https://firewallpulse.com/category/vulnerabilities/yootheme-pro-image-handling-flaw-enables/Firewall Pulseen2026-10-22T18:17:06ZYOOtheme Pro Image Handling Flaw Enables Unauthenticated RCE in Joomla 5.0.0-5.0.52https://firewallpulse.com/category/vulnerabilities/youdatasum-cpas-v4-unauthenticated-arbitrary-file/Firewall Pulseen2026-10-22T12:17:33ZYouDataSum CPAS V4 Unauthenticated Arbitrary File Read CVSS 8.7https://firewallpulse.com/category/vulnerabilities/cisco-patches-critical-rce-and-auth-bypass-flaws/Firewall Pulseen2026-10-22T10:14:38ZCisco Patches Critical RCE and Auth Bypass Flaws in Expressway, UC, and Snort 3https://firewallpulse.com/category/vulnerabilities/php2shell-rce-flaws-workaround-insufficient/Firewall Pulseen2026-10-22T09:37:51ZPHP2Shell RCE Flaws: Workaround Insufficient Before October Patchhttps://firewallpulse.com/category/vulnerabilities/counterfeit-ai-installers-harvest-credentials-and/Firewall Pulseen2026-10-22T06:51:08ZCounterfeit AI Installers Harvest Credentials and Deploy Malware in US Corporate Networkshttps://firewallpulse.com/category/vulnerabilities/oracle-secure-backup-authentication-bypass-flaw/Firewall Pulseen2026-10-22T05:29:35ZOracle Secure Backup Authentication Bypass Flaw Enables Full System Takeoverhttps://firewallpulse.com/category/vulnerabilities/oracle-access-manager-authentication-engine/Firewall Pulseen2026-10-22T04:37:43ZOracle Access Manager Authentication Engine Vulnerability Enables Full Data Access Without Credentialshttps://firewallpulse.com/category/vulnerabilities/oracle-essbase-cve-2026-91663-critical-rce-via-t3/Firewall Pulseen2026-10-22T03:40:52ZOracle Essbase CVE-2026-91663: Critical RCE via T3/IIOP Allows Full Controlhttps://firewallpulse.com/category/vulnerabilities/vllm-critical-vulnerability-cve-2026-114053/Firewall Pulseen2026-10-22T02:49:12ZvLLM Critical Vulnerability CVE-2026-114053 Permits Unauthenticated Remote Code Execution Before 0.31.0https://firewallpulse.com/category/vulnerabilities/laravel-tokenguard-critical-bug-lets-attackers/Firewall Pulseen2026-10-22T01:12:58ZLaravel TokenGuard Critical Bug Lets Attackers Forge Identities on API Routeshttps://firewallpulse.com/category/vulnerabilities/cloudflare-adopts-openai-daybreak-for/Firewall Pulseen2026-10-22T01:05:36ZCloudflare Adopts OpenAI Daybreak for Vulnerability Discovery and Remediationhttps://firewallpulse.com/category/vulnerabilities/anthropics-claude-identifies-493-security-flaws/Firewall Pulseen2026-10-21T18:07:05ZAnthropic’s Claude Identifies 493 Security Flaws in Open-Source Codebaseshttps://firewallpulse.com/category/vulnerabilities/acrobat-for-edge-oob-write-cve-2026-75747-lets/Firewall Pulseen2026-10-21T17:22:07ZAcrobat for Edge OOB Write CVE-2026-75747 Lets Attackers Run Code on Versions Up to 154.0.4258.37https://firewallpulse.com/category/vulnerabilities/cisco-uic-and-ccx-exposed-to-blind-sql-injection/Firewall Pulseen2026-10-21T09:12:20ZCisco UIC and CCX Exposed to Blind SQL Injection via Web Interfacehttps://firewallpulse.com/category/vulnerabilities/certifi-and-uv-trust-compromised-emsign-root/Firewall Pulseen2026-10-21T08:56:43Zcertifi and uv Trust Compromised emSign Root, Enabling Forged Certs for Python Clientshttps://firewallpulse.com/category/vulnerabilities/php-critical-rce-bugs-leaked-online-patches-due/Firewall Pulseen2026-10-21T07:37:48ZPHP Critical RCE Bugs Leaked Online; Patches Due Oct 21, 2026 Amid Mass Exploit Warningshttps://firewallpulse.com/category/cyber-attacks/openai-chrome-extension-gets-tab-read-and-action/Firewall Pulseen2026-10-21T06:12:34ZOpenAI Chrome Extension Gets Tab Read and Action Access, Sparking Enterprise Security Concernshttps://firewallpulse.com/category/vulnerabilities/totolink-x2000r-stack-overflow-in-boa/Firewall Pulseen2026-10-21T02:27:26ZTotolink X2000R Stack Overflow in boa formUploadFile Permits Authenticated Arbitrary Code Executionhttps://firewallpulse.com/category/vulnerabilities/totolink-x2000r-stack-overflow-in-vpn-filter/Firewall Pulseen2026-10-21T01:58:46ZTotolink X2000R Stack Overflow in VPN Filter Allows Remote Code Executionhttps://firewallpulse.com/category/vulnerabilities/ibm-datastage-redis-flaw-lets-anonymous-users/Firewall Pulseen2026-10-21T00:19:33ZIBM DataStage Redis flaw lets anonymous users inject data and break encryption boundarieshttps://firewallpulse.com/category/vulnerabilities/ibm-planning-analytics-buffer-overflow-risks/Firewall Pulseen2026-10-20T22:40:45ZIBM Planning Analytics Buffer Overflow Risks Arbitrary Code Executionhttps://firewallpulse.com/category/vulnerabilities/pillow-heap-out-of-bounds-read-in-tiff-decoding/Firewall Pulseen2026-10-20T21:07:06ZPillow Heap Out-of-Bounds Read in TIFF Decoding Exposes Memoryhttps://firewallpulse.com/category/vulnerabilities/mcp-sdk-vulnerability-allows-http-memory/Firewall Pulseen2026-10-20T20:43:59ZMCP SDK Vulnerability Allows HTTP Memory Exhaustion via Unbounded Inputs