Skip to content
DailyScope
IT & AI· Security vulnerabilities· 4 jam yang lalu

Critical BlockStrap flaw lets hackers run code on Magento servers

Ringkasan AI belum tersedia — yang ditampilkan adalah cuplikan dari sumber asli.

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...]

1 publisher
Sumber (1)
Waktu peristiwa (laporan paling awal)
17 Okt 2026, 04.00
Perkembangan terakhir
17 Okt 2026, 04.00
Pertama terlihat DailyScope
17 Okt 2026, 06.14
Ringkasan dibuat
—

Peristiwa terkait

  • IT & AI· Security vulnerabilities· 17 jam yang lalubelum diringkas

    BeyondTrust patches zero-day exploited in attacks since August

    BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...]

    BleepingComputer

  • IT & AI· Security vulnerabilities· 12 jam yang lalubelum diringkas

    CISA Adds Four Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability Th

    CISA

  • IT & AI· Security vulnerabilities· 36 jam yang lalubelum diringkas

    Thermo Fisher Torrent Suite Software

    View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. The following versions of Thermo Fisher Torrent Suite Software are affected: Torrent Suite Software <=5.18 (CVE-2026-107777) CVSS Vendor Equipment v3 6.5 Thermo Fish

    CISA

  • IT & AI· Security vulnerabilities· 36 jam yang lalubelum diringkas

    Guangzhou Juan IoT Technology EseeCloud

    View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. The following versions of Guangzhou Juan IoT Technology EseeCloud are affected: EseeCloud App <=4.9.6 (CVE-2026-107617, CVE-2026-97858, CVE-2026-105664) EseeCloud Firm

    CISA

  • IT & AI· Security vulnerabilities· 36 jam yang lalubelum diringkas

    Eclipse Foundation Eclipse Milo

    View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following versions of Eclipse Foundation Eclipse Milo are affecte

    CISA