CVSS 9.1

Everything BitShield News has reported about CVSS 9.1: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

CVE-2026-53997: Critical Auth Flaw in Netherman Portal Enables Total Account Takeover

A critical vulnerability in Netherman Portal del Hermano allows attackers to bypass authentication and seize control of any user account across all tenants.

Oct 12, 2026

Vulnerabilities

CVE-2026-104801: Critical PPOM Plugin Flaw Risks Full Site Compromise via Unauthenticated RCE

A critical vulnerability in the PPOM WooCommerce plugin allows attackers to delete server files and execute code without authentication, risking full site compromise.

Oct 10, 2026