CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
16-Year-Old Researcher Finds Microsoft Auth Vulnerability that Exposes 17.3 Trillion Stored Records
4 min1
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
in the wild
Critical WSO2 Vulnerability Allow Hackers to Gain Full Admin Access
3 min
Apache Syncope Vulnerabilities Allow Attackers to Execute Malicious Code and Bypass Controls
3 min3
Critical Issabel PBX Command Execution Vulnerability Exploited in the Wild
in the wild 3 min1
Enterprises Warned of Attacks Exploiting WSO2 Vulnerability
in the wild 2 min2
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
in the wild 2 min1
CVE-2026-82310: Apache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT access
CVE-2026-87802: Apache Syncope: SRA OAuth2 JWT signature verification bypass
1
CVE-2026-87785: Apache Syncope: JWT subject spoofing
CVE-2026-78330: Apache Syncope: Privilege escalation for admin user via JWT authentication
CVE-2026-73178: Apache Syncope: JWT Access Token takeover
1
Artifactory flaws chained in attacks deploying backdoor malware
in the wild 2 min2
Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension
2 min
JWT used for authentication in web GUI signed with static key
[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
in the wild 3 min
SharePoint CVE-2026-55040 Comes Under Attack Following Public Exploit
in the wild 2 min1
Attackers exploit critical SharePoint flaw after PoC goes public (CVE-2026-55040)
in the wild 2 min
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
3 min1
Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)
1