https://infosecledger.com/news/vulnerabilities/cve-2026-110002-snazzy-social-media-feed-critical/InfoSec Ledgeren2026-10-14T04:02:36ZCVE-2026-110002: Snazzy Social Media Feed Critical Flaw Lets Auth Users Run Codehttps://infosecledger.com/news/vulnerabilities/10-8-0-abandoned-cart-pro-auto-login-flaw-enables/InfoSec Ledgeren2026-10-14T04:02:36Z10.8.0: Abandoned Cart Pro Auto-Login Flaw Enables Credential-Free Admin Account Hijackhttps://infosecledger.com/news/vulnerabilities/9-1-cvss-click-to-chat-for-whatsapp-v4-44-lets/InfoSec Ledgeren2026-10-14T02:38:52Z9.1 CVSS: Click to Chat for WhatsApp v4.44 Lets Attackers Run Shortcodes Without Loginhttps://infosecledger.com/news/vulnerabilities/9-8-cvss-critical-heap-overflow-in-windows-media/InfoSec Ledgeren2026-10-14T02:00:44Z9.8 CVSS: Critical Heap Overflow in Windows Media Foundation Enables Unauthenticated Network Code Executionhttps://infosecledger.com/news/vulnerabilities/cvss-9-3-aem-6-5-stored-xss-enables-session/InfoSec Ledgeren2026-10-13T23:45:47ZCVSS 9.3: AEM 6.5 Stored XSS Enables Session Hijacking and Privilege Escalationhttps://infosecledger.com/news/vulnerabilities/cvss-9-3-unauthenticated-attackers-read-files-in/InfoSec Ledgeren2026-10-13T23:14:33ZCVSS 9.3: Unauthenticated Attackers Read Files in Adobe ColdFusion RDS Flawhttps://infosecledger.com/news/vulnerabilities/cve-2026-20293-cisco-ucs-secure-boot-bypass/InfoSec Ledgeren2026-10-13T22:25:57ZCVE-2026-20293: Cisco UCS Secure Boot Bypass Requires Auth or Physical Access, No Workarounds Existhttps://infosecledger.com/news/vulnerabilities/cve-2026-105445-docker-hub-patched-critical-token/InfoSec Ledgeren2026-10-13T17:11:14ZCVE-2026-105445: Docker Hub Patched Critical Token Hijacking Flaw After Two-Year Exposurehttps://infosecledger.com/news/cyber-attacks/430m-empire-market-sales-land-operator-with-40/InfoSec Ledgeren2026-10-13T14:50:07Z$430M Empire Market Sales Land Operator With 40-Year Prison Term and $100M Asset Seizurehttps://infosecledger.com/news/vulnerabilities/nvidia-aistore-critical-flaw-lets-attackers/InfoSec Ledgeren2026-10-13T14:10:45ZNVIDIA AIStore Critical Flaw Lets Attackers Revoke Tokens Without Authhttps://infosecledger.com/news/ai/capital-shortage-looms-as-broadcoms-tan-says-ai/InfoSec Ledgeren2026-10-13T12:39:08ZCapital shortage looms as Broadcom's Tan says AI investors lack economic clarityhttps://infosecledger.com/news/vulnerabilities/9-9-cvss-score-marks-marklogic-server-admin/InfoSec Ledgeren2026-10-13T11:41:42Z9.9 CVSS Score Marks MarkLogic Server Admin Takeover Risk in Deprecated APIhttps://infosecledger.com/news/ai/alibabas-new-qwen-glasses-cost-450-add-eye/InfoSec Ledgeren2026-10-13T10:42:46ZAlibaba’s New Qwen Glasses Cost $450, Add Eye-Tracking on Pro Modelhttps://infosecledger.com/news/ai/chinese-mathematicians-form-8-organization/InfoSec Ledgeren2026-10-13T00:31:02ZChinese Mathematicians Form 8-Organization Alliance for AI Researchhttps://infosecledger.com/news/ai/suki-raises-90m-series-e-for-ai-scribe-targets-60/InfoSec Ledgeren2026-10-13T00:07:50ZSuki Raises $90M Series E for AI Scribe, Targets $60-80M Annual Revenuehttps://infosecledger.com/news/vulnerabilities/critical-sql-injection-in-phpmyfaq-lets-attackers/InfoSec Ledgeren2026-10-12T22:53:53ZCritical SQL Injection in phpMyFAQ Lets Attackers Steal Credentialshttps://infosecledger.com/news/vulnerabilities/9-9-cvss-authenticated-attackers-can-execute/InfoSec Ledgeren2026-10-12T20:37:57Z9.9 CVSS: Authenticated Attackers Can Execute Arbitrary Code in IBM Db2 Mirror for i 7.4-7.6 via CVE-2026-96012https://infosecledger.com/news/vulnerabilities/cve-2026-109238-crawl4ai-0-9-4-fixes-cvss-9-2/InfoSec Ledgeren2026-10-12T16:45:16ZCVE-2026-109238: Crawl4AI 0.9.4 Fixes CVSS 9.2 SSRF Letting API Users Reach Private Networkshttps://infosecledger.com/news/ai/metas-2-controls-unlock-idle-ai-capacity-for-ads/InfoSec Ledgeren2026-10-12T16:20:43ZMeta’s 2 Controls Unlock Idle AI Capacity for Ads Without Harming Core Performancehttps://infosecledger.com/news/vulnerabilities/cvss-9-8-anydesk-pre-8-0-3-stream-handler-flaw/InfoSec Ledgeren2026-10-12T15:13:47ZCVSS 9.8: AnyDesk Pre-8.0.3 Stream Handler Flaw Grants Unauthenticated Root on Linuxhttps://infosecledger.com/news/ai/us-reverses-ban-uk-ai-safety-institute-to-test/InfoSec Ledgeren2026-10-12T13:44:09ZUS Reverses Ban: UK AI Safety Institute to Test Models from Anthropic, Google, OpenAIhttps://infosecledger.com/news/privacy/noyb-grades-1-000-eu-amendments-to-expose-mep/InfoSec Ledgeren2026-10-12T08:37:08Znoyb Grades 1,000+ EU Amendments to Expose MEP Privacy Stances in Digital Omnibushttps://infosecledger.com/news/ai/us-restores-uk-access-to-test-latest-ai-models/InfoSec Ledgeren2026-10-12T08:37:08ZUS Restores UK Access to Test Latest AI Models After Month-Long Halthttps://infosecledger.com/news/vulnerabilities/9-4-critical-flaw-in-otrs-ce-6-allows-remote/InfoSec Ledgeren2026-10-12T08:29:47Z9.4-Critical Flaw in OTRS CE 6 Allows Remote Authentication Bypass via Header Injectionhttps://infosecledger.com/news/ai/rea-uses-mcp-to-let-claude-code-cursor-automate/InfoSec Ledgeren2026-10-12T08:29:47ZREA Uses MCP to Let Claude Code, Cursor Automate Analysis of Binaries, Firmware, Apps Without Source