Our blog | Matthews Enterprises

12 Articles

Cybersecurity ×

Easy Digital Downloads CVE-2026-120538: guest checkout hands over admin

Matthews Enterprises (PTY) LTD, Francois Matthews

Easy Digital Downloads CVE-2026-120538: guest checkout hands over admin

An attacker who starts a PayPal guest checkout with an administrator's email address can finish it holding that administrator's session. EDD 3.7.3 closes it.

Cybersecurity

Nov 4, 2026

GitLab CVE-2026-97229: CVSS 10.0 CI/CD flaw, 1,000 servers still exposed

Matthews Enterprises (PTY) LTD, Francois Matthews

GitLab CVE-2026-97229: CVSS 10.0 CI/CD flaw, 1,000 servers still exposed

An integer overflow in GitLab's CI/CD regex compiler gives unauthenticated attackers code execution. CISA added it to KEV and 1,000 exposed servers are still unpatched.

Cybersecurity

Nov 4, 2026

Synology C3RB3R ransomware: 380,000 exposed NAS devices, old DSM to blame

Matthews Enterprises (PTY) LTD, Francois Matthews

Synology C3RB3R ransomware: 380,000 exposed NAS devices, old DSM to blame

Synology says attackers are using a flaw patched in December 2024 to encrypt NAS devices and demand payment. The fix has been available for almost two years.

Cybersecurity

Nov 4, 2026

Barracuda ESG CVE-2026-116606: 9.3 auth bypass that ends in root

Matthews Enterprises (PTY) LTD, Francois Matthews

Barracuda ESG CVE-2026-116606: 9.3 auth bypass that ends in root

An authentication bypass on Barracuda's email gateway lets an unauthenticated attacker rewrite the appliance configuration, then a second flaw turns admin rights into root.

Cybersecurity

Nov 4, 2026

cPGuard 5.88.12-5.88.19 pushed a backdoor through its own updater

Matthews Enterprises (PTY) LTD, Francois Matthews

cPGuard 5.88.12-5.88.19 pushed a backdoor through its own updater

OPSSHIELD lost control of the CDN that serves cPGuard updates. Builds 5.88.12 to 5.88.19 carried a root-level script that copied password hashes, MySQL config and root SSH files off the box.

Cybersecurity

Nov 3, 2026

s2Member CVE-2026-86596: CVSS 9.8 code execution through the PayPal IPN field

Matthews Enterprises (PTY) LTD, Francois Matthews

s2Member CVE-2026-86596: CVSS 9.8 code execution through the PayPal IPN field

A payment field in s2Member can be reassembled into a PHP opener before it reaches a template. Wordfence rates the flaw 9.8 and the fix is build 261001.

Cybersecurity

Nov 3, 2026

WordPress CVE-2026-119977: unauthenticated RCE in the core update window

Matthews Enterprises (PTY) LTD, Francois Matthews

WordPress CVE-2026-119977: unauthenticated RCE in the core update window

WordPress 7.1.4 closes an unauthenticated code execution bug in the core update process. Attackers are already polling the staged installer paths it leaves behind.

Cybersecurity

Nov 3, 2026

Brotli CVE-2026-111497: 9.8 decoder flaw in Node.js, .NET and PowerShell

Matthews Enterprises (PTY) LTD, Francois Matthews

Brotli CVE-2026-111497: 9.8 decoder flaw in Node.js, .NET and PowerShell

An out-of-bounds write in the Brotli decoder reaches every runtime that unpacks compressed data. Node.js, .NET and PowerShell 7 all shipped fixes; end-of-life lines did not.

Cybersecurity

Nov 3, 2026

YOOtheme Pro CVE-2026-102785: CVSS 10.0 RCE leaves webshells in image files

Matthews Enterprises (PTY) LTD, Francois Matthews

YOOtheme Pro CVE-2026-102785: CVSS 10.0 RCE leaves webshells in image files

A signature reuse flaw in YOOtheme Pro's public image handler lets anyone write an executable PNG/PHP polyglot into the media folder. Attackers are leaving backdoors in real JPEGs.

Cybersecurity

Nov 3, 2026

weDevs Project Manager CVE-2026-116512: 9.8 unauthenticated RCE in WordPress

Matthews Enterprises (PTY) LTD, Francois Matthews

weDevs Project Manager CVE-2026-116512: 9.8 unauthenticated RCE in WordPress

Project Manager for WordPress up to 4.1.1 lets anyone run code on the server without logging in. Version 4.1.2 is out and this one should not wait.

Cybersecurity

Nov 3, 2026

Sophos UTM CVE-2026-118633: pre-auth root RCE on end-of-life firewalls

Matthews Enterprises (PTY) LTD, Francois Matthews

Sophos UTM CVE-2026-118633: pre-auth root RCE on end-of-life firewalls

A path traversal in the UTM email proxy lets an unauthenticated attacker run commands as root. UTM is end-of-life, so the patch is manual and there is no workaround.

Cybersecurity

Nov 3, 2026

Siemens SIMATIC IoT2050 CVE-2026-58115: CVSS 10.0, exploited and no login required

Matthews Enterprises (PTY) LTD, Francois Matthews

Siemens SIMATIC IoT2050 CVE-2026-58115: CVSS 10.0, exploited and no login required

VulnCheck has seen live attacks on a CVSS 10.0 hole in Siemens SIMATIC IoT2050 industrial gateways. Node-RED on the device accepts commands from anyone who can reach it.

Cybersecurity

Nov 3, 2026

Prev
4
5
6
7
8
Next