CWE-88

Everything Threat Times has reported about CWE-88: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Apache Traffic Server Patch Fixes Critical Unauthenticated Argument Injection

Threat TimesOct 21, 2026

A critical flaw in Apache Traffic Server’s magick plugin allows unauthenticated clients to control ImageMagick arguments. Patches are now available for affected versions.

Vulnerabilities

Critical Code Execution Flaw Found in JFrog CLI Through Version 2.126.0

Threat TimesOct 13, 2026

A new NVD record details a critical vulnerability in JFrog CLI that allows arbitrary code execution under specific configurations, affecting versions up to 2.126.0.