https://secopssignal.com/news/vulnerabilities/roskus-prospero-flow-crm-missing-authorization-in/SecOps Signalen2026-10-22T21:34:15ZRoskus Prospero Flow CRM Missing Authorization in User API Exposes Accountshttps://secopssignal.com/news/vulnerabilities/gpac-mp4box-bifs-null-pointer-dereference-in/SecOps Signalen2026-10-22T20:50:35ZGPAC MP4Box BIFS NULL Pointer Dereference in StatSFVec2f Triggers Local DoS via CVE-2025-60479https://secopssignal.com/news/vulnerabilities/wasmtime-symlink-bug-enables-cap-std-sandbox/SecOps Signalen2026-10-22T20:17:45ZWasmtime symlink bug enables cap-std sandbox escape for host file accesshttps://secopssignal.com/news/vulnerabilities/smilecdr-hapi-fhir-flaw-enables-cross-tenant-data/SecOps Signalen2026-10-22T18:37:42ZSmileCDR HAPI FHIR Flaw Enables Cross-Tenant Data Access via Partition Identityhttps://secopssignal.com/news/vulnerabilities/librsvg-use-after-free-in-xinclude-parsing/SecOps Signalen2026-10-22T17:41:49ZLibrsvg use-after-free in XInclude parsing patched across multiple versionshttps://secopssignal.com/news/vulnerabilities/metr-finds-vulnerabilities-in-openais-internal/SecOps Signalen2026-10-22T17:22:03ZMETR Finds Vulnerabilities in OpenAI’s Internal Monitoring System Pilothttps://secopssignal.com/news/vulnerabilities/npm-toml-high-severity-denial-of-service/SecOps Signalen2026-10-22T17:20:07Znpm toml High-Severity Denial-of-Service Vulnerability CVE-2026-114144https://secopssignal.com/news/cyber-attacks/keeper-security-adds-ai-phishing-protection-to/SecOps Signalen2026-10-22T14:05:25ZKeeper Security Adds AI Phishing Protection to Browser Extensionhttps://secopssignal.com/news/vulnerabilities/jeewms-path-traversal-flaw-allows-unauthenticated/SecOps Signalen2026-10-22T13:33:45ZJeeWMS Path Traversal Flaw Allows Unauthenticated File Accesshttps://secopssignal.com/news/vulnerabilities/json-scada-high-severity-sql-injection-lets-users/SecOps Signalen2026-10-22T11:52:46ZJSON-SCADA High-Severity SQL Injection Lets Users Alter Historian Records in Pre-0.65 Versionshttps://secopssignal.com/news/cyber-attacks/weak-credentials-and-stale-accounts-enabled/SecOps Signalen2026-10-22T10:06:04ZWeak Credentials and Stale Accounts Enabled Ransomware Breach at Welsh Data Unithttps://secopssignal.com/news/vulnerabilities/e-business-suite-workflow-faces-unauthenticated/SecOps Signalen2026-10-22T09:09:58ZE-Business Suite Workflow Faces Unauthenticated Remote Takeover in Oracle October 2026 Patch Cyclehttps://secopssignal.com/news/vulnerabilities/erlang-esaml-cve-2026-93471-saml-amplification/SecOps Signalen2026-10-22T07:53:31ZErlang esaml CVE-2026-93471: SAML Amplification Crashes Servers Before Verificationhttps://secopssignal.com/news/vulnerabilities/aws-strands-agents-cve-2026-78379-remote-code/SecOps Signalen2026-10-22T06:03:28ZAWS Strands Agents CVE-2026-78379 Remote Code Execution via Crafted Prompt in python_replhttps://secopssignal.com/news/vulnerabilities/oracle-soa-suite-t3-iiop-vulnerability-allows/SecOps Signalen2026-10-22T04:21:36ZOracle SOA Suite T3/IIOP Vulnerability Allows Application Takeoverhttps://secopssignal.com/news/vulnerabilities/oracle-identity-manager-ldap-gateway-allows/SecOps Signalen2026-10-22T03:58:28ZOracle Identity Manager LDAP Gateway Allows Unauthenticated Takeoverhttps://secopssignal.com/news/vulnerabilities/gitlab-integer-overflow-in-regex-parsing-permits/SecOps Signalen2026-10-22T02:26:44ZGitLab Integer Overflow in Regex Parsing Permits Remote Code Execution Without Authhttps://secopssignal.com/news/vulnerabilities/apache-pulsar-shadow-topic-auth-flaw-cve-2026/SecOps Signalen2026-10-21T18:52:36ZApache Pulsar Shadow Topic Auth Flaw CVE-2026-105937 Allows Cross-Tenant Data Accesshttps://secopssignal.com/news/vulnerabilities/d-link-dhp-w610av-hnap-vulnerability-enables/SecOps Signalen2026-10-21T10:28:28ZD-Link DHP-W610AV HNAP Vulnerability Enables Remote Empty Password Creation via CVE-2026-113736https://secopssignal.com/news/cloud-security/connectwise-app-identity-compromise-exposes/SecOps Signalen2026-10-21T08:05:11ZConnectWise App Identity Compromise Exposes Microsoft 365 Tenants to Data Breachhttps://secopssignal.com/news/vulnerabilities/totolink-x2000r-firmware-cve-2026-10135/SecOps Signalen2026-10-21T03:23:03ZTOTOLINK X2000R Firmware CVE-2026-10135: Authenticated Command Injection Enables Remote Code Executionhttps://secopssignal.com/news/vulnerabilities/totolink-x2000r-stack-buffer-overflow-in-ipv6/SecOps Signalen2026-10-21T01:40:56ZTotolink X2000R Stack Buffer Overflow in IPv6 Setup Enables Critical Remote Code Executionhttps://secopssignal.com/news/vulnerabilities/qingteng-host-security-platform-os-command/SecOps Signalen2026-10-21T01:26:46ZQingteng Host Security Platform OS Command Injection Flaw Exposes Clientshttps://secopssignal.com/news/vulnerabilities/plex-media-server-arbitrary-file-write-and-ssrf/SecOps Signalen2026-10-21T00:13:47ZPlex Media Server Arbitrary File Write and SSRF Flaws Trigger Oct 23 Federal Mitigation Deadlinehttps://secopssignal.com/news/vulnerabilities/ffmpeg-null-pointer-dereference-in-libavcodec/SecOps Signalen2026-10-20T23:17:02ZFFmpeg NULL Pointer Dereference in libavcodec Enables Crash via Crafted Media Files