Vulnerabilities
SAP MII Auth Bypass CVE-2026-89108 Lets Admins Hijack Java Server in 15.4, 15.5
A severe authorization bypass in SAP MII 15.4 and 15.5 allows administrators to hijack the underlying Java application server.
privilege escalation
Everything Payload Report has reported about privilege escalation: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Blocksy Companion Auth Bypass Lets Attackers Publish Content Without Login
A critical flaw in the Blocksy Companion WordPress plugin lets attackers bypass security checks to seize seller roles and publish content without logging in.