web application security

Everything Threat Times has reported about web application security: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

FlyCms Default Credentials Vulnerability Grants Unauthenticated Admin Access

Threat TimesOct 19, 2026

A critical flaw in FlyCms allows attackers to bypass authentication using default login details, resulting in full administrative control over the web application.

Cyber Attacks

Single POST Request Can Freeze Next.js Servers, Researchers Warn

Threat TimesOct 8, 2026

Security researchers report that a single HTTP POST request can cause Next.js servers to hang, posing a denial-of-service risk to web applications.