Everything Firewall Scoop has reported about Critical Vulnerability: 3 stories, newest first. Part of our Vulnerabilities coverage.
A CVSS 9.9 flaw in Oracle Essbase allows low-privileged attackers to seize full control via HTTP, exposing environments running version 21.8.3.0.0 to immediate compromise.
Two critical vulnerabilities in PHP allow attackers to execute code remotely without credentials, affecting all web-serving deployments using supported versions.
A critical flaw in Ivanti Neurons Patch for Intune allows remote authenticated attackers to leak sensitive authentication data via an exposed dangerous endpoint.