Hackers exploit SiteGuard WAF flaw to run commands as admins
2026-10-19T07:23:21Z•d061fb28c6c18773ee46301cedf22c462d8d6cdc09e88ce762b9b0fd63e7a766
CVE-2026-103849CVE-2026-110447Adobe CommerceBeyondTrustCandiruCollabora CODEConnectWiseDrupalLinux malwareMagentoMicrosoft 365NextcloudWAFactive exploitationcloud securitycommand injectiondata breachmalicious packagesmalvertisingproxyjackingremote code executionroot/SYSTEM executionspywaresupply-chain compromiseweb application securityzero-click attackzero-day
What happened
A BleepingComputer security news feed covering active exploitation of critical vulnerabilities, including SiteGuard WAF OS command injection, Drupal and Magento/Adobe Commerce RCE flaws, BeyondTrust Remote Support zero-day exploitation, and Collabora CODE RCE attacks against Nextcloud. The feed also reports a ConnectWise supply-chain compromise affecting Microsoft 365 tenants, spyware delivered through zero-click malvertising, device hijacking for proxyjacking, malicious Arch Linux packages, major data breaches, and security product updates.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- d061fb28c6c18773ee46301cedf22c462d8d6cdc09e88ce762b9b0fd63e7a766
- Enrichment time
- 2026-10-19T07:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.