Cloud

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code Source: The Hacker News SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of Read original

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code Source: The Hacker News SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of Read original

Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database Source: The Hacker News A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service’s Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, which codenamed the chain CosmosEscape, said the exploit chain began with a crafted Read original

Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database Source: The Hacker News A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service’s Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, which codenamed the chain CosmosEscape, said the exploit chain began with a crafted Read original

Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database Source: The Hacker News A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service’s Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, which codenamed the chain CosmosEscape, said the exploit chain began with a crafted Read original

Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database Source: The Hacker News A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service’s Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, which codenamed the chain CosmosEscape, said the exploit chain began with a crafted Read original

Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database Source: The Hacker News A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service’s Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, which codenamed the chain CosmosEscape, said the exploit chain began with a crafted Read original

Hackers exploit critical auth bypass in Gitea Docker image Source: BleepingComputer Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, including administrators. […] Read original

Hackers exploit critical auth bypass in Gitea Docker image Source: BleepingComputer Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, including administrators. […] Read original

Hackers exploit critical auth bypass in Gitea Docker image Source: BleepingComputer Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, including administrators. […] Read original