SAP Patches Maximum Severity OAuth2 SSRF in Cloud SDK for Python (CVE-2026-89111)

Scope: SAP Cloud SDK for Python, multi-tenant SAP BTP applications

Severity: Red

Read More

Atlassian Scanner Now Available to Check Exposure to Last Week’s Critical File Access Flaw (CVE-2026-21589)

Scope: Atlassian Data Center products, including Jira, Confluence, Bitbucket, Bamboo, Crowd, FishEye, and Crucible

Severity: Red

Read More

Microsoft’s Largest Patch Tuesday on Record Includes One Actively Exploited Windows Shell Zero-Day (CVE-2026-96951)

Scope: Windows 10, Windows 11, all supported Windows Server versions

Severity: Red

Read More

Microsoft Exchange Server Elevation of Privilege Flaw Is October's Only Patch Tuesday Fix (CVE-2026-96940)

Scope: Microsoft Exchange Server, all supported on-premises versions

Severity: Amber

Read More

Ninja Forms and WPC Product Bundles Flaws Being Used to Plant Backdoors on WordPress Sites (CVE-2026-94504 / CVE-2026-93836)

Scope: Ninja Forms WordPress plugin versions 3.15.3 and earlier, and WPC Product Bundles for WooCommerce versions 8.6.6 and earlier

Severity: Amber

Read More

Atlassian Patches Unauthenticated File Access Flaw Across Eight Data Center Products (CVE-2026-21589)

Scope: Atlassian Data Center products, including Jira, Confluence, Bitbucket, Bamboo, Crowd, FishEye, and Crucible, all versions before the fixed releases

Severity: Red

Read More