SECURITYAug 5 · 14:27 UTCTHE HACKER NEWS[email protected] (The Hacker News)

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

HashiCorp, Veeam, and the Django Software Foundation patched 11 vulnerabilities across their products, including a CVSS 10.0 cross-tenant flaw in HashiCorp's Terraform MCP Server and a high-severity unauthenticated credential-exposure flaw in Veeam's console.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

HashicorporganizationVeeamorganizationDjango Software FoundationorganizationTerraform MCP ServertopicVeeam Service Provider ConsoletopicDjangotopicCVSS 10.0 cross-tenant bugtopicunauthenticated flawtopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYMay 13 · 20:17 UTC
Bug hunter tracks down three massive MCP flaws and one vendor won't fix theirs
SECURITYApr 30 · 10:14 UTC
Bug of the year (so far): Nasty cPanel vulnerability probably exploited as a 0-day
SECURITYMay 9 · 07:16 UTC
cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now
SECURITYApr 15 · 12:56 UTC
Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover