Web Attack Trend Report Archives | SECaaS Platform AIONCLOUD

[2026.09] Threat Intelligence Report

Status of High-Risk Vulnerabilities No. Vulnerability No. (CVE) Content CVSS Risk Level 1 CVE-2026-72898 Metabase Unauthenticated SQL Injection 10 CRITICAL 2 CVE-2026-58231 SAP Commerce Cloud Unauthenticated Code Injection 10 CRITICAL 3 CVE-2026-48362 Adobe ColdFusion OS Command Injection 10 CRITICAL 4 CVE-2026-18051 W3 Total Cache Unauthenticated Arbitrary File Write 10 CRITICAL 5 CVE-2026-74253 Joomla Sourcerer Unauthenticated Read more about [2026.09] Threat Intelligence Report[…]

[2026.08] Threat Intelligence Report

Status of High-Risk Vulnerabilities No. Vulnerability No. (CVE) Content CVSS Risk Level 1CVE-2026-48276Adobe ColdFusion Arbitrary File Upload RCE10CRITICAL 2CVE-2026-48286Adobe Campaign Classic Authorization Bypass RCE10CRITICAL 3CVE-2026-10134IBM Langflow OSS Code Injection10CRITICAL 4CVE-2026-50160Hoppscotch Mass Assignment Authentication Bypass10CRITICAL 5CVE-2026-48316Adobe ColdFusion Improper Input Validation RCE10CRITICAL 6CVE-2026-57572Crawl4AI Docker API Argument Injection RCE10CRITICAL 7CVE-2026-15409SonicWall SMA1000 Server-Side Request Forgery10CRITICAL 8CVE-2026-16812Arista VeloCloud Orchestrator On-Prem Read more about [2026.08] Threat Intelligence Report[…]

[2026.07] Threat Intelligence Report

Status of High-Risk Vulnerabilities No. Vulnerability No. (CVE) Content CVSS Risk Level 1CVE-2026-41283OpenStack Mistral Unauthenticated RCE9.9CRITICAL 2CVE-2026-47647Microsoft Dynamics 365 Access Control Privilege Escalation9.9CRITICAL 3CVE-2026-56274Flowise Custom MCP Server OS Command Injection RCE9.9CRITICAL 4CVE-2026-8206Kirki WordPress Plugin Account Takeover 9.8CRITICAL 5CVE-2026-47291Windows HTTP.sys Integer Overflow RCE9.8CRITICAL 6CVE-2026-25089Fortinet FortiSandbox OS Command Injection RCE9.8CRITICAL 7CVE-2026-8025MOSK CBS Platform SQL Injection9.8CRITICAL 8CVE-2026-7486Netcad E-İmar Read more about [2026.07] Threat Intelligence Report[…]

[2026.06] Threat Intelligence Report

Status of High-Risk Vulnerabilities No. Vulnerability No. (CVE) Content CVSS Risk Level 1CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass10CRITICAL 2CVE-2026-43898SandboxJS Sandbox Escape RCE10CRITICAL 3CVE-2026-45102OneUptime Sandbox Escape RCE9.9CRITICAL 4CVE-2026-0300Palo Alto Networks PAN-OS User-ID Authentication Portal 9.8CRITICAL 5CVE-2026-8181WordPress Burst Statistics Plugin Authentication Bypass9.8CRITICAL 6CVE-2026-34187Pandora FMS SQL Injection9.8CRITICAL 7CVE-2026-44183Cleanuparr Authentication Bypass9.8CRITICAL 8CVE-2026-24207NVIDIA Triton Inference Server Authentication Bypass9.8CRITICAL 9CVE-2026-33278NLnet Labs Read more about [2026.06] Threat Intelligence Report[…]

[2026.05] Threat Intelligence Report

Status of High-Risk Vulnerabilities No. Vulnerability No. (CVE) Content CVSS Risk Level 1CVE-2026-22557UniFi Network Application Path Traversal10CRITICAL 2CVE-2026-21628Astroid Framework Malicious File Upload10CRITICAL 3CVE-2026-33937Handlebars Remote Code Execution9.8CRITICAL 4CVE-2026-32767SiYuan SQL Injection9.8CRITICAL 5CVE-2026-0770Langflow Remote Code Execution9.8CRITICAL 6CVE-2026-30457Bludit CMS Remote Code Execution9.8CRITICAL 7CVE-2026-1115parisneo/lollms Cross-Site Scripting9.6CRITICAL 8CVE-2026-33017Langflow Remote Code Execution9.3CRITICAL 9CVE-2026-32940SiYuan Cross-Site Scripting9.3CRITICAL 10CVE-2026-32238OpenEMR Command Injection9.1CRITICAL Distribution of Web Application Read more about [2026.05] Threat Intelligence Report[…]

[2026.04] Threat Intelligence Report

Status of High-Risk Vulnerabilities No. Vulnerability No. (CVE) Content CVSS Risk Level 1CVE-2026-20131Cisco Secure FMC Insecure Deserialization10CRITICAL 2CVE-2026-27897Vociferous Path Traversal10CRITICAL 3CVE-2026-32306OneUptime SQL Injection9.9CRITICAL 4CVE-2026-29058AVideo Encoder Command Injection9.8CRITICAL 5CVE-2026-31896WeGIA SQL Injection9.8CRITICAL 6CVE-2026-26793GL-iNet GL-AR300M16 Command Injection9.8CRITICAL 7CVE-2026-26795GL-iNet GL-AR300M16 Command Injection9.8CRITICAL 8CVE-2026-26791GL-iNet GL-AR300M16 Command Injection9.8CRITICAL 9CVE-2026-26792GL-iNet GL-AR300M16 Command Injection9.8CRITICAL 10CVE-2026-29183SiYuan Cross-Site Scripting9.3CRITICAL Distribution of Web Application Attack Types Read more about [2026.04] Threat Intelligence Report[…]

[2026.03] Web Attack Trend Report

[March 2026 Web Attack Trend Analysis] 1. Weekly Web Attack Trend Analysis By analyzing weekly web attack trends, it is possible to identify specific periods when attacks are most concentrated. These insights can be used to establish proactive prevention and response strategies in anticipation of high-risk periods. The graph below visualizes the number of web Read more about [2026.03] Web Attack Trend Report[…]

[2026.02] Web Attack Trend Report

[February 2026 Web Attack Trend Analysis] 1. Weekly Web Attack Trend Analysis Through weekly web attack trend analysis, it is possible to identify periods during which web attacks were highly concentrated. These insights can be used to establish proactive prevention and response strategies in preparation for periods of increased attack activity. The graph below visualizes Read more about [2026.02] Web Attack Trend Report[…]

[2026.01] Web Attack Trend Report

[January 2026 Web Attack Trend Analysis] 1. Weekly Web Attack Trend Analysis By analyzing weekly web attack trends, it is possible to identify specific periods during which web attacks were heavily concentrated. These insights can be used to establish proactive prevention and response strategies in preparation for periods of increased attack activity. The graph below Read more about [2026.01] Web Attack Trend Report[…]

[2025.11] Web Attack Trend Report

[November 2025 Web Attack Trend Analysis] 1. Weekly Web Attack Trend Analysis By analyzing weekly web attack trends, it is possible to identify specific periods during which web attacks were heavily concentrated. Based on these insights, organizations can establish proactive prevention and response strategies to prepare for periods of frequent attack activity. The graph below Read more about [2025.11] Web Attack Trend Report[…]