Articles on SystemTek’s website that relate to cyber security.
CVE number = CVE-2026-62422 In JetBrains YouTrack before versions 2026.1.13757,2025.3.148033,2025.2.148048,2025.1.148120,2024.3.148430,2024.2.148429 Authentication bypass via direct database access leading to administrative access
Read More– Organisations in critical infrastructure sectors are being supported to better understand and defend against malicious activity, as the UK and international partners today call out techniques used by Russian Intelligence Services
Read More– JuiceFS through 1.3.1, fixed in commit a46979c, contains an authentication bypass vulnerability that allows unauthenticated remote attackers to access sensitive debug and metrics endpoints by exploiting improper handler registration on the shared http.DefaultServeMux.
Read More– Authorization Bypass Through User-Controlled Key (CWE-639) in CalendarDeleteEventController (app/Http/Controllers/Calendar/CalendarDeleteEventController.php), exposed at GET /calendar/event/delete/{id}, in Prospero Flow CRM before 5.5.3.
Read More – The Federal Bureau of Investigation (FBI) has released an alert to highlight the tactics, techniques, and
procedures (TTPs) and indicators of compromise (IOCs) associated with the cyber criminal group
TeamPCP.
– A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.
Read More– This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server.
Read More– A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks.
Read MoreCVE number – CVE-2026-10043 This vulnerability allows remote attackers to execute arbitrary code on affected installations of MosaicML Composer. User
Read More– The Public Accounts Committee (PAC) is warning that national museums and galleries are being left vulnerable to a range of issues from threats from cyber security to the physical security of collections, as the Government continues to rely on a reactive, rather than a strategic approach.
Read More
