Severity HIGH Threat Category Vulnerability – Remote Code Execution (unauthenticated, upgrade-window race condition) Affected Platforms WordPress Core versions 4.7.0 through
Severity CRITICAL Threat Category Vulnerability – Authentication Bypass (unauthenticated account takeover) Affected Platforms Laravel Framework before 12.68.0, and 13.0.0 before
“One Digital Nation, Shared Cyber Responsibility: Securing Bhutan’s Digital Future” 28 October 2026 | Venue:Hotel Mayto | Organized by BtCIRT
National Cybersecurity Conference 2026, Program Outline Read More »
Severity CRITICAL Threat Category Vulnerability – Remote Code Execution (unauthenticated) Affected Platforms PHP 8.2.x before 8.2.35, 8.3.x before 8.3.36, 8.4.x
Severity CRITICAL Threat Category Vulnerability – Remote Code Execution Affected Platforms Drupal core Field UI module: 8.9.0 to before 10.6.19,
Severity CRITICAL Threat Category Vulnerability – Authorization Bypass / Code Injection (CWE-94) Affected Platforms WordPress sites running the Avada (Fusion)
Severity CRITICAL Threat Category Vulnerability – OS Command Injection / Remote Code Execution (CWE-78) Affected Platforms Langflow (langflow-ai) self-hosted AI
Severity HIGH Threat Category Vulnerability – Stored Cross-Site Scripting (CWE-79) Affected Platforms WordPress sites running the WPS Limit Login plugin
Severity CRITICAL Threat Category Vulnerability – Authentication Bypass (CWE-304) Affected Platforms Proxmox Virtual Environment 7.0 – 7.4 and 8.0 with
