https://payloadreport.com/section/vulnerabilities/wordfence-reports-655-wordpress-vulnerabilities/Payload Reporten2026-10-16T06:15:01ZWordfence Reports 655 WordPress Vulnerabilities in Weekly Intelligence Updatehttps://payloadreport.com/section/vulnerabilities/nginx-tls-session-forgery-and-memory-corruption/Payload Reporten2026-10-16T03:38:26ZNGINX TLS Session Forgery and Memory Corruption Flaws Patched in F5's Latest Security Updateshttps://payloadreport.com/section/vulnerabilities/intruder-ai-agents-reveal-complex-authentication/Payload Reporten2026-10-16T02:08:22ZIntruder AI Agents Reveal Complex Authentication Flaw Eluding Five Years of Human Security Testinghttps://payloadreport.com/section/vulnerabilities/boringssl-san-validation-flaws-allow-name/Payload Reporten2026-10-16T01:52:34ZBoringSSL SAN validation flaws allow name constraint bypasses in legacy pathhttps://payloadreport.com/section/vulnerabilities/aws-bedrock-agentcore-1-6-1-patches-cve-2026/Payload Reporten2026-10-15T19:47:29ZAWS Bedrock AgentCore 1.6.1 patches CVE-2026-12530 argument delimiter flawhttps://payloadreport.com/section/vulnerabilities/aws-research-studio-cve-2026-14904-symlink-flaw/Payload Reporten2026-10-15T19:44:11ZAWS Research Studio CVE-2026-14904 Symlink Flaw Exposes Root Fileshttps://payloadreport.com/section/cyber-attacks/android-circle-to-search-ai-analyzes-sms-content/Payload Reporten2026-10-15T19:41:21ZAndroid Circle to Search AI Analyzes SMS Content to Flag Scams Before Clicking Linkshttps://payloadreport.com/section/vulnerabilities/citrix-xenserver-host-escalation-flows-from-guest/Payload Reporten2026-10-15T15:04:39ZCitrix XenServer Host Escalation Flows From Guest Admin Rightshttps://payloadreport.com/section/cyber-attacks/digital-forensics-corp-halted-ftc-alleges-fake/Payload Reporten2026-10-15T14:57:10ZDigital Forensics Corp Halted: FTC Alleges Fake Evidence, $60M Sextortion Fraudhttps://payloadreport.com/section/vulnerabilities/opencats-rce-authenticated-users-with-import/Payload Reporten2026-10-15T04:36:41ZOPENCATS RCE: Authenticated Users with Import Privileges Can Upload PHP to Execute Codehttps://payloadreport.com/section/vulnerabilities/omnispace-agora-project-vulnerable-to-password/Payload Reporten2026-10-15T04:36:41ZOmnispace Agora Project Vulnerable to Password Prediction via Weak Randomnesshttps://payloadreport.com/section/vulnerabilities/jtl-wms-critical-remote-sql-injection-enables/Payload Reporten2026-10-15T04:36:41ZJTL-WMS Critical Remote SQL Injection Enables Arbitrary T-SQL Execution Before v2.0.7https://payloadreport.com/section/cyber-attacks/phishing-kits-sold-on-storm-3119-marketplace/Payload Reporten2026-10-15T04:36:41ZPhishing Kits Sold on Storm-3119 Marketplace Disrupted by Microsoft and Law Enforcementhttps://payloadreport.com/section/vulnerabilities/10web-booster-arbitrary-file-upload-enables/Payload Reporten2026-10-15T04:36:41Z10Web Booster Arbitrary File Upload Enables Remote Code Executionhttps://payloadreport.com/section/vulnerabilities/active-directory-federation-services-weak-auth/Payload Reporten2026-10-15T04:33:33ZActive Directory Federation Services Weak Auth Flaw CVE-2026-69982 Enables Remote Security Bypasshttps://payloadreport.com/section/cyber-attacks/bec-attacks-exploit-trust-and-ai-to-drive-55/Payload Reporten2026-10-15T01:42:10ZBEC attacks exploit trust and AI to drive $55 billion in global fraud losseshttps://payloadreport.com/section/vulnerabilities/dgraph-zero-lacks-auth-on-port-6080-admin/Payload Reporten2026-10-15T01:41:53ZDgraph Zero Lacks Auth on Port 6080 Admin Endpoints, Allowing Remote Cluster Disruption Prior to 25.4.0https://payloadreport.com/section/vulnerabilities/microsoft-office-heap-overflow-cve-2026-100210/Payload Reporten2026-10-15T01:41:53ZMicrosoft Office Heap Overflow CVE-2026-100210 Scores 8.8 CVSS for Unauthenticated RCEhttps://payloadreport.com/section/vulnerabilities/juniper-junos-os-stack-buffer-overflow-in-bgp/Payload Reporten2026-10-15T01:41:53ZJuniper Junos OS Stack Buffer Overflow in BGP Lets Peers Crash Daemons or Execute Codehttps://payloadreport.com/section/cyber-attacks/ai-model-containment-failures-allow-unauthorised/Payload Reporten2026-10-14T19:24:09ZAI model containment failures allow unauthorised external system accesshttps://payloadreport.com/section/vulnerabilities/office-converter-npm-package-enables-remote/Payload Reporten2026-10-14T19:19:54Zoffice-converter npm package enables remote command execution via unsafe filename handling in PDF generationhttps://payloadreport.com/section/vulnerabilities/juniper-mx-ike-stack-overflow-grants/Payload Reporten2026-10-14T19:19:54ZJuniper MX IKE Stack Overflow Grants Unauthenticated Root Access on Critical Routershttps://payloadreport.com/section/vulnerabilities/juniper-srx-stack-buffer-overflow-in-srxpfe/Payload Reporten2026-10-14T19:18:28ZJuniper SRX Stack Buffer Overflow in srxpfe Enables Unauthenticated Root Code Execution via GREhttps://payloadreport.com/section/vulnerabilities/net-xml-recursion-bug-cve-2026-58280-crashes/Payload Reporten2026-10-14T14:53:36Z.NET XML Recursion Bug CVE-2026-58280 Crashes Services on Windows, Linux, macOShttps://payloadreport.com/section/vulnerabilities/net-xml-crypto-flaw-cve-2026-96960-patches-remote/Payload Reporten2026-10-14T14:53:36Z.NET XML Crypto Flaw CVE-2026-96960 Patches Remote DoS via Resource Amplification