https://blueteaminsider.com/section/vulnerabilities/netmaker-1-7-0-auth-bypass-lets-users-steal/BlueTeam Insideren2026-10-22T12:02:24ZNetmaker 1.7.0 Auth Bypass Lets Users Steal WireGuard Keyshttps://blueteaminsider.com/section/vulnerabilities/lotus-0-10-2-sql-injection-allows-authenticated/BlueTeam Insideren2026-10-22T11:45:44ZLotus 0.10.2 SQL Injection Allows Authenticated Users to Target Shared Databasehttps://blueteaminsider.com/section/vulnerabilities/ai-security-tools-fail-at-remediation-despite/BlueTeam Insideren2026-10-22T10:06:20ZAI Security Tools Fail at Remediation Despite High Detection Rateshttps://blueteaminsider.com/section/vulnerabilities/aws-fpga-dev-kit-fixes-local-privilege-escalation/BlueTeam Insideren2026-10-22T05:42:45ZAWS FPGA Dev Kit Fixes Local Privilege Escalation in Installerhttps://blueteaminsider.com/section/vulnerabilities/amazon-documentdb-mcp-server-allows-write-bypass/BlueTeam Insideren2026-10-22T04:44:48ZAmazon DocumentDB MCP Server Allows Write Bypass in Read-Only Modehttps://blueteaminsider.com/section/vulnerabilities/oracle-soa-suite-critical-cve-2026-91218-allows/BlueTeam Insideren2026-10-22T04:32:27ZOracle SOA Suite Critical CVE-2026-91218 Allows Low-Priv Attackers to Modify or Delete Datahttps://blueteaminsider.com/section/vulnerabilities/aws-confirms-early-exploitation-of-php2shell/BlueTeam Insideren2026-10-22T02:56:38ZAWS confirms early exploitation of PHP2Shell vulnerabilities before public disclosurehttps://blueteaminsider.com/section/vulnerabilities/splunk-enterprise-scheduled-search-bypass-allows/BlueTeam Insideren2026-10-21T23:31:08ZSplunk Enterprise Scheduled Search Bypass Allows Unsafe Command Executionhttps://blueteaminsider.com/section/vulnerabilities/pillow-tiff-bug-cve-2026-112902-causes-crashes/BlueTeam Insideren2026-10-21T21:58:36ZPillow TIFF Bug CVE-2026-112902 Causes Crashes and Memory Leaks in Versions Up to 12.3.0https://blueteaminsider.com/section/vulnerabilities/pillow-13-0-0-fixes-vulnerabilities-python-teams/BlueTeam Insideren2026-10-21T19:44:06ZPillow 13.0.0 Fixes Vulnerabilities; Python Teams Urged to Update Imaging Library Versionshttps://blueteaminsider.com/section/cyber-attacks/bronze-sandcastle-abuses-sandboxie-and-other-apps/BlueTeam Insideren2026-10-21T17:45:30ZBRONZE SANDCASTLE abuses Sandboxie and other apps via DLL sideloadinghttps://blueteaminsider.com/section/vulnerabilities/code-injection-in-mindsdb-openbbtable-allows/BlueTeam Insideren2026-10-21T17:35:47ZCode Injection in MindsDB OpenBBtable Allows Remote Code Executionhttps://blueteaminsider.com/section/vulnerabilities/f5-patches-critical-nginx-heap-overflow-and-use/BlueTeam Insideren2026-10-21T09:58:30ZF5 Patches Critical NGINX Heap Overflow and Use-After-Free Flawshttps://blueteaminsider.com/section/vulnerabilities/pillow-jpeg-buffer-overflow-arbitrary-memory/BlueTeam Insideren2026-10-21T08:24:44ZPillow JPEG Buffer Overflow: Arbitrary Memory Writes in v12.3.0 and Earlier via Standard Lossless Fileshttps://blueteaminsider.com/section/cloud-security/connectwise-disables-services-after-stolen-entra/BlueTeam Insideren2026-10-21T08:05:11ZConnectWise Disables Services After Stolen Entra ID Credentials Bypass M365 Passwordshttps://blueteaminsider.com/section/cyber-attacks/iq-lvbs-alleges-unauthorized-access-attempts-from/BlueTeam Insideren2026-10-21T04:14:30ZIQ.Lvbs alleges unauthorized access attempts from Comma.ai IP addresshttps://blueteaminsider.com/section/vulnerabilities/freerdp-heap-buffer-overflow-in-rdpsnd-channel/BlueTeam Insideren2026-10-21T02:38:21ZFreeRDP Heap Buffer Overflow in RDPSND Channel Enables Remote Code Executionhttps://blueteaminsider.com/section/vulnerabilities/adm-zip-uncaught-exception-crashes-node-js-on/BlueTeam Insideren2026-10-21T01:14:54Zadm-zip Uncaught Exception Crashes Node.js on Malformed ZIPhttps://blueteaminsider.com/section/vulnerabilities/adm-zip-cve-2026-114104-inconsistent-entry/BlueTeam Insideren2026-10-21T01:08:28Zadm-zip CVE-2026-114104: Inconsistent Entry Resolution Bypasses Validationhttps://blueteaminsider.com/section/vulnerabilities/textream-websocket-server-lacks-origin-check/BlueTeam Insideren2026-10-20T22:44:09ZTextream WebSocket Server Lacks Origin Check, Exposes Local Datahttps://blueteaminsider.com/section/vulnerabilities/wordpress-cherry-plugin-path-traversal-allows/BlueTeam Insideren2026-10-20T21:11:14ZWordPress Cherry Plugin Path Traversal Allows Unauthenticated File Accesshttps://blueteaminsider.com/section/vulnerabilities/npm-launch-editor-and-vite-command-injection-on/BlueTeam Insideren2026-10-20T20:45:54Znpm launch-editor and Vite Command Injection on Windows via Path Suffix Bypasshttps://blueteaminsider.com/section/vulnerabilities/npm-mcp-server-cve-2026-111770-cross-client-data/BlueTeam Insideren2026-10-20T20:39:04Znpm MCP Server CVE-2026-111770 Cross-Client Data Leak in Shared HTTP Instanceshttps://blueteaminsider.com/section/vulnerabilities/apache-couchdb-cve-2026-86471-allows-admins-to/BlueTeam Insideren2026-10-20T18:14:45ZApache CouchDB CVE-2026-86471 Allows Admins to Execute Shell Commandshttps://blueteaminsider.com/section/cyber-attacks/windows-11-update-bug-blocks-smart-app-control/BlueTeam Insideren2026-10-20T15:09:50ZWindows 11 Update Bug Blocks Smart App Control Activation; Registry Fix Availablehttps://blueteaminsider.com/section/cyber-attacks/generative-ai-enables-custom-malware-creation-and/BlueTeam Insideren2026-10-20T14:24:57ZGenerative AI Enables Custom Malware Creation and Signature Bypass