Tagged “patching”
3 posts
CVE-2026-21580: Confluence XSS That Skips Straight to Admin
An unauthenticated stored XSS in Confluence Data Center and Server chains into privilege escalation, turning your internal wiki into a path to full instance takeover.
securitycveatlassianxsspatching
CVE-2026-72898: Metabase Bug Nobody Escalated Hit 1M Users
An unauthenticated SQL injection in Metabase's password-reset endpoint gave attackers admin access — and an unread advisory turned it into a million-record breach.
securitycvedatabasebreachpatching
SharePoint's JWT bug let anyone forge an admin, no password needed
CVE-2026-55040 chained four separate JWT validation failures into unauthenticated admin impersonation on any on-prem SharePoint farm — here's the root cause and what to check now.
securityidentitypatching