Vulnerabilities
Craft CMS Authentication Bypass Allows Account Takeover via Code Reuse
A high-severity flaw in Craft CMS versions prior to 5.11.0 lets attackers reuse email verification codes to reset passwords and seize control of user accounts.
CWE-287
Everything SecOps Signal has reported about CWE-287: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Juniper Junos J-Web Authentication Bypass Enables Remote Root Command Execution
Unauthenticated attackers can execute arbitrary commands with root privileges on exposed Juniper Junos OS J-Web interfaces before specific security releases.
Vulnerabilities
Wukong_HRM ParamAspect Flaw CVE-2026-108707 Lets Remote Attackers Access All HR Endpoints Unauthenticated
A critical flaw in Wukong_HRM allows unauthenticated access to all HR endpoints, exposing employee data and administrative controls to remote attackers.