5 reportsPriority High
Multiple software vulnerabilities reported
Several vulnerabilities have been disclosed in widely used software, posing potential risks to UK organisations that rely on these systems.
First report Latest
What is going on
- Adobe Commerce and Magento were found to have an improper input validation vulnerability that could allow account takeover through CVE-2025-54236.
- Gladinet Triofox has an improper access control vulnerability listed as CVE-2025-12480.
- Apache ActiveMQ contains an improper input validation vulnerability that allows code injection, with reports of exploitation in the wild via CVE-2026-34197.
- Check Point products have a certificate validation vulnerability with a high estimated exploitation likelihood, identified as CVE-2026-85102.
- Plex Media Server has a vulnerability involving improper neutralisation of encoded URI schemes, allowing attackers to call plugins with their own parameters, reported in the known-exploited catalogue.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority HighType VulnerabilityLead report
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
- Priority HighType Vulnerability
Check Point Multiple Products Certificate Validation Flaw Vulnerability
- Priority MediumType Vulnerability
Apache ActiveMQ Input Validation Flaw Vulnerability
- Priority MediumType Vulnerability
Adobe Commerce and Magento Input Validation Flaw Vulnerability
- Priority MediumType Vulnerability
Gladinet Triofox Access Control Flaw Vulnerability