CVE-2026-8778: Unauthenticated file upload in WooCommerce plugin
CVE-2026-8778 affects MIPL Grouped Checkout Fields for WooCommerce up to and including 1.2.1.
Read ArticleIT Security Blog
Current security alerts, regulatory guidance and practical knowledge for well-founded cyber risk decisions.
Featured Post
Latest Posts
CVE-2026-78509: Microsoft Office Vulnerability with CVSS 9.8
CVE-2026-78509 affects multiple Microsoft Office products and has a CVSS score of 9.8.
Read Article CVE-2026-69356 and CVE-2026-69641: Security Updates for Microsoft Exchange Server
Microsoft is releasing security updates for CVE-2026-69356 and CVE-2026-69641 in Exchange Server.
Read Article CVE-2026-82067: MongoDB Server can start with authorization disabled
CVE-2026-82067 can cause MongoDB Server authorization to remain disabled upon startup.
Read Article CVE-2026-73312: Three OAuth2 vulnerabilities in XenForo
Three OAuth2 vulnerabilities affect XenForo before 2.3.13. XenForo 2.3.13 includes security fixes for CVE-2026-73309, CVE-2026-73311, and CVE-2026-73312.
Read Article CVE-2026-67276: Bypassing SSH Authentication in MikroTik RouterOS
CVE-2026-67276 affects SSH key verification in MikroTik RouterOS. Security updates are available.
Read Article CVE-2026-84238: Patch for YITH Request a Quote for WooCommerce Premium
CVE-2026-84238 affects YITH Request a Quote for WooCommerce Premium prior to version 4.46.0. Patchstack recommends updating to version 4.46.0 or later.
Read Article
CVE-2026-62911: Security Update for On-Premises Exchange Servers
CVE-2026-62911 affects local Microsoft Exchange servers. Microsoft is providing security updates for Exchange Server SE RTM, as well as ESU updates for older versions.
Read Article CVE-2026-16947: Manipulable WooCommerce Payment Status
CVE-2026-16947 affects the WordPress plugin "Total Processing Card Payments for WooCommerce" and allows SSRF.
Read Article CVE-2026-59313: Three Spring Framework Vulnerabilities in the August Batch
The Spring Batch release dated August 20, 2026, contains three vulnerabilities in the Spring Framework. Affected applications should upgrade to newer versions.
Read Article CVE-2026-55634 and CVE-2026-55220: Critical Pimcore Vulnerabilities
CVE-2026-55634 and CVE-2026-55220 affect Pimcore. Fixes are available for three version series.
Read Article CVE-2026-81934: Redis Vulnerability in TLS Data Processing
CVE-2026-81934 affects Redis instances configured with TLS. Fixed releases are available for several Redis branches.
Read Article
Elementor Pro, rtMedia, and Mailgun: Several Critical Security Vulnerabilities (CVE-2026-32475, CVE-2026-66592, CVE-2026-78003)
CVE-2026-32475 (Elementor Pro ≤4.2.1), CVE-2026-66592 (rtMedia ≤4.7.11) and CVE-2026-78003 (Mailgun ≤2.2.0): PHP upload, SQL injection, and SSRF. Patches are partially available.
Read Article
English 
Deutsch 
Français