🔴 CVE-2026-24304 - Critical (9.9)

Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24304/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24304 - Critical (9.9)

Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24304/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24304 - Critical (9.9)

Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24304/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24304 - Critical (9.9)

Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24304/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24138 - High (7.5)

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1754 and below contain an unauthenticated SSRF vulnerability in getversion.php which can be triggered by providing a user-controlled url parameter....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24138/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24138 - High (7.5)

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1754 and below contain an unauthenticated SSRF vulnerability in getversion.php which can be triggered by providing a user-controlled url parameter....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24138/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24306 - Critical (9.8)

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24306/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24306 - Critical (9.8)

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24306/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24306 - Critical (9.8)

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24306/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24306 - Critical (9.8)

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24306/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24305 - Critical (9.3)

Azure Entra ID Elevation of Privilege Vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24305/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24305 - Critical (9.3)

Azure Entra ID Elevation of Privilege Vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24305/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-54816 - Critical (9.4)

This vulnerability occurs when a WebSocket endpoint does not enforce
proper authentication mechanisms, allowing unauthorized users to
establish connections. As a result, attackers can exploit this weakness
to gain unauthorized access to sensiti...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-54816/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-54816 - Critical (9.4)

This vulnerability occurs when a WebSocket endpoint does not enforce
proper authentication mechanisms, allowing unauthorized users to
establish connections. As a result, attackers can exploit this weakness
to gain unauthorized access to sensiti...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-54816/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24307 - Critical (9.3)

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24307/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24307 - Critical (9.3)

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24307/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21520 - High (7.5)

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21520/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21520 - High (7.5)

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21520/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21520 - High (7.5)

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21520/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21520 - High (7.5)

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21520/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-21264 - Critical (9.3)

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21264/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-21264 - Critical (9.3)

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21264/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-21264 - Critical (9.3)

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21264/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-21264 - Critical (9.3)

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21264/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21227 - High (8.2)

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21227/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21227 - High (8.2)

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21227/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21227 - High (8.2)

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21227/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21227 - High (8.2)

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21227/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-53968 - High (7.5)

This vulnerability arises because there are no limitations on the number
of authentication attempts a user can make. An attacker can exploit
this weakness by continuously sending authentication requests, leading
to a denial-of-service (DoS) con...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-53968/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-53968 - High (7.5)

This vulnerability arises because there are no limitations on the number
of authentication attempts a user can make. An attacker can exploit
this weakness by continuously sending authentication requests, leading
to a denial-of-service (DoS) con...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-53968/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-53968 - High (7.5)

This vulnerability arises because there are no limitations on the number
of authentication attempts a user can make. An attacker can exploit
this weakness by continuously sending authentication requests, leading
to a denial-of-service (DoS) con...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-53968/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-53968 - High (7.5)

This vulnerability arises because there are no limitations on the number
of authentication attempts a user can make. An attacker can exploit
this weakness by continuously sending authentication requests, leading
to a denial-of-service (DoS) con...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-53968/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 [CISA-2026:0122] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0122)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-31125 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-31125)
- Name: Vite Vitejs Improper Access Control Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Vite
- Product: Vitejs
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/vitejs/vite/commit/59673137c45ac2bcfad1170d954347c1a17ab949 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31125

⚠️ CVE-2025-34026 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-34026)
- Name: Versa Concerto Improper Authentication Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Versa
- Product: Concerto
- Notes: https://security-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2e ; https://nvd.nist.gov/vuln/detail/CVE-2025-34026

⚠️ CVE-2025-54313 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-54313)
- Name: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Prettier
- Product: eslint-config-prettier
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.npmjs.com/package/eslint-config-prettier?activeTab=versions ; https://github.com/prettier/eslint-config-prettier/issues/339#issuecomment-3090304490 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54313

⚠️ CVE-2025-68645 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-68645)
- Name: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Synacor
- Product: Zimbra Collaboration Suite (ZCS)
- Notes: https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2025-68645

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260122 #cisa20260122 #cve_2025_31125 #cve_2025_34026 #cve_2025_54313 #cve_2025_68645 #cve202531125 #cve202534026 #cve202554313 #cve202568645

CVE ID: CVE-2025-31125
Vendor: Vite
Product: Vitejs
Date Added: 2026-01-22
Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/vitejs/vite/commit/59673137c45ac2bcfad1170d954347c1a17ab949 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31125
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-31125

More updates from CISA:

- CVE-2025-54313: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-54313

- CVE-2025-31125: Vite Vitejs Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-31125

- CVE-2025-34026: Versa Concerto Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-34026

- CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-68645

And several industrial advisories are listed here: https://www.cisa.gov/ #CISA #infoec #vulnerability

CVE ID: CVE-2025-31125
Vendor: Vite
Product: Vitejs
Date Added: 2026-01-22
Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/vitejs/vite/commit/59673137c45ac2bcfad1170d954347c1a17ab949 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31125
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-31125

More updates from CISA:

- CVE-2025-54313: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-54313

- CVE-2025-31125: Vite Vitejs Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-31125

- CVE-2025-34026: Versa Concerto Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-34026

- CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-68645

And several industrial advisories are listed here: https://www.cisa.gov/ #CISA #infoec #vulnerability

🚨 [CISA-2026:0122] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0122)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-31125 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-31125)
- Name: Vite Vitejs Improper Access Control Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Vite
- Product: Vitejs
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/vitejs/vite/commit/59673137c45ac2bcfad1170d954347c1a17ab949 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31125

⚠️ CVE-2025-34026 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-34026)
- Name: Versa Concerto Improper Authentication Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Versa
- Product: Concerto
- Notes: https://security-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2e ; https://nvd.nist.gov/vuln/detail/CVE-2025-34026

⚠️ CVE-2025-54313 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-54313)
- Name: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Prettier
- Product: eslint-config-prettier
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.npmjs.com/package/eslint-config-prettier?activeTab=versions ; https://github.com/prettier/eslint-config-prettier/issues/339#issuecomment-3090304490 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54313

⚠️ CVE-2025-68645 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-68645)
- Name: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Synacor
- Product: Zimbra Collaboration Suite (ZCS)
- Notes: https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2025-68645

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260122 #cisa20260122 #cve_2025_31125 #cve_2025_34026 #cve_2025_54313 #cve_2025_68645 #cve202531125 #cve202534026 #cve202554313 #cve202568645

CVE ID: CVE-2025-34026
Vendor: Versa
Product: Concerto
Date Added: 2026-01-22
Notes: https://security-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2e ; https://nvd.nist.gov/vuln/detail/CVE-2025-34026
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-34026

More updates from CISA:

- CVE-2025-54313: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-54313

- CVE-2025-31125: Vite Vitejs Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-31125

- CVE-2025-34026: Versa Concerto Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-34026

- CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-68645

And several industrial advisories are listed here: https://www.cisa.gov/ #CISA #infoec #vulnerability

CVE ID: CVE-2025-34026
Vendor: Versa
Product: Concerto
Date Added: 2026-01-22
Notes: https://security-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2e ; https://nvd.nist.gov/vuln/detail/CVE-2025-34026
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-34026

More updates from CISA:

- CVE-2025-54313: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-54313

- CVE-2025-31125: Vite Vitejs Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-31125

- CVE-2025-34026: Versa Concerto Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-34026

- CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-68645

And several industrial advisories are listed here: https://www.cisa.gov/ #CISA #infoec #vulnerability

Trollolol, telnetd lets you log in without a password if you send the USER environment variable as "-f root" (which gets passed unsanitized to login(1)).

(Yes, yes, telnet, but still. :-)

https://www.openwall.com/lists/oss-security/2026/01/20/2

CVE-2026-24061

There is a critical auth bypass vulnerability in telnetd (https://nvd.nist.gov/vuln/detail/CVE-2026-24061) so I will need to update the surl-server Apple II proxy image. It has telnetd enabled (on localhost only, so is only accessible via the Apple II's serial port and you're probably already root on it)

We caught a few (desperate) fiends trying to have their way with our vulnerable-to Telnetd -f Auth Bypass vuln (CVE-2026-24061) systems and I took a spelunk in the PCAPs:

Some of the least clever and least capable actors I've seen in a while.

"-f Around and Find Out: 18 Hours of Unsolicited Telnet Houseguests “ takes you on a deep dive into the packets.

https://www.labs.greynoise.io//grimoire/2026-01-22-f-around-and-find-out-18-hours-of-unsolicited-houseguests/

cc: @darses

I shot a 📄 to the team to 👀 later today but we've seen some activity on the recent Inetutils Telnetd -f Auth Bypass vuln (CVE-2026-24061) — https://viz.greynoise.io/tags/inetutils-telnetd--f-auth-bypass-attempt?days=30

We stood up some full vulnerable systems and a cpl IPs only hit those, so the targeting precision was oddly fast.

If they don't do a main GN blog I'll post deets on the Labs blog (I'm OOO today).

Rly glad this was a nothingburger.

Spidey-sense says something yuge (not related to this) is coming soon tho. The internet feels “off”.

Trollolol, telnetd lets you log in without a password if you send the USER environment variable as "-f root" (which gets passed unsanitized to login(1)).

(Yes, yes, telnet, but still. :-)

https://www.openwall.com/lists/oss-security/2026/01/20/2

CVE-2026-24061

There is a critical auth bypass vulnerability in telnetd (https://nvd.nist.gov/vuln/detail/CVE-2026-24061) so I will need to update the surl-server Apple II proxy image. It has telnetd enabled (on localhost only, so is only accessible via the Apple II's serial port and you're probably already root on it)

We caught a few (desperate) fiends trying to have their way with our vulnerable-to Telnetd -f Auth Bypass vuln (CVE-2026-24061) systems and I took a spelunk in the PCAPs:

Some of the least clever and least capable actors I've seen in a while.

"-f Around and Find Out: 18 Hours of Unsolicited Telnet Houseguests “ takes you on a deep dive into the packets.

https://www.labs.greynoise.io//grimoire/2026-01-22-f-around-and-find-out-18-hours-of-unsolicited-houseguests/

cc: @darses

I shot a 📄 to the team to 👀 later today but we've seen some activity on the recent Inetutils Telnetd -f Auth Bypass vuln (CVE-2026-24061) — https://viz.greynoise.io/tags/inetutils-telnetd--f-auth-bypass-attempt?days=30

We stood up some full vulnerable systems and a cpl IPs only hit those, so the targeting precision was oddly fast.

If they don't do a main GN blog I'll post deets on the Labs blog (I'm OOO today).

Rly glad this was a nothingburger.

Spidey-sense says something yuge (not related to this) is coming soon tho. The internet feels “off”.

La vulnérabilité CVE-2026-24061 permet à un attaquant de se connecter en root en contournant l'authentification d'un service telnetd. Un code d'exploitation est disponible et son exploitation est triviale.
https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-003/

🔴 CVE-2026-24061 - Critical (9.8)

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24061/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23954 - High (8.7)

Incus is a system container and virtual machine manager. Versions 6.21.0 and below allow a user with the ability to launch a container with a custom image (e.g a member of the ‘incus’ group) to use directory traversal or symbolic links in the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23954/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23954 - High (8.7)

Incus is a system container and virtual machine manager. Versions 6.21.0 and below allow a user with the ability to launch a container with a custom image (e.g a member of the ‘incus’ group) to use directory traversal or symbolic links in the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23954/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23953 - High (8.7)

Incus is a system container and virtual machine manager. In versions 6.20.0 and below, a user with the ability to launch a container with a custom YAML configuration (e.g a member of the ‘incus’ group) can create an environment variable contai...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23953/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23953 - High (8.7)

Incus is a system container and virtual machine manager. In versions 6.20.0 and below, a user with the ability to launch a container with a custom YAML configuration (e.g a member of the ‘incus’ group) can create an environment variable contai...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23953/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS)
https://nvd.nist.gov/vuln/detail/CVE-2026-21962

🔴 CVE-2026-21962 - Critical (10)

Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that ar...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21962/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 [CISA-2026:0122] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0122)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-31125 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-31125)
- Name: Vite Vitejs Improper Access Control Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Vite
- Product: Vitejs
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/vitejs/vite/commit/59673137c45ac2bcfad1170d954347c1a17ab949 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31125

⚠️ CVE-2025-34026 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-34026)
- Name: Versa Concerto Improper Authentication Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Versa
- Product: Concerto
- Notes: https://security-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2e ; https://nvd.nist.gov/vuln/detail/CVE-2025-34026

⚠️ CVE-2025-54313 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-54313)
- Name: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Prettier
- Product: eslint-config-prettier
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.npmjs.com/package/eslint-config-prettier?activeTab=versions ; https://github.com/prettier/eslint-config-prettier/issues/339#issuecomment-3090304490 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54313

⚠️ CVE-2025-68645 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-68645)
- Name: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Synacor
- Product: Zimbra Collaboration Suite (ZCS)
- Notes: https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2025-68645

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260122 #cisa20260122 #cve_2025_31125 #cve_2025_34026 #cve_2025_54313 #cve_2025_68645 #cve202531125 #cve202534026 #cve202554313 #cve202568645

CVE ID: CVE-2025-68645
Vendor: Synacor
Product: Zimbra Collaboration Suite (ZCS)
Date Added: 2026-01-22
Notes: https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2025-68645
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-68645

More updates from CISA:

- CVE-2025-54313: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-54313

- CVE-2025-31125: Vite Vitejs Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-31125

- CVE-2025-34026: Versa Concerto Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-34026

- CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-68645

And several industrial advisories are listed here: https://www.cisa.gov/ #CISA #infoec #vulnerability

CVE ID: CVE-2025-68645
Vendor: Synacor
Product: Zimbra Collaboration Suite (ZCS)
Date Added: 2026-01-22
Notes: https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2025-68645
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-68645

More updates from CISA:

- CVE-2025-54313: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-54313

- CVE-2025-31125: Vite Vitejs Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-31125

- CVE-2025-34026: Versa Concerto Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-34026

- CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-68645

And several industrial advisories are listed here: https://www.cisa.gov/ #CISA #infoec #vulnerability

🚨 [CISA-2026:0122] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0122)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-31125 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-31125)
- Name: Vite Vitejs Improper Access Control Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Vite
- Product: Vitejs
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/vitejs/vite/commit/59673137c45ac2bcfad1170d954347c1a17ab949 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31125

⚠️ CVE-2025-34026 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-34026)
- Name: Versa Concerto Improper Authentication Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Versa
- Product: Concerto
- Notes: https://security-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2e ; https://nvd.nist.gov/vuln/detail/CVE-2025-34026

⚠️ CVE-2025-54313 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-54313)
- Name: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Prettier
- Product: eslint-config-prettier
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.npmjs.com/package/eslint-config-prettier?activeTab=versions ; https://github.com/prettier/eslint-config-prettier/issues/339#issuecomment-3090304490 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54313

⚠️ CVE-2025-68645 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-68645)
- Name: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Synacor
- Product: Zimbra Collaboration Suite (ZCS)
- Notes: https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2025-68645

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260122 #cisa20260122 #cve_2025_31125 #cve_2025_34026 #cve_2025_54313 #cve_2025_68645 #cve202531125 #cve202534026 #cve202554313 #cve202568645

CVE ID: CVE-2025-54313
Vendor: Prettier
Product: eslint-config-prettier
Date Added: 2026-01-22
Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.npmjs.com/package/eslint-config-prettier?activeTab=versions ; https://github.com/prettier/eslint-config-prettier/issues/339#issuecomment-3090304490 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54313
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-54313

More updates from CISA:

- CVE-2025-54313: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-54313

- CVE-2025-31125: Vite Vitejs Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-31125

- CVE-2025-34026: Versa Concerto Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-34026

- CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-68645

And several industrial advisories are listed here: https://www.cisa.gov/ #CISA #infoec #vulnerability

CVE ID: CVE-2025-54313
Vendor: Prettier
Product: eslint-config-prettier
Date Added: 2026-01-22
Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.npmjs.com/package/eslint-config-prettier?activeTab=versions ; https://github.com/prettier/eslint-config-prettier/issues/339#issuecomment-3090304490 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54313
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-54313

More updates from CISA:

- CVE-2025-54313: Prettier eslint-config-prettier Embedded Malicious Code Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-54313

- CVE-2025-31125: Vite Vitejs Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-31125

- CVE-2025-34026: Versa Concerto Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-34026

- CVE-2025-68645: Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-68645

And several industrial advisories are listed here: https://www.cisa.gov/ #CISA #infoec #vulnerability

🟠 CVE-2026-24009 - High (8.1)

Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24009/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24009 - High (8.1)

Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24009/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-69828 - Critical (10)

File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitrary code via the Logo upload in /Customer/AddEdit

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69828/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-69828 - Critical (10)

File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allows a remote attacker to execute arbitrary code via the Logo upload in /Customer/AddEdit

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69828/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New. CVE-2025-67968

Patchstack: Critical Arbitrary File Upload Vulnerability in RealHomes CRM Plugin Affecting 30k+ Sites https://patchstack.com/articles/critical-arbitrary-file-upload-vulnerability-in-realhomes-crm-plugin-affecting-30k-sites/

Infosecurity-Magazine: RealHomes CRM Plugin Flaw Affected 30,000 WordPress Sites https://www.c-span.org/event/house-committee/former-special-counsel-jack-smith-testifies-on-trump-investigations/439618 #infosec #WordPress #vulnerability

New. CVE-2025-67968

Patchstack: Critical Arbitrary File Upload Vulnerability in RealHomes CRM Plugin Affecting 30k+ Sites https://patchstack.com/articles/critical-arbitrary-file-upload-vulnerability-in-realhomes-crm-plugin-affecting-30k-sites/

Infosecurity-Magazine: RealHomes CRM Plugin Flaw Affected 30,000 WordPress Sites https://www.c-span.org/event/house-committee/former-special-counsel-jack-smith-testifies-on-trump-investigations/439618 #infosec #WordPress #vulnerability

🔴 CVE-2025-69764 - Critical (9.8)

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which may result in memory corruption and remote code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69764/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-69764 - Critical (9.8)

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which may result in memory corruption and remote code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69764/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-36588 - High (8.8)

Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnera...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-36588/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-36588 - High (8.8)

Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnera...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-36588/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SICK vulns, bro.

https://www.cve.org/CVERecord?id=CVE-2026-0712

https://www.cve.org/CVERecord?id=CVE-2026-0713

https://www.cve.org/CVERecord?id=CVE-2026-22637

https://www.cve.org/CVERecord?id=CVE-2026-22638

https://www.cve.org/CVERecord?id=CVE-2026-22639

https://www.cve.org/CVERecord?id=CVE-2026-22640

https://www.cve.org/CVERecord?id=CVE-2026-22641

https://www.cve.org/CVERecord?id=CVE-2026-22642

https://www.cve.org/CVERecord?id=CVE-2026-22643

https://www.cve.org/CVERecord?id=CVE-2026-22644

https://www.cve.org/CVERecord?id=CVE-2026-22645

https://www.cve.org/CVERecord?id=CVE-2026-22646

https://www.cve.org/CVERecord?id=CVE-2026-22907

https://www.cve.org/CVERecord?id=CVE-2026-22908

https://www.cve.org/CVERecord?id=CVE-2026-22909

https://www.cve.org/CVERecord?id=CVE-2026-22910

https://www.cve.org/CVERecord?id=CVE-2026-22911

https://www.cve.org/CVERecord?id=CVE-2026-22912

https://www.cve.org/CVERecord?id=CVE-2026-22913

https://www.cve.org/CVERecord?id=CVE-2026-22914

https://www.cve.org/CVERecord?id=CVE-2026-22915

https://www.cve.org/CVERecord?id=CVE-2026-22916

https://www.cve.org/CVERecord?id=CVE-2026-22917

https://www.cve.org/CVERecord?id=CVE-2026-22918

https://www.cve.org/CVERecord?id=CVE-2026-22919

https://www.cve.org/CVERecord?id=CVE-2026-22920

SICK vulns, bro.

https://www.cve.org/CVERecord?id=CVE-2026-0712

https://www.cve.org/CVERecord?id=CVE-2026-0713

https://www.cve.org/CVERecord?id=CVE-2026-22637

https://www.cve.org/CVERecord?id=CVE-2026-22638

https://www.cve.org/CVERecord?id=CVE-2026-22639

https://www.cve.org/CVERecord?id=CVE-2026-22640

https://www.cve.org/CVERecord?id=CVE-2026-22641

https://www.cve.org/CVERecord?id=CVE-2026-22642

https://www.cve.org/CVERecord?id=CVE-2026-22643

https://www.cve.org/CVERecord?id=CVE-2026-22644

https://www.cve.org/CVERecord?id=CVE-2026-22645

https://www.cve.org/CVERecord?id=CVE-2026-22646

https://www.cve.org/CVERecord?id=CVE-2026-22907

https://www.cve.org/CVERecord?id=CVE-2026-22908

https://www.cve.org/CVERecord?id=CVE-2026-22909

https://www.cve.org/CVERecord?id=CVE-2026-22910

https://www.cve.org/CVERecord?id=CVE-2026-22911

https://www.cve.org/CVERecord?id=CVE-2026-22912

https://www.cve.org/CVERecord?id=CVE-2026-22913

https://www.cve.org/CVERecord?id=CVE-2026-22914

https://www.cve.org/CVERecord?id=CVE-2026-22915

https://www.cve.org/CVERecord?id=CVE-2026-22916

https://www.cve.org/CVERecord?id=CVE-2026-22917

https://www.cve.org/CVERecord?id=CVE-2026-22918

https://www.cve.org/CVERecord?id=CVE-2026-22919

https://www.cve.org/CVERecord?id=CVE-2026-22920

🟠 CVE-2026-24006 - High (7.5)

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, serialization of objects with extreme depth can exceed the maximum call stack limit. In version 1.4.1, Sero...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24006/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24006 - High (7.5)

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, serialization of objects with extreme depth can exceed the maximum call stack limit. In version 1.4.1, Sero...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24006/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SICK vulns, bro.

https://www.cve.org/CVERecord?id=CVE-2026-0712

https://www.cve.org/CVERecord?id=CVE-2026-0713

https://www.cve.org/CVERecord?id=CVE-2026-22637

https://www.cve.org/CVERecord?id=CVE-2026-22638

https://www.cve.org/CVERecord?id=CVE-2026-22639

https://www.cve.org/CVERecord?id=CVE-2026-22640

https://www.cve.org/CVERecord?id=CVE-2026-22641

https://www.cve.org/CVERecord?id=CVE-2026-22642

https://www.cve.org/CVERecord?id=CVE-2026-22643

https://www.cve.org/CVERecord?id=CVE-2026-22644

https://www.cve.org/CVERecord?id=CVE-2026-22645

https://www.cve.org/CVERecord?id=CVE-2026-22646

https://www.cve.org/CVERecord?id=CVE-2026-22907

https://www.cve.org/CVERecord?id=CVE-2026-22908

https://www.cve.org/CVERecord?id=CVE-2026-22909

https://www.cve.org/CVERecord?id=CVE-2026-22910

https://www.cve.org/CVERecord?id=CVE-2026-22911

https://www.cve.org/CVERecord?id=CVE-2026-22912

https://www.cve.org/CVERecord?id=CVE-2026-22913

https://www.cve.org/CVERecord?id=CVE-2026-22914

https://www.cve.org/CVERecord?id=CVE-2026-22915

https://www.cve.org/CVERecord?id=CVE-2026-22916

https://www.cve.org/CVERecord?id=CVE-2026-22917

https://www.cve.org/CVERecord?id=CVE-2026-22918

https://www.cve.org/CVERecord?id=CVE-2026-22919

https://www.cve.org/CVERecord?id=CVE-2026-22920

SICK vulns, bro.

https://www.cve.org/CVERecord?id=CVE-2026-0712

https://www.cve.org/CVERecord?id=CVE-2026-0713

https://www.cve.org/CVERecord?id=CVE-2026-22637

https://www.cve.org/CVERecord?id=CVE-2026-22638

https://www.cve.org/CVERecord?id=CVE-2026-22639

https://www.cve.org/CVERecord?id=CVE-2026-22640

https://www.cve.org/CVERecord?id=CVE-2026-22641

https://www.cve.org/CVERecord?id=CVE-2026-22642

https://www.cve.org/CVERecord?id=CVE-2026-22643

https://www.cve.org/CVERecord?id=CVE-2026-22644

https://www.cve.org/CVERecord?id=CVE-2026-22645

https://www.cve.org/CVERecord?id=CVE-2026-22646

https://www.cve.org/CVERecord?id=CVE-2026-22907

https://www.cve.org/CVERecord?id=CVE-2026-22908

https://www.cve.org/CVERecord?id=CVE-2026-22909

https://www.cve.org/CVERecord?id=CVE-2026-22910

https://www.cve.org/CVERecord?id=CVE-2026-22911

https://www.cve.org/CVERecord?id=CVE-2026-22912

https://www.cve.org/CVERecord?id=CVE-2026-22913

https://www.cve.org/CVERecord?id=CVE-2026-22914

https://www.cve.org/CVERecord?id=CVE-2026-22915

https://www.cve.org/CVERecord?id=CVE-2026-22916

https://www.cve.org/CVERecord?id=CVE-2026-22917

https://www.cve.org/CVERecord?id=CVE-2026-22918

https://www.cve.org/CVERecord?id=CVE-2026-22919

https://www.cve.org/CVERecord?id=CVE-2026-22920

SICK vulns, bro.

https://www.cve.org/CVERecord?id=CVE-2026-0712

https://www.cve.org/CVERecord?id=CVE-2026-0713

https://www.cve.org/CVERecord?id=CVE-2026-22637

https://www.cve.org/CVERecord?id=CVE-2026-22638

https://www.cve.org/CVERecord?id=CVE-2026-22639

https://www.cve.org/CVERecord?id=CVE-2026-22640

https://www.cve.org/CVERecord?id=CVE-2026-22641

https://www.cve.org/CVERecord?id=CVE-2026-22642

https://www.cve.org/CVERecord?id=CVE-2026-22643

https://www.cve.org/CVERecord?id=CVE-2026-22644

https://www.cve.org/CVERecord?id=CVE-2026-22645

https://www.cve.org/CVERecord?id=CVE-2026-22646

https://www.cve.org/CVERecord?id=CVE-2026-22907

https://www.cve.org/CVERecord?id=CVE-2026-22908

https://www.cve.org/CVERecord?id=CVE-2026-22909

https://www.cve.org/CVERecord?id=CVE-2026-22910

https://www.cve.org/CVERecord?id=CVE-2026-22911

https://www.cve.org/CVERecord?id=CVE-2026-22912

https://www.cve.org/CVERecord?id=CVE-2026-22913

https://www.cve.org/CVERecord?id=CVE-2026-22914

https://www.cve.org/CVERecord?id=CVE-2026-22915

https://www.cve.org/CVERecord?id=CVE-2026-22916

https://www.cve.org/CVERecord?id=CVE-2026-22917

https://www.cve.org/CVERecord?id=CVE-2026-22918

https://www.cve.org/CVERecord?id=CVE-2026-22919

https://www.cve.org/CVERecord?id=CVE-2026-22920

🟠 CVE-2026-22278 - High (8.1)

Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive authentication attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthori...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22278/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22278 - High (8.1)

Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive authentication attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthori...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22278/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-22200: Ticket to Shell in osTicket https://horizon3.ai/attack-research/attack-blogs/ticket-to-shell-exploiting-php-filters-and-cnext-in-osticket-cve-2026-22200/

CVE-2026-22200: Ticket to Shell in osTicket https://horizon3.ai/attack-research/attack-blogs/ticket-to-shell-exploiting-php-filters-and-cnext-in-osticket-cve-2026-22200/

🟠 CVE-2025-67221 - High (7.5)

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67221/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-67221 - High (7.5)

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67221/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23956 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, overriding RegExp serialization with extremely large patterns can exhaust JavaScript runtime memory during ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23956/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23956 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, overriding RegExp serialization with extremely large patterns can exhaust JavaScript runtime memory during ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23956/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23965 - High (7.5)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature forgery vulnerability exists in the SM2 signature verification logic of sm-crypto prior to version 0.4.0. Under default configurat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23965/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23965 - High (7.5)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature forgery vulnerability exists in the SM2 signature verification logic of sm-crypto prior to version 0.4.0. Under default configurat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23965/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-23966 - Critical (9.1)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-23966 - Critical (9.1)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-23966 - Critical (9.1)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-23966 - Critical (9.1)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23737 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, improper input handling in the JSON deserialization component can lead to arbitrary JavaScript code executi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23737/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23737 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, improper input handling in the JSON deserialization component can lead to arbitrary JavaScript code executi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23737/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-23524 - Critical (9.8)

Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23524/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22807 - High (8.8)

vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.14.0, vLLM loads Hugging Face `auto_map` dynamic modules during model resolution without gating on `trust_remote_code`, all...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22807/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1328 - High (8.8)

A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1328/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1328 - High (8.8)

A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1328/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13928 - High (7.5)

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to cause a denial of service condition by exploiting incorrec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13928 - High (7.5)

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to cause a denial of service condition by exploiting incorrec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-10856 - High (8.1)

Unrestricted Upload of File with Dangerous Type vulnerability in Solvera Software Services Trade Inc. Teknoera allows File Content Injection.This issue affects Teknoera: through 01102025.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-10856/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-10856 - High (8.1)

Unrestricted Upload of File with Dangerous Type vulnerability in Solvera Software Services Trade Inc. Teknoera allows File Content Injection.This issue affects Teknoera: through 01102025.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-10856/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Уязвимость в GitLab, позволяющая обойти двухфакторную аутентификацию

Опубликованы корректирующие обновления платформы для организации совместной разработки GitLab - 18.8.2, 18.7.2, 18.6.4, в которых устранена уязвимость (CVE-2026-0723), позволяющая обойти проверку при двухфакторной аутентификации. Для совершения атаки злоумышленник должен знать идентификатор учётных данных жертвы. Уязвимость вызвана отсутствием должной проверки возвращаемого значения в сервисах аутентификации.....

Источник: https://www.opennet.ru/opennews/art.shtml?num=64657
Дата: Thu, 22 Jan 2026 15:24:24 +0300

Enjoy.

🟠 CVE-2025-13927 - High (7.5)

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service condition by sending crafted re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13927/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13927 - High (7.5)

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service condition by sending crafted re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13927/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New.

Huntress: DE&TH to Vulnerabilities: Huntress Catches SmarterMail Account Takeover Leading to RCE (CVE-2026-23760) https://www.huntress.com/blog/smartermail-account-takeover-leading-to-rce @huntress #infosec

New.

Huntress: DE&TH to Vulnerabilities: Huntress Catches SmarterMail Account Takeover Leading to RCE (CVE-2026-23760) https://www.huntress.com/blog/smartermail-account-takeover-leading-to-rce @huntress #infosec

🟠 CVE-2026-1329 - High (8.8)

A flaw has been found in Tenda AX1803 1.0.0.1. The affected element is the function fromGetWifiGuestBasic of the file /goform/WifiGuestSet. Executing a manipulation of the argument guestWrlPwd/guestEn/guestSsid/hideSsid/guestSecurity can lead to s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1329/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1329 - High (8.8)

A flaw has been found in Tenda AX1803 1.0.0.1. The affected element is the function fromGetWifiGuestBasic of the file /goform/WifiGuestSet. Executing a manipulation of the argument guestWrlPwd/guestEn/guestSsid/hideSsid/guestSecurity can lead to s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1329/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1324 - High (8.8)

A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12. Affected by this issue is the function SessionController of the file /isomp-protocol/protocol/session of the component SSH Protocol Handler. The ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1324/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1324 - High (8.8)

A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12. Affected by this issue is the function SessionController of the file /isomp-protocol/protocol/session of the component SSH Protocol Handler. The ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1324/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-69766 - Critical (9.8)

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory corruption and remote code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69766/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-69766 - Critical (9.8)

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory corruption and remote code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69766/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-10855 - High (7.5)

Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows Exploitation of Trusted Identifiers.This issue affects Teknoera: through 01102025.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-10855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-10855 - High (7.5)

Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows Exploitation of Trusted Identifiers.This issue affects Teknoera: through 01102025.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-10855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-10024 - High (7.5)

Authorization Bypass Through User-Controlled Key vulnerability in EXERT Computer Technologies Software Ltd. Co. Education Management System allows Parameter Injection.This issue affects Education Management System: through 23.09.2025.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-10024/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-10024 - High (7.5)

Authorization Bypass Through User-Controlled Key vulnerability in EXERT Computer Technologies Software Ltd. Co. Education Management System allows Parameter Injection.This issue affects Education Management System: through 23.09.2025.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-10024/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-4764 - High (8)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aida Computer Information Technology Inc. Hotel Guest Hotspot allows SQL Injection.This issue affects Hotel Guest Hotspot: through 22012026. 

N...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-4764/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-4764 - High (8)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aida Computer Information Technology Inc. Hotel Guest Hotspot allows SQL Injection.This issue affects Hotel Guest Hotspot: through 22012026. 

N...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-4764/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-1331 - Critical (9.8)

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1331/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-1331 - Critical (9.8)

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1331/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-0920 - Critical (9.8)

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajax_register_handle' function not restricting what user roles a user can...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0920/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-0920 - Critical (9.8)

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajax_register_handle' function not restricting what user roles a user can...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0920/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1330 - High (7.5)

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1330/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1330 - High (7.5)

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1330/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24042 - Critical (9.4)

Appsmith is a platform to build admin panels, internal tools, and dashboards. In versions 1.94 and below, publicly accessible apps allow unauthenticated users to execute unpublished (edit-mode) actions by sending viewMode=false (or omitting it) to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24042/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24042 - Critical (9.4)

Appsmith is a platform to build admin panels, internal tools, and dashboards. In versions 1.94 and below, publicly accessible apps allow unauthenticated users to execute unpublished (edit-mode) actions by sending viewMode=false (or omitting it) to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24042/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-27380 - High (7.6)

HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-27380/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-27380 - High (7.6)

HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-27380/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24002 - Critical (9)

Grist is spreadsheet software using Python as its formula language. Grist offers several methods for running those formulas in a sandbox, for cases where the user may be working with untrusted spreadsheets. One such method runs them in pyodide, bu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24002 - Critical (9)

Grist is spreadsheet software using Python as its formula language. Grist offers several methods for running those formulas in a sandbox, for cases where the user may be working with untrusted spreadsheets. One such method runs them in pyodide, bu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23967 - High (7.5)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An att...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23967 - High (7.5)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An att...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23967 - High (7.5)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An att...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23967 - High (7.5)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An att...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23957 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, overriding encoded array lengths by replacing them with an excessively large value causes the deserializati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23957/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23957 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, overriding encoded array lengths by replacing them with an excessively large value causes the deserializati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23957/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-27378 - High (8.6)

AES contains a SQL injection vulnerability due to an inactive configuration that prevents the latest SQL parsing logic from being applied. When this configuration is not enabled, crafted input may be improperly handled, allowing attackers to injec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-27378/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-27378 - High (8.6)

AES contains a SQL injection vulnerability due to an inactive configuration that prevents the latest SQL parsing logic from being applied. When this configuration is not enabled, crafted input may be improperly handled, allowing attackers to injec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-27378/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22022 - High (8.2)

Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components.  Only de...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22022/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco Under Fire Again: Critical Zero-Day Actively Exploited Across Unified Communications Systems

A Fresh Cyberstorm Hits Cisco’s Core Enterprise Platforms Cisco is once again at the center of a high-stakes cybersecurity emergency after confirming the active exploitation of a critical zero-day vulnerability impacting its unified communications ecosystem. The flaw, now formally tracked as CVE-2026-20045, exposes some of the most widely deployed enterprise communication…

https://undercodenews.com/cisco-under-fire-again-critical-zero-day-actively-exploited-across-unified-communications-systems/

CISA added Cisco's critical RCE vulnerability to the KEV catalogue late yesterday.

CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability https://www.cisa.gov/news-events/alerts/2026/01/21/cisa-adds-one-known-exploited-vulnerability-catalog

More:

Computerworld: Critical Cisco UC bug actively exploited https://www.computerworld.com/article/4120764/critical-cisco-uc-bug-actively-exploited.html #infosec #Cisco #vulnerability

@TalosSecurity

CVE-2026-20045: Critical Zero-Day in Cisco Products Is Actively Exploited in the Wild
#CVE_2026_20045
https://socprime.com/blog/cve-2026-20045-vulnerability/

Cisco Patches Actively Exploited Flaw in Unified Communications Products

Cisco patched a critical remote code execution vulnerability (CVE-2026-20045) in its Unified Communications products that attackers are actively trying to exploit to gain root access. The flaw allows unauthenticated attackers to take full control of enterprise telephony and messaging infrastructure via malicious HTTP requests.

**If you are using Cisco communication platforms, read this advisory in detail. Make sure the web management interface are isolated from the internet and accessible from trusted networks only. Then plan a quick update. Because someone will find a way to reach the vulnerable interface even if it's isolated.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisco-patches-actively-exploited-flaw-in-unified-communications-products-4-u-1-t-8/gD2P6Ple2L

Cisco Releases Emergency Patch for Actively Exploited CVE-2026-20045 Zero-Day RCE Flaw + Video

Critical Zero-Day Exposure in Cisco Enterprise Communications Stack Cisco has released an urgent security patch addressing a critical zero-day vulnerability actively exploited in real-world attacks. The flaw, tracked as CVE-2026-20045 with a CVSS score of 8.2, allows unauthenticated remote attackers to execute arbitrary commands on affected systems. The exposure sits at the…

https://undercodenews.com/cisco-releases-emergency-patch-for-actively-exploited-cve-2026-20045-zero-day-rce-flaw-video/

Cisco Confirms Active Exploitation of Critical Unified Communications Zero-Day (CVE-2026-20045)

Introduction: A High-Impact Cisco Flaw Moves From Theory to Reality Cisco has disclosed and patched a critical remote code execution vulnerability affecting its Unified Communications ecosystem, confirming that the flaw has already been exploited in real-world attacks. Tracked as CVE-2026-20045, the vulnerability targets core enterprise communication platforms, including…

https://undercodenews.com/cisco-confirms-active-exploitation-of-critical-unified-communications-zero-day-cve-2026-20045/

Cisco fixes Unified Communications RCE zero day exploited in attacks

Cisco has fixed a critical Unified Communications and Webex Calling remote code execution vulnerability, tracked as CVE-2026-20045, that has been...

🔗️ [Bleepingcomputer] https://link.is.it/WDsEt3

CISA added Cisco's critical RCE vulnerability to the KEV catalogue late yesterday.

CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability https://www.cisa.gov/news-events/alerts/2026/01/21/cisa-adds-one-known-exploited-vulnerability-catalog

More:

Computerworld: Critical Cisco UC bug actively exploited https://www.computerworld.com/article/4120764/critical-cisco-uc-bug-actively-exploited.html #infosec #Cisco #vulnerability

@TalosSecurity

Cisco Patches Actively Exploited Flaw in Unified Communications Products

Cisco patched a critical remote code execution vulnerability (CVE-2026-20045) in its Unified Communications products that attackers are actively trying to exploit to gain root access. The flaw allows unauthenticated attackers to take full control of enterprise telephony and messaging infrastructure via malicious HTTP requests.

**If you are using Cisco communication platforms, read this advisory in detail. Make sure the web management interface are isolated from the internet and accessible from trusted networks only. Then plan a quick update. Because someone will find a way to reach the vulnerable interface even if it's isolated.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisco-patches-actively-exploited-flaw-in-unified-communications-products-4-u-1-t-8/gD2P6Ple2L

Cisco fixes Unified Communications RCE zero day exploited in attacks

Cisco has fixed a critical Unified Communications and Webex Calling remote code execution vulnerability, tracked as CVE-2026-20045, that has been...

🔗️ [Bleepingcomputer] https://link.is.it/WDsEt3

‼️Attackers Actively Probing RCE Vulnerability in Cisco Enterprise Communications Products

CVE-2026-20045: Cisco Unified Communications Products Code Injection Vulnerability

CVSS: 8.2
CISA KEV: Added today; January 21st, 2026
CVE Published: January 21st, 2026

Advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-20045

Description: A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.  This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. Note: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.

CVE ID: CVE-2026-20045
Vendor: Cisco
Product: Unified Communications Manager
Date Added: 2026-01-21
Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b ; https://nvd.nist.gov/vuln/detail/CVE-2026-20045
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20045

New Cisco zero-day, CVE-2026-20045

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

🟠 CVE-2026-20045 - High (8.2)

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Uni...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20045/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

🔴 CVE-2026-22792 - Critical (9.6)

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML (including on* event attributes) to execute in the renderer context. An ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22792/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-59465 - High (7.5)

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-59465/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13878 - High (7.5)

Malformed BRID/HHIT records can cause `named` to terminate unexpectedly.
This issue affects BIND 9 versions 9.18.40 through 9.18.43, 9.20.13 through 9.20.17, 9.21.12 through 9.21.16, 9.18.40-S1 through 9.18.43-S1, and 9.20.13-S1 through 9.20.17-S1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13878/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

TP-Link Patches Authentication Bypass Flaw in VIGI Cameras

TP-Link fixed a high-severity authentication bypass vulnerability (CVE-2026-0629) in its VIGI camera series that allowed local attackers to reset administrative passwords. The flaw enables full device takeover and potential lateral movement within corporate networks.

**Make sure all CCTV devices are isolated from the internet and accessible from trusted networks only. Segment your surveillance cameras into a dedicated VLAN and if possible disable the password recovery feature on the local web interface. Then plan a patch cycle.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/tp-link-patches-authentication-bypass-flaw-in-vigi-cameras-6-s-b-i-e/gD2P6Ple2L

Eine kritische Sicherheitslücke CVE-2026-0629 erlaubt es Angreifern, Admin-Zugriff auf zahlreiche #TPLink Vigi-Überwachungskameras per Fernzugriff zu erlangen. https://www.golem.de/specials/tp-link/

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

🟠 CVE-2025-70650 - High (7.5)

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-70645 - High (7.5)

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70645/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

From yesterday, relating to CVE-2026-21945. Oracle has listed this vulnerability in its latest advisory: https://www.oracle.com/security-alerts/cpujan2026.html

Tenable: SSRF Vulnerability in Java TLS Handshakes Creates DoS Risk https://www.tenable.com/blog/tenable-discovers-ssrf-vulnerability-in-java-tls-handshakes-that-creates-dos-risk @tenable #infosec #threatresearch #JavaScript #vulnerability #DDoS #Oracle

🟠 CVE-2026-21945 - High (7.5)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.1...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21945/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack