VulnerabilitiesCVE-2026-93674CVSS 9.82 min read
Rapid7's Metasploit release covers an auth bypass, three unauthenticated RCE paths and two authenticated code execution flaws in the open-source LLM workflow builder.
VulnerabilitiesCVE-2026-107186CVSS 8.62 min read
Rapid7 says a legacy DWR endpoint in Eptura Archibus let it run workflow rules without credentials, chain that into a full database read, and reach remote code execution through an insecure file upload.
VulnerabilitiesExploitedCVE-2026-0257CVSS 7.82 min read
Palo Alto Networks says it continues to see ransomware actors abuse an authentication bypass in PAN-OS and Prisma Access that lets attackers set up unauthorized VPN connections.
VulnerabilitiesBrief3 min read
A JSON array sent as the api_token let unauthenticated attackers log in as existing users on Laravel apps backed by MySQL or MariaDB, and a working proof-of-concept is public.
VulnerabilitiesExploitedCVE-2026-102764CVSS 9.31 min read
The report describes an authentication bypass and urges emergency remediation and investigation.
