https://firewallscoop.com/news/vulnerabilities/phpspreadsheet-xml-flaw-allows-ssrf-and-local/Firewall Scoopen2026-10-22T18:13:42ZPhpSpreadsheet XML flaw allows SSRF and local file access in versions before 3.10.8https://firewallscoop.com/news/vulnerabilities/high-severity-cve-2026-114138-allows/Firewall Scoopen2026-10-22T17:34:36ZHigh Severity CVE-2026-114138 Allows Unauthenticated DoS in Django REST Frameworkhttps://firewallscoop.com/news/vulnerabilities/8-7-high-unauthenticated-path-traversal-hits/Firewall Scoopen2026-10-22T12:57:45Z8.7-High Unauthenticated Path Traversal Hits OrbiTeam BSCW Serverhttps://firewallscoop.com/news/vulnerabilities/cve-2026-115333-lotus-middleware-auth-bypass/Firewall Scoopen2026-10-22T11:42:43ZCVE-2026-115333: Lotus Middleware Auth Bypass Risks Billing Data Integrityhttps://firewallscoop.com/news/vulnerabilities/devguard-unifies-six-supply-chain-scans-into-one/Firewall Scoopen2026-10-22T10:55:15ZDevGuard Unifies Six Supply Chain Scans Into One OWASP Platformhttps://firewallscoop.com/news/cyber-attacks/hirudo-rat-replaces-eight-indonesian-banking-apps/Firewall Scoopen2026-10-22T10:31:56ZHirudo RAT Replaces Eight Indonesian Banking Apps With Malicious Cloneshttps://firewallscoop.com/news/vulnerabilities/one-attacker-probes-exposed-flowise-ai-for/Firewall Scoopen2026-10-22T10:01:55ZOne Attacker Probes Exposed Flowise AI for Secrets and Workflow Controlhttps://firewallscoop.com/news/vulnerabilities/php-foundation-ships-security-updates-for-8-2/Firewall Scoopen2026-10-22T07:21:58ZPHP Foundation ships security updates for 8.2 through 8.5 serieshttps://firewallscoop.com/news/cloud-security/litellm-1-107-0-python-startup-hook-steals-cloud/Firewall Scoopen2026-10-22T05:56:40ZLiteLLM 1.107.0 Python Startup Hook Steals Cloud Keys and AI Tokens in 2-Hour Supply Chain Breachhttps://firewallscoop.com/news/vulnerabilities/cvss-9-9-low-priv-attackers-seize-control-of/Firewall Scoopen2026-10-22T05:29:19ZCVSS 9.9: Low-Priv Attackers Seize Control of Oracle Trusted Answer Search 26.1 via Oracle Nethttps://firewallscoop.com/news/vulnerabilities/cve-2026-110264-gitlab-self-managed-users-urged/Firewall Scoopen2026-10-22T05:04:40ZCVE-2026-110264: GitLab Self-Managed Users Urged to Patch Critical Integer Overflow RCEhttps://firewallscoop.com/news/vulnerabilities/cvss-9-8-critical-oracle-webcenter-content-flaw/Firewall Scoopen2026-10-22T03:58:28ZCVSS 9.8: Critical Oracle WebCenter Content Flaw Lets Attackers Seize Servers Without Credentialshttps://firewallscoop.com/news/vulnerabilities/cvss-9-9-oracle-essbase-21-8-3-0-0-exposes-low/Firewall Scoopen2026-10-22T03:43:21ZCVSS 9.9: Oracle Essbase 21.8.3.0.0 Exposes Low-Privilege Attackers to Full Remote Controlhttps://firewallscoop.com/news/vulnerabilities/php-issues-urgent-patches-for-two-critical/Firewall Scoopen2026-10-21T18:19:46ZPHP issues urgent patches for two critical unauthenticated remote code execution flawshttps://firewallscoop.com/news/cyber-attacks/dhs-mandates-removal-of-deepseek-ai-and/Firewall Scoopen2026-10-21T09:56:20ZDHS Mandates Removal of DeepSeek AI and Affiliates From Civilian Federal IT