Vulnerabilities
Urgently Update QuantumCloud ChatBot Plugins to Mitigate Critical CVE-2026-110886 Deserialization Risk
A critical deserialization bug in QuantumCloud plugins allows object injection in versions up to 1.5.1, rated 9.8 by the NVD.
CWE-502
Everything Shell Bulletin has reported about CWE-502: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Update Kalles CMS Past 1.1.7.1 to Fix Critical 9.8-Scored PHP Object Injection
The NVD rates CVE-2026-62076 as critical with a 9.8 score, affecting all Kalles CMS versions up to 1.1.7.1 through PHP object injection.
Vulnerabilities
WineShop Users: Apply Critical Patch Now to Fix 9.8 CVSS Unauthenticated Remote Code Execution Vulnerability
A critical vulnerability in WineShop allows remote attackers to inject PHP objects without authentication, risking full server compromise for unpatched stores.