Tag
critical
advisory
Payload API Key Disclosure via Document Read Access
9 TTPs 1 CVEA vulnerability in Payload CMS versions 3.x and 4.x-canary allows unauthorized users with document read permissions to access active API keys stored within authentication collections.
payload +12
information-disclosure
cms
authentication
web-application
cve-2026-105847
web-vulnerability
access-control
sqli
+12
9t
1c
updated
high
advisory
Microsoft Dataverse Privilege Escalation Vulnerability
1 TTP 1 CVEA vulnerability in Microsoft Dataverse identified as CVE-2024-38064 allows a remote, unauthenticated attacker to escalate privileges and potentially gain administrative access to the service.
Dataverse
privilege-escalation
cloud-security
vulnerability
high-confidence-source
1t
1c
high
advisory
Critical Vulnerabilities in Check Point Security Appliances
2 TTPs 2 CVEsCheck Point has disclosed critical vulnerabilities, including CVE-2026-85102 and CVE-2026-85103, affecting various Security Gateway, Management Server, and Spark Firewall deployments.
Security Gateway +2
vulnerability
network-security
rce
high-confidence-source
2t
2c