Vulnerabilities
9.1 CVSS: Privasys Enclave OS Critical Flaw Bypasses Confidential VM Security Checks
A critical vulnerability in Privasys Enclave OS allows attackers to relay attestation quotes, bypassing security checks on container workloads.
BitShield News Flaw Tracker Desk
Vulnerabilities
CVSS 9.1: Blocksy Companion v2.1.58 Lets Unauthenticated Users Create Seller Accounts
A critical privilege escalation flaw in the Blocksy Companion WordPress plugin allows unauthenticated attackers to seize vendor accounts and publish content.
Vulnerabilities
9.8 CVSS Score Logged for ThemeREX Rosalinda Deserialization Vulnerability
The National Vulnerability Database rates CVE-2026-93933 as critical, exposing sites running ThemeREX Rosalinda versions up to 1.2.4 to object injection risks.
Vulnerabilities
CVE-2026-104801: Critical PPOM Plugin Flaw Risks Full Site Compromise via Unauthenticated RCE
A critical vulnerability in the PPOM WooCommerce plugin allows attackers to delete server files and execute code without authentication, risking full site compromise.
Vulnerabilities
8 Atlassian Products Need Urgent Patching as Active Wild Exploits Target Critical File Access
CERT-EU urges immediate patching of eight Atlassian products after VulnCheck confirmed the critical vulnerability is being actively exploited in the wild.
Vulnerabilities
AWS Patched CVE-2026-107352: Athena V3 Auth Flaw Exposed Query Metadata
AWS fixed a missing authorization check in Athena engine version 3 that could have allowed cross-account access to limited query metadata.
Vulnerabilities
Chrome 155 Patch Rolls Out for Windows, Mac, Linux Addressing 24 Flaws, 4 Critical Memory Safety Issues
Google releases Chrome 155 for desktop, addressing 24 vulnerabilities including four critical memory safety issues in navigation and browser components.