Hackers exploit SiteGuard WAF flaw to run commands as admins
2026-10-19T01:23:23Z•d96092344783db8ad93606388b0045841396d4fcbc0141f8e416ec46f03bf0a3
CVE-2026-103849CVE-2026-110447Adobe CommerceAndroidBeyondTrustCandiruCollabora OnlineDrupalLinuxMagentoMicrosoft 365NextcloudSiteGuard WAFactive exploitationcloud securitycommand injectioncritical vulnerabilitydata breachmalwareprivilege escalationproxyjackingremote code executionroot/SYSTEMspywaresupply-chain attackweb application securityzero-day
What happened
A BleepingComputer security-news feed covering active exploitation of critical vulnerabilities, zero-days, supply-chain compromise, remote code execution, malware delivery, data breaches, and attacks against enterprise, cloud, network, CMS, and endpoint environments. Notable items include exploited SiteGuard WAF command injection enabling root/SYSTEM execution, ConnectWise Cloud Backup compromise affecting Microsoft 365 tenants, critical Drupal and Magento/Adobe Commerce RCE flaws, exploited Collabora Nextcloud RCE (CVE-2026-110447), a BeyondTrust Remote Support zero-day, proxyjacking of D‑, U
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- d96092344783db8ad93606388b0045841396d4fcbc0141f8e416ec46f03bf0a3
- Enrichment time
- 2026-10-19T01:23:23Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.