MEDIUMVulnerability
Global

Australia warns of global campaign targeting vulnerable CMS platforms

·Source: BleepingComputer

Updated:

Executive Summary

The Australian Cyber Security Centre (ACSC) issued an alert about a global exploitation campaign targeting vulnerable content management systems (CMS) and plugins. [...]

Analysis

The Australian Cyber Security Centre (ACSC) issued an alert about a global exploitation campaign targeting vulnerable content management systems (CMS) and plugins. [...]
Source Attribution

Originally published by BleepingComputer on Jul 11, 2026.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-56271 — Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded ...

Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and issuer values ('AUDIENCE', 'ISSUER') in the enterprise passport authentication middleware (packages/server/src/enterprise/middleware/passport/index.ts). When the corresponding environment variables (JWT_AUTH_TOKEN_SECRET, JWT_REFRESH_TOKEN_SEC

CVE-2026-56271
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-56260 — Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Dock...

Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The output_path parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location writable by the application's user, overwriting server files and causing denial of service.

CVE-2026-56260
NIST NVD
LOWVulnerability

Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)

[object Object]

CVE-2026-40639
r/blueteamsec