https://malwarebrief.com/section/vulnerabilities/sharepoint-code-injection-flaw-cve-2026-102863/Malware Briefen2026-10-14T22:24:37ZSharePoint Code Injection Flaw CVE-2026-102863 Threatens Server Privilegeshttps://malwarebrief.com/section/vulnerabilities/pan-os-admin-script-injection-flaw-threatens/Malware Briefen2026-10-14T20:13:28ZPAN-OS Admin Script Injection Flaw Threatens Firewalls, Panorama; No Active Exploitation Reportedhttps://malwarebrief.com/section/vulnerabilities/unauthenticated-rce-in-e107-cms-install-script/Malware Briefen2026-10-14T19:12:25ZUnauthenticated RCE in e107 CMS Install Script Compromises Server Privilegeshttps://malwarebrief.com/section/vulnerabilities/drupal-field-ui-flaw-exposes-sites-to/Malware Briefen2026-10-14T18:59:19ZDrupal Field UI Flaw Exposes Sites to Unauthenticated Remote Code Executionhttps://malwarebrief.com/section/vulnerabilities/net-recursion-flaw-cve-2026-58280-risks-service/Malware Briefen2026-10-14T14:53:36Z.NET Recursion Flaw CVE-2026-58280 Risks Service Outages Across Platformshttps://malwarebrief.com/section/cyber-attacks/seo-poisoning-tricks-msp-admins-into-handing-over/Malware Briefen2026-10-14T10:25:28ZSEO poisoning tricks MSP admins into handing over WatchGuard credentials via fake download pageshttps://malwarebrief.com/section/vulnerabilities/local-attackers-can-elevate-privileges-via/Malware Briefen2026-10-14T10:07:10ZLocal attackers can elevate privileges via Windows SmartScreen memory flawhttps://malwarebrief.com/section/vulnerabilities/windows-nlb-flaw-exposes-infrastructure-to/Malware Briefen2026-10-14T03:18:58ZWindows NLB Flaw Exposes Infrastructure to Unauthenticated Remote Code Execution Without Prior Authenticationhttps://malwarebrief.com/section/vulnerabilities/organisations-face-critical-risk-as/Malware Briefen2026-10-14T02:38:52ZOrganisations Face Critical Risk as Unauthenticated Attackers Run Code via Microsoft PPP EAP-TLS Heap Overflowhttps://malwarebrief.com/section/vulnerabilities/esri-portal-users-face-critical-risk-as-cve-2026/Malware Briefen2026-10-13T17:00:33ZEsri Portal Users Face Critical Risk as CVE-2026-69227 Grants Unauthenticated Admin Accesshttps://malwarebrief.com/section/vulnerabilities/organisations-face-critical-credential-theft-risk/Malware Briefen2026-10-13T17:00:33ZOrganisations face critical credential theft risk in Ivanti Xtraction prior to v2026.4https://malwarebrief.com/section/vulnerabilities/quarkus-code-generation-flaw-drops-security-roles/Malware Briefen2026-10-13T15:13:32ZQuarkus Code Generation Flaw Drops Security Roles on Custom Endpointshttps://malwarebrief.com/section/vulnerabilities/wazuh-cluster-workers-can-overwrite-config-files/Malware Briefen2026-10-13T14:50:07ZWazuh Cluster Workers Can Overwrite Config Files to Gain Root Accesshttps://malwarebrief.com/section/vulnerabilities/unpatched-grav-oauth-plugin-exposes-sites-to/Malware Briefen2026-10-13T12:58:58ZUnpatched Grav OAuth plugin exposes sites to remote admin takeover via predictable credentialshttps://malwarebrief.com/section/vulnerabilities/organisations-urged-to-isolate-d-link-dcs-930l-as/Malware Briefen2026-10-13T11:21:34ZOrganisations Urged to Isolate D-Link DCS-930L as Remote Firmware Tampering Exploit Code Circulates