https://threatfrontier.com/articles/mistral-large-4-reduced-moderation-cyber-tier-82-percent-claim ThreatFrontier.com en 2026-10-06T14:31:34.998Z Mistral Large 4 preview ships a reduced-moderation cyber tier, and Artificial Analysis lists its 82% as the top score https://threatfrontier.com/articles/nextchat-proxy-ssrf-cve-2026-105238-no-patched-release ThreatFrontier.com en 2026-10-06T14:03:13.090Z NextChat proxy fallback lets unauthenticated callers make the server fetch any URL (CVE-2026-105238) https://threatfrontier.com/articles/dify-cve-2026-105762-unauthenticated-ssrf-remote-files-upload ThreatFrontier.com en 2026-10-06T13:33:25.678Z Dify CVE-2026-105762: Unauthenticated SSRF in Remote-File Upload Reaches Internal Services and Cloud Metadata https://threatfrontier.com/articles/langflow-mcp-stdio-cve-2026-105697-cve-2026-105740-rce ThreatFrontier.com en 2026-10-06T01:42:20.455Z Langflow MCP Stdio Flaws Give Any Logged-In User a Shell: CVE-2026-105697 and CVE-2026-105740 https://threatfrontier.com/articles/sagemaker-distribution-cve-2026-104019-startup-script-injection ThreatFrontier.com en 2026-10-05T09:33:06.466Z AWS Patches Critical SageMaker Distribution Flaw That Lets a Project Contributor Hijack Another User's Studio Space https://threatfrontier.com/articles/aws-loom-cve-2026-103956-no-idp-admin-takeover ThreatFrontier.com en 2026-10-05T09:24:03.268Z AWS fixes Loom flaw that gave any network client admin rights on deployments without an identity provider https://threatfrontier.com/articles/mindsearch-planner-agent-code-injection-cve-2026-105135 ThreatFrontier.com en 2026-10-05T01:41:12.384Z MindSearch code-injection flaw (CVE-2026-105135) has a public PoC and no fix https://threatfrontier.com/articles/citrix-netscaler-saml-cve-2026-88779-kev ThreatFrontier.com en 2026-10-05T01:32:28.753Z Citrix NetScaler SAML Memory Flaw CVE-2026-88779 Added to CISA KEV, and Last Month's Patch Does Not Cover It