Insights
Insights from the cyber frontline.
Perspectives on cyber risk, threat detection and Saudi regulation from the Depth Defense team.
Critical · CVSS 9.8Threat advisory
CVE-2026-8457
WooCommerce – Social Login
Authentication bypass
Depth Defense
Web Application Security
When Social Login Could Lead to WordPress Account Takeover
A critical authentication bypass in the WooCommerce – Social Login plugin could let an unauthenticated attacker log in as any existing WordPress user, including an administrator.
6 min readRead article →
Critical · CVSS 9.8Threat advisory
CVE-2026-21643
Fortinet FortiClient EMS
SQL injection (CWE-89)
Depth Defense
Endpoint & Infrastructure Security
Critical SQL Injection in FortiClient EMS
An unauthenticated SQL injection in Fortinet FortiClient EMS 7.4.4 can lead to code or command execution on the server that manages your endpoint security. It is listed in CISA’s KEV catalog.
4 min readRead article →
Critical · CVSS 9.8Threat advisory
CVE-2026-41940
cPanel & WHM
Authentication bypass
Depth Defense
Web Application Security
When a cPanel Login Could Be Bypassed
A critical authentication bypass in cPanel & WHM let remote, unauthenticated attackers reach the control panel. It is actively exploited and listed in CISA’s KEV catalog.
5 min readRead article →
Next step
Ready to strengthen your defense?
Let’s identify your risks, strengthen your security posture and build resilience against evolving threats.