https://payloadreport.com/section/cyber-attacks/ai-model-containment-failures-allow-unauthorised/Payload Reporten2026-10-14T19:24:09ZAI model containment failures allow unauthorised external system accesshttps://payloadreport.com/section/vulnerabilities/office-converter-npm-package-enables-remote/Payload Reporten2026-10-14T19:19:54Zoffice-converter npm package enables remote command execution via unsafe filename handling in PDF generationhttps://payloadreport.com/section/vulnerabilities/juniper-mx-ike-stack-overflow-grants/Payload Reporten2026-10-14T19:19:54ZJuniper MX IKE Stack Overflow Grants Unauthenticated Root Access on Critical Routershttps://payloadreport.com/section/vulnerabilities/juniper-srx-stack-buffer-overflow-in-srxpfe/Payload Reporten2026-10-14T19:18:28ZJuniper SRX Stack Buffer Overflow in srxpfe Enables Unauthenticated Root Code Execution via GREhttps://payloadreport.com/section/vulnerabilities/net-xml-recursion-bug-cve-2026-58280-crashes/Payload Reporten2026-10-14T14:53:36Z.NET XML Recursion Bug CVE-2026-58280 Crashes Services on Windows, Linux, macOShttps://payloadreport.com/section/vulnerabilities/net-xml-crypto-flaw-cve-2026-96960-patches-remote/Payload Reporten2026-10-14T14:53:36Z.NET XML Crypto Flaw CVE-2026-96960 Patches Remote DoS via Resource Amplificationhttps://payloadreport.com/section/vulnerabilities/simpleforms-missing-capability-checks-enable/Payload Reporten2026-10-14T09:05:12ZSimpleForm's Missing Capability Checks Enable Unauthenticated Admin Account Creationhttps://payloadreport.com/section/cyber-attacks/anthropic-haiku-4-5-bug-ai-filed-fake-homicide/Payload Reporten2026-10-14T07:32:59ZAnthropic Haiku 4.5 Bug: AI Filed Fake Homicide Report, Alert Delayed 2 Monthshttps://payloadreport.com/section/vulnerabilities/fortisandbox-gui-auth-bypass-lets-remote/Payload Reporten2026-10-14T07:23:10ZFortiSandbox GUI Auth Bypass Lets Remote Attackers Execute Commandshttps://payloadreport.com/section/vulnerabilities/windows-ole-untrusted-pointer-dereference-enables/Payload Reporten2026-10-14T06:17:18ZWindows OLE Untrusted Pointer Dereference Enables Remote Code Executionhttps://payloadreport.com/section/vulnerabilities/outlook-heap-overflow-cve-2026-70291-enables/Payload Reporten2026-10-14T04:18:21ZOutlook Heap Overflow CVE-2026-70291 Enables Remote Code Executionhttps://payloadreport.com/section/vulnerabilities/abandoned-cart-pro-malleable-encryption-cve-2026/Payload Reporten2026-10-14T04:02:36ZAbandoned Cart Pro Malleable Encryption CVE-2026-97657 Allows Universal Account Takeover via Token Forgeryhttps://payloadreport.com/section/vulnerabilities/ppp-eap-tls-heap-overflow-cve-2026-84015-critical/Payload Reporten2026-10-14T02:26:11ZPPP EAP-TLS Heap Overflow CVE-2026-84015: Critical RCE Flaw Allows Unauthenticated Attackers to Execute Codehttps://payloadreport.com/section/vulnerabilities/windows-volume-manager-driver-heap-overflow/Payload Reporten2026-10-14T02:00:01ZWindows Volume Manager Driver Heap Overflow Enables Network Code Executionhttps://payloadreport.com/section/vulnerabilities/microsoft-powerpoint-use-after-free-cve-2026/Payload Reporten2026-10-14T01:23:25ZMicrosoft PowerPoint Use-After-Free CVE-2026-88178 Enables Network Code Execution, Scored 9.8https://payloadreport.com/section/vulnerabilities/xorbits-xoscar-critical-deserialization-bug/Payload Reporten2026-10-13T23:25:24ZXorbits Xoscar: Critical Deserialization Bug Enables Root Code Execution via TCP Channelhttps://payloadreport.com/section/vulnerabilities/ivanti-connect-secure-authentication-bypass-added/Payload Reporten2026-10-13T23:23:27ZIvanti Connect Secure Authentication Bypass Added to CISA KEV Cataloghttps://payloadreport.com/section/vulnerabilities/windows-shell-command-injection-flaw-cve-2026/Payload Reporten2026-10-13T22:56:42ZWindows Shell command injection flaw CVE-2026-96951 bypasses MOTWhttps://payloadreport.com/section/vulnerabilities/fortisiem-web-interface-low-severity-broken/Payload Reporten2026-10-13T19:08:11ZFortiSIEM Web Interface Low-Severity Broken Authorization Requires Valid Credentials for Command Executionhttps://payloadreport.com/section/vulnerabilities/quarkus-code-gen-bug-cve-2026-87744-enables-auth/Payload Reporten2026-10-13T15:31:34ZQuarkus Code Gen Bug CVE-2026-87744 Enables Auth Bypass via Annotation Misusehttps://payloadreport.com/section/threat-intel/criminal-ip-ai-platform-to-map-malicious/Payload Reporten2026-10-13T14:20:12ZCriminal IP AI Platform to Map Malicious Infrastructure and Partner Risks at Security Days Tokyohttps://payloadreport.com/section/cyber-attacks/danfoss-controller-flaw-exploited-to-defrost/Payload Reporten2026-10-13T08:50:55ZDanfoss Controller Flaw Exploited to Defrost European Supermarket Freezershttps://payloadreport.com/section/vulnerabilities/google-dev-sites-expose-rce-via-pickle/Payload Reporten2026-10-13T06:58:43ZGoogle Dev Sites Expose RCE via Pickle Deserialization in Flask Sessionhttps://payloadreport.com/section/cyber-attacks/google-devsite-session-forgery-flaw-enabled/Payload Reporten2026-10-13T03:49:53ZGoogle DevSite Session Forgery Flaw Enabled Remote Code Executionhttps://payloadreport.com/section/cloud-security/central-cloud-identity-role-demands-iam-rethink/Payload Reporten2026-10-13T01:29:38ZCentral Cloud Identity Role Demands IAM Rethink for Enterprise App Cyber Resiliencehttps://payloadreport.com/section/vulnerabilities/sap-mii-auth-bypass-cve-2026-89108-lets-admins/Payload Reporten2026-10-13T01:07:25ZSAP MII Auth Bypass CVE-2026-89108 Lets Admins Hijack Java Server in 15.4, 15.5