FediSecfeeds

##

certvde@infosec.exchange at 2026-09-10T07:33:05.000Z ##

🔄 CSAF advisory updated (version 2.0.0)

VDE-2026-088
METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)

Changes: corrected version

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

CVE-2026-39821
(9.6 CRITICAL)

EPSS: 0.69%

updated 2026-09-10T13:19:50.873000

2 posts

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "examp

certvde at 2026-09-10T07:33:05.830Z ##

🔄 CSAF advisory updated (version 2.0.0)

VDE-2026-088
METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)

Changes: corrected version

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

certvde@infosec.exchange at 2026-09-10T07:33:05.000Z ##

🔄 CSAF advisory updated (version 2.0.0)

VDE-2026-088
METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)

Changes: corrected version

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter

##

CVE-2026-87491
(8.8 HIGH)

EPSS: 0.76%

updated 2026-09-10T12:49:02.630000

13 posts

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

1 repos

hackmag at 2026-09-10T22:32:52.684Z ##

⚪️ Google Chrome Patches Another Zero-Day Vulnerability

🗨️ Google developers have released an update for the Chrome browser that fixes 230 vulnerabilities, including a zero-day flaw in the V8 engine (CVE-2026-87491) that is already being exploited in attacks. The bug allows a remote attacker to achieve arbitrary code…

🔗 https://hackmag.com/news/chrome-7th-0day?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

##

beyondmachines1 at 2026-09-10T08:01:13.314Z ##

Google Patches Chrome Zero-Day and 229 Other Flaws in Version 153

Google released Chrome 153 to fix 230 vulnerabilities, including an actively exploited V8 zero-day (CVE-2026-87491) and five critical flaws in WebGL and Cast.

**This one is urgent, again. Actively exploited flaw and a bunch of fixes. Update Google Chrome to version 153.0.8010.36/.37 for Windows and macOS, or 153.0.8010.36 for Linux. Users of Microsoft Edge, Brave, Opera, Vivaldi, and other Chromium-based browsers. Don't delay, the tabs reopen after an update.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/google-patches-chrome-zero-day-and-229-other-flaws-in-version-153-j-p-1-x-s/gD2P6Ple2L

##

Matchbook3469@mastodon.social at 2026-09-10T00:33:59.000Z ##

🟠 New security advisory:

CVE-2026-87491 affects Google Chrome.

• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-87491-chrome-v8-rce-exploited-in-the-wild

by Yazoul AI

#Cybersecurity #ZeroDay #ThreatIntel

##

threatnoir at 2026-09-10T00:06:04.781Z ##

⚠️ CRITICAL: Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Google patched CVE-2026-87491, a zero-day out-of-bounds write in Chrome's V8 engine actively exploited in the wild. Attackers can execute arbitrary code within the browser sandbox via crafted HTML, potentially compromising any user visiting a malicious page. This is the seventh exploited Chrome zer…

🔗 https://hackmag.com/news/chrome-7th-0day?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

🤖 AI generated summary

##

hackmag@infosec.exchange at 2026-09-10T22:32:52.000Z ##

⚪️ Google Chrome Patches Another Zero-Day Vulnerability

🗨️ Google developers have released an update for the Chrome browser that fixes 230 vulnerabilities, including a zero-day flaw in the V8 engine (CVE-2026-87491) that is already being exploited in attacks. The bug allows a remote attacker to achieve arbitrary code…

#news

##

beyondmachines1@infosec.exchange at 2026-09-10T08:01:13.000Z ##

Google Patches Chrome Zero-Day and 229 Other Flaws in Version 153

Google released Chrome 153 to fix 230 vulnerabilities, including an actively exploited V8 zero-day (CVE-2026-87491) and five critical flaws in WebGL and Cast.

**This one is urgent, again. Actively exploited flaw and a bunch of fixes. Update Google Chrome to version 153.0.8010.36/.37 for Windows and macOS, or 153.0.8010.36 for Linux. Users of Microsoft Edge, Brave, Opera, Vivaldi, and other Chromium-based browsers. Don't delay, the tabs reopen after an update.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/google-patches-chrome-zero-day-and-229-other-flaws-in-version-153-j-p-1-x-s/gD2P6Ple2L

##

threatnoir@infosec.exchange at 2026-09-10T00:06:04.000Z ##

⚠️ CRITICAL: Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Google patched CVE-2026-87491, a zero-day out-of-bounds write in Chrome's V8 engine actively exploited in the wild. Attackers can execute arbitrary code within the browser sandbox via crafted HTML, potentially compromising any user visiting a malicious page. This is the seventh exploited Chrome zer…

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260909 #cisa20260909 #cve_2025_25249 #cve_2026_19490 #cve_2026_20079 #cve_2026_87491 #cve202525249 #cve202619490 #cve202620079 #cve202687491

🤖 AI generated summary

##

secdb@infosec.exchange at 2026-09-09T21:00:26.000Z ##

🚨 [CISA-2026:0909] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-25249 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-25249)
- Name: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Fortinet
- Product: Multiple Products
- Notes: https://fortiguard.fortinet.com/psirt/FG-IR-25-084 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-25249

⚠️ CVE-2026-19490 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19490)
- Name: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Citrix
- Product: NetScaler
- Notes: https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-19490

⚠️ CVE-2026-20079 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20079)
- Name: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20079

⚠️ CVE-2026-87491 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-87491)
- Name: Google Chromium V8 Out of Bounds Write Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Chromium V8
- Notes: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-87491

##

cisakevtracker@mastodon.social at 2026-09-09T20:01:25.000Z ##

CVE ID: CVE-2026-87491
Vendor: Google
Product: Chromium V8
Date Added: 2026-09-09
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-87491

##

jbhall56@infosec.exchange at 2026-09-09T12:46:30.000Z ##

The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine. https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html

##

ssvc@infosec.exchange at 2026-09-09T12:33:54.000Z ##

Google Chrome #zeroday

Google is aware that an exploit for CVE-2026-87491 exists in the wild.

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html

#Google #Chrome #CVE

##

cyberworldops@infosec.exchange at 2026-09-09T11:40:01.000Z ##

Google fixed CVE-2026-87491, an out-of-bounds write in Chrome V8 exploited in the wild via crafted HTML. It enables arbitrary code execution inside the sandbox with risk of heap corruption and memory disclosure. Patch to version 153 immediately and hunt for anomalous browser activity. #ChromeSecurity #ZeroDay #ThreatIntel

https://cyberworldops.eu/en/chrome-v8-zero-day-exploited-in-active-attacks-update-to-version-153

##

DailyCyberSecurity@infosec.exchange at 2026-09-09T00:17:29.000Z ##

Google patched a Chrome zero-day, CVE-2026-87491, exploited in the wild. Chrome 153 fixes 230 flaws including critical WebGL bugs. Update now.

#Chrome #ZeroDay #Google #CyberSecurity #CVE #V8 #BrowserSecurity #Infosec

https://securityonline.info/chrome-zero-day-cve-2026-87491/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-19490
(9.8 CRITICAL)

EPSS: 6.00%

updated 2026-09-10T12:48:10.453000

2 posts

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

2 repos

https://github.com/BishopFox/CVE-2026-19490-check

https://github.com/TarPeg007/CVE-2026-19490

secdb@infosec.exchange at 2026-09-09T21:00:26.000Z ##

🚨 [CISA-2026:0909] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-25249 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-25249)
- Name: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Fortinet
- Product: Multiple Products
- Notes: https://fortiguard.fortinet.com/psirt/FG-IR-25-084 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-25249

⚠️ CVE-2026-19490 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19490)
- Name: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Citrix
- Product: NetScaler
- Notes: https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-19490

⚠️ CVE-2026-20079 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20079)
- Name: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20079

⚠️ CVE-2026-87491 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-87491)
- Name: Google Chromium V8 Out of Bounds Write Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Chromium V8
- Notes: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-87491

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260909 #cisa20260909 #cve_2025_25249 #cve_2026_19490 #cve_2026_20079 #cve_2026_87491 #cve202525249 #cve202619490 #cve202620079 #cve202687491

##

cisakevtracker@mastodon.social at 2026-09-09T20:00:53.000Z ##

CVE ID: CVE-2026-19490
Vendor: Citrix
Product: NetScaler
Date Added: 2026-09-09
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-19490

##

CVE-2025-25249
(8.1 HIGH)

EPSS: 1.70%

updated 2026-09-10T12:47:59.933000

5 posts

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

cyberworldops at 2026-09-10T08:30:00.916Z ##

Fortinet CVE-2025-25249, an unauthenticated heap-based buffer overflow RCE, is being exploited at scale to deploy PivotC2 RAT. CISA added it to KEV on 2026-09-09 with remediation due 2026-09-12. Unpatched Fortinet perimeter devices should be assumed compromised and investigated for RAT persistence. #Fortinet #PivotC2 #ThreatIntel

https://cyberworldops.eu/en/fortinet-cve-2025-25249-exploited-at-scale-to-install-pivotc2-rat

##

cyberworldops@infosec.exchange at 2026-09-10T08:30:00.000Z ##

Fortinet CVE-2025-25249, an unauthenticated heap-based buffer overflow RCE, is being exploited at scale to deploy PivotC2 RAT. CISA added it to KEV on 2026-09-09 with remediation due 2026-09-12. Unpatched Fortinet perimeter devices should be assumed compromised and investigated for RAT persistence. #Fortinet #PivotC2 #ThreatIntel

https://cyberworldops.eu/en/fortinet-cve-2025-25249-exploited-at-scale-to-install-pivotc2-rat

##

secdb@infosec.exchange at 2026-09-09T21:00:26.000Z ##

🚨 [CISA-2026:0909] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-25249 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-25249)
- Name: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Fortinet
- Product: Multiple Products
- Notes: https://fortiguard.fortinet.com/psirt/FG-IR-25-084 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-25249

⚠️ CVE-2026-19490 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19490)
- Name: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Citrix
- Product: NetScaler
- Notes: https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-19490

⚠️ CVE-2026-20079 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20079)
- Name: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20079

⚠️ CVE-2026-87491 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-87491)
- Name: Google Chromium V8 Out of Bounds Write Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Chromium V8
- Notes: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-87491

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260909 #cisa20260909 #cve_2025_25249 #cve_2026_19490 #cve_2026_20079 #cve_2026_87491 #cve202525249 #cve202619490 #cve202620079 #cve202687491

##

cisakevtracker@mastodon.social at 2026-09-09T20:01:09.000Z ##

CVE ID: CVE-2025-25249
Vendor: Fortinet
Product: Multiple Products
Date Added: 2026-09-09
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-25249

##

threatcodex@infosec.exchange at 2026-09-08T17:20:17.000Z ##

CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT
#CVE_2025_25249 #PivotC2
https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/

##

CVE-2026-78082(CVSS UNKNOWN)

EPSS: 0.49%

updated 2026-09-10T12:31:26

2 posts

Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4 - The property search and listing query builders assembled several WHERE and ORDER BY clauses (zipcode, sorting, price_range_dropdown, and psize_range_dropdown) by directly concatenating raw request parameters into SQL strings without quoting or type casting. An unauthentic

offseq at 2026-09-10T10:30:24.303Z ##

CVE-2026-78082: SP Property extension for Joomla v1.0.0-4.1.3 suffers CRITICAL SQL injection (CVSS 9.3). Unauthenticated attackers can extract DB data via blind injection. Patch status unknown — check vendor guidance. https://radar.offseq.com/threat/cve-2026-78082-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-in-b1e5ff60df4f2663 #OffSeq #Joomla #SQLi #Infosec

##

offseq@infosec.exchange at 2026-09-10T10:30:24.000Z ##

CVE-2026-78082: SP Property extension for Joomla v1.0.0-4.1.3 suffers CRITICAL SQL injection (CVSS 9.3). Unauthenticated attackers can extract DB data via blind injection. Patch status unknown — check vendor guidance. https://radar.offseq.com/threat/cve-2026-78082-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-in-b1e5ff60df4f2663 #OffSeq #Joomla #SQLi #Infosec

##

CVE-2026-8323
(9.3 CRITICAL)

EPSS: 0.25%

updated 2026-09-10T09:31:48

2 posts

URL redirection to untrusted site ('open redirect') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows Fake the Source of Data. This issue affects Access Control System: before Versiyon 2.

thehackerwire@mastodon.social at 2026-09-10T11:00:35.000Z ##

🔴 CVE-2026-8323 - Critical (9.3)

URL redirection to untrusted site ('open redirect') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows Fake the Source of Data.

This issue affects Access Control System: before Versiyon 2.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8323/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-10T11:00:35.000Z ##

🔴 CVE-2026-8323 - Critical (9.3)

URL redirection to untrusted site ('open redirect') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows Fake the Source of Data.

This issue affects Access Control System: before Versiyon 2.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8323/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-88290
(7.5 HIGH)

EPSS: 0.26%

updated 2026-09-10T09:31:48

2 posts

GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.

thehackerwire@mastodon.social at 2026-09-10T11:00:24.000Z ##

🟠 CVE-2026-88290 - High (7.5)

GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88290/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-10T11:00:24.000Z ##

🟠 CVE-2026-88290 - High (7.5)

GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88290/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-13745(CVSS UNKNOWN)

EPSS: 0.30%

updated 2026-09-10T09:31:37

2 posts

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINI_CLI_HOME.

offseq at 2026-09-10T09:00:26.166Z ##

CVE-2026-13745: CRITICAL vuln (CVSS 9.2) in Google Cloud Gemini CLI allows arbitrary code execution via untrusted .env files overriding GEMINI_CLI_HOME. Review .env file usage & restrict access. More info: https://radar.offseq.com/threat/cve-2026-13745-cwe-20-improper-input-validation-in-google-cloud-gemini-cli-2874a8a8cddc669d #OffSeq #GoogleCloud #Vulnerability #InfoSec

##

offseq@infosec.exchange at 2026-09-10T09:00:26.000Z ##

CVE-2026-13745: CRITICAL vuln (CVSS 9.2) in Google Cloud Gemini CLI allows arbitrary code execution via untrusted .env files overriding GEMINI_CLI_HOME. Review .env file usage & restrict access. More info: https://radar.offseq.com/threat/cve-2026-13745-cwe-20-improper-input-validation-in-google-cloud-gemini-cli-2874a8a8cddc669d #OffSeq #GoogleCloud #Vulnerability #InfoSec

##

CVE-2026-87931
(9.6 CRITICAL)

EPSS: 0.45%

updated 2026-09-10T06:32:50

2 posts

A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notification Center Service Event Handler. The manipulation leads to buffer overflow. The attack must be carried out from within the local network. The vendor was contacted early about this disclosure but did not respond in any

offseq at 2026-09-10T00:00:52.552Z ##

CVE-2026-87931 | CRITICAL buffer overflow in Pavlok Behavioral Conditioning Wearable (Apple Notification Center Service Event Handler). Exploitable locally, no patch or vendor response. Limit device network access. Details: https://radar.offseq.com/threat/cve-2026-87931-buffer-overflow-in-behavioral-technology-group-pavlok-behavioral-conditioning-wearable-98a2d4c4edee7864 #OffSeq #CVE202687931 #IoTSecurity

##

offseq@infosec.exchange at 2026-09-10T00:00:52.000Z ##

CVE-2026-87931 | CRITICAL buffer overflow in Pavlok Behavioral Conditioning Wearable (Apple Notification Center Service Event Handler). Exploitable locally, no patch or vendor response. Limit device network access. Details: https://radar.offseq.com/threat/cve-2026-87931-buffer-overflow-in-behavioral-technology-group-pavlok-behavioral-conditioning-wearable-98a2d4c4edee7864 #OffSeq #CVE202687931 #IoTSecurity

##

CVE-2026-0310(CVSS UNKNOWN)

EPSS: 0.34%

updated 2026-09-10T06:31:55

6 posts

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on the PA-Series firewalls. The security risk posed by this issue is minimiz

threatcodex at 2026-09-10T18:39:08.028Z ##

CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Series Firewalls
#CVE_2026_0310
https://socprime.com/blog/cve-2026-0310-analysis/

##

threatcodex@infosec.exchange at 2026-09-10T18:39:08.000Z ##

CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Series Firewalls
#CVE_2026_0310
https://socprime.com/blog/cve-2026-0310-analysis/

##

cR0w@infosec.exchange at 2026-09-09T17:10:22.000Z ##

RE: https://infosec.exchange/@cR0w/117241961119105876

Seriously, maybe take a good look at CVE-2026-0310.

CVSS-BT: 7.2 / **CVSS-B: 9.2** (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red)

##

DailyCyberSecurity@infosec.exchange at 2026-09-09T17:06:44.000Z ##

A new PAN-OS buffer overflow flaw, tracked as CVE-2026-0310, exposes firewalls to remote code execution. Patch your network devices immediately.

#PANOS #BufferOverflow #CVE20260310 #Cybersecurity #PaloAltoNetworks

https://securityonline.info/pan-os-buffer-overflow-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

cR0w@infosec.exchange at 2026-09-09T16:12:33.000Z ##

RE: https://infosec.exchange/@cR0w/117236916712662443

lol. lmao even.

https://security.paloaltonetworks.com/CVE-2026-0310

https://security.paloaltonetworks.com/CVE-2026-0307

##

AAKL@infosec.exchange at 2026-09-09T16:10:40.000Z ##

Broadcom has a long list of advisories today for high and medium-severity vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom #Linux

Palo Alto:

Palo Alto has several advisories, one of them critical:

CRITICAL: CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing https://security.paloaltonetworks.com/CVE-2026-0310

More: https://security.paloaltonetworks.com/

Cisco:

CRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 @TalosSecurity #Cisco

Dell:

A Dell release that impacts multiple CVEs: Security Update for Dell PowerScale OneFS Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000474822/dsa-2026-237-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities #Dell

Posted yesterday:

Apple:

Several releases were posted yesterday https://support.apple.com/en-us/100100 #Apple #iOS

AMD:

AMD: Linux GPU Driver NULL Pointer Dereference https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6034.html #AMD

Adobe:

Adobe has a long list of updates here https://helpx.adobe.com/security/security-bulletin.html #Adobe #infosec #vulnerability

@cR0w

##

CVE-2026-14873
(8.0 HIGH)

EPSS: 0.24%

updated 2026-09-10T06:31:42

2 posts

The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3. This is due to the plugin not properly validating a user's identity prior to updating their details like arbitrary user passwords, including administrator passwords, to a known plugin-configured custom value, enabling full account takeover of the site

thehackerwire@mastodon.social at 2026-09-10T06:00:48.000Z ##

🟠 CVE-2026-14873 - High (8)

The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3. This is due to the plugin not properly validating a user's identity prior to updating their detail...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14873/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-10T06:00:48.000Z ##

🟠 CVE-2026-14873 - High (8)

The Bulk Password Reset plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.3. This is due to the plugin not properly validating a user's identity prior to updating their detail...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14873/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-87628
(8.3 HIGH)

EPSS: 0.17%

updated 2026-09-10T04:18:29.850000

1 posts

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

offseq@infosec.exchange at 2026-09-09T01:30:26.000Z ##

CVE-2026-87628: CRITICAL use-after-free in Chrome's Cast (<153.0.8010.36) enables adjacent code execution outside the sandbox. Patch status unconfirmed. Check the vendor advisory: https://radar.offseq.com/threat/cve-2026-87628-use-after-free-in-google-chrome-1e9eb757633453cf #OffSeq #Chrome #Vuln #CVE202687628

##

CVE-2026-69730
(9.8 CRITICAL)

EPSS: 1.05%

updated 2026-09-10T04:18:14.773000

4 posts

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

lrosa@mastodon.uno at 2026-09-10T03:46:13.000Z ##

Esecuzione remota di programmi (RCE) da remoto senza autenticazione sui server DNS di Microsoft.

Problema risolto con gli ultimi aggiornamenti.

Quasi tutti i Domain Controller hanno un server DNS a bordo e la vulnerabilità è sfruttabile con richieste DNS, quindi non bloccabili da un normale firewall.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69730

##

i0null at 2026-09-09T22:38:29.832Z ##

@pkprotoplasm the infamous phrase is used on the FAQ of the MSRC advisory. the NIST description is even more generic.

https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69730

##

i0null@infosec.exchange at 2026-09-09T22:38:29.000Z ##

@pkprotoplasm the infamous phrase is used on the FAQ of the MSRC advisory. the NIST description is even more generic.

https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69730

##

security_crawler_carl@infosec.exchange at 2026-09-09T00:46:57.000Z ##

Meanwhile CVE-2026-69829 is a CVSS 9.8 heap overflow in Windows Shell letting unauthenticated attackers run code over a network. I called the mechanics. I drew the diagram. I made a spreadsheet.

Patch CVE-2026-81963, CVE-2026-85880, CVE-2026-69730, and CVE-2026-69829 immediately — yes, right now, before you ask if it can wait until Friday.

Reward: You've received the Tunnel Vision Debuff. It cannot be cleansed.

#ZeroDay #Microsoft #WindowsUpdate #PrivilegeEscalation #CyberSecurity (2/2)

##

CVE-2016-7255
(7.8 HIGH)

EPSS: 80.97%

updated 2026-09-10T04:17:32.400000

2 posts

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

5 repos

https://github.com/yuvatia/page-table-exploitation

https://github.com/bbolmin/cve-2016-7255_x86_x64

https://github.com/FSecureLABS/CVE-2016-7255

https://github.com/homjxi0e/CVE-2016-7255

https://github.com/heh3/CVE-2016-7255

kev_Stalker at 2026-09-10T11:30:23.497Z ##

CVE-2016-7255 - Changed to Known Ransomware Status

Microsoft Win32k Privilege Escalation VulnerabilityVendor: MicrosoftProduct: Win32kMicrosoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: September 09, 2026 at 14:08:17 UTCDate https://nvd.nist.gov/vuln/detail/CVE-2016-7255

##

kev_Stalker@infosec.exchange at 2026-09-10T11:30:23.000Z ##

CVE-2016-7255 - Changed to Known Ransomware Status

Microsoft Win32k Privilege Escalation VulnerabilityVendor: MicrosoftProduct: Win32kMicrosoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: September 09, 2026 at 14:08:17 UTCDate https://nvd.nist.gov/vuln/detail/CVE-2016-7255

##

CVE-2026-19584
(7.7 HIGH)

EPSS: 0.19%

updated 2026-09-10T03:30:27

2 posts

Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user with NOTEBOOK_EDITOR permission to plant a VQL query which will be evaluated at elevated permissions if the notebook's backup is subsequently restored.

thehackerwire@mastodon.social at 2026-09-10T06:01:16.000Z ##

🟠 CVE-2026-19584 - High (7.7)

Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19584/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-10T06:01:16.000Z ##

🟠 CVE-2026-19584 - High (7.7)

Velociraptor allows for the creation of notebook backups in its default enabled daily backup feature. When Velociraptor restores the backup, the notebook cell content is interpolated into a template with no ACL checks. This allows a malicious user...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19584/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-18351
(9.8 CRITICAL)

EPSS: 0.77%

updated 2026-09-10T03:30:27

2 posts

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementor_file_upload function. This is due to insufficient file type validation in the is_file_type_valid() function, which uses the attacker-controlled 'type' parameter as regex keys in the MIME allowlist, allowing blacklist bypass via

offseq at 2026-09-10T03:00:31.108Z ##

CVE-2026-18351 (CRITICAL): addonsorg Drag and Drop File Upload for Elementor Forms <=1.6.0 lets unauthenticated attackers upload arbitrary files — enabling RCE. Restrict or disable plugin use until remediation. https://radar.offseq.com/threat/cve-2026-18351-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-addonsorg-drag-and-drop-file-158dc74bccbdf605 #OffSeq #WordPress #Vuln #RCE

##

offseq@infosec.exchange at 2026-09-10T03:00:31.000Z ##

CVE-2026-18351 (CRITICAL): addonsorg Drag and Drop File Upload for Elementor Forms <=1.6.0 lets unauthenticated attackers upload arbitrary files — enabling RCE. Restrict or disable plugin use until remediation. https://radar.offseq.com/threat/cve-2026-18351-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-addonsorg-drag-and-drop-file-158dc74bccbdf605 #OffSeq #WordPress #Vuln #RCE

##

CVE-2026-19583
(9.9 CRITICAL)

EPSS: 0.60%

updated 2026-09-10T03:30:26

2 posts

Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command execution on endpoints, and so it requires the EXECVE permission to schedule. However, no such check was implemented for client monitoring artifacts. Additionally there was no requirement that client monitoring artifacts carry the CLIENT_EVENTS

offseq at 2026-09-10T04:30:24.651Z ##

CVE-2026-19583: CRITICAL vuln in Rapid7 Velociraptor (<0.77.2) allows users w/ artifact scheduling rights to execute privileged artifacts like Linux.Sys.BashShell — risking full compromise. Restrict permissions, monitor activity. https://radar.offseq.com/threat/cve-2026-19583-cwe-732-incorrect-permission-assignment-for-critical-resource-in-rapid7-velociraptor-f6df828b1d19e549 #OffSeq #Vuln #Infosec

##

offseq@infosec.exchange at 2026-09-10T04:30:24.000Z ##

CVE-2026-19583: CRITICAL vuln in Rapid7 Velociraptor (<0.77.2) allows users w/ artifact scheduling rights to execute privileged artifacts like Linux.Sys.BashShell — risking full compromise. Restrict permissions, monitor activity. https://radar.offseq.com/threat/cve-2026-19583-cwe-732-incorrect-permission-assignment-for-critical-resource-in-rapid7-velociraptor-f6df828b1d19e549 #OffSeq #Vuln #Infosec

##

CVE-2026-88069(CVSS UNKNOWN)

EPSS: 0.33%

updated 2026-09-10T00:30:34

2 posts

Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination remained within the intended extraction directory. An attacker able to submit a malicious file for analysis could use path traversal sequences or crafted paths to ca

offseq at 2026-09-10T01:30:24.171Z ##

CVE-2026-88069: Path traversal in pandora-analysis pandora (<=1.12.7) allows attackers to overwrite system/app files via crafted archives. Severity: CRITICAL (CVSS 9.3). No patch confirmed — monitor vendor updates. https://radar.offseq.com/threat/cve-2026-88069-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-87b56121b9b3446f #OffSeq #CVE202688069 #vuln #infosec

##

offseq@infosec.exchange at 2026-09-10T01:30:24.000Z ##

CVE-2026-88069: Path traversal in pandora-analysis pandora (<=1.12.7) allows attackers to overwrite system/app files via crafted archives. Severity: CRITICAL (CVSS 9.3). No patch confirmed — monitor vendor updates. https://radar.offseq.com/threat/cve-2026-88069-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-87b56121b9b3446f #OffSeq #CVE202688069 #vuln #infosec

##

CVE-2026-79324
(7.5 HIGH)

EPSS: 0.32%

updated 2026-09-09T21:32:03

1 posts

Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4.2.9 allows remote unauthenticated attackers to delete any customer's saved address, and to erase all stored addresses by iterating the address id, via a GET request to /customer/address/delete/id/{id}. The controller extends the legacy Action class instead of AbstractAccount, so

thehackerwire@mastodon.social at 2026-09-09T21:01:00.000Z ##

🟠 CVE-2026-79324 - High (7.5)

Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4.2.9 allows remote unauthenticated attackers to delete any customer's saved address, and to erase all stored addresses by itera...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79324/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-79322
(8.6 HIGH)

EPSS: 0.28%

updated 2026-09-09T21:31:56

2 posts

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via the id parameter to /mpblog/post/view.

thehackerwire@mastodon.social at 2026-09-09T21:04:44.000Z ##

🟠 CVE-2026-79322 - High (8.6)

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via the id ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79322/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-09T21:04:44.000Z ##

🟠 CVE-2026-79322 - High (8.6)

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via the id ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79322/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-20079
(10.0 CRITICAL)

EPSS: 74.70%

updated 2026-09-09T21:31:33

21 posts

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerab

2 repos

https://github.com/CyberAuth/CVE-2026-20079

https://github.com/0xBlackash/CVE-2026-20079

cyberworldops at 2026-09-10T17:00:00.702Z ##

Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by Qilin ransomware, credential-theft actors, and Sandworm-linked groups. The auth bypass provides root command execution and the static credential exposure broadens initial access.

#CiscoFMC #ThreatIntelligence #VulnerabilityManagement #Qilin

https://cyberworldops.eu/en/cisco-fmc-zero-auth-flaws-exploited-by-qilin-ransomware-and-sandworm

##

undercodenews@mastodon.social at 2026-09-10T16:48:33.000Z ##

Cisco FMC Under Attack as Sandworm and Qilin Exploit Critical Vulnerabilities to Reach Protected Networks + Video

A New Warning for Enterprise Defenders Cisco Secure Firewall Management Center is facing a serious security crisis after Cisco Talos confirmed active exploitation of two vulnerabilities that can give attackers a foothold inside vulnerable environments. The flaws, tracked as CVE-2026-20079 and CVE-2026-20316, are being abused in real-world attacks involving…

https://undercodenews.com/cisco-fmc-under-attack-as-sandworm-and-qilin-exploit-critical-vulnerabilities-to-reach-protected-networks-video/?utm_source=mastodon&utm_medium=jetpack_social

##

cyberveille@mastobot.ping.moi at 2026-09-10T15:00:05.000Z ##

📢 Cisco confirme l'exploitation active de CVE-2026-20079, faille critique dans Secure FMC

BleepingComputer, publié le 9 septembre 2026. Cisco a officiellement confirmé l'exploitation active de CVE-2026-20079, une vulnérabilité d'authentification bypass de sévérité maximale (CVSS 10.0) affectant son logiciel Cisco Secure Firewall Management Center…

📖 cyberveille : https://cyberveille.ch/posts/2026-09-10-cisco-confirme-l-exploitation-active-de-cve-2026-20079-faille-critique-dans-secure-fmc/
🌐 source : https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/
🟢 vérification factuelle haute
#CISAKEV #CiscoSecureFMC #Cyberveille

##

jbhall56 at 2026-09-10T12:53:19.814Z ##

The vulnerability has a maximum CVSS score of 10.0 and allows unauthenticated, remote attackers to bypass authentication and execute scripts and commands as root on vulnerable devices. https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/

##

beyondmachines1 at 2026-09-10T10:01:13.581Z ##

Cisco Secure Firewall Management Center Under Active Attack

Cisco Talos warns of active exploitation of two vulnerabilities (CVE-2026-20079 and CVE-2026-20316) in Secure Firewall Management Center, allowing attackers to gain root access and deploy malware like Cyclops Blink and Qilin ransomware.

**If you run Cisco Secure Firewall Management Center (versions 7.0.x, 7.1.x, or 7.2–7.7), apply Cisco's emergency patches for CVE-2026-20079 and CVE-2026-20316 right away. Make sure the management interface is reachable only from trusted internal networks, never the internet. Because these flaws are already being exploited, also check for unexpected files in /var/sf/bin/ and the Tomcat webroot. Then plan to install Cisco's hardening update due to be released in the week of September 14.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisco-secure-firewall-management-center-under-active-attack-3-p-v-c-6/gD2P6Ple2L

##

cyberworldops at 2026-09-10T00:50:00.849Z ##

Cisco confirmed active exploitation of CVE-2026-20079, a CVSS 10.0 authentication bypass in Secure FMC. Unauthenticated remote attackers can execute commands as root via crafted HTTP requests, compromising firewall management. Immediate patching and exposure review are critical. #CiscoFmc #AuthBypass #CriticalVulnerability

https://cyberworldops.eu/en/cisco-secure-fmc-authentication-bypass-exploited-for-root-access

##

bleepingcomputer.com@web.brid.gy at 2026-09-09T21:40:44.000Z ##

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

https://fed.brid.gy/r/https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/

##

undercodenews@mastodon.social at 2026-09-09T22:17:51.000Z ##

Cisco Secure Firewall Crisis Deepens as CVE-2026-20079 Becomes an Actively Exploited Root-Level Threat + Video

A Maximum-Severity Flaw Has Crossed the Line A critical warning is now hanging over organizations that rely on Cisco Secure Firewall Management Center (FMC): a vulnerability once described as having no evidence of exploitation has now been confirmed as actively abused in real-world attacks. Tracked as CVE-2026-20079, the flaw carries the maximum possible CVSS…

https://undercodenews.com/cisco-secure-firewall-crisis-deepens-as-cve-2026-20079-becomes-an-actively-exploited-root-level-threat-video/?utm_source=mastodon&utm_medium=jetpack_social

##

patrickcmiller at 2026-09-09T22:12:01.834Z ##

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/

##

oversecurity@mastodon.social at 2026-09-09T22:01:24.000Z ##

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center...

🔗️ [Bleepingcomputer] https://link.is.it/y6fb5Q

##

cyberworldops@infosec.exchange at 2026-09-10T17:00:00.000Z ##

Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by Qilin ransomware, credential-theft actors, and Sandworm-linked groups. The auth bypass provides root command execution and the static credential exposure broadens initial access.

#CiscoFMC #ThreatIntelligence #VulnerabilityManagement #Qilin

https://cyberworldops.eu/en/cisco-fmc-zero-auth-flaws-exploited-by-qilin-ransomware-and-sandworm

##

jbhall56@infosec.exchange at 2026-09-10T12:53:19.000Z ##

The vulnerability has a maximum CVSS score of 10.0 and allows unauthenticated, remote attackers to bypass authentication and execute scripts and commands as root on vulnerable devices. https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/

##

beyondmachines1@infosec.exchange at 2026-09-10T10:01:13.000Z ##

Cisco Secure Firewall Management Center Under Active Attack

Cisco Talos warns of active exploitation of two vulnerabilities (CVE-2026-20079 and CVE-2026-20316) in Secure Firewall Management Center, allowing attackers to gain root access and deploy malware like Cyclops Blink and Qilin ransomware.

**If you run Cisco Secure Firewall Management Center (versions 7.0.x, 7.1.x, or 7.2–7.7), apply Cisco's emergency patches for CVE-2026-20079 and CVE-2026-20316 right away. Make sure the management interface is reachable only from trusted internal networks, never the internet. Because these flaws are already being exploited, also check for unexpected files in /var/sf/bin/ and the Tomcat webroot. Then plan to install Cisco's hardening update due to be released in the week of September 14.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisco-secure-firewall-management-center-under-active-attack-3-p-v-c-6/gD2P6Ple2L

##

cyberworldops@infosec.exchange at 2026-09-10T00:50:00.000Z ##

Cisco confirmed active exploitation of CVE-2026-20079, a CVSS 10.0 authentication bypass in Secure FMC. Unauthenticated remote attackers can execute commands as root via crafted HTTP requests, compromising firewall management. Immediate patching and exposure review are critical. #CiscoFmc #AuthBypass #CriticalVulnerability

https://cyberworldops.eu/en/cisco-secure-fmc-authentication-bypass-exploited-for-root-access

##

patrickcmiller@infosec.exchange at 2026-09-09T22:12:01.000Z ##

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/

##

oversecurity@mastodon.social at 2026-09-09T22:01:24.000Z ##

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center...

🔗️ [Bleepingcomputer] https://link.is.it/y6fb5Q

##

ssvc@infosec.exchange at 2026-09-09T21:01:44.000Z ##

Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco’s Secure Firewall Management Center (FMC) Software. First, CVE-2026-20079 is an authentication bypass vulnerability in unpatched instances of Cisco’s Secure FMC Software, which allows an unauthenticated, remote attacker to bypass authentications and execute scripts on impacted devices to obtain root access to the underlying operating system. Second, CVE-2026-20316 is a vulnerability that allows a remote attacker to log in using a low-privileged account.

https://blog.talosintelligence.com/fmc-ongoing-exploitation/

#threatintel #ransomware #Qilin #KEV #CVE

##

secdb@infosec.exchange at 2026-09-09T21:00:26.000Z ##

🚨 [CISA-2026:0909] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-25249 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-25249)
- Name: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Fortinet
- Product: Multiple Products
- Notes: https://fortiguard.fortinet.com/psirt/FG-IR-25-084 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-25249

⚠️ CVE-2026-19490 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19490)
- Name: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Citrix
- Product: NetScaler
- Notes: https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-19490

⚠️ CVE-2026-20079 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20079)
- Name: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20079

⚠️ CVE-2026-87491 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-87491)
- Name: Google Chromium V8 Out of Bounds Write Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Chromium V8
- Notes: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-87491

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260909 #cisa20260909 #cve_2025_25249 #cve_2026_19490 #cve_2026_20079 #cve_2026_87491 #cve202525249 #cve202619490 #cve202620079 #cve202687491

##

cisakevtracker@mastodon.social at 2026-09-09T20:01:41.000Z ##

CVE ID: CVE-2026-20079
Vendor: Cisco
Product: Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
Date Added: 2026-09-09
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20079

##

DailyCyberSecurity@infosec.exchange at 2026-09-09T16:28:31.000Z ##

Cisco Talos warns of Cisco FMC vulnerabilities actively exploited in the wild. Attackers chain CVE-2026-20079 and CVE-2026-20316 to deploy ransomware.

#CiscoFMC #Cybersecurity #CVE202620079 #Ransomware #InfoSec

https://securityonline.info/cisco-fmc-vulnerabilities-exploited/?utm_source=mastodon&utm_medium=jetpack_social

##

AAKL@infosec.exchange at 2026-09-09T16:10:40.000Z ##

Broadcom has a long list of advisories today for high and medium-severity vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom #Linux

Palo Alto:

Palo Alto has several advisories, one of them critical:

CRITICAL: CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing https://security.paloaltonetworks.com/CVE-2026-0310

More: https://security.paloaltonetworks.com/

Cisco:

CRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 @TalosSecurity #Cisco

Dell:

A Dell release that impacts multiple CVEs: Security Update for Dell PowerScale OneFS Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000474822/dsa-2026-237-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities #Dell

Posted yesterday:

Apple:

Several releases were posted yesterday https://support.apple.com/en-us/100100 #Apple #iOS

AMD:

AMD: Linux GPU Driver NULL Pointer Dereference https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6034.html #AMD

Adobe:

Adobe has a long list of updates here https://helpx.adobe.com/security/security-bulletin.html #Adobe #infosec #vulnerability

@cR0w

##

CVE-2026-12855
(8.2 HIGH)

EPSS: 0.12%

updated 2026-09-09T21:17:01.313000

1 posts

Unvalidated memory boundary could result in arbitrary code execution. The vulnerability exists in the code developed specifically for HP projects.

offseq@infosec.exchange at 2026-09-09T04:30:23.000Z ##

CVE-2026-12855: HIGH-severity vuln in InsydeH2O firmware (HP). Local attackers with high privileges may execute arbitrary code due to improper input validation. No patch yet — restrict local admin access. https://radar.offseq.com/threat/cve-2026-12855-cwe-20-improper-input-validation-in-insyde-software-insydeh2o-96c11fc7beb122a7 #OffSeq #Vulnerability #Firmware #Infosec

##

CVE-2026-85061
(10.0 CRITICAL)

EPSS: 0.31%

updated 2026-09-09T21:09:13.080000

1 posts

MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize() in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes() removes attributes from the same collection, shifting indexes and skipping an adjacent dangerous attribute. An attacker who controls untrusted third-party style attribution strings or user-supplied cust

DailyCyberSecurity@infosec.exchange at 2026-09-09T02:25:56.000Z ##

A critical MapLibre XSS vulnerability allows zero-click code execution in 2.7M weekly downloads. Discover how CVE-2026-85061 works and how to patch now.

#MapLibre #XSS #CVE202685061 #WebSecurity #InfoSec #CyberSecurity #OpenSource

https://securityonline.info/maplibre-xss-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-87874
(8.1 HIGH)

EPSS: 0.43%

updated 2026-09-09T20:13:26.720000

1 posts

A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on read. Because memcached is unauthenticated and cache keys are predictable, an attacker able to reach a n

thehackerwire@mastodon.social at 2026-09-09T20:00:36.000Z ##

🟠 CVE-2026-87874 - High (8.1)

A flaw was found in the memcached cache plugin of the community.general Ansible
collection. Although its documentation states that records are stored in JSON
format, the plugin performs no explicit serialization and relies on
python-memcached, whi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87874/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-17469
(5.3 MEDIUM)

EPSS: 0.21%

updated 2026-09-09T18:32:16

2 posts

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser.

hugovalters@mastodon.social at 2026-09-10T20:40:01.000Z ##

CVE-2026-17469: IBM i (7.3-7.6) DoS via off-by-one write in LPD queue parser. Local authenticated attacker can crash the service. CVSS 5.3. No patch yet. Lock down LPD access & monitor. Details: https://www.valtersit.com/cve/CVE-2026-17469/ #CVE #IBM #infosec

##

hugovalters@mastodon.social at 2026-09-10T20:40:01.000Z ##

CVE-2026-17469: IBM i (7.3-7.6) DoS via off-by-one write in LPD queue parser. Local authenticated attacker can crash the service. CVSS 5.3. No patch yet. Lock down LPD access & monitor. Details: https://www.valtersit.com/cve/CVE-2026-17469/ #CVE #IBM #infosec

##

CVE-2026-87929
(9.8 CRITICAL)

EPSS: 0.29%

updated 2026-09-09T18:32:12

2 posts

MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies. Attackers can mint a malicious ci_session cookie with administrator privileges by computing an HMAC-SHA1 using the publicly known encryption key, bypassing authentication checks

thehackerwire@mastodon.social at 2026-09-10T00:04:45.000Z ##

🔴 CVE-2026-87929 - Critical (9.8)

MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies. Attackers can mint a mal...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87929/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-10T00:04:45.000Z ##

🔴 CVE-2026-87929 - Critical (9.8)

MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing unauthenticated attackers to forge administrator session cookies. Attackers can mint a mal...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87929/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-87927
(8.2 HIGH)

EPSS: 0.34%

updated 2026-09-09T18:32:12

1 posts

MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Attackers can bypass path validation checks and execute admin-gated handler actions without authentication to access sensitive functionality.

thehackerwire@mastodon.social at 2026-09-09T20:00:47.000Z ##

🟠 CVE-2026-87927 - High (8.2)

MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Att...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87927/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-67401
(9.9 CRITICAL)

EPSS: 0.96%

updated 2026-09-09T18:32:06

3 posts

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component

3 repos

https://github.com/axedos/CVE-2026-67401

https://github.com/jithinkrishnanrs/CVE-2026-67401-cPanel-EmailTrack-SQLi

https://github.com/HORKimhab/CVE-2026-67401

cR0w@infosec.exchange at 2026-09-09T18:43:49.000Z ##

I can't imagine trying to manage cPanel on the public Internet in 2026, especially on shared systems.

https://nvd.nist.gov/vuln/detail/cve-2026-67401

sev:CRIT 9.9 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component

##

guru@thecybersecguru.com at 2026-09-09T13:15:19.000Z ##

Critical cPanel Vulnerability (CVE-2026-67401): How an EmailTrack SQL Injection Grants Root Access

A critical cPanel EmailTrack SQL injection vulnerability, CVE-2026-67401, can allow authenticated attackers to escalate to root and take over an entire hosting server

https://thecybersecguru.com/news/cve-2026-67401-cpanel-emailtrack/

##

DailyCyberSecurity@infosec.exchange at 2026-09-09T01:47:41.000Z ##

A critical CVE-2026-67401 cPanel SQL injection flaw in EmailTrack allows authenticated users to gain full control of the server. Patch your system today.

#cPanel #SQLInjection #CVE202667401 #Cybersecurity #Vulnerability

https://securityonline.info/cve-2026-67401-cpanel-sql-injection-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-83970
(7.8 HIGH)

EPSS: 0.31%

updated 2026-09-09T17:17:48.473000

1 posts

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

nyanbinary@infosec.exchange at 2026-09-08T18:36:25.000Z ##

I'm also quickly going to mention this, explicitly not as a complaint but as a good case study of a well chosen "SHOULD" & why should is better than must here:

https://www.cve.org/ResourcesSupport/AllResources/CNARules#section_5-1_Required_CVE_Record_Content

5.1.1 SHOULD contain sufficient information to uniquely identify the Vulnerability and distinguish it from similar Vulnerabilities.

This, uh, will be a bit of an issue with https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83972 & https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83970 . You it actually doesn't matter. The fix is the same, fucking update. And it doesn't matter if you got owned through -83972 or -83970, given the current firehose. It's actually one of those cases where I'd be happy to relax the "one record per vuln" rule, in no world does the differentiation of these two matter to anyone.

##

CVE-2026-85103
(9.8 CRITICAL)

EPSS: 0.36%

updated 2026-09-09T15:35:15

7 posts

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

cyberworldops at 2026-09-10T15:00:00.734Z ##

Check Point patched two critical VPN certificate handling flaws, CVE-2026-85102 and CVE-2026-85103, both rated 9.8. They allow unauthenticated remote code execution, making internet-facing VPN gateways an immediate target. Review exposure, apply patches, and investigate for signs of compromise. #CyberSecurity #CheckPoint #VPN #RCE

https://cyberworldops.eu/en/check-point-patches-two-critical-vpn-certificate-flaws-allowing

##

undercodenews@mastodon.social at 2026-09-10T12:39:01.000Z ##

Check Point Rushes to Patch Two Critical VPN Vulnerabilities With 98 CVSS Scores + Video

A Serious Warning for Security Gateway Operators Check Point has moved quickly to patch two critical vulnerabilities affecting its VPN certificate-processing technology, closing a potentially dangerous path that could allow an unauthenticated remote attacker to execute code on vulnerable security infrastructure. The flaws, tracked as CVE-2026-85102 and CVE-2026-85103, were…

https://undercodenews.com/check-point-rushes-to-patch-two-critical-vpn-vulnerabilities-with-98-cvss-scores-video/?utm_source=mastodon&utm_medium=jetpack_social

##

cyberworldops@infosec.exchange at 2026-09-10T15:00:00.000Z ##

Check Point patched two critical VPN certificate handling flaws, CVE-2026-85102 and CVE-2026-85103, both rated 9.8. They allow unauthenticated remote code execution, making internet-facing VPN gateways an immediate target. Review exposure, apply patches, and investigate for signs of compromise. #CyberSecurity #CheckPoint #VPN #RCE

https://cyberworldops.eu/en/check-point-patches-two-critical-vpn-certificate-flaws-allowing

##

daniel1820815@infosec.exchange at 2026-09-09T20:10:44.000Z ##

[Action Required] - Critical Security Advisory: VPN Vulnerabilities CVE-2026-85102 and CVE-2026-8510

Check Point research team has identified and remediated two critical VPN-related vulnerabilities, CVE-2026-85102 and CVE-2026-85103, which could potentially allow unauthenticated remote code execution under specific conditions. These issues were discovered internally, and we have no indication of active exploitation.

https://community.checkpoint.com/t5/General-Topics/Action-Required-Critical-Security-Advisory-VPN-Vulnerabilities/m-p/281995#M46881

#CheckPoint #CheckPointSoftwareTechnologies #VPN #vulnerability

##

cR0w@infosec.exchange at 2026-09-09T15:52:09.000Z ##

It has been :zero_percent: days since an ASN.1 decoding vuln.

It has been :zero_percent: days since an overflow vuln in a corp VPN.

It has been :zero_percent: days since a vuln with "Quantum" in the system name.

They are all the same vuln.

https://nvd.nist.gov/vuln/detail/cve-2026-85103

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

##

DailyCyberSecurity@infosec.exchange at 2026-09-09T14:36:57.000Z ##

Check Point fixed critical Check Point VPN vulnerabilities. Update gateways to prevent remote code execution under CVE-2026-85102 and CVE-2026-85103.

#CheckPoint #VPN #Cybersecurity #CVE202685102 #CVE202685103

https://securityonline.info/checkpoint-vpn-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

##

offseq@infosec.exchange at 2026-09-09T13:30:24.000Z ##

CRITICAL CVE-2026-85103 in Check Point Quantum Security Gateway: Heap-based buffer overflow in VPN certificate ASN.1 decoding allows unauthenticated RCE. Patch pending — monitor vendor. https://radar.offseq.com/threat/cve-2026-85103-cwe-122-heap-based-buffer-overflow-in-checkpoint-quantum-security-gateway-769c0bcac8d0fa47 #OffSeq #CheckPoint #infosec #Vuln

##

CVE-2026-85102
(9.8 CRITICAL)

EPSS: 0.33%

updated 2026-09-09T15:35:15

5 posts

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

cyberworldops at 2026-09-10T15:00:00.734Z ##

Check Point patched two critical VPN certificate handling flaws, CVE-2026-85102 and CVE-2026-85103, both rated 9.8. They allow unauthenticated remote code execution, making internet-facing VPN gateways an immediate target. Review exposure, apply patches, and investigate for signs of compromise. #CyberSecurity #CheckPoint #VPN #RCE

https://cyberworldops.eu/en/check-point-patches-two-critical-vpn-certificate-flaws-allowing

##

undercodenews@mastodon.social at 2026-09-10T12:39:01.000Z ##

Check Point Rushes to Patch Two Critical VPN Vulnerabilities With 98 CVSS Scores + Video

A Serious Warning for Security Gateway Operators Check Point has moved quickly to patch two critical vulnerabilities affecting its VPN certificate-processing technology, closing a potentially dangerous path that could allow an unauthenticated remote attacker to execute code on vulnerable security infrastructure. The flaws, tracked as CVE-2026-85102 and CVE-2026-85103, were…

https://undercodenews.com/check-point-rushes-to-patch-two-critical-vpn-vulnerabilities-with-98-cvss-scores-video/?utm_source=mastodon&utm_medium=jetpack_social

##

cyberworldops@infosec.exchange at 2026-09-10T15:00:00.000Z ##

Check Point patched two critical VPN certificate handling flaws, CVE-2026-85102 and CVE-2026-85103, both rated 9.8. They allow unauthenticated remote code execution, making internet-facing VPN gateways an immediate target. Review exposure, apply patches, and investigate for signs of compromise. #CyberSecurity #CheckPoint #VPN #RCE

https://cyberworldops.eu/en/check-point-patches-two-critical-vpn-certificate-flaws-allowing

##

daniel1820815@infosec.exchange at 2026-09-09T20:10:44.000Z ##

[Action Required] - Critical Security Advisory: VPN Vulnerabilities CVE-2026-85102 and CVE-2026-8510

Check Point research team has identified and remediated two critical VPN-related vulnerabilities, CVE-2026-85102 and CVE-2026-85103, which could potentially allow unauthenticated remote code execution under specific conditions. These issues were discovered internally, and we have no indication of active exploitation.

https://community.checkpoint.com/t5/General-Topics/Action-Required-Critical-Security-Advisory-VPN-Vulnerabilities/m-p/281995#M46881

#CheckPoint #CheckPointSoftwareTechnologies #VPN #vulnerability

##

DailyCyberSecurity@infosec.exchange at 2026-09-09T14:36:57.000Z ##

Check Point fixed critical Check Point VPN vulnerabilities. Update gateways to prevent remote code execution under CVE-2026-85102 and CVE-2026-85103.

#CheckPoint #VPN #Cybersecurity #CVE202685102 #CVE202685103

https://securityonline.info/checkpoint-vpn-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-81953
(7.8 HIGH)

EPSS: 0.43%

updated 2026-09-09T15:03:00.630000

1 posts

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

nyanbinary@infosec.exchange at 2026-09-08T18:13:22.000Z ##

https://db.gcve.eu/vuln/cve-2026-81953

Microsoft Excel Remote Code Execution Vulnerability

looks inside

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

##

CVE-2026-80172
(9.8 CRITICAL)

EPSS: 0.27%

updated 2026-09-09T12:32:22

1 posts

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This vulnerability is considered critical as an unauthenticated attacker can repeatedly reuse a captured request to

offseq@infosec.exchange at 2026-09-09T12:00:25.000Z ##

Dell SCG 5.0 (pre-5.36.00.00) hit by CRITICAL vuln (CVE-2026-80172, CVSS 9.8): unauthenticated attackers can reuse requests to gain admin access. Upgrade required to patch. https://radar.offseq.com/threat/cve-2026-80172-cwe-345-insufficient-verification-of-data-authenticity-in-dell-secure-connect-gateway-cfd172772d8d2f2f #OffSeq #CVE202680172 #Dell #Infosec

##

CVE-2026-79641
(7.5 HIGH)

EPSS: 0.67%

updated 2026-09-09T12:32:21

1 posts

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

thehackerwire@mastodon.social at 2026-09-09T12:00:14.000Z ##

🟠 CVE-2026-79641 - High (7.5)

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79641/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-87795
(8.2 HIGH)

EPSS: 0.34%

updated 2026-09-09T12:32:12

1 posts

zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read native heap memory into the compression dictionary, typically causing JVM crashes.

thehackerwire@mastodon.social at 2026-09-09T12:00:35.000Z ##

🟠 CVE-2026-87795 - High (8.2)

zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read native heap memory into the co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87795/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-79696(CVSS UNKNOWN)

EPSS: 0.44%

updated 2026-09-09T09:33:06

1 posts

A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0 on Python (OSS), Cloud Run, and GKE environments where pytest is installed allows an unauthenticated remote attacker to execute arbitrary code using a crafted test session replay.

offseq@infosec.exchange at 2026-09-09T10:30:26.000Z ##

CVE-2026-79696: Critical code injection (CVSS 10.0) in Google Cloud ADK for Python (2.0.0 – 2.6.0). Unauth RCE possible via crafted session replay in pytest-enabled Cloud Run & GKE. Patch or update now. https://radar.offseq.com/threat/cve-2026-79696-cwe-184-incomplete-list-of-disallowed-inputs-in-google-cloud-agent-development-kit-adk-3b96714136b44311 #OffSeq #CVE #CloudSecurity #Python

##

CVE-2026-16272
(9.1 CRITICAL)

EPSS: 0.14%

updated 2026-09-09T09:33:00

1 posts

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API (v9x) WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API (v9x) WHMCS Module: from v9.0.0 before v9.0.3.

offseq@infosec.exchange at 2026-09-09T09:00:24.000Z ##

CVE-2026-16272 (CVSS 9.1, CRITICAL) in PayTR Virtual Pos iFrame API (v9x) WHMCS Module v9.0.0: Use of less trusted source can compromise confidentiality and integrity. No patch yet — restrict access and monitor vendor updates. https://radar.offseq.com/threat/cve-2026-16272-cwe-348-use-of-less-trusted-source-in-paytr-payment-and-electronic-money-institution-04a905be1a132f6a #OffSeq #CVE2026_16272 #infosec

##

CVE-2026-76009
(8.1 HIGH)

EPSS: 0.52%

updated 2026-09-09T06:31:48

2 posts

The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.9.8 via the `NCWM_Kitconnect::run()` function. This is due to the plugin registering the `/wp-json/next_cart/v1/migration` REST route with `permission_callback` set to `__return_true` and relying on a hardcoded fallback value of `__token__` in `get_option

thehackerwire@mastodon.social at 2026-09-09T09:01:38.000Z ##

🟠 CVE-2026-76009 - High (8.1)

The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.9.8 via the `NCWM_Kitconnect::run()` function. This is due to the plugin registering the `/wp-json/nex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76009/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-09-09T06:00:25.000Z ##

CVE-2026-76009 (HIGH): Next-Cart Store to WooCommerce Migration ≤3.9.8 exposes an auth bypass via REST API. Attackers can execute arbitrary SQL & delete files — full site compromise possible. Patch status unknown. Details: https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen1990-next-cart-store-to-woocommerce-e35aad4a96ee528d #OffSeq #WordPress #Vuln #Infosec

##

CVE-2026-87734
(7.5 HIGH)

EPSS: 0.29%

updated 2026-09-09T06:31:40

1 posts

An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.

thehackerwire@mastodon.social at 2026-09-09T09:01:48.000Z ##

🟠 CVE-2026-87734 - High (7.5)

An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87734/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-15667
(7.5 HIGH)

EPSS: 0.56%

updated 2026-09-09T03:30:51

1 posts

The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.1.22 via the 'event_layout' parameter parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .php files on the server, allowing the execut

offseq@infosec.exchange at 2026-09-09T03:00:25.000Z ##

CVE-2026-15667: HIGH-severity LFI in Eventin WordPress plugin (≤4.1.22). Contributors can include arbitrary PHP via 'event_layout', risking code execution. Restrict privileges & await patch. https://radar.offseq.com/threat/cve-2026-15667-cwe-98-improper-control-of-filename-for-includerequire-statement-in-php-program-php-b89bc3860052e068 #OffSeq #WordPress #Vuln #LFI

##

CVE-2026-81994
(8.2 HIGH)

EPSS: 0.30%

updated 2026-09-08T21:34:41

1 posts

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious fi

thehackerwire@mastodon.social at 2026-09-09T03:00:30.000Z ##

🟠 CVE-2026-81994 - High (8.2)

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitiv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81994/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-84869
(9.9 CRITICAL)

EPSS: 0.38%

updated 2026-09-08T21:34:37

3 posts

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

ssvc@infosec.exchange at 2026-09-09T20:37:11.000Z ##

ConnectWise ScreenConnect #zeroday CVE-2026-84869

Huntress article: https://www.huntress.com/blog/rogue-screenconnect-installations

Canadian Centre for Cyber Security: https://www.cyber.gc.ca/en/alerts-advisories/connectwise-security-advisory-av26-903

Open-source reporting indicates that CVE-2026-84869 is being exploited in the wild.

ConnectWise is silent on exploitation status: https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin

#connectwise #screenconnect #cve

##

cR0w@infosec.exchange at 2026-09-08T21:38:08.000Z ##

WTF

https://github.com/ConnectWise-Advisories/Disclosures/blob/main/CVE-2026-84869/README.md

Earlier versions of ScreenConnect Client Support and Access sessions contained a client-side file-transfer handling condition in which file-transfer actions could be processed through an active remote session without proper authorization or Host confirmation. Under certain circumstances, this could allow files to be transferred to and executed on the Host client system, including through elevated execution actions. ScreenConnect servers are not impacted. Disabling file-transfer permissions for affected sessions may reduce exposure until the update is applied.

##

thehackerwire@mastodon.social at 2026-09-08T21:00:02.000Z ##

🔴 CVE-2026-84869 - Critical (9.9)

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84869/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-84942
(8.7 HIGH)

EPSS: 0.33%

updated 2026-09-08T21:34:37

1 posts

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The checkForFunctionProperty validation routine failed to recurse into arrays of objects, allowing a function pro

thehackerwire@mastodon.social at 2026-09-08T21:00:13.000Z ##

🟠 CVE-2026-84942 - High (8.7)

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84942/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-82007
(7.8 HIGH)

EPSS: 0.23%

updated 2026-09-08T21:34:36

1 posts

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

thehackerwire@mastodon.social at 2026-09-08T21:00:23.000Z ##

🟠 CVE-2026-82007 - High (7.8)

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82007/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-85880
(7.8 HIGH)

EPSS: 0.57%

updated 2026-09-08T21:34:12

9 posts

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

AAKL@infosec.exchange at 2026-09-09T16:27:09.000Z ##

New.

Press release:

CISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats https://www.cisa.gov/news-events/news/cisa-releases-updated-insider-threat-guide-new-insights-mitigate-physical-and-cyber-threats

The guide: https://www.cisa.gov/resources-tools/resources/insider-threat-mitigation-guide

Updates to the Kev catalogue:

- CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-85880 #Microsoft #Windows

- CVE-2026-86218: N-able N-central Static Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-86218

- CVE-2026-81963: Microsoft Windows Link Following Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-81963

- CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-75650 #Adobe

Yesterday:

Joint advisory: China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a #CISA #infosec #vulnerability

##

youranonnewsirc@nerdculture.de at 2026-09-09T16:26:23.000Z ##

**Latest Global Briefing: September 9, 2026**

**Cybersecurity:** Microsoft's September Patch Tuesday revealed nearly 1000 vulnerabilities, with CISA flagging two exploited zero-days (CVE-2026-81963, CVE-2026-85880) requiring urgent patching by federal agencies. The FBI also announced a new strategy to enhance cyberattack disruptions.

**Technology:** Dell Technologies reported surging Q2 FY 2027 earnings driven by high AI server demand, with OpenAI exploring AI infrastructure-as-a-service.

**Geopolitics:** Tensions heightened in the Middle East as US forces destroyed five Iranian oil tankers following IRGC attacks on a US Navy warship. Separately, 12 nations implemented trade bans on goods from Israeli settlements.

#Cybersecurity #TechNews #Geopolitics

##

secdb@infosec.exchange at 2026-09-09T11:00:11.000Z ##

🚨 [CISA-2026:0908] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-75650 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-75650)
- Name: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://helpx.adobe.com/security/products/magento/apsb26-146.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-75650

⚠️ CVE-2026-81963 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-81963)
- Name: Microsoft Windows Link Following Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Windows
- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-81963

⚠️ CVE-2026-85880 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85880)
- Name: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Windows
- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85880

⚠️ CVE-2026-86218 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86218)
- Name: N-able N-central Static Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: N-able
- Product: N-central
- Notes: https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/ ; https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-86218

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260908 #cisa20260908 #cve_2026_75650 #cve_2026_81963 #cve_2026_85880 #cve_2026_86218 #cve202675650 #cve202681963 #cve202685880 #cve202686218

##

beyondmachines1@infosec.exchange at 2026-09-09T09:01:13.000Z ##

Microsoft Patches 966 Vulnerabilities in September 2026 Update Including Two Actively Exploited Zero-Days

Microsoft's September 2026 Patch Tuesday fixed 966 flaws, its largest ever. The patch package includes 105 critical bugs and two actively exploited zero-days (CVE-2026-81963 and CVE-2026-85880). The critical flaws cluster in Windows network services (DNS, DHCP, RRAS, Netlogon), Office file parsing, imaging/graphics components, and Azure/Entra cloud services. Microsoft is attributing the surge in volume to AI-assisted vulnerability discovery.

**Patch the Windows OS first for the two zero-days, CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in ALPC, both already exploited in attacks to gain SYSTEM privileges. Next, patch internet-reachable and domain-joined Windows servers: DNS, DHCP, RRAS, Netlogon, Kerberos and the Key Distribution Center, Services for NFS, Deployment Services, Failover Cluster and SSTP all carry critical remote code execution flaws. Then move through Outlook, Word, Excel, and Office, followed by SQL Server, SharePoint Server, and Exchange. Windows Hello, Secure Kernel Mode, Credential Guard, and VBS should follow for anything holding credentials or running as a security boundary. Everything else can follow in the normal cycle, but plan for it to take longer than usual: almost no organization can test and deploy this volume in a single window.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/microsoft-patch-tuesday-for-september-2026-snort-rules-and-prominent-b-vulnerabilities-b-r-c-i-1-g/gD2P6Ple2L

##

security_crawler_carl@infosec.exchange at 2026-09-09T00:46:57.000Z ##

Meanwhile CVE-2026-69829 is a CVSS 9.8 heap overflow in Windows Shell letting unauthenticated attackers run code over a network. I called the mechanics. I drew the diagram. I made a spreadsheet.

Patch CVE-2026-81963, CVE-2026-85880, CVE-2026-69730, and CVE-2026-69829 immediately — yes, right now, before you ask if it can wait until Friday.

Reward: You've received the Tunnel Vision Debuff. It cannot be cleansed.

#ZeroDay #Microsoft #WindowsUpdate #PrivilegeEscalation #CyberSecurity (2/2)

##

security_crawler_carl@infosec.exchange at 2026-09-09T00:46:57.000Z ##

🏆 New Achievement! Stand In The Fire One More Time, I Dare You!

NINE HUNDRED AND SEVENTY-FOUR vulnerabilities. Microsoft dropped 974 patches this Patch Tuesday and you are STILL standing in the bad stuff. CVE-2026-81963 and CVE-2026-85880, both CVSS 7.8, are being actively exploited RIGHT NOW against the Windows Update Stack and Windows Advanced Local Procedure Call — privilege escalation, in the wild, before disclosure. (1/2)

##

cisakevtracker@mastodon.social at 2026-09-08T19:01:33.000Z ##

CVE ID: CVE-2026-85880
Vendor: Microsoft
Product: Windows
Date Added: 2026-09-08
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-85880

##

DailyCyberSecurity@infosec.exchange at 2026-09-08T18:09:23.000Z ##

Microsoft's September 2026 Patch Tuesday fixes two zero-day flaws, CVE-2026-81963 and CVE-2026-85880, both exploited in the wild.

#PatchTuesday #ZeroDay #Microsoft #Windows #CyberSecurity #CVE #Infosec #VulnerabilityManagement

https://securityonline.info/patch-tuesday-zero-day-september-2026/?utm_source=mastodon&utm_medium=jetpack_social

##

cR0w@infosec.exchange at 2026-09-08T17:25:21.000Z ##

Only two 0days this month for MS? Bummer.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880

##

CVE-2026-81963
(7.8 HIGH)

EPSS: 0.63%

updated 2026-09-08T21:34:09

9 posts

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

AAKL@infosec.exchange at 2026-09-09T16:27:09.000Z ##

New.

Press release:

CISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats https://www.cisa.gov/news-events/news/cisa-releases-updated-insider-threat-guide-new-insights-mitigate-physical-and-cyber-threats

The guide: https://www.cisa.gov/resources-tools/resources/insider-threat-mitigation-guide

Updates to the Kev catalogue:

- CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-85880 #Microsoft #Windows

- CVE-2026-86218: N-able N-central Static Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-86218

- CVE-2026-81963: Microsoft Windows Link Following Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-81963

- CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-75650 #Adobe

Yesterday:

Joint advisory: China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a #CISA #infosec #vulnerability

##

youranonnewsirc@nerdculture.de at 2026-09-09T16:26:23.000Z ##

**Latest Global Briefing: September 9, 2026**

**Cybersecurity:** Microsoft's September Patch Tuesday revealed nearly 1000 vulnerabilities, with CISA flagging two exploited zero-days (CVE-2026-81963, CVE-2026-85880) requiring urgent patching by federal agencies. The FBI also announced a new strategy to enhance cyberattack disruptions.

**Technology:** Dell Technologies reported surging Q2 FY 2027 earnings driven by high AI server demand, with OpenAI exploring AI infrastructure-as-a-service.

**Geopolitics:** Tensions heightened in the Middle East as US forces destroyed five Iranian oil tankers following IRGC attacks on a US Navy warship. Separately, 12 nations implemented trade bans on goods from Israeli settlements.

#Cybersecurity #TechNews #Geopolitics

##

secdb@infosec.exchange at 2026-09-09T11:00:11.000Z ##

🚨 [CISA-2026:0908] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-75650 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-75650)
- Name: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://helpx.adobe.com/security/products/magento/apsb26-146.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-75650

⚠️ CVE-2026-81963 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-81963)
- Name: Microsoft Windows Link Following Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Windows
- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-81963

⚠️ CVE-2026-85880 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85880)
- Name: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Windows
- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85880

⚠️ CVE-2026-86218 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86218)
- Name: N-able N-central Static Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: N-able
- Product: N-central
- Notes: https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/ ; https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-86218

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260908 #cisa20260908 #cve_2026_75650 #cve_2026_81963 #cve_2026_85880 #cve_2026_86218 #cve202675650 #cve202681963 #cve202685880 #cve202686218

##

beyondmachines1@infosec.exchange at 2026-09-09T09:01:13.000Z ##

Microsoft Patches 966 Vulnerabilities in September 2026 Update Including Two Actively Exploited Zero-Days

Microsoft's September 2026 Patch Tuesday fixed 966 flaws, its largest ever. The patch package includes 105 critical bugs and two actively exploited zero-days (CVE-2026-81963 and CVE-2026-85880). The critical flaws cluster in Windows network services (DNS, DHCP, RRAS, Netlogon), Office file parsing, imaging/graphics components, and Azure/Entra cloud services. Microsoft is attributing the surge in volume to AI-assisted vulnerability discovery.

**Patch the Windows OS first for the two zero-days, CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in ALPC, both already exploited in attacks to gain SYSTEM privileges. Next, patch internet-reachable and domain-joined Windows servers: DNS, DHCP, RRAS, Netlogon, Kerberos and the Key Distribution Center, Services for NFS, Deployment Services, Failover Cluster and SSTP all carry critical remote code execution flaws. Then move through Outlook, Word, Excel, and Office, followed by SQL Server, SharePoint Server, and Exchange. Windows Hello, Secure Kernel Mode, Credential Guard, and VBS should follow for anything holding credentials or running as a security boundary. Everything else can follow in the normal cycle, but plan for it to take longer than usual: almost no organization can test and deploy this volume in a single window.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/microsoft-patch-tuesday-for-september-2026-snort-rules-and-prominent-b-vulnerabilities-b-r-c-i-1-g/gD2P6Ple2L

##

security_crawler_carl@infosec.exchange at 2026-09-09T00:46:57.000Z ##

Meanwhile CVE-2026-69829 is a CVSS 9.8 heap overflow in Windows Shell letting unauthenticated attackers run code over a network. I called the mechanics. I drew the diagram. I made a spreadsheet.

Patch CVE-2026-81963, CVE-2026-85880, CVE-2026-69730, and CVE-2026-69829 immediately — yes, right now, before you ask if it can wait until Friday.

Reward: You've received the Tunnel Vision Debuff. It cannot be cleansed.

#ZeroDay #Microsoft #WindowsUpdate #PrivilegeEscalation #CyberSecurity (2/2)

##

security_crawler_carl@infosec.exchange at 2026-09-09T00:46:57.000Z ##

🏆 New Achievement! Stand In The Fire One More Time, I Dare You!

NINE HUNDRED AND SEVENTY-FOUR vulnerabilities. Microsoft dropped 974 patches this Patch Tuesday and you are STILL standing in the bad stuff. CVE-2026-81963 and CVE-2026-85880, both CVSS 7.8, are being actively exploited RIGHT NOW against the Windows Update Stack and Windows Advanced Local Procedure Call — privilege escalation, in the wild, before disclosure. (1/2)

##

cisakevtracker@mastodon.social at 2026-09-08T19:01:01.000Z ##

CVE ID: CVE-2026-81963
Vendor: Microsoft
Product: Windows
Date Added: 2026-09-08
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-81963

##

DailyCyberSecurity@infosec.exchange at 2026-09-08T18:09:23.000Z ##

Microsoft's September 2026 Patch Tuesday fixes two zero-day flaws, CVE-2026-81963 and CVE-2026-85880, both exploited in the wild.

#PatchTuesday #ZeroDay #Microsoft #Windows #CyberSecurity #CVE #Infosec #VulnerabilityManagement

https://securityonline.info/patch-tuesday-zero-day-september-2026/?utm_source=mastodon&utm_medium=jetpack_social

##

cR0w@infosec.exchange at 2026-09-08T17:25:21.000Z ##

Only two 0days this month for MS? Bummer.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880

##

CVE-2026-75650
(10.0 CRITICAL)

EPSS: 2.15%

updated 2026-09-08T21:33:09

11 posts

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

4 repos

https://github.com/jithinkrishnanrs/stylesmuggler-ioc-toolkit

https://github.com/dinosn/cve-2026-75650-magento-validation-lab

https://github.com/disrex-group/stylesmuggler-adobe-patches

https://github.com/disrex-group/stylesmuggler-adobe-patches-mageos

shochdoerfer@phpc.social at 2026-09-10T16:51:52.000Z ##

If you want to learn more about the latest zero-day #Magento exploit (StyleSmuggler), this a great read: https://www.graycore.io/case-studies/CVE-2026-75650-style-smuggler

##

thecybermind at 2026-09-10T09:42:55.630Z ##

Executive alert: CVE-2026-75650 actively threatens Adobe Commerce and Magento infrastructure. Review board-ready risk evaluation protocols, asset integrity measures, and strategic remediation steps to protect your enterprise value today.

https://thecybermind.co/hip4

##

thecybermind at 2026-09-10T00:59:17.540Z ##

Critical CVE-2026-75650 alert for Adobe Commerce and Magento. Active CISA KEV exploitation requires immediate template parsing audits and endpoint hardening. Access our technical forensic brief to secure your enterprise perimeter today.

https://thecybermind.co/8in9

##

shochdoerfer@phpc.social at 2026-09-10T16:51:52.000Z ##

If you want to learn more about the latest zero-day #Magento exploit (StyleSmuggler), this a great read: https://www.graycore.io/case-studies/CVE-2026-75650-style-smuggler

##

thecybermind@infosec.exchange at 2026-09-10T09:42:55.000Z ##

Executive alert: CVE-2026-75650 actively threatens Adobe Commerce and Magento infrastructure. Review board-ready risk evaluation protocols, asset integrity measures, and strategic remediation steps to protect your enterprise value today.

https://thecybermind.co/hip4

##

thecybermind@infosec.exchange at 2026-09-10T00:59:17.000Z ##

Critical CVE-2026-75650 alert for Adobe Commerce and Magento. Active CISA KEV exploitation requires immediate template parsing audits and endpoint hardening. Access our technical forensic brief to secure your enterprise perimeter today.

https://thecybermind.co/8in9

##

AAKL@infosec.exchange at 2026-09-09T16:27:09.000Z ##

New.

Press release:

CISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats https://www.cisa.gov/news-events/news/cisa-releases-updated-insider-threat-guide-new-insights-mitigate-physical-and-cyber-threats

The guide: https://www.cisa.gov/resources-tools/resources/insider-threat-mitigation-guide

Updates to the Kev catalogue:

- CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-85880 #Microsoft #Windows

- CVE-2026-86218: N-able N-central Static Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-86218

- CVE-2026-81963: Microsoft Windows Link Following Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-81963

- CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-75650 #Adobe

Yesterday:

Joint advisory: China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a #CISA #infosec #vulnerability

##

secdb@infosec.exchange at 2026-09-09T11:00:11.000Z ##

🚨 [CISA-2026:0908] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-75650 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-75650)
- Name: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://helpx.adobe.com/security/products/magento/apsb26-146.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-75650

⚠️ CVE-2026-81963 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-81963)
- Name: Microsoft Windows Link Following Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Windows
- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-81963

⚠️ CVE-2026-85880 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85880)
- Name: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Windows
- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85880

⚠️ CVE-2026-86218 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86218)
- Name: N-able N-central Static Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: N-able
- Product: N-central
- Notes: https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/ ; https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-86218

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260908 #cisa20260908 #cve_2026_75650 #cve_2026_81963 #cve_2026_85880 #cve_2026_86218 #cve202675650 #cve202681963 #cve202685880 #cve202686218

##

benzogaga33@mamot.fr at 2026-09-09T09:40:05.000Z ##

Magento : la faille zero-day StyleSmuggler est corrigée, mais des boutiques sont déjà piratées https://www.it-connect.fr/magento-adobe-commerce-faille-zero-day-stylesmuggler-cve-2026-75650/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Adobe

##

beyondmachines1@infosec.exchange at 2026-09-08T20:01:13.000Z ##

Adobe releases September 2026 patches for multiple products

Adobe's September 2026 security updates patch vulnerabilities across eight product families: Commerce/Magento, ColdFusion, Campaign Classic, Acrobat/Reader, Experience Manager, Photoshop, Illustrator, and Animate. The flaws could allow arbitrary code execution, privilege escalation, security feature bypass, file system read/write, memory exposure, and denial-of-service. The most urgent is CVE-2026-75650 (CVSS 10.0) in Adobe Commerce and Magento Open Source, an unauthenticated template-engine flaw already exploited in the wild and fixed by a separate out-of-band hotfix on September 7 that must be applied in addition to the September update.

**If you run Adobe Commerce or Magento Open Source, apply the out-of-band hotfix for CVE-2026-75650 immediately! Adobe is aware of this flaw being exploited in the wild, it carries a CVSS score of 10.0, and it can be triggered without authentication. Next, update ColdFusion and Adobe Campaign Classic, both of which received Adobe's highest priority rating and contain critical flaws that could lead to arbitrary code execution. Then apply the September Adobe Commerce security update, which is separate from the hotfix and must be installed in addition to it. After that, update Adobe Experience Manager and Acrobat and Reader. Finally, update Photoshop, Illustrator, and Animate. If you can't update right away, restrict network access to Commerce, ColdFusion, Campaign Classic, and Experience Manager servers, and avoid opening untrusted PDFs and untrusted image or project files in Acrobat, Reader, Photoshop, Illustrator, and Animate until patches are applied.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/adobe-releases-september-2026-patches-for-multiple-products-9-j-d-0-x/gD2P6Ple2L

##

cisakevtracker@mastodon.social at 2026-09-08T19:00:46.000Z ##

CVE ID: CVE-2026-75650
Vendor: Adobe
Product: Commerce and Magento
Date Added: 2026-09-08
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-75650

##

CVE-2026-86218
(9.8 CRITICAL)

EPSS: 0.74%

updated 2026-09-08T21:33:02

12 posts

N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.

1 repos

https://github.com/HORKimhab/CVE-2026-86218

DailyCyberSecurity at 2026-09-10T14:04:30.724Z ##

Discover the severe N-central CVE-2026-86218 vulnerability allowing unauthenticated RCE. Learn about N-able HF4 patches, CISA mandates, and threat actors.

#Ncentral #CVE202686218 #CyberSecurity #ZeroDay #Vulnerability

https://meterpreter.org/n-central-cve-2026-86218-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

beyondmachines1 at 2026-09-10T11:01:14.357Z ##

N-Able Patches N-Central Zero-Day Exploited in the Wild

N-Able released an emergency hotfix for a remote code execution vulnerability (CVE-2026-86218) in N-Central that attackers are actively exploiting to gain full administrative control over RMM servers and downstream client endpoints.

**If you run on-premises N-able N-central, upgrade immediately to version 2026.3.1.14 (2026.3 Hotfix 4). Make sure to keep the management console off the open internet behind a VPN or firewall allowlist limited to trusted admin networks. Since attackers may have already gained access, check for unfamiliar administrator accounts, unknown scripts or scheduled jobs and strange outbound connections, and change all passwords and keys used by or stored on the N-central server.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/n-able-patches-n-central-zero-day-exploited-in-the-wild-q-5-t-1-1/gD2P6Ple2L

##

threatnoir at 2026-09-10T00:06:02.183Z ##

⚠️ CRITICAL: N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

CVE-2026-86218 is a critical pre-auth RCE in N-able N-central being actively exploited in the wild. Any organization running N-central is vulnerable to unauthenticated remote code execution. Federal agencies are mandated to patch by September 11, 2026.

#Ncentral #CVE202686218 #CyberSecurity #ZeroDay #Vulnerability

🤖 AI generated summary

##

DailyCyberSecurity@infosec.exchange at 2026-09-10T14:04:30.000Z ##

Discover the severe N-central CVE-2026-86218 vulnerability allowing unauthenticated RCE. Learn about N-able HF4 patches, CISA mandates, and threat actors.

https://meterpreter.org/n-central-cve-2026-86218-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

beyondmachines1@infosec.exchange at 2026-09-10T11:01:14.000Z ##

N-Able Patches N-Central Zero-Day Exploited in the Wild

N-Able released an emergency hotfix for a remote code execution vulnerability (CVE-2026-86218) in N-Central that attackers are actively exploiting to gain full administrative control over RMM servers and downstream client endpoints.

**If you run on-premises N-able N-central, upgrade immediately to version 2026.3.1.14 (2026.3 Hotfix 4). Make sure to keep the management console off the open internet behind a VPN or firewall allowlist limited to trusted admin networks. Since attackers may have already gained access, check for unfamiliar administrator accounts, unknown scripts or scheduled jobs and strange outbound connections, and change all passwords and keys used by or stored on the N-central server.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/n-able-patches-n-central-zero-day-exploited-in-the-wild-q-5-t-1-1/gD2P6Ple2L

##

threatnoir@infosec.exchange at 2026-09-10T00:06:02.000Z ##

⚠️ CRITICAL: N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

CVE-2026-86218 is a critical pre-auth RCE in N-able N-central being actively exploited in the wild. Any organization running N-central is vulnerable to unauthenticated remote code execution. Federal agencies are mandated to patch by September 11, 2026.

https://cyberworldops.eu/en/n-able-fixes-critical-pre-auth-rce-in-n-central-as-exploitation

🤖 AI generated summary

##

AAKL@infosec.exchange at 2026-09-09T16:27:09.000Z ##

New.

Press release:

CISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats https://www.cisa.gov/news-events/news/cisa-releases-updated-insider-threat-guide-new-insights-mitigate-physical-and-cyber-threats

The guide: https://www.cisa.gov/resources-tools/resources/insider-threat-mitigation-guide

Updates to the Kev catalogue:

- CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-85880 #Microsoft #Windows

- CVE-2026-86218: N-able N-central Static Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-86218

- CVE-2026-81963: Microsoft Windows Link Following Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-81963

- CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-75650 #Adobe

Yesterday:

Joint advisory: China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a #CISA #infosec #vulnerability

##

cyberworldops@infosec.exchange at 2026-09-09T15:00:01.000Z ##

N-able released Hotfix 4 for CVE-2026-86218, a pre-auth RCE in on-prem N-central with CVSS 4.0 10.0. All builds before 2026.3.1.14 are vulnerable, including Hotfix 3. RMM pre-auth RCE is high-value for initial access, prioritize patching and internet exposure review. #NAble #NCentral #RemoteCodeExecution

##

secdb@infosec.exchange at 2026-09-09T11:00:11.000Z ##

🚨 [CISA-2026:0908] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-75650 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-75650)
- Name: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://helpx.adobe.com/security/products/magento/apsb26-146.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-75650

⚠️ CVE-2026-81963 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-81963)
- Name: Microsoft Windows Link Following Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Windows
- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-81963

⚠️ CVE-2026-85880 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85880)
- Name: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Windows
- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85880

⚠️ CVE-2026-86218 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86218)
- Name: N-able N-central Static Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: N-able
- Product: N-central
- Notes: https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/ ; https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-86218

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260908 #cisa20260908 #cve_2026_75650 #cve_2026_81963 #cve_2026_85880 #cve_2026_86218 #cve202675650 #cve202681963 #cve202685880 #cve202686218

##

cyberworldops@infosec.exchange at 2026-09-09T07:10:01.000Z ##

CISA added CVE-2026-86218 to KEV after confirmed active exploitation. The N-able N-central static code injection allows pre-auth RCE with CVSS 9.8, exposing centralized management infrastructure. Patch and hunt for pre-patch compromise. #Nable #NCentral #RemoteCodeExecution

https://cyberworldops.eu/en/actively-exploited-n-able-n-central-flaw-enables-pre-authentication

##

ssvc@infosec.exchange at 2026-09-09T01:37:53.000Z ##

N-able didn't beat around the bush:

Since our post 9/5/2026, 08:11:00 UTC a third independent researcher disclosed to N-able a new vulnerability— one that has been exploited in the wild and is unrelated to the previously disclosed CVEs.
This critical zero-day vulnerability, CVE-2026-86218, could allow pre-authenticated access to the N-central server if exploited.

#nable #zeroday #KEV #CVE

##

cisakevtracker@mastodon.social at 2026-09-08T19:01:17.000Z ##

CVE ID: CVE-2026-86218
Vendor: N-able
Product: N-central
Date Added: 2026-09-08
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-86218

##

CVE-2026-57162
(0 None)

EPSS: 0.35%

updated 2026-09-08T21:14:35.567000

1 posts

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer (sdes_encode_sdp() in transport_srtp_sdes.c). This affects applications with SRTP enabled (use_srtp optional or mandatory, using SDES keying). During media negotiation, the

hugovalters@mastodon.social at 2026-09-10T16:00:22.000Z ##

CVE-2026-57162: Stack buffer overflow in PJSIP SRTP/SDES when processing crafted crypto attributes during SDP negotiation. CVSS: N/A, unpatched. If you use SRTP with SDES keying, you are exposed. Patch immediately. Details: https://www.valtersit.com/cve/CVE-2026-57162/ #CVE #info

##

CVE-2026-84372
(9.8 CRITICAL)

EPSS: 0.41%

updated 2026-09-08T20:57:52

1 posts

### Summary An improper CRLF neutralization flaw in Predis' pipeline handling on aggregate connections lets an unauthenticated attacker who can influence any pipelined argument — a value **or** a key, e.g. a URL slug used as a cache key — smuggle arbitrary Redis commands into the connection. - On **cluster** connections (`cluster` option, incl. client-side sharding) this is remote command inje

DailyCyberSecurity@infosec.exchange at 2026-09-09T02:34:18.000Z ##

Details and PoC for CVE-2026-84372 are publicly disclosed. This Predis command injection flaw via CRLF smuggling allows complete cluster compromise.

#Predis #CommandInjection #CVE202684372 #Cybersecurity #Vulnerability

https://securityonline.info/cve-2026-84372-predis-command-injection-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-86721
(7.5 HIGH)

EPSS: 0.29%

updated 2026-09-08T19:53:13.400000

1 posts

AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named 'key' with value 'value' overrides the $_REQUEST['key'] parameter in saveLive.php and related endpoints. Attackers can publish to any user's RTMP stream without authentication by using the known constant stream key value to hijack live broadcasts.

thehackerwire@mastodon.social at 2026-09-08T17:02:29.000Z ##

🟠 CVE-2026-86721 - High (7.5)

AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named 'key' with value 'value' overrides the $_REQUEST['key'] parameter in saveLive.php and related endpoints. Attackers can publish to any user...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86721/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-86730
(8.8 HIGH)

EPSS: 0.39%

updated 2026-09-08T19:53:13.400000

1 posts

Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to inject Yii2 behavior attachments and event handlers. Attackers can post field-layout tab elements as JSON strings to bypass cleanse validation, then trigger arbitrary object instantiation and code execution through Craft::createObject().

thehackerwire@mastodon.social at 2026-09-08T17:01:16.000Z ##

🟠 CVE-2026-86730 - High (8.8)

Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to inject Yii2 behavior attachments and event handlers. Attackers can post field-layout tab elements as JSON ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86730/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-44756
(10.0 CRITICAL)

EPSS: 0.32%

updated 2026-09-08T19:12:59.557000

5 posts

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availabil

DailyCyberSecurity at 2026-09-10T14:37:16.736Z ##

The SAP OVERPASS vulnerability (CVE-2026-44756) scores a perfect CVSS 10.0, letting attackers seize SAP servers before login. Patch Note 3747649 now.

#SAP #OVERPASS #CVE202644756 #CyberSecurity #RCE #Onapsis #InfoSec

https://securityexpress.info/sap-overpass-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-09-10T14:37:16.000Z ##

The SAP OVERPASS vulnerability (CVE-2026-44756) scores a perfect CVSS 10.0, letting attackers seize SAP servers before login. Patch Note 3747649 now.

#SAP #OVERPASS #CVE202644756 #CyberSecurity #RCE #Onapsis #InfoSec

https://securityexpress.info/sap-overpass-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

guru@thecybersecguru.com at 2026-09-09T12:33:27.000Z ##

SAP OVERPASS CVE-2026-44756: CVSS 10.0 Kernel RCE Explained

SAP OVERPASS CVE-2026-44756 is a CVSS 10.0 kernel flaw enabling unauthenticated RCE. Learn the attack path, S4GET risks and patching steps

https://thecybersecguru.com/news/sap-overpass-cve-2026-44756/

##

jbhall56@infosec.exchange at 2026-09-09T12:29:39.000Z ##

The vulnerability, tracked as CVE-2026-44756 (CVSS score: 10.0), has been described as a case of memory corruption. Discovered and reported by SAP security company Onapsis, it has been codenamed OVERPASS. https://thehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.html

##

security_crawler_carl@infosec.exchange at 2026-09-09T03:04:18.000Z ##

🏆 New Achievement! OVERPASS: The SAP Kernel Speedrun!

Patch compliance policy activated. Scanning enterprise environment. Detecting CVE-2026-44756, a CVSS 10/10 memory corruption flaw in SAP Extended Passport Processing, dubbed OVERPASS. Policy requires acknowledgment of impact: unauthenticated remote attackers may execute arbitrary system commands, drain database credentials and password hashes, hijack live user sessions, and rewrite configurations and SAP binaries. (1/2)

##

CVE-2026-83972
(7.8 HIGH)

EPSS: 0.31%

updated 2026-09-08T18:34:21

1 posts

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

nyanbinary@infosec.exchange at 2026-09-08T18:36:25.000Z ##

I'm also quickly going to mention this, explicitly not as a complaint but as a good case study of a well chosen "SHOULD" & why should is better than must here:

https://www.cve.org/ResourcesSupport/AllResources/CNARules#section_5-1_Required_CVE_Record_Content

5.1.1 SHOULD contain sufficient information to uniquely identify the Vulnerability and distinguish it from similar Vulnerabilities.

This, uh, will be a bit of an issue with https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83972 & https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83970 . You it actually doesn't matter. The fix is the same, fucking update. And it doesn't matter if you got owned through -83972 or -83970, given the current firehose. It's actually one of those cases where I'd be happy to relax the "one record per vuln" rule, in no world does the differentiation of these two matter to anyone.

##

CVE-2026-81954
(7.8 HIGH)

EPSS: 0.32%

updated 2026-09-08T18:34:18

1 posts

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

nyanbinary@infosec.exchange at 2026-09-08T18:26:10.000Z ##

I explicitly don't want to complain about MSRC here, this is a bigger topic, but I am a bit confused here:

Compare these two:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81954 - AV:L,UI:R

Q: According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
A: An attacker must send a user a malicious Office file and convince them to open it.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80081 - AV:N,UI:R

Q: How could an attacker exploit this vulnerability?
A: An attacker could send a specially crafted PowerPoint presentation containing malicious linked media to a target user. The user would need to open the presentation, start the slideshow, and allow the linked content. Successful exploitation could allow the attacker to execute code on the user's system. Authentication is not required.

To me the attack flow looks equivalent wrt to attacker location. We can argue about #2 being actually harder to execute, having more social engineering prerequisites... which is why it totally makes sense for #2 to scored higher on CVSS as it's apparently network & the other one local.

##

CVE-2026-83991
(5.5 MEDIUM)

EPSS: 0.34%

updated 2026-09-08T18:34:14

1 posts

Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.

2 repos

https://github.com/ZeroDayVPN/CVE-2026-83991-WriteUP-and-PoC

https://github.com/karollooool/CVE-2026-83991-writeup-and-poc

obivan@infosec.exchange at 2026-09-09T12:33:32.000Z ##

CVE-2026-83991: Windows Cloud Files access-check bypass https://github.com/karollooool/CVE-2026-83991-writeup-and-poc

##

CVE-2026-80081
(8.8 HIGH)

EPSS: 0.47%

updated 2026-09-08T18:34:00

1 posts

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

nyanbinary@infosec.exchange at 2026-09-08T18:26:10.000Z ##

I explicitly don't want to complain about MSRC here, this is a bigger topic, but I am a bit confused here:

Compare these two:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81954 - AV:L,UI:R

Q: According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
A: An attacker must send a user a malicious Office file and convince them to open it.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80081 - AV:N,UI:R

Q: How could an attacker exploit this vulnerability?
A: An attacker could send a specially crafted PowerPoint presentation containing malicious linked media to a target user. The user would need to open the presentation, start the slideshow, and allow the linked content. Successful exploitation could allow the attacker to execute code on the user's system. Authentication is not required.

To me the attack flow looks equivalent wrt to attacker location. We can argue about #2 being actually harder to execute, having more social engineering prerequisites... which is why it totally makes sense for #2 to scored higher on CVSS as it's apparently network & the other one local.

##

CVE-2026-69829
(9.8 CRITICAL)

EPSS: 1.05%

updated 2026-09-08T18:33:17

1 posts

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

security_crawler_carl@infosec.exchange at 2026-09-09T00:46:57.000Z ##

Meanwhile CVE-2026-69829 is a CVSS 9.8 heap overflow in Windows Shell letting unauthenticated attackers run code over a network. I called the mechanics. I drew the diagram. I made a spreadsheet.

Patch CVE-2026-81963, CVE-2026-85880, CVE-2026-69730, and CVE-2026-69829 immediately — yes, right now, before you ask if it can wait until Friday.

Reward: You've received the Tunnel Vision Debuff. It cannot be cleansed.

#ZeroDay #Microsoft #WindowsUpdate #PrivilegeEscalation #CyberSecurity (2/2)

##

CVE-2026-20293
(7.1 HIGH)

EPSS: 0.13%

updated 2026-09-08T18:32:05

2 posts

A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access to an affected device to bypass UEFI Secure Boot validation checks and execute unauthorized softw

ssvc@infosec.exchange at 2026-09-09T01:33:59.000Z ##

#Cisco only had one for #PatchTuesday? CVE-2026-20293 Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

The Cisco PSIRT is aware that proof-of-concept exploit code is available for the vulnerability described in this advisory.

It appears to be related to Eclypsium research into UEFI shell vulnerabilities from 2025:

#poc #UEFI

##

AAKL@infosec.exchange at 2026-09-08T16:42:45.000Z ##

New advisories from Cisco addressing two high and medium-severity vulnerabilities.

New: CVE-2026-20293: Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-uefi-sb-bypass-eb6xC5GW

Known: CVE-2026-20354 and CVE-2026-20355: Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities @TalosSecurity #infosec #vulnerability #Cisco

##

CVE-2026-82067
(8.1 HIGH)

EPSS: 0.28%

updated 2026-09-08T18:32:04

2 posts

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform arbitrary administrative operations, resulting in full impact of data confidentiality, integrity, and a

DailyCyberSecurity at 2026-09-10T01:02:07.007Z ##

MongoDB fixed 24 MongoDB Server vulnerabilities, including a critical auth bypass (CVE-2026-82067) and unauthenticated denial of service flaws. Patch now.

#MongoDB #Vulnerability #CVE #DatabaseSecurity #DenialOfService #InfoSec #PatchNow #CyberSecurity #MongoDBServer #AppSec

https://securityonline.info/mongodb-server-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-09-10T01:02:07.000Z ##

MongoDB fixed 24 MongoDB Server vulnerabilities, including a critical auth bypass (CVE-2026-82067) and unauthenticated denial of service flaws. Patch now.

#MongoDB #Vulnerability #CVE #DatabaseSecurity #DenialOfService #InfoSec #PatchNow #CyberSecurity #MongoDBServer #AppSec

https://securityonline.info/mongodb-server-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-86738
(8.7 HIGH)

EPSS: 0.27%

updated 2026-09-08T18:32:01

1 posts

Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitization that reverses HTML encoding on greater-than and double-quote characters. Superusers can plant malicious CSS payloads using @import and url() references to exfiltrate CSRF tokens from other superusers via attribute-selector rules, enabling account takeover.

thehackerwire@mastodon.social at 2026-09-08T17:00:56.000Z ##

🟠 CVE-2026-86738 - High (8.7)

Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitization that reverses HTML encoding on greater-than and double-quote characters. Superusers can plant malicious CSS payloads using ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86738/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-86728
(7.5 HIGH)

EPSS: 0.32%

updated 2026-09-08T18:32:00

1 posts

AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that exposes live-stream keys and private EPG schedules to unauthenticated users. Attackers can request the endpoint with sequential user or playlist IDs to retrieve sensitive credentials, server identifiers, and complete programme schedules without authentication.

thehackerwire@mastodon.social at 2026-09-08T17:02:18.000Z ##

🟠 CVE-2026-86728 - High (7.5)

AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that exposes live-stream keys and private EPG schedules to unauthenticated users. Attackers can request the endpoint with sequential user or playl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86728/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-86727
(7.5 HIGH)

EPSS: 0.31%

updated 2026-09-08T18:31:59

1 posts

AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows unauthenticated attackers to retrieve stream keys and m3u8 URLs by accessing the endpoint without authentication. Attackers can enumerate private, unlisted, and group-restricted live streams by parsing the hidden_applications array in the JSON response to obtain sensitive streaming creden

thehackerwire@mastodon.social at 2026-09-08T17:02:07.000Z ##

🟠 CVE-2026-86727 - High (7.5)

AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows unauthenticated attackers to retrieve stream keys and m3u8 URLs by accessing the endpoint without authentication. Attackers can enumerat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86727/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-86732
(8.8 HIGH)

EPSS: 0.51%

updated 2026-09-08T18:31:59

1 posts

Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary classes through the criteria parameter. Attackers can inject a malicious class via criteria[withTransforms][0][class] that reaches ImageTransforms::normalizeTransform(), then use a PHP gadget chain with yii\rbac\PhpManager

thehackerwire@mastodon.social at 2026-09-08T17:01:06.000Z ##

🟠 CVE-2026-86732 - High (8.8)

Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary classes through the criteria parameter. Attackers can inject a malicio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86732/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-26084
(9.9 CRITICAL)

EPSS: 0.24%

updated 2026-09-08T18:31:56

1 posts

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests.

DailyCyberSecurity@infosec.exchange at 2026-09-08T17:27:14.000Z ##

Fortinet fixed three critical Fortinet vulnerabilities. Attackers can exploit CVE-2026-84390 and CVE-2026-26084 to access corporate data.

#Fortinet #Vulnerabilities #Cybersecurity #InfoSec #PatchManagement

https://securityonline.info/fortinet-vulnerabilities-patch/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2025-20701
(8.8 HIGH)

EPSS: 7.77%

updated 2026-09-08T18:31:36

1 posts

In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

2 repos

https://github.com/x0jac0b0x/skullcandy-dime3-cve-2025-20701

https://github.com/SpiritualMachines/buds-audit

cyberveille@mastobot.ping.moi at 2026-09-10T14:30:05.000Z ##

📢 CVE-2025-20701 : Les écouteurs Skullcandy Dime 3 vulnérables au détournement Bluetooth

Le 9 septembre 2026, BleepingComputer relaie un avis du CERT/CC de l'Université Carnegie Mellon concernant une vulnérabilité affectant les écouteurs sans fil Skullcandy Dime 3 (modèle S2DCW). La faille, identifiée sous CVE-2025-20701, est présente dans le…

📖 cyberveille : https://cyberveille.ch/posts/2026-09-10-cve-2025-20701-les-ecouteurs-skullcandy-dime-3-vulnerables-au-detournement-bluetooth/
🌐 source : https://www.bleepingcomputer.com/news/security/skullcandy-dime-3-earbuds-expose-users-to-bluetooth-hijacking/
🟡 vérification factuelle moyenne
#Bluetooth #SkullcandyDime3 #Cyberveille

##

CVE-2026-33197
(0 None)

EPSS: 0.12%

updated 2026-09-08T16:18:08.077000

2 posts

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability.

DailyCyberSecurity at 2026-09-10T01:14:10.106Z ##

A critical Secure Boot bypass vulnerability via a UEFI Shell flaw exposes servers to code execution. Discover how CVE-2026-33197 impacts devices.

#SecureBoot #UEFI #Vulnerability #Cybersecurity #CVE202633197

https://securityonline.info/secure-boot-bypass-vulnerability-uefi-shell-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-09-10T01:14:10.000Z ##

A critical Secure Boot bypass vulnerability via a UEFI Shell flaw exposes servers to code execution. Discover how CVE-2026-33197 impacts devices.

#SecureBoot #UEFI #Vulnerability #Cybersecurity #CVE202633197

https://securityonline.info/secure-boot-bypass-vulnerability-uefi-shell-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-31431
(7.8 HIGH)

EPSS: 99.91%

updated 2026-09-08T15:13:07.273000

1 posts

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just

100 repos

https://github.com/MrAriaNet/cPanel-Fix

https://github.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation

https://github.com/EynaExp/Copy-Fail-CVE-2026-31431-modernized

https://github.com/Juguitos/copy-fail

https://github.com/rootsecdev/cve_2026_31431

https://github.com/Boos4721/copyfail-rs

https://github.com/atgreen/block-copyfail

https://github.com/badsectorlabs/copyfail-go

https://github.com/Xerxes-2/CVE-2026-31431-rs

https://github.com/sec17br/CVE-2026-31431-Copy-Fail

https://github.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag

https://github.com/SeanRickerd/cve-2026-31431

https://github.com/shadowabi/CVE-2026-31431-CopyFail-Universal-LPE

https://github.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail

https://github.com/bigwario/copy-fail-CVE-2026-31431-C

https://github.com/ben-slates/CVE-2026-31431-Exploit

https://github.com/ZephrFish/CopyFail-CVE-2026-31431

https://github.com/TheMalwareGuardian/CVE-2026-31431

https://github.com/mym0us3r/COPY-FAIL-Detection-with-Wazuh-4.14.4

https://github.com/erlangparasu/mitigate_cve_2026_31431-sh

https://github.com/Webhosting4U/Copy-Fail_Detect_and_mitigate_CVE-2026-31431

https://github.com/g1nt0n1x/copy-fail-CVE-2026-31431-shell

https://github.com/Sl4cK0TH/CVE-2026-31431-PoC

https://github.com/KaraZajac/DIRTYFAIL

https://github.com/mahdi13830510/CVE-2026-31431-mitigation-suite

https://github.com/mrunalp/block-copyfail

https://github.com/JuanBindez/CVE-2026-31431

https://github.com/Smarttfoxx/copyfail

https://github.com/JnamerZ/CopyFail-CVE-2026-31431

https://github.com/rvzsec/CVE-2026-31431

https://github.com/Iamliuxiaozhen/copy_fail

https://github.com/ErdemOzgen/copy-fail-cve-2026-31431

https://github.com/nisec-eric/cve-2026-31431

https://github.com/Dabbleam/CVE-2026-31431-mitigation

https://github.com/adityasingh108/CVE-2026-31431-Metasploit-exploit

https://github.com/xeloxa/copyfail-exploit

https://github.com/povzayd/CVE-2026-31431

https://github.com/abdelkabirouadoukou/CVE-2026-31431-Analysis-and-Fix

https://github.com/pedromizz/copy-fail

https://github.com/cyber-joker/copy-fail-python

https://github.com/adampielak/CVE-2026-31431_SCA_WAZUH

https://github.com/ExploitEoom/CVE-2026-31431

https://github.com/scriptzteam/Paranoid-Copy-Fail-CVE-2026-31431

https://github.com/iss4cf0ng/CVE-2026-31431-Linux-Copy-Fail

https://github.com/cs8425/copy-fail-go

https://github.com/kinryulabs/rootpacket-cve-2026-31431

https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC

https://github.com/pyroceper/copy-fail-CVE-2026-31431

https://github.com/wgnet/wg.copyfail.patch

https://github.com/samanzamani/copy-fail-checker

https://github.com/diemoeve/copyfail-rs

https://github.com/tgies/copy-fail-c

https://github.com/painoob/Copy-Fail-Exploit-CVE-2026-31431

https://github.com/liamromanis101/CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script

https://github.com/0xBlackash/CVE-2026-31431

https://github.com/Shotafry/CopyFail-Exploits-CVE-2026-31431

https://github.com/desultory/CVE-2026-31431

https://github.com/XsanFlip/CVE-2026-31431-Patch

https://github.com/sgkdev/page_inject

https://github.com/0xShe/CVE-2026-31431

https://github.com/b5null/CVE-2026-31431-C

https://github.com/luotian2/CVE-2026-31431

https://github.com/insomnisec/Detections-CVE-2026-31431

https://github.com/yuspring/cve-2026-31431-poc

https://github.com/malwarekid/CVE-2026-31431

https://github.com/aestechno/cve-2026-31431-ansible

https://github.com/beatbeast007/Linux-CopyFail-C-Version-CVE-2026-31431

https://github.com/4xura/CVE-2026-31431-Copy-Fail

https://github.com/qi4L/CVE-2026-31431-Container-Escape

https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Statically-PoC

https://github.com/Crihexe/copy-fail-tiny-elf-CVE-2026-31431

https://github.com/Qengineering/RK35xx-CopyFail-Hotfix

https://github.com/AdityaBhatt3010/CVE-2026-31431

https://github.com/Huchangzhi/autorootlinux

https://github.com/M4xSec/CVE-2026-31431-RCE-Exploit

https://github.com/guiimoraes/CVE-2026-31431

https://github.com/theori-io/copy-fail-CVE-2026-31431

https://github.com/philfry/cve-2026-31431-ftrace

https://github.com/AliHzSec/CVE-2026-31431

https://github.com/sammwyy/copyfail-rs

https://github.com/kadir/copy-fail-CVE-2026-31431-IOC

https://github.com/wuwu001/CVE-2026-31431-exploit

https://github.com/sgkdev/ptrace_may_dream

https://github.com/sudoytang/copyfail-arm64

https://github.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe

https://github.com/kvakirsanov/CVE-2026-31431-live-process-code-injection

https://github.com/jbnetwork-git/copy-fail-check

https://github.com/wesmar/CVE-2026-31431

https://github.com/gagaltotal/cve-2026-31431-copy-fail

https://github.com/KanbaraAkihito/CVE-2026-31431-copyfail-rs

https://github.com/cozystack/copy-fail-blocker

https://github.com/novysodope/copy-fail-CVE-2026-31431-C

https://github.com/haydenjames/CVE-2026-31431-check

https://github.com/Alfredooe/CVE-2026-31431

https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit

https://github.com/pascal-gujer/CVE-2026-31431

https://github.com/MartinPham/copy-fail-CVE-2026-31431-php

https://github.com/hans362/CVE-2026-31431-Copy-Fail-Container-Escape

https://github.com/lonelyor/CVE-2026-31431-exp

https://github.com/bootsareme/copyfail-deconstructed

kubesploit@learnk8s.news at 2026-09-09T18:36:03.000Z ##

This article examines why Copy Fail (CVE-2026-31431) breaks container assumptions and provides a small, safe Python check to determine whether your nodes can reach the vulnerable kernel path

➜ https://ku.bz/CTv-Yf60c

##

CVE-2026-85012
(8.0 HIGH)

EPSS: 1.06%

updated 2026-09-08T14:00:33.017000

2 posts

Improper neutralization of special elements used in an OS command (CWE-78) in the blueprint resynthesis framework in Amazon Web Services codecatalyst-blueprints before 0.3.156 might allow a user with permission to commit to a repository in the project to execute arbitrary commands in the blueprint resynthesis environment via shell metacharacters in the owner field of a [local] merge strategy entry

awssecurityfeed at 2026-09-09T21:45:02.293Z ##

CVE-2026-85012 - OS command injection in the Amazon CodeCatalyst blueprints SDK

Bulletin ID: 2026-095-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/03/2026 10:00 AM PDT
Description:
Amazon CodeCatalyst blueprints are reusable project templates that generate a software proj...

https://aws.amazon.com/security/security-bulletins/rss/2026-095-aws/

https://aws.amazon.com/security/security-bulletins/rss/2026-095-aws/

##

awssecurityfeed@infosec.exchange at 2026-09-09T21:45:02.000Z ##

CVE-2026-85012 - OS command injection in the Amazon CodeCatalyst blueprints SDK

Bulletin ID: 2026-095-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/03/2026 10:00 AM PDT
Description:
Amazon CodeCatalyst blueprints are reusable project templates that generate a software proj...

#HawtioOperator #CVE202678234 #Kubernetes #OpenShift #Vulnerability

##

CVE-2026-78234
(9.9 CRITICAL)

EPSS: 0.21%

updated 2026-09-08T12:31:35

1 posts

A flaw was found in hawtio-operator. The operator reads the OpenShift Service CA private signing key from the openshift-service-ca namespace and uses it to mint client certificates with a Subject Common Name (CN) supplied by the author of a namespaced Hawtio custom resource. Because the operator ships a ClusterRole that aggregates Hawtio CR permissions into the edit and admin roles, any user with

DailyCyberSecurity@infosec.exchange at 2026-09-09T00:32:06.000Z ##

A critical Hawtio Operator vulnerability, tracked as CVE-2026-78234, allows in-cluster service impersonation. Discover the impact and mitigation steps.

https://securityonline.info/hawtio-operator-vulnerability-cve-2026-78234/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-50093
(9.0 None)

EPSS: 0.19%

updated 2026-09-08T09:35:45

1 posts

A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0 (All versions < V4.0.11.2177). A vulnerability in the OIS web module allows an attacker to upload arbitrary files to the server. Successful exploitation of this

DailyCyberSecurity@infosec.exchange at 2026-09-09T00:51:07.000Z ##

Two critical Siemens vulnerabilities (CVE-2026-18963, CVE-2026-50093) allow account takeover and root access. See affected versions and fixes.

#Siemens #CyberSecurity #ICS #OTSecurity #CVE #IndustrialEdge #Vulnerability #InfoSec

https://securityonline.info/siemens-industrial-edge-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-18963
(9.1 CRITICAL)

EPSS: 3.18%

updated 2026-09-08T09:17:43.063000

1 posts

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user

15 repos

https://github.com/ynsmroztas/KeySniper

https://github.com/kyos-public/keycloak-cve-2026-18963-hunt

https://github.com/T0w0T/POC-CVE-2026-18963

https://github.com/alt3kx/CVE-2026-18963

https://github.com/Snizi/CVE-2026-18963-Exploit

https://github.com/prot0tw/Keycloak_CVE-2026-18963_PoC

https://github.com/0xlyvio/CVE-2026-18963-keycloak

https://github.com/minh3102011/CVE-2026-18963_analyst

https://github.com/gman0x00/keycloak-CVE-2026-18963

https://github.com/Red-Darkin/CVE-2026-18963-keycloak

https://github.com/debugactiveprocess/CVE-2026-18963

https://github.com/M4xSec/My-Exploits

https://github.com/BlackHatExploitation/Exploit-For-CVE-2026-18963

https://github.com/ivanesk315/CVE-2026-18963

https://github.com/EQSTLab/CVE-2026-18963

DailyCyberSecurity@infosec.exchange at 2026-09-09T00:51:07.000Z ##

Two critical Siemens vulnerabilities (CVE-2026-18963, CVE-2026-50093) allow account takeover and root access. See affected versions and fixes.

#Siemens #CyberSecurity #ICS #OTSecurity #CVE #IndustrialEdge #Vulnerability #InfoSec

https://securityonline.info/siemens-industrial-edge-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-86206(CVSS UNKNOWN)

EPSS: 0.68%

updated 2026-09-05T21:31:26

2 posts

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4

ssvc@infosec.exchange at 2026-09-09T01:37:53.000Z ##

N-able didn't beat around the bush:

Since our post 9/5/2026, 08:11:00 UTC a third independent researcher disclosed to N-able a new vulnerability— one that has been exploited in the wild and is unrelated to the previously disclosed CVEs.
This critical zero-day vulnerability, CVE-2026-86218, could allow pre-authenticated access to the N-central server if exploited.

#nable #zeroday #KEV #CVE

##

AAKL@infosec.exchange at 2026-09-08T16:56:24.000Z ##

New.

Rapid7: CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED) https://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed/ @Rapid7Official #infosec #vulnerability #threatresearch

##

CVE-2026-67276(CVSS UNKNOWN)

EPSS: 0.24%

updated 2026-09-05T21:31:20

1 posts

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can supply a key with exponent one, forge a valid signature, and open an SSH command channel as the target

4 repos

https://github.com/dinosn/mikrotrick-poc

https://github.com/BlackHatExploitation/exploit-mikrotik-2026

https://github.com/HORKimhab/CVE-2026-67276

https://github.com/4rt-Net/Mikrotrick_POC

threatcodex@infosec.exchange at 2026-09-09T15:00:02.000Z ##

CVE-2026-67276: MikroTik RouterOS SSH Zero-Day Exploited in Router Takeover Attacks
#CVE_2026_67276
https://socprime.com/blog/cve-2026-67276-mikrotik-routeros-ssh-zero-day/

##

CVE-2026-86207(CVSS UNKNOWN)

EPSS: 0.73%

updated 2026-09-05T21:31:20

2 posts

An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs

ssvc@infosec.exchange at 2026-09-09T01:37:53.000Z ##

N-able didn't beat around the bush:

Since our post 9/5/2026, 08:11:00 UTC a third independent researcher disclosed to N-able a new vulnerability— one that has been exploited in the wild and is unrelated to the previously disclosed CVEs.
This critical zero-day vulnerability, CVE-2026-86218, could allow pre-authenticated access to the N-central server if exploited.

#nable #zeroday #KEV #CVE

##

AAKL@infosec.exchange at 2026-09-08T16:56:24.000Z ##

New.

Rapid7: CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED) https://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed/ @Rapid7Official #infosec #vulnerability #threatresearch

##

CVE-2026-86090
(7.1 HIGH)

EPSS: 0.25%

updated 2026-09-05T00:31:10

1 posts

ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and recipients REST v2 handlers. Authenticated non-administrator users can issue POST requests to irreversibly delete all configured notification endpoints and recipients, silencing all alerts.

hugovalters@mastodon.social at 2026-09-10T03:30:03.000Z ##

CVE-2026-86090: ntopng auth bypass lets non-admin users delete all alert endpoints, silencing critical notifications. CVSS 7.1. No patch yet. Audit your instance now. Details: https://www.valtersit.com/cve/CVE-2026-86090/ #CVE #infosec #ntopng

##

CVE-2026-80119
(7.8 HIGH)

EPSS: 0.12%

updated 2026-09-04T21:31:59

1 posts

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an information disclosure vulnerability in DirectIo64.sys that allows unauthenticated local attackers to dump complete physical memory contents by supplying a caller-controlled file path to an exposed IOCTL. Attackers can issue a single IOCTL call to trigger the driver

hugovalters@mastodon.social at 2026-09-10T04:20:44.000Z ##

CVE-2026-80119: Info disclosure in Directio64.sys lets unauthenticated local attackers dump physical memory via crafted IOCTL. CVSS 7.8. Unpatched. Update PassMark tools or restrict driver access. Details: https://www.valtersit.com/cve/CVE-2026-80119/ #CVE #infosec #cybersecurity

##

CVE-2026-80905(CVSS UNKNOWN)

EPSS: 0.15%

updated 2026-09-04T18:31:46

1 posts

In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transport_header when sending VLAN-tagged frame In tap_get_user_xdp(), when processing a VLAN-tagged frame (e.g. ETH_P_8021Q), skb_set_network_header() is called first to advance network_header past the VLAN tag to the inner protocol header. skb_probe_transport_header() is then called with skb->protocol still

hugovalters@mastodon.social at 2026-09-10T08:10:03.000Z ##

CVE-2026-80905: Linux kernel net: tap bug mishandles VLAN-tagged frames, corrupting transport_header. Potential for network disruption or security bypass. Unpatched—act now. CVSS N/A. Details: https://www.valtersit.com/cve/CVE-2026-80905/ Update kernel immediately. #CVE #Linux #i

##

CVE-2026-9317
(8.1 HIGH)

EPSS: 0.68%

updated 2026-09-04T18:31:46

1 posts

Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticated attackers to execute arbitrary JavaScript code by invoking the exposed start procedure without credentials. Attackers with network access to the runner port can send requests to the unauthenticated start procedure, bypassing the unenforced RUNNER_SECRET_KEY environment variable

hugovalters@mastodon.social at 2026-09-09T21:10:04.000Z ##

CVE-2026-9317: Nango <0.71.6 has a missing auth flaw in its runner tRPC server. Attackers can send requests to the unpatched start procedure, bypassing RUNNER_SECRET_KEY to trigger RCE. CVSS 8.1. Patch or isolate the runner port immediately. https://www.valtersit.com/cve/CVE-2026

##

CVE-2026-80874(CVSS UNKNOWN)

EPSS: 0.14%

updated 2026-09-04T18:31:40

1 posts

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: renesas: ironhide: Describe inline ECC carveouts The DBSC5 DRAM controller protects DRAM content using inline ECC. The inline ECC utilizes areas of DRAM for its operation, which are in the DRAM address range, but must not be accessed or modified. Describe the inline ECC carveout areas used by the DBSC5 controller on

hugovalters@mastodon.social at 2026-09-10T19:10:04.000Z ##

CVE-2026-80874: Linux kernel arm64 Renesas flaw—inline ECC carveouts not reserved, risking DRAM corruption via memory access. Unpatched. If you run affected kernels, isolate or patch ASAP. Details: https://www.valtersit.com/cve/CVE-2026-80874/ #CVE #Linux #infosec

##

CVE-2026-17255
(4.3 MEDIUM)

EPSS: 0.40%

updated 2026-09-04T18:31:40

1 posts

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements.

hugovalters@mastodon.social at 2026-09-10T17:30:01.000Z ##

CVE-2026-17255: DoS in IBM i (7.3-7.6) via malformed ICMPv6 Router Advertisements. Remote crash risk, CVSS 4.3. No patch confirmed. Review firewall rules & disable IPv6 if unused. Details: https://www.valtersit.com/cve/CVE-2026-17255/ #CVE #IBM #infosec

##

CVE-2026-80872(CVSS UNKNOWN)

EPSS: 0.15%

updated 2026-09-04T18:31:40

1 posts

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/tas2781: Cancel async firmware request at unbind TAS2781 HDA I2C and SPI queue RCA firmware loading from component bind with request_firmware_nowait(). The firmware loader keeps the callback module pinned and holds a device reference, but the callback still uses driver-private HDA state. Component unbind removes contr

hugovalters@mastodon.social at 2026-09-10T14:30:03.000Z ##

CVE-2026-80872: Linux kernel ALSA tas2781 driver risks use-after-free during unbind—async firmware callback can outlive private HDA state. Local impact, no CVSS yet. Patch status unknown, so audit & update when fix lands. Full details: https://www.valtersit.com/cve/CVE-2026-80872

##

CVE-2026-17440
(5.5 MEDIUM)

EPSS: 0.10%

updated 2026-09-04T18:31:40

1 posts

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to cause a denial of service due to uncontrolled recursion.

hugovalters@mastodon.social at 2026-09-10T09:40:01.000Z ##

CVE-2026-17440: IBM App Connect Enterprise & Integration Bus for z/OS affected by DoS via uncontrolled recursion. CVSS 5.5. Local attacker can crash services. No patch yet—monitor and limit local access. Details: https://www.valtersit.com/cve/CVE-2026-17440/ #CVE #IBM #cybersecur

##

CVE-2026-17057
(6.5 MEDIUM)

EPSS: 0.38%

updated 2026-09-04T18:31:40

1 posts

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to missing authentication for critical functions.

hugovalters@mastodon.social at 2026-09-10T06:40:01.000Z ##

CVE-2026-17057: IBM i (7.3-7.6) missing auth for critical functions. Remote DoS + data integrity risk. CVSS 6.5. No patch available—assume exposed. Lock down network access & monitor logs now. https://www.valtersit.com/cve/CVE-2026-17057/ #CVE #IBM #cybersecurity

##

CVE-2026-16660
(5.3 MEDIUM)

EPSS: 0.36%

updated 2026-09-04T18:31:39

1 posts

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.

hugovalters@mastodon.social at 2026-09-10T11:20:02.000Z ##

CVE-2026-16660: IBM Db2 Mirror for i (7.4-7.6) has an out-of-bounds read flaw. Remote attackers can trigger a DoS. CVSS 5.3. No patch yet. Details: https://www.valtersit.com/cve/CVE-2026-16660/ Monitor and harden access now. #CVE #IBM #infosec

##

CVE-2026-75754(CVSS UNKNOWN)

EPSS: 0.21%

updated 2026-09-04T03:31:07

1 posts

Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in with the hardcode credentials to obtain a root shell, enabling direct reading, writing, and deletion of

sekurakbot@mastodon.com.pl at 2026-09-09T10:26:00.000Z ##

RCE z uprawnieniami roota. Krytyczna podatność (CVSS 10.0) w ASUS Control Center Enterprise

Firma ASUS w najnowszym biuletynie bezpieczeństwa poinformowała o wykryciu krytycznej luki w popularnym oprogramowaniu ASUS Control Center Enterprise (ACC). Podatność oznaczona identyfikatorem CVE-2026-75754 otrzymała maksymalną ocenę 10.0 w skali CVSS 4.0. TLDR: Świadczy to o tym, że potencjalny atakujący może w łatwy sposób, całkowicie zdalnie oraz bez konieczności jakiejkolwiek interakcji...

#WBiegu #Asus #ControlCenter #Cve #Rce

https://sekurak.pl/rce-z-uprawnieniami-roota-krytyczna-podatnosc-cvss-10-0-w-asus-control-center-enterprise/

##

CVE-2026-20355
(5.9 MEDIUM)

EPSS: 0.15%

updated 2026-09-02T19:23:13.660000

1 posts

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of message integrity. An attacker could exploit these vulnerabilities by using a machine-in-the-middle tec

AAKL@infosec.exchange at 2026-09-08T16:42:45.000Z ##

New advisories from Cisco addressing two high and medium-severity vulnerabilities.

New: CVE-2026-20293: Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-uefi-sb-bypass-eb6xC5GW

Known: CVE-2026-20354 and CVE-2026-20355: Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities @TalosSecurity #infosec #vulnerability #Cisco

##

CVE-2026-20354
(5.9 MEDIUM)

EPSS: 0.15%

updated 2026-09-02T18:32:31

1 posts

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of message integrity. An attacker could exploit these vulnerabilities by using a machine-in-the-middle techn

AAKL@infosec.exchange at 2026-09-08T16:42:45.000Z ##

New advisories from Cisco addressing two high and medium-severity vulnerabilities.

New: CVE-2026-20293: Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-uefi-sb-bypass-eb6xC5GW

Known: CVE-2026-20354 and CVE-2026-20355: Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities @TalosSecurity #infosec #vulnerability #Cisco

##

CVE-2026-20212
(9.8 CRITICAL)

EPSS: 0.53%

updated 2026-09-02T18:32:26

1 posts

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and

1 repos

https://github.com/HORKimhab/CVE-2026-20212

sekurakbot@mastodon.com.pl at 2026-09-09T10:26:00.000Z ##

Krytyczna luka w przełącznikach Cisco Nexus 9000 [CVE-2026-20212]. RCE bez uwierzytelnienia i dostęp do roota

Firma Cisco opublikowała biuletyn bezpieczeństwa opisujący krytyczną lukę w przełącznikach Nexus serii 9000 opartych na układach Silicon One. Podatność została oznaczona jako CVE-2026-20212 i oceniona na 9.8 (Critical) w skali CVSS v3.1. Umożliwia nieuwierzytelnionemu użytkownikowi zdalne wykonanie kodu z uprawnieniami roota. Poprawki bezpieczeństwa są już dostępne, zalecamy niezwłoczną aktualizację oprogramowania. ...

#WBiegu #Cisco #Cve #Nexus #Rce #Switch

https://sekurak.pl/krytyczna-luka-w-przelacznikach-cisco-nexus-9000-cve-2026-20212-rce-bez-uwierzytelnienia-i-dostep-do-roota/

##

CVE-2026-83548
(10.0 CRITICAL)

EPSS: 4.67%

updated 2026-09-02T18:32:06

1 posts

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.

3 repos

https://github.com/HORKimhab/CVE-2026-83548-CVE-2026-83549

https://github.com/xcoy0te/CVE-2026-83548-checker

https://github.com/xoessie/CVE-2026-83548-SonicWall-SMA1000-Analysis

PC_Fluesterer@social.tchncs.de at 2026-09-10T11:55:45.000Z ##

SonicWall VPN-Router (Closed-Source) wird aktiv angegriffen

Appliances der SMA1000 Serie des amerikanischen Herstellers SonicWall stehen gerade unter Beschuss. Die Boxen sollen eigentlich für einen sicheren Fernzugang per VPN ins Intranet sorgen. Ja, es hätte so schön sein können. Die Angreifer verketten zwei unterschiedliche "Sicherheitslücken", um sich unbefugten Zugang in das Unternehmensnetzwerk dahinter zu verschaffen. Weshalb habe ich "Sicherheitslücken" in Anführungszeichen geschrieben? Weil es hier wieder mal streng riecht - nach Hintertür. Die erste Zero-day Schwachstelle CVE-2026-83548 (10 von 10) entsteht durch ... Weiterlesen:

https://www.pc-fluesterer.info/wordpress/2026/09/10/sonicwall-vpn-router-closed-source-wird-aktiv-angegriffen/

#0day #backdoor #cybercrime #exploits #firewall #hersteller #router #UnplugTrump #vorbeugen #wissen #zeroday

##

CVE-2026-81578
(9.8 CRITICAL)

EPSS: 1.62%

updated 2026-09-01T04:18:01.990000

4 posts

An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allows an unauthenticated remote attacker to modify certain system configurations.

2 repos

https://github.com/virologi-info/papercut-toolkit

https://github.com/yora1928/PaperCut-CVE-2026-81578-82078

cyberveille@mastobot.ping.moi at 2026-09-10T14:00:06.000Z ##

📢 Exploitation IA à grande échelle de PaperCut via CVE-2026-81578 et CVE-2026-82078

Cet article présente l'analyse technique d'une campagne d'exploitation active de serveurs PaperCut exposés sur Internet, utilisant les vulnérabilités CVE-2026-81578 et CVE-2026-82078.

📖 cyberveille : https://cyberveille.ch/posts/2026-09-10-exploitation-ia-a-grande-echelle-de-papercut-via-cve-2026-81578-et-cve-2026-82078/
🌐 source : https://blackpointcyber.com/blog/death-by-a-thousand-papercuts-ai-driven-exploitation-at-scale/
🟢 vérification factuelle haute
#PaperCut #AIAssistedExploitation #Cyberveille

##

AAKL@infosec.exchange at 2026-09-09T16:37:11.000Z ##

Which is to say, a real person directed this nonsense.

"On 31 August 2026, a likely Russian-speaking malicious cyber actor (MCA) used 45.142.193.132 and artificial intelligence (AI) to develop, test, and use exploits for PaperCut NG/MF (CVE-2026-81578 and CVE-2026-82078)."

GreyNoise: Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF https://www.greynoise.io/blog/ai-orchestrated-campaign-against-papercut-ng-mf @greynoise #infosec #cyberattack #bot

##

guru@thecybersecguru.com at 2026-09-09T15:35:45.000Z ##

The AI swarm that breached 440 PaperCut servers worldwide

GreyNoise uncovered an AI-driven PaperCut attack that compromised 440 servers across 395 organizations in 48 countries using CVE-2026-81578 and CVE-2026-82078

https://thecybersecguru.com/news/ai-swarm-papercut-attack-440-servers/

##

ssvc@infosec.exchange at 2026-09-09T13:54:30.000Z ##

GreyNoise: Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF

On 31 August 2026, a likely Russian-speaking malicious cyber actor (MCA) used 45.142.193.132 and artificial intelligence (AI) to develop, test, and use exploits for PaperCut NG/MF (CVE-2026-81578 and CVE-2026-82078).
https://www.greynoise.io/blog/ai-orchestrated-campaign-against-papercut-ng-mf

#papercut #CVE #threatintel #IOC

##

CVE-2026-82078
(9.1 CRITICAL)

EPSS: 1.69%

updated 2026-08-31T21:31:56

4 posts

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can manipulate system configuration parameters, this enables the execution of arbitrary Java bytecode residing on

2 repos

https://github.com/virologi-info/papercut-toolkit

https://github.com/yora1928/PaperCut-CVE-2026-81578-82078

cyberveille@mastobot.ping.moi at 2026-09-10T14:00:06.000Z ##

📢 Exploitation IA à grande échelle de PaperCut via CVE-2026-81578 et CVE-2026-82078

Cet article présente l'analyse technique d'une campagne d'exploitation active de serveurs PaperCut exposés sur Internet, utilisant les vulnérabilités CVE-2026-81578 et CVE-2026-82078.

📖 cyberveille : https://cyberveille.ch/posts/2026-09-10-exploitation-ia-a-grande-echelle-de-papercut-via-cve-2026-81578-et-cve-2026-82078/
🌐 source : https://blackpointcyber.com/blog/death-by-a-thousand-papercuts-ai-driven-exploitation-at-scale/
🟢 vérification factuelle haute
#PaperCut #AIAssistedExploitation #Cyberveille

##

AAKL@infosec.exchange at 2026-09-09T16:37:11.000Z ##

Which is to say, a real person directed this nonsense.

"On 31 August 2026, a likely Russian-speaking malicious cyber actor (MCA) used 45.142.193.132 and artificial intelligence (AI) to develop, test, and use exploits for PaperCut NG/MF (CVE-2026-81578 and CVE-2026-82078)."

GreyNoise: Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF https://www.greynoise.io/blog/ai-orchestrated-campaign-against-papercut-ng-mf @greynoise #infosec #cyberattack #bot

##

guru@thecybersecguru.com at 2026-09-09T15:35:45.000Z ##

The AI swarm that breached 440 PaperCut servers worldwide

GreyNoise uncovered an AI-driven PaperCut attack that compromised 440 servers across 395 organizations in 48 countries using CVE-2026-81578 and CVE-2026-82078

https://thecybersecguru.com/news/ai-swarm-papercut-attack-440-servers/

##

ssvc@infosec.exchange at 2026-09-09T13:54:30.000Z ##

GreyNoise: Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF

On 31 August 2026, a likely Russian-speaking malicious cyber actor (MCA) used 45.142.193.132 and artificial intelligence (AI) to develop, test, and use exploits for PaperCut NG/MF (CVE-2026-81578 and CVE-2026-82078).
https://www.greynoise.io/blog/ai-orchestrated-campaign-against-papercut-ng-mf

#papercut #CVE #threatintel #IOC

##

CVE-2026-77237
(6.5 MEDIUM)

EPSS: 0.13%

updated 2026-08-25T16:44:12.343000

2 posts

Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.

awssecurityfeed at 2026-09-09T21:45:01.951Z ##

Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237

Bulletin ID: 2026-086-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 10:30 AM PDT
Description:
FreeRTOS-Kernel is a real-time operating system kernel for microcontrollers and small micro...

https://aws.amazon.com/security/security-bulletins/rss/2026-086-aws/

https://aws.amazon.com/security/security-bulletins/rss/2026-086-aws/

##

awssecurityfeed@infosec.exchange at 2026-09-09T21:45:01.000Z ##

Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237

Bulletin ID: 2026-086-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 10:30 AM PDT
Description:
FreeRTOS-Kernel is a real-time operating system kernel for microcontrollers and small micro...

https://github.com/HORKimhab/CVE-2026-69836

##

CVE-2026-69836
(10.0 CRITICAL)

EPSS: 1.55%

updated 2026-08-25T16:08:43.290000

1 posts

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

2 repos

https://github.com/sentinel-aidefense/CVE-2026-69836-EXP

adulau@infosec.exchange at 2026-09-09T14:43:49.000Z ##

The @gcve BCP-07 KEV format has been updated to allow the Withdrawn and Reasserted KEV Assertions.

This allows to support case like CVE-2026-69836 .

🔗 https://gcve.eu/bcp/gcve-bcp-07/#withdrawn-and-reasserted-kev-assertions

#cve #gcve #kev #cybersecurity #vulnerabilitymanagement #vulnerability

##

CVE-2026-69414
(7.8 HIGH)

EPSS: 0.56%

updated 2026-08-19T18:32:28

6 posts

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.

2 repos

https://github.com/1neptune/ShieldBreak

https://github.com/HORKimhab/CVE-2026-50656

cyberworldops at 2026-09-10T18:50:00.635Z ##

Researcher Nightmare-Eclipse has released ShieldCrash, a PoC claiming to bypass Microsoft's fix for CVE-2026-69414, a privilege escalation flaw in Defender's Malware Protection Engine. Public exploit code may increase abuse; verify the patch blocks the technique and monitor for exploitation. #CyberSecurity #Vulnerability #ThreatIntel #MicrosoftDefender

https://cyberworldops.eu/en/shieldcrash-poc-claims-to-bypass-microsoft-s-fix-for-defender

##

offseq at 2026-09-10T07:30:25.020Z ##

CRITICAL: ShieldCrash zero-day (CVE-2026-69414) exploits Microsoft Defender on patched Windows (Sept 2026), enabling privilege escalation to System and SAM dumping. No patch yet. Monitor for Defender anomalies. https://radar.offseq.com/threat/new-shieldcrash-zero-day-exploit-targets-microsoft-defender-c4e918e12bdbcf86 #OffSeq #ZeroDay #MicrosoftDefender #Infosec

##

cyberworldops@infosec.exchange at 2026-09-10T18:50:00.000Z ##

Researcher Nightmare-Eclipse has released ShieldCrash, a PoC claiming to bypass Microsoft's fix for CVE-2026-69414, a privilege escalation flaw in Defender's Malware Protection Engine. Public exploit code may increase abuse; verify the patch blocks the technique and monitor for exploitation. #CyberSecurity #Vulnerability #ThreatIntel #MicrosoftDefender

https://cyberworldops.eu/en/shieldcrash-poc-claims-to-bypass-microsoft-s-fix-for-defender

##

offseq@infosec.exchange at 2026-09-10T07:30:25.000Z ##

CRITICAL: ShieldCrash zero-day (CVE-2026-69414) exploits Microsoft Defender on patched Windows (Sept 2026), enabling privilege escalation to System and SAM dumping. No patch yet. Monitor for Defender anomalies. https://radar.offseq.com/threat/new-shieldcrash-zero-day-exploit-targets-microsoft-defender-c4e918e12bdbcf86 #OffSeq #ZeroDay #MicrosoftDefender #Infosec

##

cyberworldops@infosec.exchange at 2026-09-09T12:50:00.000Z ##

Chaotic Eclipse released ShieldCrash PoC, described as a patch bypass for CVE-2026-69414 ShieldBreak in Microsoft Malware Protection Engine. If valid, Defender privilege escalation remains exploitable despite the official fix, requiring re-validation of mitigations. #ShieldBreak #MicrosoftDefender #PatchBypass

https://cyberworldops.eu/en/microsoft-defender-shieldcrash-poc-claims-to-bypass-the-shieldbreak

##

DailyCyberSecurity@infosec.exchange at 2026-09-09T00:35:56.000Z ##

A Windows Defender 0day has public PoC exploit code. ShieldCrash reads files as SYSTEM on all supported Windows versions.

#WindowsDefender #0day #CVE #ShieldCrash #CyberSecurity #Windows #PoC #Infosec

https://securityonline.info/windows-defender-0day-cve-2026-69414/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-68820
(7.0 HIGH)

EPSS: 6.18%

updated 2026-08-16T19:17:24.183000

1 posts

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

4 repos

https://github.com/ubitquity/Windows-WinSock-UAF-Mitigation

https://github.com/fevar54/CVE-2026-68820-Mitigation-PoC-

https://github.com/maxprog-svg/CVE-2026-68820_Mass_Exploit

https://github.com/HORKimhab/CVE-2026-68820

cyberworldops@infosec.exchange at 2026-09-09T10:30:00.000Z ##

Microsoft patched 398 vulnerabilities, 42 rated Critical. CVE-2026-68820 in afd.sys is actively exploited and added to CISA KEV, enabling local privilege escalation to SYSTEM. Prioritize Kernel and RCE flaws in this cycle. #PatchTuesday #WindowsSecurity #CisaKev

https://cyberworldops.eu/en/microsoft-fixes-398-vulnerabilities-as-exploited-windows-kernel-flaw

##

CVE-2026-19311
(8.1 HIGH)

EPSS: 0.41%

updated 2026-08-12T21:31:44

2 posts

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters.

awssecurityfeed at 2026-09-09T21:45:02.820Z ##

CVE-2026-19311- Missing Authorization in OpenSearch Alerting Plugin

Bulletin ID: 2026-078-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/12/2026 11:30 AM PDT
Description:
OpenSearch is a community-driven, open-source search and analytics suite. We identified CVE...

https://aws.amazon.com/security/security-bulletins/rss/2026-078-aws/

https://aws.amazon.com/security/security-bulletins/rss/2026-078-aws/

##

awssecurityfeed@infosec.exchange at 2026-09-09T21:45:02.000Z ##

CVE-2026-19311- Missing Authorization in OpenSearch Alerting Plugin

Bulletin ID: 2026-078-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/12/2026 11:30 AM PDT
Description:
OpenSearch is a community-driven, open-source search and analytics suite. We identified CVE...

https://github.com/machevalia/CVE-2025-14733

##

CVE-2025-14733
(9.8 CRITICAL)

EPSS: 26.51%

updated 2026-08-10T21:33:00

9 posts

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and

1 repos

security_crawler_carl at 2026-09-10T20:28:41.199Z ##

🏆 New Achievement! WatchGuard Out, Ransomware In!

Patch Notes v0.0.0 (Unplanned Release): REMOVED — the assumption that your perimeter firewall was keeping anyone out. ADDED — unauthenticated remote code execution via CVE-2025-14733, a critical out-of-bounds write in the Fireware OS iked process affecting versions 11.x, 12.x, and 2025.1 through 2025.1.3. KNOWN ISSUE — ransomware gangs are already shipping this feature to your network. (1/2)

##

undercodenews@mastodon.social at 2026-09-10T13:08:36.000Z ##

CISA Warns WatchGuard Firebox RCE Is Being Exploited by Ransomware Attackers + Video

A Critical Firewall Vulnerability Has Become a Real-World Threat A serious warning is emerging for organizations that rely on WatchGuard Firebox appliances to protect their networks. The vulnerability tracked as CVE-2025-14733 is a critical out-of-bounds write flaw in the Fireware OS iked process that can allow an unauthenticated remote attacker to execute arbitrary code. WatchGuard…

https://undercodenews.com/cisa-warns-watchguard-firebox-rce-is-being-exploited-by-ransomware-attackers-video/?utm_source=mastodon&utm_medium=jetpack_social

##

offseq at 2026-09-10T12:00:25.712Z ##

CVE-2025-14733: CRITICAL RCE in WatchGuard Firebox (Fireware OS 11.x+, 12.x+, 2025.1 – 2025.1.3) exploited by ransomware. Patch ASAP! Review VPN configs, monitor for IOCs. Details: https://radar.offseq.com/threat/cisa-watchguard-rce-flaw-now-exploited-in-ransomware-attacks-43ee9be28a996ee8 #OffSeq #WatchGuard #Ransomware #Infosec

##

cyberworldops at 2026-09-10T10:50:00.694Z ##

CISA confirmed CVE-2025-14733, a critical WatchGuard Firebox RCE, is being exploited in ransomware attacks. Edge firewalls are high-value targets because compromise enables network-wide access. Patch immediately and audit exposed interfaces for post-exploitation activity. #WatchGuard #Ransomware #CisaKev

https://cyberworldops.eu/en/cisa-confirms-watchguard-firebox-rce-is-being-used-in-ransomware

##

Analyst207@mastodon.social at 2026-09-10T09:37:59.000Z ##

Ransomware gangs exploit WatchGuard firewall flaw

Ransomware gangs are exploiting a critical vulnerability in WatchGuard Firebox firewalls, allowing them to execute malicious code remotely with ease. This flaw, known as CVE-2025-14733, affects various Fireware OS versions and could leave your network exposed to low-complexity attacks.

https://osintsights.com/ransomware-gangs-exploit-watchguard-firewall-flaw?utm_source=mastodon&utm_medium=social

#Ransomware #Watchguard #Cve202514733 #FirewareOs #Ikev2Vpn

##

security_crawler_carl@infosec.exchange at 2026-09-10T20:28:41.000Z ##

🏆 New Achievement! WatchGuard Out, Ransomware In!

Patch Notes v0.0.0 (Unplanned Release): REMOVED — the assumption that your perimeter firewall was keeping anyone out. ADDED — unauthenticated remote code execution via CVE-2025-14733, a critical out-of-bounds write in the Fireware OS iked process affecting versions 11.x, 12.x, and 2025.1 through 2025.1.3. KNOWN ISSUE — ransomware gangs are already shipping this feature to your network. (1/2)

##

offseq@infosec.exchange at 2026-09-10T12:00:25.000Z ##

CVE-2025-14733: CRITICAL RCE in WatchGuard Firebox (Fireware OS 11.x+, 12.x+, 2025.1 – 2025.1.3) exploited by ransomware. Patch ASAP! Review VPN configs, monitor for IOCs. Details: https://radar.offseq.com/threat/cisa-watchguard-rce-flaw-now-exploited-in-ransomware-attacks-43ee9be28a996ee8 #OffSeq #WatchGuard #Ransomware #Infosec

##

cyberworldops@infosec.exchange at 2026-09-10T10:50:00.000Z ##

CISA confirmed CVE-2025-14733, a critical WatchGuard Firebox RCE, is being exploited in ransomware attacks. Edge firewalls are high-value targets because compromise enables network-wide access. Patch immediately and audit exposed interfaces for post-exploitation activity. #WatchGuard #Ransomware #CisaKev

https://cyberworldops.eu/en/cisa-confirms-watchguard-firebox-rce-is-being-used-in-ransomware

##

kev_Stalker@infosec.exchange at 2026-09-09T11:19:35.000Z ##

CVE-2025-14733 - Changed to Known Ransomware Status

WatchGuard Firebox Out of Bounds Write VulnerabilityVendor: WatchGuardProduct: FireboxWatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a https://nvd.nist.gov/vuln/detail/CVE-2025-14733

##

CVE-2026-20316
(5.3 MEDIUM)

EPSS: 11.15%

updated 2026-08-01T05:16:55.973000

7 posts

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presence of static user credentials for a low-privileged account. An attacker could exploit this vu

cyberworldops at 2026-09-10T17:00:00.702Z ##

Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by Qilin ransomware, credential-theft actors, and Sandworm-linked groups. The auth bypass provides root command execution and the static credential exposure broadens initial access.

#CiscoFMC #ThreatIntelligence #VulnerabilityManagement #Qilin

https://cyberworldops.eu/en/cisco-fmc-zero-auth-flaws-exploited-by-qilin-ransomware-and-sandworm

##

undercodenews@mastodon.social at 2026-09-10T16:48:33.000Z ##

Cisco FMC Under Attack as Sandworm and Qilin Exploit Critical Vulnerabilities to Reach Protected Networks + Video

A New Warning for Enterprise Defenders Cisco Secure Firewall Management Center is facing a serious security crisis after Cisco Talos confirmed active exploitation of two vulnerabilities that can give attackers a foothold inside vulnerable environments. The flaws, tracked as CVE-2026-20079 and CVE-2026-20316, are being abused in real-world attacks involving…

https://undercodenews.com/cisco-fmc-under-attack-as-sandworm-and-qilin-exploit-critical-vulnerabilities-to-reach-protected-networks-video/?utm_source=mastodon&utm_medium=jetpack_social

##

beyondmachines1 at 2026-09-10T10:01:13.581Z ##

Cisco Secure Firewall Management Center Under Active Attack

Cisco Talos warns of active exploitation of two vulnerabilities (CVE-2026-20079 and CVE-2026-20316) in Secure Firewall Management Center, allowing attackers to gain root access and deploy malware like Cyclops Blink and Qilin ransomware.

**If you run Cisco Secure Firewall Management Center (versions 7.0.x, 7.1.x, or 7.2–7.7), apply Cisco's emergency patches for CVE-2026-20079 and CVE-2026-20316 right away. Make sure the management interface is reachable only from trusted internal networks, never the internet. Because these flaws are already being exploited, also check for unexpected files in /var/sf/bin/ and the Tomcat webroot. Then plan to install Cisco's hardening update due to be released in the week of September 14.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisco-secure-firewall-management-center-under-active-attack-3-p-v-c-6/gD2P6Ple2L

##

cyberworldops@infosec.exchange at 2026-09-10T17:00:00.000Z ##

Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by Qilin ransomware, credential-theft actors, and Sandworm-linked groups. The auth bypass provides root command execution and the static credential exposure broadens initial access.

#CiscoFMC #ThreatIntelligence #VulnerabilityManagement #Qilin

https://cyberworldops.eu/en/cisco-fmc-zero-auth-flaws-exploited-by-qilin-ransomware-and-sandworm

##

beyondmachines1@infosec.exchange at 2026-09-10T10:01:13.000Z ##

Cisco Secure Firewall Management Center Under Active Attack

Cisco Talos warns of active exploitation of two vulnerabilities (CVE-2026-20079 and CVE-2026-20316) in Secure Firewall Management Center, allowing attackers to gain root access and deploy malware like Cyclops Blink and Qilin ransomware.

**If you run Cisco Secure Firewall Management Center (versions 7.0.x, 7.1.x, or 7.2–7.7), apply Cisco's emergency patches for CVE-2026-20079 and CVE-2026-20316 right away. Make sure the management interface is reachable only from trusted internal networks, never the internet. Because these flaws are already being exploited, also check for unexpected files in /var/sf/bin/ and the Tomcat webroot. Then plan to install Cisco's hardening update due to be released in the week of September 14.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisco-secure-firewall-management-center-under-active-attack-3-p-v-c-6/gD2P6Ple2L

##

ssvc@infosec.exchange at 2026-09-09T21:01:44.000Z ##

Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco’s Secure Firewall Management Center (FMC) Software. First, CVE-2026-20079 is an authentication bypass vulnerability in unpatched instances of Cisco’s Secure FMC Software, which allows an unauthenticated, remote attacker to bypass authentications and execute scripts on impacted devices to obtain root access to the underlying operating system. Second, CVE-2026-20316 is a vulnerability that allows a remote attacker to log in using a low-privileged account.

https://blog.talosintelligence.com/fmc-ongoing-exploitation/

#threatintel #ransomware #Qilin #KEV #CVE

##

DailyCyberSecurity@infosec.exchange at 2026-09-09T16:28:31.000Z ##

Cisco Talos warns of Cisco FMC vulnerabilities actively exploited in the wild. Attackers chain CVE-2026-20079 and CVE-2026-20316 to deploy ransomware.

#CiscoFMC #Cybersecurity #CVE202620079 #Ransomware #InfoSec

https://securityonline.info/cisco-fmc-vulnerabilities-exploited/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-15409
(10.0 CRITICAL)

EPSS: 83.66%

updated 2026-07-14T21:32:22

2 posts

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.

6 repos

https://github.com/Ch4120N/CVE-2026-15409

https://github.com/tc4dy/CVE-2026-15409-15410-Framework

https://github.com/HORKimhab/CVE-2026-15409

https://github.com/MrRawBit/SonicWall-SMA1000-Zero-Day-IoC-Check

https://github.com/remmons-r7/rapid7-CVE-2026-15409

https://github.com/0xBlackash/CVE-2026-15409

_r_netsec at 2026-09-10T17:58:04.748Z ##

🕵️‍♂️ SonicWall SMA1000 (CVE-2026-15409): SSRF to Erlang RCE chained into automated DCSync from the appliance https://hunt.io/blog/sonicwall-sma1000-uk-council-attack

##

_r_netsec@infosec.exchange at 2026-09-10T17:58:04.000Z ##

🕵️‍♂️ SonicWall SMA1000 (CVE-2026-15409): SSRF to Erlang RCE chained into automated DCSync from the appliance https://hunt.io/blog/sonicwall-sma1000-uk-council-attack

##

CVE-2026-52774
(6.1 MEDIUM)

EPSS: 0.51%

updated 2026-07-09T21:01:12

1 posts

### Summary YesWiki's Bazar widget handler reflects the `id` `GET` parameter into HTML attributes using `strip_tags()` only. Because `strip_tags()` does not escape double quotes, an attacker can break out of the attribute value, inject an event handler such as `onmouseover`, and execute arbitrary JavaScript in the victim's browser. This issue is reachable without authentication. During validation

1 repos

https://github.com/0xTerror/CVE-2026-52774-YESWIKI-XSS

hugovalters@mastodon.social at 2026-09-10T05:00:36.000Z ##

CVE-2026-52774: YesWiki < 4.6.6 has a stored XSS via the Bazar widget's id parameter, exploitable without auth. CVSS 6.1. No patch confirmed. Update immediately or restrict access. Details: https://www.valtersit.com/cve/CVE-2026-52774/ #CVE #infosec #YesWiki

##

CVE-2026-11387
(9.8 CRITICAL)

EPSS: 2.21%

updated 2026-07-01T09:30:33

2 posts

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updating their details like reset the password of any user account, including administrators, and gain full a

2 repos

https://github.com/1beelze/CVE-2026-11387

https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP

DarkWebInformer at 2026-09-10T20:20:41.274Z ##

‼️ CVE-2026-11387: A critical improper-authentication flaw in the WordPress plugin SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery.

GitHub: https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP

##

DarkWebInformer@infosec.exchange at 2026-09-10T20:20:41.000Z ##

‼️ CVE-2026-11387: A critical improper-authentication flaw in the WordPress plugin SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery.

GitHub: https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP

##

CVE-2026-43502
(7.8 HIGH)

EPSS: 0.12%

updated 2026-06-01T18:31:32

2 posts

In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the message is queued A zerocopy send can fail after user pages have been pinned but before the message is attached to the sending socket. The purge path currently infers zerocopy state from rm->m_rs, so an unqueued message can be cleaned up as if it owned normal payload pages. Howev

1 repos

https://github.com/suominen/pintheft

bearstech@mamot.fr at 2026-09-10T09:14:32.000Z ##

ZcopyReaper (CVE-2026-43502) nous avons déployé cette nuit les mesures de contournement.

Toutes nos VM ont été redémarrées en moins d’une heure.

👉 En savoir plus sur nos offres d'infogérance : https://bearstech.com/contact

Merci à @Octopuce et @evolix pour votre collaboration sur ce sujet.

##

bearstech@mamot.fr at 2026-09-10T09:14:32.000Z ##

ZcopyReaper (CVE-2026-43502) nous avons déployé cette nuit les mesures de contournement.

Toutes nos VM ont été redémarrées en moins d’une heure.

👉 En savoir plus sur nos offres d'infogérance : https://bearstech.com/contact

Merci à @Octopuce et @evolix pour votre collaboration sur ce sujet.

##

CVE-2026-8510
(7.5 HIGH)

EPSS: 0.21%

updated 2026-05-15T00:31:36

1 posts

Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

daniel1820815@infosec.exchange at 2026-09-09T20:10:44.000Z ##

[Action Required] - Critical Security Advisory: VPN Vulnerabilities CVE-2026-85102 and CVE-2026-8510

Check Point research team has identified and remediated two critical VPN-related vulnerabilities, CVE-2026-85102 and CVE-2026-85103, which could potentially allow unauthenticated remote code execution under specific conditions. These issues were discovered internally, and we have no indication of active exploitation.

https://community.checkpoint.com/t5/General-Topics/Action-Required-Critical-Security-Advisory-VPN-Vulnerabilities/m-p/281995#M46881

#CheckPoint #CheckPointSoftwareTechnologies #VPN #vulnerability

##

CVE-2026-33671
(7.5 HIGH)

EPSS: 0.40%

updated 2026-03-27T21:36:14

2 posts

### Impact `picomatch` is vulnerable to Regular Expression Denial of Service (ReDoS) when processing crafted extglob patterns. Certain patterns using extglob quantifiers such as `+()` and `*()`, especially when combined with overlapping alternatives or nested extglobs, are compiled into regular expressions that can exhibit catastrophic backtracking on non-matching input. Examples of problematic p

1 repos

https://github.com/BeLazy167/next-picomatch-cve-repro

certvde at 2026-09-10T07:33:05.830Z ##

🔄 CSAF advisory updated (version 2.0.0)

VDE-2026-088
METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)

Changes: corrected version

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

certvde@infosec.exchange at 2026-09-10T07:33:05.000Z ##

🔄 CSAF advisory updated (version 2.0.0)

VDE-2026-088
METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)

Changes: corrected version

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

https://github.com/JohannesLks/CVE-2026-33186

##

CVE-2026-33186
(9.1 CRITICAL)

EPSS: 1.56%

updated 2026-03-25T18:12:09

2 posts

### Impact _What kind of vulnerability is it? Who is impacted?_ It is an **Authorization Bypass** resulting from **Improper Input Validation** of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully rou

1 repos

certvde at 2026-09-10T07:33:05.830Z ##

🔄 CSAF advisory updated (version 2.0.0)

VDE-2026-088
METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)

Changes: corrected version

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

certvde@infosec.exchange at 2026-09-10T07:33:05.000Z ##

🔄 CSAF advisory updated (version 2.0.0)

VDE-2026-088
METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)

Changes: corrected version

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

https://github.com/Terra-Nova83/CVE-2026-0915-json-Patch.-V2.0

##

CVE-2026-0915
(7.5 HIGH)

EPSS: 0.59%

updated 2026-01-20T18:31:56

2 posts

Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.

1 repos

certvde at 2026-09-10T07:33:05.830Z ##

🔄 CSAF advisory updated (version 2.0.0)

VDE-2026-088
METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)

Changes: corrected version

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

certvde@infosec.exchange at 2026-09-10T07:33:05.000Z ##

🔄 CSAF advisory updated (version 2.0.0)

VDE-2026-088
METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671, CVE-2026-0915 (+60 more)

Changes: corrected version

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

https://github.com/Sheisback/CVE-2019-0859-1day-Exploit

##

CVE-2019-0859
(7.8 HIGH)

EPSS: 4.15%

updated 2025-10-22T00:32:43

2 posts

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.

1 repos

kev_Stalker at 2026-09-10T11:20:16.857Z ##

CVE-2019-0859 - Changed to Known Ransomware Status

Microsoft Win32k Privilege Escalation VulnerabilityVendor: MicrosoftProduct: Win32kMicrosoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: September 09, 2026 at 14:08:17 UTCDate Added to KEV: 2021-11-03View https://nvd.nist.gov/vuln/detail/CVE-2019-0859

##

kev_Stalker@infosec.exchange at 2026-09-10T11:20:16.000Z ##

CVE-2019-0859 - Changed to Known Ransomware Status

Microsoft Win32k Privilege Escalation VulnerabilityVendor: MicrosoftProduct: Win32kMicrosoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: September 09, 2026 at 14:08:17 UTCDate Added to KEV: 2021-11-03View https://nvd.nist.gov/vuln/detail/CVE-2019-0859

##

CVE-2022-41352
(9.8 CRITICAL)

EPSS: 95.48%

updated 2025-10-22T00:32:37

2 posts

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavisd via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red H

4 repos

https://github.com/dafrax/cve-2022-41352-zimbra-rce

https://github.com/segfault-it/cve-2022-41352

https://github.com/rxerium/CVE-2022-41352

https://github.com/Cr4ckC4t/cve-2022-41352-zimbra-rce

kev_Stalker at 2026-09-10T11:25:19.656Z ##

CVE-2022-41352 - Changed to Known Ransomware Status

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityVendor: SynacorProduct: Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: September 09, 2026 https://nvd.nist.gov/vuln/detail/CVE-2022-41352

##

kev_Stalker@infosec.exchange at 2026-09-10T11:25:19.000Z ##

CVE-2022-41352 - Changed to Known Ransomware Status

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityVendor: SynacorProduct: Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: September 09, 2026 https://nvd.nist.gov/vuln/detail/CVE-2022-41352

##

CVE-2025-2524
(4.8 MEDIUM)

EPSS: 0.30%

updated 2025-06-17T21:31:59

1 posts

The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

threatcodex@infosec.exchange at 2026-09-08T17:20:17.000Z ##

CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT
#CVE_2025_25249 #PivotC2
https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/

##

CVE-2026-89049
(0 None)

EPSS: 0.00%

4 posts

N/A

thehackerwire@mastodon.social at 2026-09-10T21:00:17.000Z ##

🔴 CVE-2026-89049 - Critical (9.9)

A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent (SSM Agent) before 3.3.4851.0 on all platforms might allo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89049/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

awssecurityfeed at 2026-09-10T19:00:01.199Z ##

CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

Bulletin ID: 2026-107-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/10/2026 11:30 AM PDT
Description:
AWS Systems Manager Agent (SSM Agent) is software that runs on managed nodes (EC2 instances...

https://aws.amazon.com/security/security-bulletins/rss/2026-107-aws/

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89049/

##

thehackerwire@mastodon.social at 2026-09-10T21:00:17.000Z ##

🔴 CVE-2026-89049 - Critical (9.9)

A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent (SSM Agent) before 3.3.4851.0 on all platforms might allo...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

awssecurityfeed@infosec.exchange at 2026-09-10T19:00:01.000Z ##

CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

Bulletin ID: 2026-107-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/10/2026 11:30 AM PDT
Description:
AWS Systems Manager Agent (SSM Agent) is software that runs on managed nodes (EC2 instances...

https://aws.amazon.com/security/security-bulletins/rss/2026-107-aws/

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88052/

##

CVE-2026-88052
(0 None)

EPSS: 0.00%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-10T19:00:53.000Z ##

🟠 CVE-2026-88052 - High (7.8)

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unichar_ins...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-10T19:00:53.000Z ##

🟠 CVE-2026-88052 - High (7.8)

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars vector. unichar_ins...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-72898
(0 None)

EPSS: 94.22%

2 posts

N/A

8 repos

https://github.com/EQSTLab/CVE-2026-72898

https://github.com/0xBlackash/CVE-2026-72898

https://github.com/ubitquity/Metabase-Setup-Endpoint-SQLi-Fix

https://github.com/4minx/CVE-2026-72898

https://github.com/VuxNx/CVE-2026-72898

https://github.com/d-maggipinto/CVE-2026-72898-metabase-sqli

https://github.com/Franc-Zar/CVE-2026-72898-safe-detection

https://github.com/codeb0ssx/CVE-2026-72898-PoC

cert_fr@social.numerique.gouv.fr at 2026-09-10T16:04:24.000Z ##

⚠️Alerte CERT-FR⚠️

Le CERT-FR a connaissance de nombreuses compromissions de Metabase vulnérables à l'injection SQL CVE-2026-72898.

https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-010/

##

cert_fr@social.numerique.gouv.fr at 2026-09-10T16:04:24.000Z ##

⚠️Alerte CERT-FR⚠️

Le CERT-FR a connaissance de nombreuses compromissions de Metabase vulnérables à l'injection SQL CVE-2026-72898.

https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-010/

##

CVE-2026-73453
(0 None)

EPSS: 0.00%

1 posts

N/A

sayzard@mastodon.sayzard.org at 2026-09-10T11:42:38.000Z ##

Arista Networks Arbitrary RCE Vulnerability

Arista EOS에서 P4Runtime가 활성화된 특정 구성에 대해 인증 없이 원격 코드 실행이 가능한 CVE-2026-73453이 공개됐다. 공격자는 P4Runtime 세션 초기화 과정의 악성 패킷으로 스위치의 완전한 관리자 권한을 획득할 수 있으며, CVSS v3.1 점수는 10.0이다. 다만 P4Runtime는 기본적으로 비활성화되어 있으므로, 운영자는 `show p4-runtime`으로 노출 여부를 우선 점검해야 한다. 영향받는 환경은 mTLS와 gNSI Authz를 적용하고, EOS 4.36.2F·4.35.6M·4...

https://www.arista.com/en/support/advisories-notices/security-advisory/24730-security-advisory-0174

##

CVE-2026-84388
(0 None)

EPSS: 0.00%

2 posts

N/A

beyondmachines1 at 2026-09-10T09:01:13.421Z ##

Fortinet Patches Critical Authentication Bypass and Proxy Flaws Across Product Line

Fortinet patched 10 vulnerabilities, including two critical flaws (CVE-2026-84390 and CVE-2026-84388) that allow unauthenticated attackers to bypass authentication in FortiMonitorOnSight and proxy browser traffic via a Chrome extension.

**If you use Fortinet products, patch ASAP. Prioritise FortiMonitorOnSight and the Privileged Access Agent Chrome extension, then review everything else and update to the latest stable versions such as FortiOS and FortiProxy 7.6.7. After patching, check your logs for reused or forged JWTs and any unusual traffic from admin machines.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/fortinet-patches-critical-authentication-bypass-and-proxy-flaws-across-product-line-t-c-t-4-1/gD2P6Ple2L

##

beyondmachines1@infosec.exchange at 2026-09-10T09:01:13.000Z ##

Fortinet Patches Critical Authentication Bypass and Proxy Flaws Across Product Line

Fortinet patched 10 vulnerabilities, including two critical flaws (CVE-2026-84390 and CVE-2026-84388) that allow unauthenticated attackers to bypass authentication in FortiMonitorOnSight and proxy browser traffic via a Chrome extension.

**If you use Fortinet products, patch ASAP. Prioritise FortiMonitorOnSight and the Privileged Access Agent Chrome extension, then review everything else and update to the latest stable versions such as FortiOS and FortiProxy 7.6.7. After patching, check your logs for reused or forged JWTs and any unusual traffic from admin machines.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/fortinet-patches-critical-authentication-bypass-and-proxy-flaws-across-product-line-t-c-t-4-1/gD2P6Ple2L

##

CVE-2026-84390
(0 None)

EPSS: 0.00%

3 posts

N/A

beyondmachines1 at 2026-09-10T09:01:13.421Z ##

Fortinet Patches Critical Authentication Bypass and Proxy Flaws Across Product Line

Fortinet patched 10 vulnerabilities, including two critical flaws (CVE-2026-84390 and CVE-2026-84388) that allow unauthenticated attackers to bypass authentication in FortiMonitorOnSight and proxy browser traffic via a Chrome extension.

**If you use Fortinet products, patch ASAP. Prioritise FortiMonitorOnSight and the Privileged Access Agent Chrome extension, then review everything else and update to the latest stable versions such as FortiOS and FortiProxy 7.6.7. After patching, check your logs for reused or forged JWTs and any unusual traffic from admin machines.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/fortinet-patches-critical-authentication-bypass-and-proxy-flaws-across-product-line-t-c-t-4-1/gD2P6Ple2L

##

beyondmachines1@infosec.exchange at 2026-09-10T09:01:13.000Z ##

Fortinet Patches Critical Authentication Bypass and Proxy Flaws Across Product Line

Fortinet patched 10 vulnerabilities, including two critical flaws (CVE-2026-84390 and CVE-2026-84388) that allow unauthenticated attackers to bypass authentication in FortiMonitorOnSight and proxy browser traffic via a Chrome extension.

**If you use Fortinet products, patch ASAP. Prioritise FortiMonitorOnSight and the Privileged Access Agent Chrome extension, then review everything else and update to the latest stable versions such as FortiOS and FortiProxy 7.6.7. After patching, check your logs for reused or forged JWTs and any unusual traffic from admin machines.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/fortinet-patches-critical-authentication-bypass-and-proxy-flaws-across-product-line-t-c-t-4-1/gD2P6Ple2L

##

DailyCyberSecurity@infosec.exchange at 2026-09-08T17:27:14.000Z ##

Fortinet fixed three critical Fortinet vulnerabilities. Attackers can exploit CVE-2026-84390 and CVE-2026-26084 to access corporate data.

#Fortinet #Vulnerabilities #Cybersecurity #InfoSec #PatchManagement

https://securityonline.info/fortinet-vulnerabilities-patch/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-87911
(0 None)

EPSS: 0.99%

3 posts

N/A

offseq at 2026-09-10T06:00:25.092Z ##

CVE-2026-87911 (CVSS 9.6): CRITICAL OS command injection in AWS Labs postgres MCP Server (<1.1.7). Unauthenticated attackers can execute OS commands via crafted SQL. Upgrade to 1.1.7+ ASAP. https://radar.offseq.com/threat/cve-2026-87911-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-5896283731c57124 #OffSeq #AWS #PostgreSQL #Vuln

##

offseq@infosec.exchange at 2026-09-10T06:00:25.000Z ##

CVE-2026-87911 (CVSS 9.6): CRITICAL OS command injection in AWS Labs postgres MCP Server (<1.1.7). Unauthenticated attackers can execute OS commands via crafted SQL. Upgrade to 1.1.7+ ASAP. https://radar.offseq.com/threat/cve-2026-87911-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-5896283731c57124 #OffSeq #AWS #PostgreSQL #Vuln

##

thehackerwire@mastodon.social at 2026-09-09T21:00:50.000Z ##

🔴 CVE-2026-87911 - Critical (9.6)

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-manage...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87911/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-85786
(0 None)

EPSS: 0.33%

1 posts

N/A

hugovalters@mastodon.social at 2026-09-10T02:40:38.000Z ##

CVE-2026-85786: DoS via crafted compressed Ion data in Amazon ion-java <1.12.1. Expansion bomb bypasses GZIP opt-out (CVE-2026-75936). CVSS 7.5. Update to 1.12.1 now. https://www.valtersit.com/cve/CVE-2026-85786/ #CVE #infosec #AWS

##

CVE-2026-75936
(0 None)

EPSS: 0.44%

1 posts

N/A

hugovalters@mastodon.social at 2026-09-10T02:40:38.000Z ##

CVE-2026-85786: DoS via crafted compressed Ion data in Amazon ion-java <1.12.1. Expansion bomb bypasses GZIP opt-out (CVE-2026-75936). CVSS 7.5. Update to 1.12.1 now. https://www.valtersit.com/cve/CVE-2026-85786/ #CVE #infosec #AWS

##

CVE-2026-77234
(0 None)

EPSS: 0.12%

2 posts

N/A

awssecurityfeed at 2026-09-09T21:45:01.951Z ##

Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237

Bulletin ID: 2026-086-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 10:30 AM PDT
Description:
FreeRTOS-Kernel is a real-time operating system kernel for microcontrollers and small micro...

https://aws.amazon.com/security/security-bulletins/rss/2026-086-aws/

https://aws.amazon.com/security/security-bulletins/rss/2026-086-aws/

##

awssecurityfeed@infosec.exchange at 2026-09-09T21:45:01.000Z ##

Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237

Bulletin ID: 2026-086-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 10:30 AM PDT
Description:
FreeRTOS-Kernel is a real-time operating system kernel for microcontrollers and small micro...

https://aws.amazon.com/security/security-bulletins/rss/2026-086-aws/

##

CVE-2026-77236
(0 None)

EPSS: 0.11%

2 posts

N/A

awssecurityfeed at 2026-09-09T21:45:01.951Z ##

Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237

Bulletin ID: 2026-086-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 10:30 AM PDT
Description:
FreeRTOS-Kernel is a real-time operating system kernel for microcontrollers and small micro...

https://aws.amazon.com/security/security-bulletins/rss/2026-086-aws/

##

awssecurityfeed@infosec.exchange at 2026-09-09T21:45:01.000Z ##

Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237

Bulletin ID: 2026-086-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 10:30 AM PDT
Description:
FreeRTOS-Kernel is a real-time operating system kernel for microcontrollers and small micro...

https://aws.amazon.com/security/security-bulletins/rss/2026-086-aws/

##

CVE-2026-77235
(0 None)

EPSS: 0.11%

2 posts

N/A

awssecurityfeed at 2026-09-09T21:45:01.951Z ##

Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237

Bulletin ID: 2026-086-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 10:30 AM PDT
Description:
FreeRTOS-Kernel is a real-time operating system kernel for microcontrollers and small micro...

https://aws.amazon.com/security/security-bulletins/rss/2026-086-aws/

##

awssecurityfeed@infosec.exchange at 2026-09-09T21:45:01.000Z ##

Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237

Bulletin ID: 2026-086-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 10:30 AM PDT
Description:
FreeRTOS-Kernel is a real-time operating system kernel for microcontrollers and small micro...