CVE-2022-29841

Multi security vulnerabilities affect Western Digital My Cloud PR4100 CVE-2022-29842

Multi security vulnerabilities affect Western Digital My Cloud PR4100

Do Son June 11, 2023

In the ever-evolving landscape of cybersecurity, one of the newest frontiers is the world of network-attached storage...

CVE-2022-29841: RCE flaw found in Western Digital My Cloud OS AI Storage Shortage QLC SSD Demand CVE-2022-29841 WD My Cloud, RCE Vulnerability

CVE-2022-29841: RCE flaw found in Western Digital My Cloud OS

Do Son January 26, 2023

Western Digital has fixed a critical severity vulnerability that enabled attackers to gain remote code execution and...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-65660CVSS 8.8
Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
Admin intel📅 Updated: Sep 25, 2026
CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-71362CVSS 9.1
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-87902
Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-85102CVSS 9.8
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93616CVSS 9.8
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026

CVE-2026-70009CVSS 9.3
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker...
📅 Updated: Sep 25, 2026
CVE-2026-85889CVSS 10.0
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a...
📅 Updated: Sep 25, 2026
CVE-2026-85878CVSS 9.9
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.
📅 Updated: Sep 25, 2026
CVE-2026-62379CVSS 9.8
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.2, the pre-authentication /authservice PLL endpoint accepts...
📅 Updated: Sep 25, 2026
CVE-2026-53581CVSS 9.0
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4_20...
📅 Updated: Sep 25, 2026
CVE-2026-93641CVSS 9.3
An unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra Classic recipient...
📅 Updated: Sep 25, 2026
CVE-2026-93642CVSS 9.3
An unauthenticated sender can forge a share notification that triggers stored XSS when a signed-in Zimbra Modern recipient...
📅 Updated: Sep 25, 2026
CVE-2026-93643CVSS 9.8
When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document...
📅 Updated: Sep 25, 2026