Everything Threat Times has reported about CVSS 9.9: 4 stories, newest first. Part of our Vulnerabilities coverage.
A critical authorization bypass in SAP NetWeaver Visual Composer 7.50 lets attackers invoke internal operations on remote systems, risking full compromise.
A critical authorization flaw in Progress MarkLogic Server lets attackers with forest-management privileges create unauthorized administrator accounts and seize full server control.
Progress releases updates for MarkLogic Server to address a critical vulnerability that allows remote attackers to seize persistent administrative control.
The National Vulnerability Database rates CVE-2026-62024 as critical, affecting CodeBard Help Desk versions up to 1.1.2 with unrestricted file upload risks.