https://firewallscoop.com/news/vulnerabilities/phpspreadsheet-xml-flaw-allows-ssrf-and-local/Firewall Scoopen2026-10-22T18:13:42ZPhpSpreadsheet XML flaw allows SSRF and local file access in versions before 3.10.8https://firewallscoop.com/news/vulnerabilities/high-severity-cve-2026-114138-allows/Firewall Scoopen2026-10-22T17:34:36ZHigh Severity CVE-2026-114138 Allows Unauthenticated DoS in Django REST Frameworkhttps://firewallscoop.com/news/vulnerabilities/8-7-high-unauthenticated-path-traversal-hits/Firewall Scoopen2026-10-22T12:57:45Z8.7-High Unauthenticated Path Traversal Hits OrbiTeam BSCW Serverhttps://firewallscoop.com/news/vulnerabilities/cve-2026-115333-lotus-middleware-auth-bypass/Firewall Scoopen2026-10-22T11:42:43ZCVE-2026-115333: Lotus Middleware Auth Bypass Risks Billing Data Integrityhttps://firewallscoop.com/news/vulnerabilities/devguard-unifies-six-supply-chain-scans-into-one/Firewall Scoopen2026-10-22T10:55:15ZDevGuard Unifies Six Supply Chain Scans Into One OWASP Platformhttps://firewallscoop.com/news/cyber-attacks/hirudo-rat-replaces-eight-indonesian-banking-apps/Firewall Scoopen2026-10-22T10:31:56ZHirudo RAT Replaces Eight Indonesian Banking Apps With Malicious Cloneshttps://firewallscoop.com/news/vulnerabilities/one-attacker-probes-exposed-flowise-ai-for/Firewall Scoopen2026-10-22T10:01:55ZOne Attacker Probes Exposed Flowise AI for Secrets and Workflow Controlhttps://firewallscoop.com/news/vulnerabilities/php-foundation-ships-security-updates-for-8-2/Firewall Scoopen2026-10-22T07:21:58ZPHP Foundation ships security updates for 8.2 through 8.5 serieshttps://firewallscoop.com/news/cloud-security/litellm-1-107-0-python-startup-hook-steals-cloud/Firewall Scoopen2026-10-22T05:56:40ZLiteLLM 1.107.0 Python Startup Hook Steals Cloud Keys and AI Tokens in 2-Hour Supply Chain Breachhttps://firewallscoop.com/news/vulnerabilities/cvss-9-9-low-priv-attackers-seize-control-of/Firewall Scoopen2026-10-22T05:29:19ZCVSS 9.9: Low-Priv Attackers Seize Control of Oracle Trusted Answer Search 26.1 via Oracle Nethttps://firewallscoop.com/news/vulnerabilities/cve-2026-110264-gitlab-self-managed-users-urged/Firewall Scoopen2026-10-22T05:04:40ZCVE-2026-110264: GitLab Self-Managed Users Urged to Patch Critical Integer Overflow RCEhttps://firewallscoop.com/news/vulnerabilities/cvss-9-8-critical-oracle-webcenter-content-flaw/Firewall Scoopen2026-10-22T03:58:28ZCVSS 9.8: Critical Oracle WebCenter Content Flaw Lets Attackers Seize Servers Without Credentialshttps://firewallscoop.com/news/vulnerabilities/cvss-9-9-oracle-essbase-21-8-3-0-0-exposes-low/Firewall Scoopen2026-10-22T03:43:21ZCVSS 9.9: Oracle Essbase 21.8.3.0.0 Exposes Low-Privilege Attackers to Full Remote Controlhttps://firewallscoop.com/news/vulnerabilities/php-issues-urgent-patches-for-two-critical/Firewall Scoopen2026-10-21T18:19:46ZPHP issues urgent patches for two critical unauthenticated remote code execution flawshttps://firewallscoop.com/news/cyber-attacks/dhs-mandates-removal-of-deepseek-ai-and/Firewall Scoopen2026-10-21T09:56:20ZDHS Mandates Removal of DeepSeek AI and Affiliates From Civilian Federal IThttps://firewallscoop.com/news/vulnerabilities/unauthenticated-rce-risk-in-duplicator-plugins/Firewall Scoopen2026-10-21T04:12:54ZUnauthenticated RCE Risk in Duplicator Plugins for WordPress Siteshttps://firewallscoop.com/news/vulnerabilities/cvss-9-1-authenticated-http-stack-overflow/Firewall Scoopen2026-10-21T03:23:03ZCVSS 9.1: Authenticated HTTP Stack Overflow Enables RCE on TOTOLINK-X2000R Router Firmwarehttps://firewallscoop.com/news/vulnerabilities/cvss-9-1-flaw-enables-remote-code-execution-on/Firewall Scoopen2026-10-21T02:27:26ZCVSS 9.1 Flaw Enables Remote Code Execution on Totolink X2000R Routershttps://firewallscoop.com/news/vulnerabilities/four-plex-media-server-flaws-hit-cisa-kev-with/Firewall Scoopen2026-10-21T01:52:52ZFour Plex Media Server Flaws Hit CISA KEV With Tight Patch Windowshttps://firewallscoop.com/news/vulnerabilities/cvss-9-1-critical-authenticated-rce-in-totolink/Firewall Scoopen2026-10-21T00:47:36ZCVSS 9.1: Critical Authenticated RCE in Totolink X2000R via boa pppoe Stack Overflow, No Patch Yethttps://firewallscoop.com/news/vulnerabilities/cvss-10-0-cve-2026-81212-ibm-datastage-5-4-0-0/Firewall Scoopen2026-10-21T00:04:00ZCVSS 10.0 CVE-2026-81212: IBM DataStage 5.4.0.0 lets anonymous callers poison tenant data and collapse encryptionhttps://firewallscoop.com/news/vulnerabilities/one-cache-poisoning-flaw-affects-all-apache/Firewall Scoopen2026-10-20T23:25:44ZOne Cache Poisoning Flaw Affects All Apache Cocoon Versionshttps://firewallscoop.com/news/cyber-attacks/tech-giants-block-emudhra-certificates-linked-to/Firewall Scoopen2026-10-20T23:09:06ZTech Giants Block eMudhra Certificates Linked to 8 Compromised Keys