Record

Last updated September 24, 2026

Human View Machine View

The full archive of enterprise technology signals: launches, funding, partnerships, advisories, and market moves across cloud, networking, cybersecurity, and AI.

Mentions

4,753 articles about Record

gateway

CISA issues advisory on OPeNDAP Hyrax SSRF and credential disclosure

Decision Insights Threat Desk August 23, 2026

OPeNDAP Hyrax CVE-2026-16637 involves SSRF via unvalidated HTTP redirects that bypass AllowedHosts and leak User-Id and Echo-Token.

Cybersecurity

CISA issues alert on Plane multi-tenant authorization bypass

Decision Insights Threat Desk August 23, 2026

Plane versions 1.3.0 and earlier have a multi-tenant authorization bypass in the asset-management API that can allow cross-workspace access, delete, or duplicate of assets.

Node

CISA updates node-forge for signature forgery flaws in RSA-PKCS#1 and Ed25519

Decision Insights Threat Desk August 23, 2026

Overview Two distinct cryptographic signature verification vulnerabilities exist in Digital Bazaar node-forge, a widely used JavaScript library implementing cryptographic primitives for Node.js and…

Data Center

CISA issues update on Xerte Online Toolkits RCE vulnerabilities

Decision Insights Threat Desk August 23, 2026

Xerte Online Toolkits reports two vulnerabilities that can lead to remote code execution, fixed in v3.15.5 and v3.14.6.

Router

CISA says Calix EXOS 6.6.47 exposes UPnP WANIPConnection on TCP 5000

Decision Insights Threat Desk August 23, 2026

Calix GS7 XGS GS5239XG EXOS/6.6.47 has an unauthenticated UPnP WANIPConnection flaw on TCP 5000, enabling NAT mapping changes.

Vulnerabilities

CISA issues alert on OpenCart directory traversal in extension installer

Decision Insights Threat Desk August 23, 2026

OpenCart v4.2.0.0 extension installer mishandles ZIP paths, enabling file writes to webroot and remote code execution; CVE-2026-18412.

Local Area Network

CISA issues notice on authentication bypass in ARRIS BGW210-700 LAN management interface

Decision Insights Threat Desk August 23, 2026

AT&T ARRIS BGW210-700 firmware versions 2.7.7 and earlier allow unauthenticated LAN users to read Wi-Fi keys and change settings. CVE-2026-16771.

AI infrastructure

CISA issues notice on foreUP REST API credential and IDOR flaws

Decision Insights Threat Desk August 23, 2026

foreUP REST API flaws disclose Finix merchant credentials and allow IDOR access to other customers’ profiles, tokens, and billing history.

Network Operator

CISA issues alert on VPS.org one-click deployment templates vulnerabilities

Decision Insights Threat Desk August 23, 2026

VPS.org one-click templates use static credentials: Supabase exposes PostgreSQL on 0.0.0.0:5432 and Zulip enables session forgery.

Normalization

CISA alerts on arbitrary file overwrite in Develar app-builder

Decision Insights Threat Desk August 23, 2026

Develar app-builder zipx.Unzip can allow arbitrary file overwrite on macOS via APFS Unicode normalization and symlink following.

script

CISA issues update on CVE-2026-14985 affecting Analog Way server

Decision Insights Threat Desk August 23, 2026

Analog Way Picturall Quad Compact Mark II version 3.5.8 has CVE-2026-14985 enabling root via a maintenance script. Fixed in 3.5.9.

Data Center

CISA issues update on GNU Wget SSRF in FTP passive mode

Decision Insights Threat Desk August 23, 2026

GNU Wget versions 1.25.0 and earlier can redirect FTP passive mode data connections using unvalidated PASV IPs, exposing internal responses.