cyber-threat-observatory

Tier 1 Alert: CVE-2026-102895 affects GPUStack. An authentication bypass enables unauthenticated admin access and remote code execution. Exploitation is confirmed in the wild. Upgrade to v2.2.0. Analysis: github.com/alan-turing-institute/cyber-threat-obs… #CyberSecurity #AISecurity

CVE-2026-120232 affects Horizon DataSys Reboot Restore Standard. A kernel driver flaw can let a low-privilege user gain SYSTEM access. A ready-to-use PoC raises the risk for kiosks and shared endpoints. Analysis: github.com/alan-turing-institute/cyber-threat-obs… #CyberSecurity #EndpointSecurity

CVE-2026-119977 affects WordPress Core. Attackers are actively exploiting a race condition that can allow remote code execution while a vulnerable WordPress site is performing a core upgrade. Analysis: github.com/alan-turing-institute/cyber-threat-obs… #CyberSecurity #WordPress #VulnerabilityManagement

CVE-2026-63182 affects the LightSAML PHP library. A signature-validation flaw threatens SSO and federated identity trust. A ready-to-use PoC is available. Analysis: github.com/alan-turing-institute/cyber-threat-obs… #CyberSecurity #DigitalIdentity #SAML

CVE-2026-116672 affects Authlib OAuth/OIDC servers. An authorisation bypass can let attackers modify other clients’ registrations, hijack redirect URIs and intercept authentication tokens. Analysis: github.com/alan-turing-institute/cyber-threat-obs… #CyberSecurity #DigitalIdentity #OAuth