rapid7

CVE-2026-92767: Improper Neutralization of Input During Web Page Generation

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input ...
rapid7

CVE-2026-95386: Loop with Unreachable Exit Condition

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
rapid7

CVE-2026-58865: Improper Restriction of Operations within the Bounds of a Memory Buffer

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution ...
rapid7

How AI Is Changing the Roles Required in the Security Operations Center

How will AI change the role of SOC analysts? Where does human judgment remain essential? Why are SOC engineering roles expected to expand? Why should Exposure Management be a continuous SOC function?
rapid7

Higher education is under siege, and fragmented security is making it harder to respond

Why is higher education so difficult to secure? Why multi-campus fragmentation increases cyber risk What should university systems change? Higher education faces a difficult security equation.
rapid7

CVE-2026-97281: Missing Authorization

Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions. CVSS 3.1 Base Score: 6.3 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L ...
rapid7

CVE-2026-55252: URL Redirection to Untrusted Site

OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be ...
rapid7

CVE-2026-102261: Authorization Bypass Through User-Controlled Key

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleon_cms/admin/media_controller.rb of the ...
rapid7

CVE-2026-86950: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously ...
rapid7

CVE-2026-97267: miniOrange Prevent files / folders access: Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.

CVSS 3.1 Base Score: 4.3 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) With curated Threat Intelligence, you can see which vulnerabilities truly put ...
rapid7

CVE-2026-54875: Observable Timing Discrepancy

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to ...
rapid7

CVE-2026-13210: Incorrect Authorization

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an ...