https://0daynews.com/articles/2026-09-27-budibase-3-45-0-six-cve-patch/ 0dayNews en 2026-09-27T12:00:00.000Z Budibase 3.45.0 Fixes Six Security Flaws budibase, cve, authentication-bypass, sql-injection, arbitrary-file-write, ssrf, low-code https://0daynews.com/articles/2026-09-27-budibase-3-45-0-six-cve-patch/cover.jpg Budibase 3.45.0 Fixes Six Security Flaws https://0daynews.com/articles/2026-09-27-citrix-netscaler-two-unpatched-rce-zero-days/ 0dayNews en 2026-09-27T10:30:00.000Z Citrix NetScaler: Two Unpatched RCEs Actively Exploited citrix, netscaler, rce, zero-day, adc, gateway, exploitation https://0daynews.com/articles/2026-09-27-citrix-netscaler-two-unpatched-rce-zero-days/cover.jpg Citrix NetScaler: Two Unpatched RCEs Actively Exploited https://0daynews.com/articles/2026-09-27-woocommerce-request-quote-cve-2026-18143-file-upload/ 0dayNews en 2026-09-27T08:00:00.000Z Critical File Upload Bug in WooCommerce Quote Plugin woocommerce, cve-2026-18143, arbitrary-file-upload, wordpress, request-a-quote https://0daynews.com/articles/2026-09-27-woocommerce-request-quote-cve-2026-18143-file-upload/cover.jpg Critical File Upload Bug in WooCommerce Quote Plugin https://0daynews.com/articles/2026-09-27-sharepoint-code-injection-cve-2026-65660-kev/ 0dayNews en 2026-09-27T06:00:00.000Z SharePoint Code Injection CVE-2026-65660 Added to KEV sharepoint, cisa-kev, cve-2026-65660, code-injection, microsoft https://0daynews.com/articles/2026-09-27-sharepoint-code-injection-cve-2026-65660-kev/cover.jpg SharePoint Code Injection CVE-2026-65660 Added to KEV https://0daynews.com/articles/2026-09-27-shinyhunters-waf-bypass-oracle-peoplesoft-cve-2026-35273/ 0dayNews en 2026-09-27T06:00:00.000Z ShinyHunters WAF Bypass Keeps PeopleSoft Attacks Alive CVE-2026-35273, Oracle PeopleSoft, WAF bypass, ShinyHunters, web shells, KEV, URL encoding https://0daynews.com/articles/2026-09-27-shinyhunters-waf-bypass-oracle-peoplesoft-cve-2026-35273/cover.jpg ShinyHunters WAF Bypass Keeps PeopleSoft Attacks Alive https://0daynews.com/articles/2026-09-26-elementor-csrf-admin-account-creation/ 0dayNews en 2026-09-26T14:00:00.000Z Elementor CSRF Flaw Lets Attackers Create Admin Accounts wordpress, elementor, csrf, privilege-escalation, plugin-security https://0daynews.com/articles/2026-09-26-elementor-csrf-admin-account-creation/cover.jpg Elementor CSRF Flaw Lets Attackers Create Admin Accounts https://0daynews.com/articles/2026-09-26-mikrotik-cve-2026-67279-cisa-kev-chain/ 0dayNews en 2026-09-26T14:00:00.000Z CISA Adds MikroTik RouterOS Chain Flaw to KEV Catalog mikrotik, routeros, cve-2026-67279, cve-2026-86060, cisa kev, vulnerability chain, network security https://0daynews.com/articles/2026-09-26-mikrotik-cve-2026-67279-cisa-kev-chain/cover.jpg CISA Adds MikroTik RouterOS Chain Flaw to KEV Catalog https://0daynews.com/articles/2026-09-26-kiteworks-zero-day-warning-server-shutdown/ 0dayNews en 2026-09-26T12:00:00.000Z Kiteworks Flags Potential Zero-Day, Urges Server Shutdown kiteworks, zero-day, managed file transfer, enterprise security, secure file sharing, mft https://0daynews.com/articles/2026-09-26-kiteworks-zero-day-warning-server-shutdown/cover.jpg Kiteworks Flags Potential Zero-Day, Urges Server Shutdown https://0daynews.com/articles/2026-09-26-clop-moves-leak-site-grav-cms-attack-confirmed/ 0dayNews en 2026-09-26T08:00:00.000Z Clop Moves Leak Site After Grav CMS Attack Confirmed Clop, ShinyHunters, Grav CMS, ransomware, path traversal, data leak site, threat actors https://0daynews.com/articles/2026-09-26-clop-moves-leak-site-grav-cms-attack-confirmed/cover.jpg Clop Moves Leak Site After Grav CMS Attack Confirmed https://0daynews.com/articles/2026-09-26-soldier-70-months-att-verizon-telecom-extortion/ 0dayNews en 2026-09-26T06:00:00.000Z U.S. Soldier Gets 70 Months for Telecom Extortion AT&T, Verizon, telecom, extortion, sentencing, data theft, US Army https://0daynews.com/articles/2026-09-26-soldier-70-months-att-verizon-telecom-extortion/cover.jpg U.S. Soldier Gets 70 Months for Telecom Extortion