CWE-306

Everything BlueTeam Herald has reported about CWE-306: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Update IceCMS Beyond 4.1.5 to Block PUT Request Attackers From Resetting Admin Passwords Without Auth

A critical missing authentication flaw in IceCMS allows attackers to reset admin passwords without credentials, risking full system control for users on versions 4.1.5 and earlier.

Oct 17, 2026

Vulnerabilities

Update Archon AI 0.2.13-0.11.1 Now to Fix CVE-2026-111322 Critical Host Command Execution Vulnerability

A critical flaw in Archon AI versions 0.2.13 through 0.11.1 lets attackers run host commands without authentication via an exposed API.

Oct 16, 2026