[vulnfeed] 2 critical CVEs — 2026-10-05 16:00 UTC
vulnfeed
Critical alert — 2026-10-05 17:18 UTC
2 new critical CVEs
in the last 5 hours — 2 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-102428CRITICAL
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order co
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection
CVSS 9.3
CVE-2026-79820CRITICAL
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.
CVSS 9.0
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: