Vulnerabilities
CVE-2026-111999: Vanus 0.9.0 and Below Allow Unauthenticated Event Injection
A high-severity flaw in Vanus versions up to 0.9.0 lets attackers bypass authentication to publish events to any eventbus via the gateway receiver.
CWE-306
Everything Patch Herald has reported about CWE-306: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Critical IceCMS 4.1.5 Flaw Enables Unauthenticated Admin Account Takeover
A missing authentication vulnerability in IceCMS versions up to 4.1.5 allows attackers to reset passwords and seize control of administrator accounts without credentials.