging Face Datasets RCE CVE-2026-57845 (CVSS 8.8) in Library With 38 Million Monthly Downloads

The post Openwave Webtop Media Transcoder Vulnerability CVE-2026-111793 Exploited in the Wild appeared first on Daily CyberSecurity.

Airbyte vulnerability exploited in the wild lets users run code in Connector Builder containers. Upgrade self-managed Airbyte to 2.2.0 now.

Related Posts:

• Rails 8.0.5.2 and 8.1.4.1 Fix 21 Security Flaws, Including Critical Active Storage File Write Bug
• SnappyMail Remote Code Execution Chain Disclosed With Public PoC Exploit Code
• PoC Exploit and Technical Details Published for Puppet Server RCE Flaw CVE-2026-115731 (CVSS 9.4)

The post Airbyte Vulnerability Exploited in the Wild Lets Attackers Run Code in Connector Builder appeared first on Daily CyberSecurity.

CERT/CC warns of a critical Xerj authentication bypass tracked as CVE-2026-97406 that lets attackers mint persistent tokens without passkeys.

Related Posts:

• Android SMS of Death Bug Triggers Remote Reboots
• JetBrains Patches Critical Flaws in IDEs and Background Services After Certificate Breach
• Bitcoin Core DoS Vulnerability Crashes Remote Nodes

The post CERT/CC Warns of Xerj Authentication Bypass Flaw CVE-2026-97406 appeared first on Daily CyberSecurity.

A SiteGuard Server Edition vulnerability, CVE-2026-106931, is exploited in the wild and grants root or SYSTEM access. Update to Ver8.00 Update 5 now.

Related Posts:

• Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update
• Citrix Patches XenServer Host Escape Risks and UniconOS Privilege Escalation Flaws
• Juniper Networks Patches Critical Junos OS Vulnerabilities Across Core Platforms

The post SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access appeared first on Daily CyberSecurity.

CERT/CC disclosed three DataElement Bisheng vulnerabilities (CVE-2026-96679, CVE-2026-96681, CVE-2026-100156) allowing unauthenticated admin takeover.

Related Posts:

• Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update
• Citrix Patches XenServer Host Escape Risks and UniconOS Privilege Escalation Flaws
• SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access

The post CERT/CC Discloses Three DataElement Bisheng Vulnerabilities Allowing Admin Account Takeover and Credential Abuse appeared first on Daily CyberSecurity.

Patch CVE-2026-110005 (CVSS 9.9), a critical Komodo Periphery vulnerability allowing authenticated users to run arbitrary OS commands as root on the host.

Related Posts:

• Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts
• Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells
• Public PoC Exploit Code and Technical Details Disclosed for CVE-2026-74580 Linux vhost Vulnerability (Vghost)

The post CERT/CC Warns of Critical CVE-2026-110005 OS Command Injection in Komodo Periphery Agent appeared first on Daily CyberSecurity.

An unpatched Shopware vulnerability, CVE-2026-104937, lets stored XSS steal admin tokens and lead to RCE in Shopware 6.7. Restrict media uploads now.

Related Posts:

• Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts
• Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells
• Public PoC Exploit Code and Technical Details Disclosed for CVE-2026-74580 Linux vhost Vulnerability (Vghost)

The post Unpatched Shopware Flaw CVE-2026-104937 Turns Stored XSS Into Admin Takeover and RCE appeared first on Daily CyberSecurity.

CERT/CC lists 11 unpatched Thelia vulnerabilities, including remote code execution flaws in versions 2.6.0, 2.6.1 and 3.0.0. Lock down admin access now.

Related Posts:

• SAP Security Patch Day October 2026 Fixes CVSS 10 Cloud SDK Flaw and Three More Critical Bugs
• IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service
• Discourse Vulnerabilities Let Attackers Hijack Pages for Every Visitor and Read Server Files

The post CERT/CC Warns of 11 Unpatched Thelia Vulnerabilities Enabling Remote Code Execution appeared first on Daily CyberSecurity.