
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 28, 2026 to October 4, 2026)
Wordfence’s weekly report lists new WordPress vulnerabilities, but this excerpt names none.
11 stories, newest first · one card per story

Wordfence’s weekly report lists new WordPress vulnerabilities, but this excerpt names none.

IBM and Red Hat's Lightwell says it found more than 400 new vulnerabilities in widely used Java libraries.

IBM and Red Hat say Lightwell fixed more than 400 previously unknown Java library flaws without naming them.
libpcap 1.10.7 fixes seven vulnerabilities, including CVE-2026-31912 affecting the deprecated bpf_filter(), and all users are advised to update.

Microsoft's September Patch Tuesday fixes a record 974 CVEs, with two vulnerabilities already actively exploited and 58 more likely to be targeted.

SAP's September 2026 Patch Tuesday ships 19 security notes, including four criticals led by a CVSS 10.0 memory-corruption flaw in Extended Passport Processing.

Canada's Cyber Centre flagged multiple n8n vulnerabilities in versions prior to 1.123.76 and several 2.x releases, urging users to update.

A researcher disclosed nine vulnerabilities in ATM encryption and authentication software, highlighting weaknesses across the software supply chain.

Kaspersky's Q2 2026 report tallies vulnerability, exploit, and C2 framework statistics, adding first-ever data on open-source AI framework flaws.
Sonatype reports enterprise applications contain 4.31x more critical and high-severity vulnerabilities as accelerated software creation drives rising vulnerability levels.
Microsoft's August Patch Tuesday delivers fixes for 400 security vulnerabilities across its product lineup.
Today 1.6K readers · 2.5K views · 780 reads · all time 189K views