Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 4h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 7h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 7h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 8h Vulnerabilitas in software Sparx Systems Enterprise Architect · 8h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 8h Vulnerabilitates in Slican telephonis · 9h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 12h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 13h Langflow's Critica Authenticated RCE Vulnerabilitas Targetata in 1,423 Honeypot Exploit Conatibus · 13h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 4h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 7h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 7h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 8h Vulnerabilitas in software Sparx Systems Enterprise Architect · 8h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 8h Vulnerabilitates in Slican telephonis · 9h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 12h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 13h Langflow's Critica Authenticated RCE Vulnerabilitas Targetata in 1,423 Honeypot Exploit Conatibus · 13h

ACyber Sentinel Turma Aestimationis Securitatis

← Redire

⚠️ Renuntiatio Vulnerabilitatis

CVE-2026-85960

HIGH CVSS 7.5 CVSS 3.1 📌 Awaiting Analysis

CVE-2026-85960 - Cross-site request forgery in Progress MarkLogic Server Query Console

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Query Console user to a malicious page could submit unauthorized requests and execute server-side code with the victim's permissions.

Publicatum: Oct 12, 2026 17:17

Ultima Mutatio: Oct 13, 2026 16:19