https://payloadreport.com/section/cyber-attacks/anthropic-haiku-4-5-bug-ai-filed-fake-homicide/Payload Reporten2026-10-14T07:32:59ZAnthropic Haiku 4.5 Bug: AI Filed Fake Homicide Report, Alert Delayed 2 Monthshttps://payloadreport.com/section/vulnerabilities/fortisandbox-gui-auth-bypass-lets-remote/Payload Reporten2026-10-14T07:23:10ZFortiSandbox GUI Auth Bypass Lets Remote Attackers Execute Commandshttps://payloadreport.com/section/vulnerabilities/windows-ole-untrusted-pointer-dereference-enables/Payload Reporten2026-10-14T06:17:18ZWindows OLE Untrusted Pointer Dereference Enables Remote Code Executionhttps://payloadreport.com/section/vulnerabilities/outlook-heap-overflow-cve-2026-70291-enables/Payload Reporten2026-10-14T04:18:21ZOutlook Heap Overflow CVE-2026-70291 Enables Remote Code Executionhttps://payloadreport.com/section/vulnerabilities/abandoned-cart-pro-malleable-encryption-cve-2026/Payload Reporten2026-10-14T04:02:36ZAbandoned Cart Pro Malleable Encryption CVE-2026-97657 Allows Universal Account Takeover via Token Forgeryhttps://payloadreport.com/section/vulnerabilities/ppp-eap-tls-heap-overflow-cve-2026-84015-critical/Payload Reporten2026-10-14T02:26:11ZPPP EAP-TLS Heap Overflow CVE-2026-84015: Critical RCE Flaw Allows Unauthenticated Attackers to Execute Codehttps://payloadreport.com/section/vulnerabilities/windows-volume-manager-driver-heap-overflow/Payload Reporten2026-10-14T02:00:01ZWindows Volume Manager Driver Heap Overflow Enables Network Code Executionhttps://payloadreport.com/section/vulnerabilities/microsoft-powerpoint-use-after-free-cve-2026/Payload Reporten2026-10-14T01:23:25ZMicrosoft PowerPoint Use-After-Free CVE-2026-88178 Enables Network Code Execution, Scored 9.8https://payloadreport.com/section/vulnerabilities/xorbits-xoscar-critical-deserialization-bug/Payload Reporten2026-10-13T23:25:24ZXorbits Xoscar: Critical Deserialization Bug Enables Root Code Execution via TCP Channelhttps://payloadreport.com/section/vulnerabilities/ivanti-connect-secure-authentication-bypass-added/Payload Reporten2026-10-13T23:23:27ZIvanti Connect Secure Authentication Bypass Added to CISA KEV Cataloghttps://payloadreport.com/section/vulnerabilities/windows-shell-command-injection-flaw-cve-2026/Payload Reporten2026-10-13T22:56:42ZWindows Shell command injection flaw CVE-2026-96951 bypasses MOTWhttps://payloadreport.com/section/vulnerabilities/fortisiem-web-interface-low-severity-broken/Payload Reporten2026-10-13T19:08:11ZFortiSIEM Web Interface Low-Severity Broken Authorization Requires Valid Credentials for Command Executionhttps://payloadreport.com/section/vulnerabilities/quarkus-code-gen-bug-cve-2026-87744-enables-auth/Payload Reporten2026-10-13T15:31:34ZQuarkus Code Gen Bug CVE-2026-87744 Enables Auth Bypass via Annotation Misusehttps://payloadreport.com/section/threat-intel/criminal-ip-ai-platform-to-map-malicious/Payload Reporten2026-10-13T14:20:12ZCriminal IP AI Platform to Map Malicious Infrastructure and Partner Risks at Security Days Tokyohttps://payloadreport.com/section/cyber-attacks/danfoss-controller-flaw-exploited-to-defrost/Payload Reporten2026-10-13T08:50:55ZDanfoss Controller Flaw Exploited to Defrost European Supermarket Freezershttps://payloadreport.com/section/vulnerabilities/google-dev-sites-expose-rce-via-pickle/Payload Reporten2026-10-13T06:58:43ZGoogle Dev Sites Expose RCE via Pickle Deserialization in Flask Sessionhttps://payloadreport.com/section/cyber-attacks/google-devsite-session-forgery-flaw-enabled/Payload Reporten2026-10-13T03:49:53ZGoogle DevSite Session Forgery Flaw Enabled Remote Code Executionhttps://payloadreport.com/section/cloud-security/central-cloud-identity-role-demands-iam-rethink/Payload Reporten2026-10-13T01:29:38ZCentral Cloud Identity Role Demands IAM Rethink for Enterprise App Cyber Resiliencehttps://payloadreport.com/section/vulnerabilities/sap-mii-auth-bypass-cve-2026-89108-lets-admins/Payload Reporten2026-10-13T01:07:25ZSAP MII Auth Bypass CVE-2026-89108 Lets Admins Hijack Java Server in 15.4, 15.5https://payloadreport.com/section/vulnerabilities/neo4j-graphql-cypher-field-auth-flaw-cve-2026/Payload Reporten2026-10-12T16:45:16ZNeo4j GraphQL Cypher Field Auth Flaw CVE-2026-92681 Patched in v7.6.4https://payloadreport.com/section/malware/ionq-to-acquire-ransomware-containment-firm/Payload Reporten2026-10-12T11:31:07ZIonQ to acquire ransomware containment firm Elisity in $1.3bn stock dealhttps://payloadreport.com/section/vulnerabilities/sonicwall-sma1000-critical-ssrf-cve-2026-102255/Payload Reporten2026-10-12T09:07:03ZSonicWall SMA1000 Critical SSRF CVE-2026-102255 Hit Honeypots Two Days Post-Disclosurehttps://payloadreport.com/section/vulnerabilities/unpatched-trendnet-routers-enable-remote-os/Payload Reporten2026-10-12T09:05:38ZUnpatched TRENDnet routers enable remote OS command injection via web backend flaw