Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
2 / 2 results
criticalbug_reportVulnerabilitybug_reportVulnerability
WordPress RCE flaw CVE-2026-87902 exploited hours after disclosure
WordPress versions prior to 7.1.2 (also 7.0.6, 6.9.9, 6.8.10). Exploitation requires active theme with top-level directory starting with "page-" and readable local .php file (e.g., pearcmd.php) on server.
CVE-2026-8790224 Sep · 03:36 UTC
criticalbug_reportVulnerabilitybug_reportVulnerability
WordPress CVE-2026-87902 under active exploitation for RCE
WordPress versions 4.7 through 7.1.1. Exploitation requires a theme with a top-level directory starting with 'page-' and a readable local .php file (e.g., pearcmd.php). Official PHP Docker images and cPanel with PHP <8.5 are vulnerable by default.
CVE-2026-8790223 Sep · 16:31 UTC