# CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED) Ref: [https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed/](https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed/) Overview -------- Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve…

Reference: https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc Overview Published: July 2, 2026 Version: 1.0 Revision: 1.0 Summary 1 of 25 A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device. Affected Products: UniFi Connect Application (Version 3.4.16 and earlier) Mitigation: Update your …

# CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) Well, well, well - once again, the cat has dragged us in and spat us out. Today, we find ourselves questioning the reality we sit within. Must it be so predictable, and why us? “But watchTowr, what do you mean?” Well, if you’re here, you likely fit into one of the following categories: * A dear reader, * A group therapy accomplice * A Groundhog Day fan club member Why? Because we once again …

# WARNING: Remote Code Execution and Cross-Site Scripting in pgAdmin 4 Can Be Exploited to Execute Arbitrary Commands and Exfiltrate Database Credentials. Patch Immediately! | CCB Belgium Reference: https://ccb.belgium.be/advisories/warning-remote-code-execution-and-cross-site-scripting-pgadmin-4-can-be-exploited Published : 22/06/2026 > * **Last update**: 22/06/2026 > * **Affected software:** pgAdmin 4 prior to version 9.16 > * **Type**: > → **CWE-306**: Missing Authe…

| CVE Number | Description | CVSS Score (Severity) | CVSS Vector | CWE | | -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------…

NEWS for rsync 3.4.3 (20 May 2026) Changes in this version: SECURITY FIXES: Six CVEs are fixed in this release. All six are assigned by VulnCheck as CNA. Affected versions are 3.4.2 and earlier in every case. Three of the six (CVE-2026-29518, CVE-2026-43617, CVE-2026-43619) require non-default daemon configuration to reach: the first and third need use chroot = no for a module, the second needs daemon chroot = ... set in rsyncd.conf. Two (CVE-2026-43618, CVE-2026-43620) are reachable from a nor…

=========================================================== == Subject: Unauthenticated Remote Code Execution == in Samba printing subsystem == == CVE ID#: CVE-2026-4480 == == Versions: All versions == == Summary: Samba print servers with a "print command" == that has the %J substitution character == are vulnerable to a Remote Code Execution =========================================================== =========== Description =========== Samba passes the client-controlled job d…

Package : samba CVE ID : CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-3238 CVE-2026-4408 CVE-2026-4480 Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix, which might result in bypass of access checks, overwrite of files in unintended situations using the WORM vfs module, installing CA certificates over http without verification when auto-enrollment GPO is enabled, denial of service or remote code execut…

# About the security content of iOS 26.5 and iPadOS 26.5 - Apple Support For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the [Apple security releases](https://support.apple.com/en-us/100100) page. Apple security documents reference vulnerabilities by [CVE-ID](https://www.cve.org/About/Overview) when possible. For more information about security, se…

# About the security content of macOS Tahoe 26.5 - Apple Support For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the [Apple security releases](https://support.apple.com/en-us/100100) page. Apple security documents reference vulnerabilities by [CVE-ID](https://www.cve.org/About/Overview) when possible. For more information about security, see the [A…