Hackers exploit SiteGuard WAF flaw to run commands as admins
2026-10-18T19:23:21Z•e124376bc2a886e2c1b1d97c6ecb76380070b0619f24dda91ce79aab14d2d839
CVE-2026-103849CVE-2026-110447Adobe CommerceAndroid securityArch Linux AURBeyondTrustCandiruCollabora OnlineConnectWiseDrupalMagentoMicrosoft 365NextcloudWAFWindows security updateactive exploitationcloud securitycommand injectiondata breachmalicious packagesprivilege escalationproxyjackingremote code executionspywaresupply-chain compromiseweb application securityzero-day
What happened
A BleepingComputer security-news feed covering active exploitation of critical vulnerabilities, zero-days, supply-chain compromises, malware delivery, data breaches, and security product issues. The most urgent items involve root/SYSTEM command injection in SiteGuard WAF, exploited BeyondTrust Remote Support and Collabora/Nextcloud RCE flaws, critical Drupal and Magento/Adobe Commerce vulnerabilities, and a ConnectWise-related Microsoft 365 tenant compromise.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- e124376bc2a886e2c1b1d97c6ecb76380070b0619f24dda91ce79aab14d2d839
- Enrichment time
- 2026-10-18T19:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.