https://www.threatwire.tech/news/bit-file-manager-flaw-lets-any-subscriber-read-wp-config-cve-2026-17540ThreatWireen2026-10-26T13:45:00.000ZBit File Manager flaw lets any subscriber read wp-config.php, CVE-2026-17540 https://www.threatwire.tech/news/wasmtime-fixes-two-critical-cranelift-sandbox-escapes-cve-2026-115889-and-cve-2026-115893ThreatWireen2026-10-26T13:00:00.000ZWasmtime fixes two critical Cranelift sandbox escapes, CVE-2026-115889 and CVE-2026-115893 https://www.threatwire.tech/news/brotli2shell-cve-2026-111497-reaches-dotnet-ffmpeg-clickhouse-and-arrowThreatWireen2026-10-26T11:10:00.000ZBrotli2Shell: CVE-2026-111497 reaches .NET, FFmpeg, ClickHouse and Arrow https://www.threatwire.tech/research/linux-ipv6-rpl-route-of-root-is-cve-2026-43501ThreatWireen2026-10-26T00:10:00.000ZLinux IPv6 RPL "Route of Root" is CVE-2026-43501, CVSS 9.8 https://www.threatwire.tech/threats/php2shell-breach-european-government-mfa-secrets-in-two-hoursThreatWireen2026-10-25T18:33:00.000ZCorrection: Unit 42 retracts PHP2Shell link to European government intrusion https://www.threatwire.tech/news/tailworm-tailscale-ssh-headscale-11-flaws-what-is-confirmedThreatWireen2026-10-25T17:06:00.000ZTailworm: 11 claimed Tailscale and headscale flaws, published without coordination. What is confirmed https://www.threatwire.tech/news/laravel-tokenguard-auth-bypass-cve-2026-114509-fixed-in-august-disclosed-in-octoberThreatWireen2026-10-25T14:35:00.000ZLaravel TokenGuard auth bypass CVE-2026-114509: fixed in August, disclosed in October https://www.threatwire.tech/threats/adobe-commerce-magento-account-takeover-cve-2026-71362-cisa-kevThreatWireen2026-10-24T23:33:00.000ZAdobe fixed Magento account takeover CVE-2026-71362 in August 2026; still in CISA KEV