https://payloadreport.com/section/vulnerabilities/opencats-rce-authenticated-users-with-import/Payload Reporten2026-10-15T04:36:41ZOPENCATS RCE: Authenticated Users with Import Privileges Can Upload PHP to Execute Codehttps://payloadreport.com/section/vulnerabilities/omnispace-agora-project-vulnerable-to-password/Payload Reporten2026-10-15T04:36:41ZOmnispace Agora Project Vulnerable to Password Prediction via Weak Randomnesshttps://payloadreport.com/section/vulnerabilities/jtl-wms-critical-remote-sql-injection-enables/Payload Reporten2026-10-15T04:36:41ZJTL-WMS Critical Remote SQL Injection Enables Arbitrary T-SQL Execution Before v2.0.7https://payloadreport.com/section/cyber-attacks/phishing-kits-sold-on-storm-3119-marketplace/Payload Reporten2026-10-15T04:36:41ZPhishing Kits Sold on Storm-3119 Marketplace Disrupted by Microsoft and Law Enforcementhttps://payloadreport.com/section/vulnerabilities/10web-booster-arbitrary-file-upload-enables/Payload Reporten2026-10-15T04:36:41Z10Web Booster Arbitrary File Upload Enables Remote Code Executionhttps://payloadreport.com/section/vulnerabilities/active-directory-federation-services-weak-auth/Payload Reporten2026-10-15T04:33:33ZActive Directory Federation Services Weak Auth Flaw CVE-2026-69982 Enables Remote Security Bypasshttps://payloadreport.com/section/cyber-attacks/bec-attacks-exploit-trust-and-ai-to-drive-55/Payload Reporten2026-10-15T01:42:10ZBEC attacks exploit trust and AI to drive $55 billion in global fraud losseshttps://payloadreport.com/section/vulnerabilities/dgraph-zero-lacks-auth-on-port-6080-admin/Payload Reporten2026-10-15T01:41:53ZDgraph Zero Lacks Auth on Port 6080 Admin Endpoints, Allowing Remote Cluster Disruption Prior to 25.4.0https://payloadreport.com/section/vulnerabilities/microsoft-office-heap-overflow-cve-2026-100210/Payload Reporten2026-10-15T01:41:53ZMicrosoft Office Heap Overflow CVE-2026-100210 Scores 8.8 CVSS for Unauthenticated RCEhttps://payloadreport.com/section/vulnerabilities/juniper-junos-os-stack-buffer-overflow-in-bgp/Payload Reporten2026-10-15T01:41:53ZJuniper Junos OS Stack Buffer Overflow in BGP Lets Peers Crash Daemons or Execute Codehttps://payloadreport.com/section/cyber-attacks/ai-model-containment-failures-allow-unauthorised/Payload Reporten2026-10-14T19:24:09ZAI model containment failures allow unauthorised external system accesshttps://payloadreport.com/section/vulnerabilities/office-converter-npm-package-enables-remote/Payload Reporten2026-10-14T19:19:54Zoffice-converter npm package enables remote command execution via unsafe filename handling in PDF generationhttps://payloadreport.com/section/vulnerabilities/juniper-mx-ike-stack-overflow-grants/Payload Reporten2026-10-14T19:19:54ZJuniper MX IKE Stack Overflow Grants Unauthenticated Root Access on Critical Routershttps://payloadreport.com/section/vulnerabilities/juniper-srx-stack-buffer-overflow-in-srxpfe/Payload Reporten2026-10-14T19:18:28ZJuniper SRX Stack Buffer Overflow in srxpfe Enables Unauthenticated Root Code Execution via GREhttps://payloadreport.com/section/vulnerabilities/net-xml-recursion-bug-cve-2026-58280-crashes/Payload Reporten2026-10-14T14:53:36Z.NET XML Recursion Bug CVE-2026-58280 Crashes Services on Windows, Linux, macOShttps://payloadreport.com/section/vulnerabilities/net-xml-crypto-flaw-cve-2026-96960-patches-remote/Payload Reporten2026-10-14T14:53:36Z.NET XML Crypto Flaw CVE-2026-96960 Patches Remote DoS via Resource Amplificationhttps://payloadreport.com/section/vulnerabilities/simpleforms-missing-capability-checks-enable/Payload Reporten2026-10-14T09:05:12ZSimpleForm's Missing Capability Checks Enable Unauthenticated Admin Account Creationhttps://payloadreport.com/section/cyber-attacks/anthropic-haiku-4-5-bug-ai-filed-fake-homicide/Payload Reporten2026-10-14T07:32:59ZAnthropic Haiku 4.5 Bug: AI Filed Fake Homicide Report, Alert Delayed 2 Monthshttps://payloadreport.com/section/vulnerabilities/fortisandbox-gui-auth-bypass-lets-remote/Payload Reporten2026-10-14T07:23:10ZFortiSandbox GUI Auth Bypass Lets Remote Attackers Execute Commandshttps://payloadreport.com/section/vulnerabilities/windows-ole-untrusted-pointer-dereference-enables/Payload Reporten2026-10-14T06:17:18ZWindows OLE Untrusted Pointer Dereference Enables Remote Code Executionhttps://payloadreport.com/section/vulnerabilities/outlook-heap-overflow-cve-2026-70291-enables/Payload Reporten2026-10-14T04:18:21ZOutlook Heap Overflow CVE-2026-70291 Enables Remote Code Executionhttps://payloadreport.com/section/vulnerabilities/abandoned-cart-pro-malleable-encryption-cve-2026/Payload Reporten2026-10-14T04:02:36ZAbandoned Cart Pro Malleable Encryption CVE-2026-97657 Allows Universal Account Takeover via Token Forgeryhttps://payloadreport.com/section/vulnerabilities/ppp-eap-tls-heap-overflow-cve-2026-84015-critical/Payload Reporten2026-10-14T02:26:11ZPPP EAP-TLS Heap Overflow CVE-2026-84015: Critical RCE Flaw Allows Unauthenticated Attackers to Execute Codehttps://payloadreport.com/section/vulnerabilities/windows-volume-manager-driver-heap-overflow/Payload Reporten2026-10-14T02:00:01ZWindows Volume Manager Driver Heap Overflow Enables Network Code Executionhttps://payloadreport.com/section/vulnerabilities/microsoft-powerpoint-use-after-free-cve-2026/Payload Reporten2026-10-14T01:23:25ZMicrosoft PowerPoint Use-After-Free CVE-2026-88178 Enables Network Code Execution, Scored 9.8https://payloadreport.com/section/vulnerabilities/xorbits-xoscar-critical-deserialization-bug/Payload Reporten2026-10-13T23:25:24ZXorbits Xoscar: Critical Deserialization Bug Enables Root Code Execution via TCP Channelhttps://payloadreport.com/section/vulnerabilities/ivanti-connect-secure-authentication-bypass-added/Payload Reporten2026-10-13T23:23:27ZIvanti Connect Secure Authentication Bypass Added to CISA KEV Cataloghttps://payloadreport.com/section/vulnerabilities/windows-shell-command-injection-flaw-cve-2026/Payload Reporten2026-10-13T22:56:42ZWindows Shell command injection flaw CVE-2026-96951 bypasses MOTWhttps://payloadreport.com/section/vulnerabilities/fortisiem-web-interface-low-severity-broken/Payload Reporten2026-10-13T19:08:11ZFortiSIEM Web Interface Low-Severity Broken Authorization Requires Valid Credentials for Command Executionhttps://payloadreport.com/section/vulnerabilities/quarkus-code-gen-bug-cve-2026-87744-enables-auth/Payload Reporten2026-10-13T15:31:34ZQuarkus Code Gen Bug CVE-2026-87744 Enables Auth Bypass via Annotation Misusehttps://payloadreport.com/section/threat-intel/criminal-ip-ai-platform-to-map-malicious/Payload Reporten2026-10-13T14:20:12ZCriminal IP AI Platform to Map Malicious Infrastructure and Partner Risks at Security Days Tokyo