https://firewallpulse.com/category/vulnerabilities/node-js-brotli-overflow-flaw-cve-2026-111497/Firewall Pulseen2026-10-23T08:08:46ZNode.js Brotli Overflow Flaw CVE-2026-111497 Fixes Remote Code Executionhttps://firewallpulse.com/category/vulnerabilities/php2shell-rce-patches-issued-after-vulncheck/Firewall Pulseen2026-10-23T03:56:44ZPHP2Shell RCE patches issued after VulnCheck reveals AI-aided ASLR bypass on x86-64https://firewallpulse.com/category/vulnerabilities/sagemaker-sdk-bucket-ownership-gap-risks/Firewall Pulseen2026-10-23T03:15:27ZSageMaker SDK Bucket Ownership Gap Risks Credential Theft and Code Executionhttps://firewallpulse.com/category/vulnerabilities/mongodb-c-driver-bson-deserialization-causes/Firewall Pulseen2026-10-22T21:24:29ZMongoDB C# Driver BSON Deserialization Causes Unbounded Memory Growthhttps://firewallpulse.com/category/cyber-attacks/php2shell-memory-flaws-expose-bundled-runtimes/Firewall Pulseen2026-10-22T19:13:33ZPHP2Shell: Memory flaws expose bundled runtimes and containershttps://firewallpulse.com/category/vulnerabilities/yootheme-pro-image-handling-flaw-enables/Firewall Pulseen2026-10-22T18:17:06ZYOOtheme Pro Image Handling Flaw Enables Unauthenticated RCE in Joomla 5.0.0-5.0.52https://firewallpulse.com/category/vulnerabilities/youdatasum-cpas-v4-unauthenticated-arbitrary-file/Firewall Pulseen2026-10-22T12:17:33ZYouDataSum CPAS V4 Unauthenticated Arbitrary File Read CVSS 8.7https://firewallpulse.com/category/vulnerabilities/cisco-patches-critical-rce-and-auth-bypass-flaws/Firewall Pulseen2026-10-22T10:14:38ZCisco Patches Critical RCE and Auth Bypass Flaws in Expressway, UC, and Snort 3https://firewallpulse.com/category/vulnerabilities/php2shell-rce-flaws-workaround-insufficient/Firewall Pulseen2026-10-22T09:37:51ZPHP2Shell RCE Flaws: Workaround Insufficient Before October Patchhttps://firewallpulse.com/category/vulnerabilities/counterfeit-ai-installers-harvest-credentials-and/Firewall Pulseen2026-10-22T06:51:08ZCounterfeit AI Installers Harvest Credentials and Deploy Malware in US Corporate Networkshttps://firewallpulse.com/category/vulnerabilities/oracle-secure-backup-authentication-bypass-flaw/Firewall Pulseen2026-10-22T05:29:35ZOracle Secure Backup Authentication Bypass Flaw Enables Full System Takeoverhttps://firewallpulse.com/category/vulnerabilities/oracle-access-manager-authentication-engine/Firewall Pulseen2026-10-22T04:37:43ZOracle Access Manager Authentication Engine Vulnerability Enables Full Data Access Without Credentialshttps://firewallpulse.com/category/vulnerabilities/oracle-essbase-cve-2026-91663-critical-rce-via-t3/Firewall Pulseen2026-10-22T03:40:52ZOracle Essbase CVE-2026-91663: Critical RCE via T3/IIOP Allows Full Controlhttps://firewallpulse.com/category/vulnerabilities/vllm-critical-vulnerability-cve-2026-114053/Firewall Pulseen2026-10-22T02:49:12ZvLLM Critical Vulnerability CVE-2026-114053 Permits Unauthenticated Remote Code Execution Before 0.31.0https://firewallpulse.com/category/vulnerabilities/laravel-tokenguard-critical-bug-lets-attackers/Firewall Pulseen2026-10-22T01:12:58ZLaravel TokenGuard Critical Bug Lets Attackers Forge Identities on API Routeshttps://firewallpulse.com/category/vulnerabilities/cloudflare-adopts-openai-daybreak-for/Firewall Pulseen2026-10-22T01:05:36ZCloudflare Adopts OpenAI Daybreak for Vulnerability Discovery and Remediationhttps://firewallpulse.com/category/vulnerabilities/anthropics-claude-identifies-493-security-flaws/Firewall Pulseen2026-10-21T18:07:05ZAnthropic’s Claude Identifies 493 Security Flaws in Open-Source Codebaseshttps://firewallpulse.com/category/vulnerabilities/acrobat-for-edge-oob-write-cve-2026-75747-lets/Firewall Pulseen2026-10-21T17:22:07ZAcrobat for Edge OOB Write CVE-2026-75747 Lets Attackers Run Code on Versions Up to 154.0.4258.37https://firewallpulse.com/category/vulnerabilities/cisco-uic-and-ccx-exposed-to-blind-sql-injection/Firewall Pulseen2026-10-21T09:12:20ZCisco UIC and CCX Exposed to Blind SQL Injection via Web Interfacehttps://firewallpulse.com/category/vulnerabilities/certifi-and-uv-trust-compromised-emsign-root/Firewall Pulseen2026-10-21T08:56:43Zcertifi and uv Trust Compromised emSign Root, Enabling Forged Certs for Python Clients