[vulnfeed] 2 critical CVEs — 2026-07-06 12:00 UTC
vulnfeed
Critical alert — 2026-07-06 15:58 UTC
2 new critical CVEs
in the last 5 hours — 2 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-12686CRITICAL
An authenticated user could manipulate a company ID parameter in a POST request to the backend to gain unautho
An authenticated user could manipulate a company ID parameter in a POST request to the backend to gain unauthorised access to other companies hosted within the same subdomain environment. The applicat
CVSS 9.3
CVE-2026-6900CRITICAL
Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL.
This issue affects APR
Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL.
This issue affects APROL: before R 4.4-01P5.
CVSS 9.1
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: