🟠 CVE-2026-17220 - High (8.2)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and modify authentication metadata due to a buffer overflow.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17220 - High (8.2)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and modify authentication metadata due to a buffer overflow.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17197 - High (8.1)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17197 - High (8.1)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73653 - Critical (9.4)

Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73653/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73653 - Critical (9.4)

Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73653/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73650 - High (8.2)

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.3, 3.3.4, and 4.0.2, the removeScripts plugin, named removeScriptElement in versions 1 through 3, can ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73650 - High (8.2)

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.3, 3.3.4, and 4.0.2, the removeScripts plugin, named removeScriptElement in versions 1 through 3, can ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73482 - High (8.1)

phpList before 3.7.0-RC5 contains a cross-site request forgery (CSRF) vulnerability in lists/admin/admins.php. The administrator deletion action is triggered via an unauthenticated GET request (?page=admins&delete=N) that is not protected by a CSR...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73482/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73482 - High (8.1)

phpList before 3.7.0-RC5 contains a cross-site request forgery (CSRF) vulnerability in lists/admin/admins.php. The administrator deletion action is triggered via an unauthenticated GET request (?page=admins&delete=N) that is not protected by a CSR...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73482/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72777 - High (8.6)

Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution. Unauthenticated attackers can supply hostna...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72777/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72777 - High (8.6)

Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution. Unauthenticated attackers can supply hostna...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72777/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73515 - High (8.1)

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73515/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73515 - High (8.1)

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73515/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73514 - High (8.8)

The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardize_address() t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73514/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73514 - High (8.8)

The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardize_address() t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73514/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73493 - High (7.5)

Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming WebSocket message with no limit on total size or fragment count. A clie...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73493/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73493 - High (7.5)

Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming WebSocket message with no limit on total size or fragment count. A clie...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73493/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

CVE-2026-17248 - DoS in IBM i 7.3-7.6 via improper OS command neutralization. Remote authenticated attacker can crash systems. CVSS 7.1. No patch yet - monitor advisory. #CVE #IBM #infosec

https://www.valtersit.com/cve/CVE-2026-17248/

🟠 CVE-2026-73570 - High (8.9)

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notificati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73570/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73570 - High (8.9)

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notificati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73570/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73246 - High (7.5)

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kestra/worker/endpoint/WorkerEndpoint.java serves GET /worker without authentication and serializes the complete live Task object, ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73246/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-6464 - High (8.1)

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6464/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-6464 - High (8.1)

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6464/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-69105 - High (8.1)

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69105/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-69105 - High (8.1)

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69105/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-64954 - High (8.2)

Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the auth...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64954/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New.

"Today VulnCheck is disclosing CVE-2026-14863, an OS command injection to remote code execution in FileRun, a commercial self-hosted file manager. It is being disclosed in accordance with VulnCheck's coordinated vulnerability disclosure policy."

"The motivation was deliberate. Open-source codebases are getting shredded by AI-assisted auditing, where every researcher and their LLM greps the same GitHub repos and finds the same bugs."

Vulncheck: FileRun: When Your File Manager Runs Your Files https://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce @vulncheck #infosec #opensource #vulnerability

New.

"Today VulnCheck is disclosing CVE-2026-14863, an OS command injection to remote code execution in FileRun, a commercial self-hosted file manager. It is being disclosed in accordance with VulnCheck's coordinated vulnerability disclosure policy."

"The motivation was deliberate. Open-source codebases are getting shredded by AI-assisted auditing, where every researcher and their LLM greps the same GitHub repos and finds the same bugs."

Vulncheck: FileRun: When Your File Manager Runs Your Files https://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce @vulncheck #infosec #opensource #vulnerability

📢 CVE-2026-55040 : vulnérabilité SharePoint exploitée dans la nature après publication d'un PoC

Il rapporte l'exploitation active en conditions réelles de CVE-2026-55040, une vulnérabilité affectant Microsoft SharePoint, corrigée lors du Patch Tuesday de juillet 2026. CVE-2026-55040 est décrite par Microsoft comme un problème d'authentification faible…

📖 cyberveille : https://cyberveille.ch/posts/2026-08-13-cve-2026-55040-vulnerabilite-sharepoint-exploitee-dans-la-nature-apres-publication-d-un-poc/
🌐 source : https://www.securityweek.com/sharepoint-vulnerability-exploited-shortly-after-poc-release/
🟢 vérification factuelle haute
#PoC #SharePoint #Cyberveille

Attackers are actively exploiting CVE-2026-55040, a critical remote code execution vulnerability in Microsoft SharePoint, after a proof-of-concept exploit was released by Rapid7. This flaw affects Sha
https://www.helpnetsecurity.com/2026/08/13/microsoft-sharepoint-cve-2026-55040-poc-exploit/
#cybersecurity #Microsoft #SharePoint

「公開された概念実証（PoC）リリース後、攻撃者がSharePointの認証バイパスを悪用 」： #TheHackerNews

「攻撃者は、概念実証（PoC）コードの公開を受けて、新たに明らかになったMicrosoft SharePointの脆弱性を悪用し始めている。

問題となっている脆弱性は CVE-2026-55040 （CVSSスコア：9.1）で、認証の脆弱性に起因する重大なセキュリティ機能のバイパスに関するものです。この脆弱性は、マイクロソフトが2026年7月のパッチチューズデーアップデートの一環として修正しました。

マイクロソフトは先月、この脆弱性に関する勧告の中で、「この脆弱性によりなりすましが可能になるため、認証機能が回避される可能性がある」と述べた。「この脆弱性を悪用すると、攻撃者はファイルを漏洩させたりデータを改ざんしたりできる可能性があるが、システムの可用性に影響を与えることはできない」としている。 」

https://thehackernews.com/2026/08/attackers-exploit-sharepoint.html

#prattohome

Attackers Exploit SharePoint Flaw After Public PoC Release

Microsoft warned that a critical SharePoint flaw, patched in July 2026, could allow attackers to bypass authentication and disclose files or modify data. This vulnerability, tracked as CVE-2026-55040, has now been exploited by attackers following the public release of a proof-of-concept exploit.

https://osintsights.com/attackers-exploit-sharepoint-flaw-after-public-poc-release?utm_source=mastodon&utm_medium=social

#Cve202655040 #SharepointFlaw #Microsoft #AuthenticationBypass #SupplyChain

Microsoft SharePoint Under Attack: Critical CVE-2026-55040 Exploitation Surges After Public PoC Release + Video

A New SharePoint Warning Is Turning Into a Real-World Security Crisis Microsoft SharePoint administrators are facing another serious warning as attackers appear to be testing a critical authentication-bypass vulnerability that can allow unauthenticated users to impersonate legitimate SharePoint accounts. The situation became more urgent after security…

https://undercodenews.com/microsoft-sharepoint-under-attack-critical-cve-2026-55040-exploitation-surges-after-public-poc-release-video/?utm_source=mastodon&utm_medium=jetpack_social

Cybercriminals are exploiting SharePoint vulnerability CVE-2026-55040, allowing authentication bypass and unauthorized access. Organizations should apply patches immediately to mitigate this risk.

#CyberSecurity #SharePoint #CVE202655040 #AuthenticationBypass #DataBreach #Microsoft

https://thedailytechfeed.com/attackers-exploit-sharepoint-authentication-bypass-vulnerability/

Rapid7 released a proof-of-concept for CVE-2026-55040, a critical SharePoint vulnerability, on August 12. Within hours, Defused observed the exploit weaponized against SharePoint honeypots. Microsoft patched the flaw in July, yet Shadowserver still reports over 8,500 exposed servers. Patching is no longer optional.

#SharePoint #CVE2026 #VulnerabilityManagement #PatchTuesday

https://cyberworldops.eu/en/sharepoint-proof-of-concept-for-critical-flaw-already-used-in-attacks

Microsoft SharePoint Under Attack: Hackers Exploit CVE-2026-55040 Shortly After Rapid7 Releases a Proof of Concept + Video

A Dangerous Window Opens for SharePoint Administrators A new Microsoft SharePoint security incident is highlighting one of the most dangerous realities in modern cybersecurity: the moment a working proof of concept becomes public, attackers can move from research to exploitation with astonishing speed. On August 12, 2026, reports emerged that…

https://undercodenews.com/microsoft-sharepoint-under-attack-hackers-exploit-cve-2026-55040-shortly-after-rapid7-releases-a-proof-of-concept-video/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft SharePoint Under Attack: Critical JWT Authentication Flaw Exploited After Rapid7 Releases Public PoC

A Dangerous SharePoint Vulnerability Has Crossed a Critical Line Microsoft SharePoint administrators are facing another serious cybersecurity warning after a critical authentication-bypass vulnerability moved rapidly from public disclosure to observed exploitation. The flaw, tracked as CVE-2026-55040, affects the way SharePoint validates JSON Web Tokens (JWTs)…

https://undercodenews.com/microsoft-sharepoint-under-attack-critical-jwt-authentication-flaw-exploited-after-rapid7-releases-public-poc/?utm_source=mastodon&utm_medium=jetpack_social

Tracked as CVE-2026-55040, this authentication bypass security flaw in the JWT token validation pipeline can be exploited by attackers without privileges to perform operations as a SharePoint site user or administrator. https://www.bleepingcomputer.com/news/microsoft/hackers-leverage-new-microsoft-sharepoint-exploit-in-attacks/

Hackers Exploit New Microsoft SharePoint Vulnerability in Attacks

Hackers are already exploiting a newly discovered critical flaw in Microsoft SharePoint, with over 8,500 servers exposed online and vulnerable to attacks. This authentication bypass vulnerability, known as CVE-2026-55040, allows hackers to disclose files, modify data, and wreak havoc on your system.

https://osintsights.com/hackers-exploit-new-microsoft-sharepoint-vulnerability-in-attacks?utm_source=mastodon&utm_medium=social

#MicrosoftSharepoint #Cve202655040 #AuthenticationBypass #VulnerabilityExploitation #EmergingThreats

「公開された概念実証（PoC）リリース後、攻撃者がSharePointの認証バイパスを悪用 」： #TheHackerNews

「攻撃者は、概念実証（PoC）コードの公開を受けて、新たに明らかになったMicrosoft SharePointの脆弱性を悪用し始めている。

問題となっている脆弱性は CVE-2026-55040 （CVSSスコア：9.1）で、認証の脆弱性に起因する重大なセキュリティ機能のバイパスに関するものです。この脆弱性は、マイクロソフトが2026年7月のパッチチューズデーアップデートの一環として修正しました。

マイクロソフトは先月、この脆弱性に関する勧告の中で、「この脆弱性によりなりすましが可能になるため、認証機能が回避される可能性がある」と述べた。「この脆弱性を悪用すると、攻撃者はファイルを漏洩させたりデータを改ざんしたりできる可能性があるが、システムの可用性に影響を与えることはできない」としている。 」

https://thehackernews.com/2026/08/attackers-exploit-sharepoint.html

#prattohome

Rapid7 released a proof-of-concept for CVE-2026-55040, a critical SharePoint vulnerability, on August 12. Within hours, Defused observed the exploit weaponized against SharePoint honeypots. Microsoft patched the flaw in July, yet Shadowserver still reports over 8,500 exposed servers. Patching is no longer optional.

#SharePoint #CVE2026 #VulnerabilityManagement #PatchTuesday

https://cyberworldops.eu/en/sharepoint-proof-of-concept-for-critical-flaw-already-used-in-attacks

Tracked as CVE-2026-55040, this authentication bypass security flaw in the JWT token validation pipeline can be exploited by attackers without privileges to perform operations as a SharePoint site user or administrator. https://www.bleepingcomputer.com/news/microsoft/hackers-leverage-new-microsoft-sharepoint-exploit-in-attacks/

Researchers disclosed a full unauthenticated RCE chain in Microsoft SharePoint, tracked as CVE-2026-55040 (CVSS 9.1). The flaw in the authentication pipeline allows an attacker to impersonate any user, including admins, using only the target's AD SID or UPN. No credentials required.

#SharePointRCE #UnauthenticatedExploit #CVE2026 #CriticalVulnerability

https://cyberworldops.eu/en/sharepoint-exploit-chain-enables-unauthenticated-rce

Rapid7 published full details and a PoC for CVE-2026-55040, a critical SharePoint authentication bypass that forges JWT tokens. Patch now.

#CVE202655040 #SharePoint #AuthenticationBypass #JWT #Rapid7 #PoC #Cybersecurity

https://securityonline.info/sharepoint-auth-bypass-cve-2026-55040/?utm_source=mastodon&utm_medium=jetpack_social

「研究者らが、認証不要のリモートコード実行（RCE）を実現するAI支援型SharePointエクスプロイトチェーンを公開 」： #TheHackerNews

「セキュリティ研究者らは、有効なアカウントを持たずに、管理者を含むあらゆるユーザーとしてMicrosoft SharePointサーバーに侵入する方法を発見した。この発見に大きく貢献したのが、AIエージェントを用いた作業だった。

CVE-2026-55040 （CVSS 9.1）として追跡されているこの脆弱性は 、SharePoint Server Subscription Edition、SharePoint Server 2019、およびSharePoint Server 2016に影響します。マイクロソフトの影響を受ける製品リストには、これら3つのオンプレミス版のみが含まれており、SharePoint Onlineは含まれていません。

この攻撃手法は、認証されていないリモート攻撃者が、選択したユーザーの身元を偽装することを可能にします。 」

https://thehackernews.com/2026/08/researchers-disclose-ai-assisted.html

#prattohome

New.

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040) https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-jwt-token-authentication-bypass-cve-2026-55040/ @Rapid7Official #Microsoft #infosec #threatresearch #SharePoint #vulnerability

🟠 CVE-2026-73406 - High (7.5)

Budibase is an open-source low-code platform. Prior to 3.39.32, GET /api/global/users/tenant/:id was listed in PUBLIC_ENDPOINTS in packages/worker/src/api/index.ts, and tenantUserLookup returned a full PlatformUser document. An unauthenticated cal...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73406/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73406 - High (7.5)

Budibase is an open-source low-code platform. Prior to 3.39.32, GET /api/global/users/tenant/:id was listed in PUBLIC_ENDPOINTS in packages/worker/src/api/index.ts, and tenantUserLookup returned a full PlatformUser document. An unauthenticated cal...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73406/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73224 - High (8.8)

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73224/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

CVE-2026-59507 (CRITICAL, CVSS 9.3) impacts Priority ERP Portal Generator addon: hard-coded creds, info exposure, improper access control. No patch yet — restrict access & monitor systems. https://radar.offseq.com/threat/cve-2026-59507-cwe-798-use-of-hard-coded-credentials-cwe-200-exposure-of-sensitive-information-to-an-30882f5adf8cd1ad #OffSeq #CVE #Infosec #ERP

CVE-2026-59507 (CRITICAL, CVSS 9.3) impacts Priority ERP Portal Generator addon: hard-coded creds, info exposure, improper access control. No patch yet — restrict access & monitor systems. https://radar.offseq.com/threat/cve-2026-59507-cwe-798-use-of-hard-coded-credentials-cwe-200-exposure-of-sensitive-information-to-an-30882f5adf8cd1ad #OffSeq #CVE #Infosec #ERP

CVE-2026-59506 (CRITICAL): Portal Generator addon to Priority ERP lacks authentication for a critical function. Unauthenticated remote attackers can access sensitive data. No patch yet — restrict access & monitor. More info: https://radar.offseq.com/threat/cve-2026-59506-cwe-306-missing-authentication-for-critical-function-in-priority-portal-generator-addon-10b51be16c861426 #OffSeq #CVE202659506 #ERP #Infosec

CVE-2026-59506 (CRITICAL): Portal Generator addon to Priority ERP lacks authentication for a critical function. Unauthenticated remote attackers can access sensitive data. No patch yet — restrict access & monitor. More info: https://radar.offseq.com/threat/cve-2026-59506-cwe-306-missing-authentication-for-critical-function-in-priority-portal-generator-addon-10b51be16c861426 #OffSeq #CVE202659506 #ERP #Infosec

🟠 CVE-2026-19311 - High (8.1)

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19311/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19311 - High (8.1)

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19311/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12263 - High (8.8)

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12263/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12263 - High (8.8)

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12263/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73498 - High (7.7)

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment passes its client-supplied file_path directly to open(file_path, "rb") in src/mcp_atlassian/confluen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73498/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73498 - High (7.7)

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment passes its client-supplied file_path directly to open(file_path, "rb") in src/mcp_atlassian/confluen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73498/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

OpenStack Designate CRITICAL vuln (CVE-2026-71193, CVSS 9.6): Authenticated users can hijack or disrupt DNS cross-tenant by bypassing zone checks via AttributeFilter in multi-pool deployments. Disable AttributeFilter until patched. https://radar.offseq.com/threat/cve-2026-71193-cwe-863-incorrect-authorization-in-openstack-designate-01ef425c39443191 #OffSeq #OpenStack #DNS #Vuln

🔴 CVE-2026-71193 - Critical (9.6)

In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different poo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71193/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

OpenStack Designate CRITICAL vuln (CVE-2026-71193, CVSS 9.6): Authenticated users can hijack or disrupt DNS cross-tenant by bypassing zone checks via AttributeFilter in multi-pool deployments. Disable AttributeFilter until patched. https://radar.offseq.com/threat/cve-2026-71193-cwe-863-incorrect-authorization-in-openstack-designate-01ef425c39443191 #OffSeq #OpenStack #DNS #Vuln

🔴 CVE-2026-71193 - Critical (9.6)

In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different poo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71193/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66898 - Critical (9.9)

A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66898 - Critical (9.9)

A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

VMware vCenter Under Attack: Critical CVE-2026-59310 Exploited in a Global Reverse-SSH Campaign + Video

Introduction: A Five-Day Warning That A critical vulnerability in VMware vCenter has rapidly turned from a security advisory into an active global intrusion campaign. CVE-2026-59310, a directory traversal flaw affecting the vCenter Server Syslog component, is now being exploited by attackers to gain access to vulnerable infrastructure and install a reverse-SSH tool…

https://undercodenews.com/vmware-vcenter-under-attack-critical-cve-2026-59310-exploited-in-a-global-reverse-ssh-campaign-video/?utm_source=mastodon&utm_medium=jetpack_social

Critical VMware vCenter RCE flaw exploited for reverse SSH access

A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a...

🔗️ [Bleepingcomputer] https://link.is.it/3RirvF

VMware vCenter flaw exploited for reverse SSH access globally

A critical VMware vCenter flaw, CVE-2026-59310, is being exploited globally, with 361 Internet-connected systems across 47 countries already compromised. This severe vulnerability allows unauthenticated attackers to execute arbitrary code, making swift action essential to prevent further breaches.

https://osintsights.com/vmware-vcenter-flaw-exploited-for-reverse-ssh-access-globally?utm_source=mastodon&utm_medium=social

#Vmware #Cve202659310 #Vcenter #DirectoryTraversal #SupplyChain

VMware vCenter Flaw Exploited Days After Disclosure

Within days of Broadcom's advisory, a critical VMware vCenter flaw, CVE-2026-59310, was exploited, putting 361 victim IP addresses across 47 countries at risk. This severe vulnerability allowed attackers to turn a logging service into a gateway to infiltrate operating systems worldwide.

https://osintsights.com/vmware-vcenter-flaw-exploited-days-after-disclosure?utm_source=mastodon&utm_medium=social

#Cve202659310 #Vmware #Vcenter #DirectoryTraversal #SupplyChain

📢 ⚠️ Researchers have linked 361 victim IPs in 47 countries to a suspected APT campaign exploiting a critical VMware vCenter flaw, CVE-2026-59310.

Listen/Read: https://hackread.com/apt-exploits-critical-vmware-vcenter-vulnerabilities/

#CyberSecurity #VMware #vCenter #APT #Vulnerability

Attackers Exploit Critical VMware vCenter Flaws to Gain Persistent Remote Access

German cybersecurity firm QUIRSO reports active exploitation of VMware vCenter and ESXi, critical flaws (CVE-2026-59310 and CVE-2026-59309).

**If you run VMware vCenter, this is important. Make sure it is not reachable from the internet and can only be accessed from trusted internal networks. Then urgently apply the fixes from Broadcom advisory VMSA-2026-0006.1 (vCenter 9.1.0.0300, 9.0.2.0100, or 8.0 U3k / U2f), because the platform is being attacked and there is no workaround for the flaws. If your vCenter was exposed, check it for signs of compromise such as unexpected cron jobs, unknown SSH tools, or unusual outbound connections.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/attackers-exploit-critical-vmware-vcenter-flaws-to-gain-persistent-remote-access-4-o-b-8-9/gD2P6Ple2L

「攻撃者がVMware vCenterの脆弱性を悪用し、永続的なリモートアクセスを取得する 」： #TheHackerNews

「QUIRSOの 新たな調査結果 によると、攻撃者は、最近パッチが適用されたBroadcom VMware vCenterの重大なセキュリティ脆弱性を積極的に悪用し始めている。

問題となっている脆弱性は CVE-2026-59310 （CVSSスコア：9.8）で、VMware vCenterサーバーのディレクトリトラバーサル脆弱性であり、ネットワークアクセス権を持つ悪意のある攻撃者がこれを悪用して任意のコードを実行できる可能性がある。この脆弱性に対するパッチは、ブロードコム社が先月末にリリースした。

ドイツのサイバーセキュリティ企業は、インシデント対応活動中にこの活動を発見したと発表した。 」

https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html

#prattohome

VMware vCenter Under Attack: CVE-2026-59310 Enables Persistent Access

https://cyberworldops.eu/en/vmware-vcenter-under-attack-cve-2026-59310-enables-persistent-access

📰 VMware Patches Critical VM Escape Flaw (CVE-2026-47876) in ESXi

Broadcom patches critical VMware flaws, including a VM escape in ESXi (CVE-2026-47876) and unauthenticated RCE in vCenter (CVE-2026-59309, CVE-2026-59310). CVSS scores up to 9.8. Immediate patching is crucial. #VMware #CyberSecurity #PatchTuesday

🔗 https://cyber.netsecops.io/articles/vmware-patches-critical-vm-escape-vulnerability-cve-2026-47876-in-esxi/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

VMware vCenter Under Attack: Critical CVE-2026-59310 Exploited in a Rapid Global Intrusion Campaign + Video

A New Warning for Virtualization Administrators Virtualization infrastructure has quietly become one of the most valuable targets in modern cyberattacks. A compromised workstation can expose one user or one endpoint, but a compromised virtualization-management server can potentially open a path toward dozens, hundreds, or even thousands of workloads. That is why…

https://undercodenews.com/vmware-vcenter-under-attack-critical-cve-2026-59310-exploited-in-a-rapid-global-intrusion-campaign-video/?utm_source=mastodon&utm_medium=jetpack_social

The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html

Critical VMware vCenter RCE flaw exploited for reverse SSH access

A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a...

🔗️ [Bleepingcomputer] https://link.is.it/3RirvF

📢 ⚠️ Researchers have linked 361 victim IPs in 47 countries to a suspected APT campaign exploiting a critical VMware vCenter flaw, CVE-2026-59310.

Listen/Read: https://hackread.com/apt-exploits-critical-vmware-vcenter-vulnerabilities/

#CyberSecurity #VMware #vCenter #APT #Vulnerability

Attackers Exploit Critical VMware vCenter Flaws to Gain Persistent Remote Access

German cybersecurity firm QUIRSO reports active exploitation of VMware vCenter and ESXi, critical flaws (CVE-2026-59310 and CVE-2026-59309).

**If you run VMware vCenter, this is important. Make sure it is not reachable from the internet and can only be accessed from trusted internal networks. Then urgently apply the fixes from Broadcom advisory VMSA-2026-0006.1 (vCenter 9.1.0.0300, 9.0.2.0100, or 8.0 U3k / U2f), because the platform is being attacked and there is no workaround for the flaws. If your vCenter was exposed, check it for signs of compromise such as unexpected cron jobs, unknown SSH tools, or unusual outbound connections.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/attackers-exploit-critical-vmware-vcenter-flaws-to-gain-persistent-remote-access-4-o-b-8-9/gD2P6Ple2L

「攻撃者がVMware vCenterの脆弱性を悪用し、永続的なリモートアクセスを取得する 」： #TheHackerNews

「QUIRSOの 新たな調査結果 によると、攻撃者は、最近パッチが適用されたBroadcom VMware vCenterの重大なセキュリティ脆弱性を積極的に悪用し始めている。

問題となっている脆弱性は CVE-2026-59310 （CVSSスコア：9.8）で、VMware vCenterサーバーのディレクトリトラバーサル脆弱性であり、ネットワークアクセス権を持つ悪意のある攻撃者がこれを悪用して任意のコードを実行できる可能性がある。この脆弱性に対するパッチは、ブロードコム社が先月末にリリースした。

ドイツのサイバーセキュリティ企業は、インシデント対応活動中にこの活動を発見したと発表した。 」

https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html

#prattohome

VMware vCenter Under Attack: CVE-2026-59310 Enables Persistent Access

https://cyberworldops.eu/en/vmware-vcenter-under-attack-cve-2026-59310-enables-persistent-access

The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html

There are several updates from Broadcom addressing a long list of vulnerabilities, one of them critical https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Yesterday:

CISA:

CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts https://www.cisa.gov/news-events/news/cisa-unveils-new-cybersecurity-resources-k-12-schools-and-districts #CISA

Palo Alto: CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering https://security.paloaltonetworks.com/CVE-2026-0301 #infosec #vulnerability

There are several updates from Broadcom addressing a long list of vulnerabilities, one of them critical https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Yesterday:

CISA:

CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts https://www.cisa.gov/news-events/news/cisa-unveils-new-cybersecurity-resources-k-12-schools-and-districts #CISA

Palo Alto: CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering https://security.paloaltonetworks.com/CVE-2026-0301 #infosec #vulnerability

CVE-2026-61358 - Privilege escalation in Windows ATBroker.exe via link following. CVSS 7.8. Patch immediately. #CVE #Microsoft #infosec

https://www.valtersit.com/cve/CVE-2026-61358/

🔴 CVE-2026-73501 - Critical (9.1)

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load() in openapi3filter/validation_handler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73501/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73501 - Critical (9.1)

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load() in openapi3filter/validation_handler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73501/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73418 - High (7.5)

NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the exported getToken() helper in the next-auth/jwt and @auth/core/jwt modules can throw an uncaught exception when it reads a mal...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73418/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73418 - High (7.5)

NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the exported getToken() helper in the next-auth/jwt and @auth/core/jwt modules can throw an uncaught exception when it reads a mal...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73418/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59501 - High (8.2)

CWE-284: Improper Access Control

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59501/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59501 - High (8.2)

CWE-284: Improper Access Control

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59501/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59500 - Critical (10)

CWE-287: Improper Authentication

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59500/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59500 - Critical (10)

CWE-287: Improper Authentication

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59500/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-11840 - Authenticated SQLi in Zohocorp ManageEngine Password Manager Pro & PAM360. CVSS 8.8. Unpatched. Update immediately. #CVE #Zoho #infosec

https://www.valtersit.com/cve/CVE-2026-11840/

CVE-2026-13610 | CRITICAL privilege flaw in KiviCare <4.5.2 lets unauthenticated attackers create privileged staff accounts, risking patient data exposure 🏥. Restrict registration endpoint & monitor user creation. https://radar.offseq.com/threat/cve-2026-13610-cwe-269-improper-privilege-management-in-kivicare-c9bee31557a60fdb #OffSeq #WordPress #Infosec #Healthcare

CVE-2026-13610 | CRITICAL privilege flaw in KiviCare <4.5.2 lets unauthenticated attackers create privileged staff accounts, risking patient data exposure 🏥. Restrict registration endpoint & monitor user creation. https://radar.offseq.com/threat/cve-2026-13610-cwe-269-improper-privilege-management-in-kivicare-c9bee31557a60fdb #OffSeq #WordPress #Infosec #Healthcare

🔴 CVE-2026-26035 - Critical (9.8)

An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-26035/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-26035 - Critical (9.8)

An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-26035/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Google's new Chrome security update patches 5 high-severity use-after-free bugs, including CVE-2026-19556 and CVE-2026-19560. Update now.

#Chrome #Google #UseAfterFree #CVE #BrowserSecurity #PatchNow #Cybersecurity

https://securityonline.info/chrome-use-after-free-update/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-10534 - High (8.4)

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10534/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-10534 - High (8.4)

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10534/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19003 - High (7.8)

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19003/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19003 - High (7.8)

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19003/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-73519: WolfStack <25.9.2 vulnerable to hard-coded secret in src/auth/mod.rs — remote attackers can bypass auth & run root commands in containers via the management port. Restrict access & monitor for X-WolfStack-Secret usage. https://radar.offseq.com/threat/cve-2026-73519-use-of-hard-coded-credentials-in-wolfsoftwaresystemsltd-wolfstack-ed98acc25b8c686b #OffSeq #CVE202673519

🔴 CVE-2026-73519 - Critical (9.8)

WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73519/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-73519: WolfStack <25.9.2 vulnerable to hard-coded secret in src/auth/mod.rs — remote attackers can bypass auth & run root commands in containers via the management port. Restrict access & monitor for X-WolfStack-Secret usage. https://radar.offseq.com/threat/cve-2026-73519-use-of-hard-coded-credentials-in-wolfsoftwaresystemsltd-wolfstack-ed98acc25b8c686b #OffSeq #CVE202673519

🔴 CVE-2026-73519 - Critical (9.8)

WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73519/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71471 - Critical (9)

A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource (CR), could exploit a vulnerability in the `Collector.ImageOverride` field. This a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71471/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71471 (CRITICAL): acm-search-v2-rhel9 lets hub admins with Search CR patch rights deploy arbitrary containers fleet-wide. RCE & data access at risk. Restrict Search CR patch access now. Full details: https://radar.offseq.com/threat/a-flaw-was-found-in-acm-search-v2-rhel9-cve-2026-71471-abe3108354cb7e94 #OffSeq #Kubernetes #RedHat #Infosec

🔴 CVE-2026-71471 - Critical (9)

A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource (CR), could exploit a vulnerability in the `Collector.ImageOverride` field. This a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71471/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71471 (CRITICAL): acm-search-v2-rhel9 lets hub admins with Search CR patch rights deploy arbitrary containers fleet-wide. RCE & data access at risk. Restrict Search CR patch access now. Full details: https://radar.offseq.com/threat/a-flaw-was-found-in-acm-search-v2-rhel9-cve-2026-71471-abe3108354cb7e94 #OffSeq #Kubernetes #RedHat #Infosec

🟠 CVE-2026-71473 - High (8.5)

A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inject arbitrary configuration data. This manipulation can override critic...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71473/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71473 - High (8.5)

A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inject arbitrary configuration data. This manipulation can override critic...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71473/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73303 - High (8.2)

Budibase is an open-source low-code platform. Prior to 3.40.0, POST /api/v2/email on account.budibase.app accepted a client-controlled accountId without binding it to the authenticated session, while checking only currentEmail. An authenticated at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73303/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73303 - High (8.2)

Budibase is an open-source low-code platform. Prior to 3.40.0, POST /api/v2/email on account.budibase.app accepted a client-controlled accountId without binding it to the authenticated session, while checking only currentEmail. An authenticated at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73303/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55676 - High (8.8)

Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at `POST /server/php/submit.php` and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55676/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73433 - High (7.6)

A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73433/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73433 - High (7.6)

A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73433/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71469 - High (7.5)

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71469/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71469 - High (7.5)

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71469/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19002 - High (8.1)

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19002 - High (8.1)

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19001 - Critical (9.8)

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19001/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19001 - Critical (9.8)

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19001/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73326 - High (7.6)

CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access and modify plugin settings by reaching four unprotected plugin-administration endpoints without administrator-level authorizatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73326/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73326 - High (7.6)

CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access and modify plugin settings by reaching four unprotected plugin-administration endpoints without administrator-level authorizatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73326/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

also: those are some god damn useless CVEs, istg... https://db.gcve.eu/vuln/cve-2026-17083

also: those are some god damn useless CVEs, istg... https://db.gcve.eu/vuln/cve-2026-17083

🟠 CVE-2026-73332 - High (8.7)

CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin that allows low-privileged authenticated attackers to inject arbitrary HTML by submitting unsanitized content to the before_html field through the con...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73332/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73332 - High (8.7)

CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin that allows low-privileged authenticated attackers to inject arbitrary HTML by submitting unsanitized content to the before_html field through the con...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73332/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73329 - High (8.7)

CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execute arbitrary JavaScript in an administrator's browser by injecting unsanitized HTML payloads into the post title parameter duri...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73329/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73329 - High (8.7)

CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execute arbitrary JavaScript in an administrator's browser by injecting unsanitized HTML payloads into the post title parameter duri...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73329/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Adobe Commerce CVE-2026-71362 Exploited Almost Immediately, Turning a Critical 91 Flaw Into an Urgent Security Warning + Video

A Critical Vulnerability Moves From Disclosure to Exploitation Some cybersecurity vulnerabilities remain theoretical for months. Others become dangerous the moment the technical details become public. CVE-2026-71362 appears to belong to the second category. A critical Adobe Commerce vulnerability rated 9.1 has reportedly been exploited shortly…

https://undercodenews.com/adobe-commerce-cve-2026-71362-exploited-almost-immediately-turning-a-critical-91-flaw-into-an-urgent-security-warning-video/?utm_source=mastodon&utm_medium=jetpack_social

Critical Adobe Commerce Flaw CVE-2026-71362 Is Under Active Attack: Hackers Can Hijack Customer Accounts Without Logging In + Video

A Dangerous Warning for Every Magento Store Owner A critical vulnerability in Adobe Commerce and Magento Open Source has moved from disclosure to exploitation with alarming speed. CVE-2026-71362, carrying a CVSS score of 9.1, gives unauthenticated attackers a way to manipulate customer sessions, potentially hijack accounts and access…

https://undercodenews.com/critical-adobe-commerce-flaw-cve-2026-71362-is-under-active-attack-hackers-can-hijack-customer-accounts-without-logging-in-video/?utm_source=mastodon&utm_medium=jetpack_social

「ハッカーがAdobe Commerceの重大な脆弱性を悪用し、顧客アカウントを乗っ取る 」： #BLEEPINGCOMPUTER

「AdobeのeコマースプラットフォームであるCommerceとMagentoにおける重大な脆弱性（CVE-2026-71362）を悪用しようとする試みが検出されました。この脆弱性により、攻撃者が顧客アカウントを乗っ取る可能性があります。

この脆弱性は、認証なしに「機密性の高いリソースへの上位アクセス権を取得する」ために悪用される可能性のある、誤った認証の脆弱性と説明されており、Adobeが昨日のセキュリティアップデートで対処した7つの問題のうちの1つです。

ソフトウェアベンダーは 勧告 の中で、修正された脆弱性に対する実際の攻撃事例は把握していないと述べているが、eコマースセキュリティ企業のSansecは、同社のShieldウェブアプリケーションファイアウォール（WAF）が既にCVE-2026-71362の悪用を阻止していると述べている。 」

https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/

#prattohome

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

Active exploitation attempts targeting CVE-2026-71362 have been observed since August 12, 2026, affecting Adobe Commerce and Magento installations. The flaw is an authorization bypass that grants unauthenticated access to sensitive resources due to incorrect identity handling.

#CVE202671362 #AdobeCommerce #Magento #AuthorizationBypass

https://cyberworldops.eu/en/adobe-commerce-and-magento-under-attack-cve-2026-71362-exploited

Hackers exploit critical Adobe Commerce flaw to hijack customer accounts

Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially...

🔗️ [Bleepingcomputer] https://link.is.it/JJqIH9

Hackers Exploit Adobe Commerce Flaw to Hijack Customer Accounts

Hackers can hijack your customer accounts with just a few clicks, thanks to a critical flaw in Adobe Commerce that lets attackers switch to another customer's session, gaining access to sensitive data. This vulnerability, tracked as CVE-2026-71362, is a wake-up call for businesses to take immediate action and protect…

https://osintsights.com/hackers-exploit-adobe-commerce-flaw-to-hijack-customer-accounts?utm_source=mastodon&utm_medium=social

#AdobeCommerce #Cve202671362 #SessionHijacking #CustomerDataBreach #EcommerceSecurity

「ハッカーがAdobe Commerceの重大な脆弱性を悪用し、顧客アカウントを乗っ取る 」： #BLEEPINGCOMPUTER

「AdobeのeコマースプラットフォームであるCommerceとMagentoにおける重大な脆弱性（CVE-2026-71362）を悪用しようとする試みが検出されました。この脆弱性により、攻撃者が顧客アカウントを乗っ取る可能性があります。

この脆弱性は、認証なしに「機密性の高いリソースへの上位アクセス権を取得する」ために悪用される可能性のある、誤った認証の脆弱性と説明されており、Adobeが昨日のセキュリティアップデートで対処した7つの問題のうちの1つです。

ソフトウェアベンダーは 勧告 の中で、修正された脆弱性に対する実際の攻撃事例は把握していないと述べているが、eコマースセキュリティ企業のSansecは、同社のShieldウェブアプリケーションファイアウォール（WAF）が既にCVE-2026-71362の悪用を阻止していると述べている。 」

https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/

#prattohome

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

Active exploitation attempts targeting CVE-2026-71362 have been observed since August 12, 2026, affecting Adobe Commerce and Magento installations. The flaw is an authorization bypass that grants unauthenticated access to sensitive resources due to incorrect identity handling.

#CVE202671362 #AdobeCommerce #Magento #AuthorizationBypass

https://cyberworldops.eu/en/adobe-commerce-and-magento-under-attack-cve-2026-71362-exploited

Hackers exploit critical Adobe Commerce flaw to hijack customer accounts

Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially...

🔗️ [Bleepingcomputer] https://link.is.it/JJqIH9

CVE-2026-48442 - Path traversal in CAI Content Credentials allows arbitrary file system read. CVSS 7.1. No user interaction needed. Patch status unknown. Update immediately. #CVE #infosec #CAI

https://www.valtersit.com/cve/CVE-2026-48442/

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

🟠 CVE-2026-73325 - High (7.8)

Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.load_quantized_model_pt() unc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73325/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73325 - High (7.8)

Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.load_quantized_model_pt() unc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73325/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73300 - Critical (9.6)

Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73300/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73300 - Critical (9.6)

Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73300/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-72798 - High severity info disclosure in SiYuan. Unpatched v3.7.4 lets anonymous readers access hidden database content via related-database bypass. CVSS 8.6. Update immediately. #CVE #SiYuan #infosec

https://www.valtersit.com/cve/CVE-2026-72798/

CVE-2026-58115 is a CVSS 10 flaw letting unauthenticated attackers run code on SIMATIC IoT2050 via Node-RED. Siemens urges an immediate update.

#CVE202658115 #Siemens #NodeRED #RCE #SIMATIC #ICS #Cybersecurity

https://securityonline.info/simatic-iot2050-node-red-rce/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-69106 - High (8.8)

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69106/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-69106 - High (8.8)

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69106/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73327 - High (7.6)

Joomla 6.1.1 contains a path traversal vulnerability in the com_joomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory traversal sequences or absolute paths in ZIP entry filenames. Atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73327/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73327 - High (7.6)

Joomla 6.1.1 contains a path traversal vulnerability in the com_joomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory traversal sequences or absolute paths in ZIP entry filenames. Atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73327/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-18634 - High severity deserialization flaw in GMS 9.5.1 and earlier. Local attacker can trigger unauthorized actions via service. CVSS 8.4. Unpatched - update immediately. #CVE #cybersecurity #GMS

https://www.valtersit.com/cve/CVE-2026-18634/

🟠 CVE-2026-73122 - High (7.7)

A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a compromised agent from a managed cluster to gain unauthorized access to sensitive information. Specifically,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73122/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65941 - High (8.8)

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65941/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65941 - High (8.8)

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65941/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📰 New 'ShieldBreak' Exploit Bypasses Microsoft Defender Patch

A new zero-day exploit, 'ShieldBreak,' bypasses Microsoft's patch for the 'RoguePlanet' Defender flaw (CVE-2026-50656). The PoC allows SYSTEM-level access on patched Windows systems. No fix is currently available. #ZeroDay #MicrosoftDefender #CyberSe...

🔗 https://cyber.netsecops.io/articles/shieldbreak-zero-day-exploit-bypasses-microsoft-defender-patch/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

「Microsoftに恨みを持つハッカーが、完全にパッチが適用されたWindows上でシステム権限を取得できる新たなゼロデイ脆弱性を発見した。
/水曜日の裏技を使おうぜ、ベイビー 」： #TheRegister

「マイクロソフトに恨みを持つ、ゼロデイ攻撃を専門とするNightmare Eclipseは、マイクロソフトのRoguePlanetパッチ（CVE-2026-50656）を回避すると思われる、Defenderの新たなゼロデイ脆弱性「ShieldBreak」を公開した。これにより、攻撃者は完全にパッチが適用されたWindows 10、Windows 11、およびWindows Serverシステム上でSYSTEM権限を取得できる。

少なくとも他の研究者の一人によると、このエクスプロイトは有効だという。「試してみたところ、最新のWindows 11でも動作しました」と、元マイクロソフト社員でセキュリティ専門家のケビン・ボーモント氏 は述べている 。 」

https://www.theregister.com/cyber-crime/2026/08/12/microsoft-vendetta-hacker-has-a-new-zero-day-that-gives-system-privileges-on-fully-patched-windows/5286889

#prattohome

“Nightmare Eclipse, the serial zero-day hunter who has an axe to grind with Microsoft, published a new Defender zero-day, ShieldBreak, that apparently bypasses Redmond’s RoguePlanet patch (CVE-2026-50656), allowing attackers to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server systems.”

https://www.theregister.com/cyber-crime/2026/08/12/microsoft-vendetta-hacker-has-a-new-zero-day-that-gives-system-privileges-on-fully-patched-windows/5286889

A proof-of-concept for ShieldBreak has been disclosed, showing how to bypass the patch Microsoft issued for CVE-2026-50656 (RoguePlanet). The flaw targets SYSTEM-level privilege escalation on Windows systems protected by Microsoft Defender.

#ShieldBreak #CVE202650656 #PrivilegeEscalation #MicrosoftDefender

https://cyberworldops.eu/en/shieldbreak-poc-bypasses-microsoft-defender-patch-and-targets-system

「Microsoftに恨みを持つハッカーが、完全にパッチが適用されたWindows上でシステム権限を取得できる新たなゼロデイ脆弱性を発見した。
/水曜日の裏技を使おうぜ、ベイビー 」： #TheRegister

「マイクロソフトに恨みを持つ、ゼロデイ攻撃を専門とするNightmare Eclipseは、マイクロソフトのRoguePlanetパッチ（CVE-2026-50656）を回避すると思われる、Defenderの新たなゼロデイ脆弱性「ShieldBreak」を公開した。これにより、攻撃者は完全にパッチが適用されたWindows 10、Windows 11、およびWindows Serverシステム上でSYSTEM権限を取得できる。

少なくとも他の研究者の一人によると、このエクスプロイトは有効だという。「試してみたところ、最新のWindows 11でも動作しました」と、元マイクロソフト社員でセキュリティ専門家のケビン・ボーモント氏 は述べている 。 」

https://www.theregister.com/cyber-crime/2026/08/12/microsoft-vendetta-hacker-has-a-new-zero-day-that-gives-system-privileges-on-fully-patched-windows/5286889

#prattohome

“Nightmare Eclipse, the serial zero-day hunter who has an axe to grind with Microsoft, published a new Defender zero-day, ShieldBreak, that apparently bypasses Redmond’s RoguePlanet patch (CVE-2026-50656), allowing attackers to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server systems.”

https://www.theregister.com/cyber-crime/2026/08/12/microsoft-vendetta-hacker-has-a-new-zero-day-that-gives-system-privileges-on-fully-patched-windows/5286889

A proof-of-concept for ShieldBreak has been disclosed, showing how to bypass the patch Microsoft issued for CVE-2026-50656 (RoguePlanet). The flaw targets SYSTEM-level privilege escalation on Windows systems protected by Microsoft Defender.

#ShieldBreak #CVE202650656 #PrivilegeEscalation #MicrosoftDefender

https://cyberworldops.eu/en/shieldbreak-poc-bypasses-microsoft-defender-patch-and-targets-system

„Microsoft hat mit dem August 2026-Patchday zwar einige Sicherheitskorrekturen ausgeliefert. Aber die RoguePlanet genannte Schwachstelle (CVE-2026-50656) soll nicht ausreichend abgeschwächt worden sein. Der als Nightmare Eclipse agierende Sicherheitsforscher hat einen ShieldBreak genannten Proof of Concept (PoC) veröffentlicht.“

https://borncity.com/blog/2026/08/12/shieldbreak-poc-fuer-microsoft-defender-0-day-schwachstelle/

A public PoC named ShieldBreak bypasses Microsoft's CVE-2026-50656 patch, enabling Windows Defender privilege escalation to SYSTEM.

#ShieldBreak #CVE202650656 #WindowsDefender #PrivilegeEscalation #PoC #RoguePlanet #Cybersecurity

https://securityonline.info/shieldbreak-defender-poc/?utm_source=mastodon&utm_medium=jetpack_social

On another news NightmareEclipse (the goat?) returned with a new PoC, after Microsoft failed to fully patch RoguePlanet (CVE-2026-50656), the current PoC only made for latest Windows 11 release, but they said that Windows 10 also still vulnerable. And yeah, it works even after the latest update

https://github.com/MSNightmare/ShieldBreak

#cybersecurity #infosec #zeroday #vulnerability #windows #nightmareEclipse

🚨Nightmare Eclipse has released a new zero-day PoC called ShieldBreak

Per the security researcher: "Microsoft has failed to properly patch the RoguePlanet vulnerability CVE-2026-50656, this PoC demonstrates a full patch bypass."

GitHub: https://github.com/MSNightmare/ShieldBreak

CVE-2026-66804 - Windows Cross Device Service LPE - Writeup & PoC

Found another cool one!
https://www.nadsec.online/blog/cve-2026-66804-crossdevice-service-eop

Not sure who found it first, but shoutout to them. Despite not being FTF, my mom thinks this one is cool, which is the only important metric 😎

@wdormann
CVE-2026-66804

Haha it’s a good one. And yeah not these days, I had thought I might have atleast been first to find but not quite 🤣

@wdormann
CVE-2026-66804

Haha it’s a good one. And yeah not these days, I had thought I might have atleast been first to find but not quite 🤣

Google's new Chrome security update patches 5 high-severity use-after-free bugs, including CVE-2026-19556 and CVE-2026-19560. Update now.

#Chrome #Google #UseAfterFree #CVE #BrowserSecurity #PatchNow #Cybersecurity

https://securityonline.info/chrome-use-after-free-update/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-57858 - High (8.9)

Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracki...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57858/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-57858: CRITICAL stored XSS in Cal.com Self-Hosted (v2.1.1 – 6.2.0). Exploited via BookingPageTagManager by authenticated event owners; affects all booking page visitors. Patch status unknown. Restrict privileges. https://radar.offseq.com/threat/cve-2026-57858-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-953e719dabfd2c11 #OffSeq #XSS #SecOps

🟠 CVE-2026-57858 - High (8.9)

Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracki...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57858/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-57858: CRITICAL stored XSS in Cal.com Self-Hosted (v2.1.1 – 6.2.0). Exploited via BookingPageTagManager by authenticated event owners; affects all booking page visitors. Patch status unknown. Restrict privileges. https://radar.offseq.com/threat/cve-2026-57858-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-953e719dabfd2c11 #OffSeq #XSS #SecOps

🟠 CVE-2026-70468 - High (8.1)

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiMan...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70468/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70468 - High (8.1)

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiMan...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70468/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SonicWall patched a critical GMS vulnerability, CVE-2026-66147 (CVSS 9.4), enabling unauthenticated remote code execution. Update to 9.5.2 now.

#SonicWall #CVE #RCE #GMS #EmailSecurity #InfoSec

https://securityonline.info/sonicwall-gms-rce-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

Cisco confirmed active exploitation of CVE-2026-20349, a high-severity flaw (CVSS 8.6) in ASA and FTD firewalls. Insufficient error handling in HTTP processing allows an unauthenticated remote attacker to trigger a device reboot via the Remote Access SSL VPN service, resulting in denial of service.

#CVE202620349 #CiscoASA #FirewallSecurity #DenialOfService

https://cyberworldops.eu/en/cisco-asa-and-ftd-actively-exploited-vulnerability-can-restart

📰 Cisco Patches Firewall Zero-Day Exploited for DoS Attacks

Cisco patches an actively exploited zero-day (CVE-2026-20349) in ASA and FTD firewalls. The flaw allows a remote, unauthenticated attacker to cause a denial-of-service (DoS). Patch immediately to prevent network disruption. #Cisco #ZeroDay #CyberSecu...

🔗 https://cyber.netsecops.io/articles/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices. https://www.securityweek.com/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/

⚠️ New security advisory:

CVE-2026-20349 affects multiple systems.

• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-20349-cisco-asa-ftd-vpn-dos-exploited-in-wild

by Yazoul AI

#CVE #ZeroDay #ThreatIntel

Cisco confirmed active exploitation of CVE-2026-20349, a high-severity flaw (CVSS 8.6) in ASA and FTD firewalls. Insufficient error handling in HTTP processing allows an unauthenticated remote attacker to trigger a device reboot via the Remote Access SSL VPN service, resulting in denial of service.

#CVE202620349 #CiscoASA #FirewallSecurity #DenialOfService

https://cyberworldops.eu/en/cisco-asa-and-ftd-actively-exploited-vulnerability-can-restart

CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices. https://www.securityweek.com/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/

🚨 THREAT ALERT: CISA adds CVE-2026-20349 (Cisco ASA/FTD Heap Inspection DoS) to the KEV catalog due to active exploitation. Unauthenticated remote actors can crash perimeter firewalls. Read our full TSUITE brief with SPL, KQL, AQL & Chronicle queries: https://thecybermind.co/jily

#CyberSecurity

「Ciscoは、ASAおよびFTD VPNの脆弱性が悪用され、デバイスがクラッシュする可能性があると警告している。 」： #BLEEPINGCOMPUTER

「シスコは、Secure Firewall ASAおよびThreat Defense（FTD）ソフトウェアに存在する深刻なサービス拒否攻撃の脆弱性が、影響を受けるデバイスをリモートからクラッシュさせる攻撃で積極的に悪用されていると警告している。

CVE-2026-20349として追跡されているこの脆弱性は、深刻度スコアが8.6であり、特定のリモートアクセスサービスが有効になっているCisco Secure Firewall Adaptive Security Appliance（ASA）またはSecure Firewall Threat Defense（FTD）ソフトウェアを実行しているデバイスに影響を与えます。

シスコは本日公開したセキュリティ勧告の中で、この脆弱性はHTTPリクエスト処理時のエラーチェックが不十分なことに起因すると述べた。 」

https://www.bleepingcomputer.com/news/security/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices/

#prattohome

Cisco confirms CVE-2026-20349, a Cisco ASA and FTD VPN vulnerability (CVSS 8.6), is exploited in the wild to crash firewalls. Patch now.

#Cisco #CVE #DoS #FirewallSecurity #VPN #InfoSec

https://securityonline.info/cisco-asa-ftd-vpn-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0811] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0811)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-20349 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20349)
- Name: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20349

⚠️ CVE-2026-68820 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-68820)
- Name: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Windows Ancillary Function Driver for WinSock
- Notes: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-68820 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-68820

⚠️ CVE-2026-72898 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-72898)
- Name: Metabase SQL Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Metabase
- Product: Metabase
- Notes: https://www.metabase.com/blog/security-update ; https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-72898

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260811 #cisa20260811 #cve_2026_20349 #cve_2026_68820 #cve_2026_72898 #cve202620349 #cve202668820 #cve202672898

This is being actively exploited. CVE-2026-20349. Patch now. Like right now. #infosec #vpn #cisco #cve
https://www.bleepingcomputer.com/news/security/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices/

CVE ID: CVE-2026-20349
Vendor: Cisco
Product: Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
Date Added: 2026-08-11
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20349

Broadcom has several new advisories that include two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

CISA:

Industrial vulnerability: Johnson Controls C-CURE 9000 and Victor application server (Update A) https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-01

Blog post: Cyber Storm X: 20 Years of Readiness, Resilience, and Real‑World Impact https://www.cisa.gov/news-events/news/cyber-storm-x-20-years-readiness-resilience-and-real-world-impact #CISA

Cisco:

High-severity: CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF @TalosSecurity #Cisco

Yesterday:

Tenable Research Advisories:

Medium-severity: CVE-2026-12879: Google Cloud Platform (GCP) Apigee Cross-Tenant Data Exfiltration via Confused Deputy https://www.tenable.com/security/research/tra-2026-53 #infosec #Google #vulnerability

🔴 CVE-2026-67568 - Critical (9.1)

The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67568/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-67568 (CRITICAL, CVSS 9.3) in Mira Firmware 1.7.1.47: Hard-coded credentials let remote attackers read/write sensitive health data. No patch yet — restrict network access & monitor logs. https://radar.offseq.com/threat/cve-2026-67568-cwe-798-use-of-hard-coded-credentials-in-quanovate-tech-inc-operating-as-mira-mira-care-535c1a595418b62d #OffSeq #CVE202667568 #infosec #medtech #vuln

vulnerability-lookup 6.0 will be released this week with many (really, many!) new features.

One of the smaller, but important, additions is support for multiple SSVC views alongside CVSS. When SSVC information is available from an ADP (such as CISA) , or from additional sources such as GCVE, it is now displayed by default.

This allows users to more easily compare the different severity and prioritization assessments associated with a vulnerability.

The CIRCL vulnerability-lookup instance is running the pre-release of 6.0 -
https://vulnerability.circl.lu/vuln/cve-2026-59124

#cve #gcve #opensource #vulnerabilitylookup #opendata #vulnerabilitymanagement #cyberecurity #ssvc

@gcve
@circl

vulnerability-lookup 6.0 will be released this week with many (really, many!) new features.

One of the smaller, but important, additions is support for multiple SSVC views alongside CVSS. When SSVC information is available from an ADP (such as CISA) , or from additional sources such as GCVE, it is now displayed by default.

This allows users to more easily compare the different severity and prioritization assessments associated with a vulnerability.

The CIRCL vulnerability-lookup instance is running the pre-release of 6.0 -
https://vulnerability.circl.lu/vuln/cve-2026-59124

#cve #gcve #opensource #vulnerabilitylookup #opendata #vulnerabilitymanagement #cyberecurity #ssvc

@gcve
@circl

🟠 CVE-2026-73249 - High (7.5)

calibre is an e-book manager. Prior to 9.12.0, the calibre Content Server endpoint POST /book-update-annotations/{library_id}/{book_id}/{fmt} in src/calibre/srv/books.py omits needs_db_write=True, causing Router.dispatch() to skip ctx.check_for_wr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73249/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-72526 (CRITICAL, CVSS 9.9) in Red Hat Advanced Cluster Management for Kubernetes 2 lets low-priv hub users escalate to cluster-admin on managed clusters. No official fix. Restrict Application creation permissions now. https://radar.offseq.com/threat/cve-2026-72526-unintended-proxy-or-intermediary-confused-deputy-in-red-hat-red-hat-advanced-cluster-d135ff679a7da34d #OffSeq #RedHat #Kubernetes #CVE2026_72526

🔴 CVE-2026-72526 - Critical (9.9)

A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an Application Custom Resource (CR) without proper validation. A tenant with permissions to creat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72526/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-6484 - High (8.2)

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6484/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48763 - High (8.2)

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated public upload endpoint at `GET /api/v1/typebots/{typebotId}/blocks/{blockId}/storage/upload-url` that accepts an attacker-controlled `filePath` and returns a presigned...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48763/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19594 - High (8.1)

Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal (CWE-22) via unencoded `..` identifier path segments, a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19594/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19594 - High (8.1)

Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal (CWE-22) via unencoded `..` identifier path segments, a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19594/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2025-056
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware

This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.
#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771

https://certvde.com/en/advisories/vde-2025-056/

#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

CRITICAL: CVE-2026-67282 in Joomla Fabrik (v1.0.0 – 4.6.7) allows unauthenticated RCE (CWE-94). No patch yet — disable or restrict Fabrik use and monitor for updates. https://radar.offseq.com/threat/cve-2026-67282-cwe-94-improper-control-of-generation-of-code-code-injection-in-fabrikarcom-fabrik-2c969cc032f2e578 #OffSeq #Joomla #Infosec #RCE #CVE202667282

CRITICAL: CVE-2026-67282 in Joomla Fabrik (v1.0.0 – 4.6.7) allows unauthenticated RCE (CWE-94). No patch yet — disable or restrict Fabrik use and monitor for updates. https://radar.offseq.com/threat/cve-2026-67282-cwe-94-improper-control-of-generation-of-code-code-injection-in-fabrikarcom-fabrik-2c969cc032f2e578 #OffSeq #Joomla #Infosec #RCE #CVE202667282

🟠 CVE-2025-41770 - High (7.5)

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-41770/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-41770 - High (7.5)

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-41770/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2025-056
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware

This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.
#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771

https://certvde.com/en/advisories/vde-2025-056/

#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

🟠 CVE-2026-19426 - High (8.2)

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19426/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19426 - High (8.2)

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19426/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Phoenix Contact Patches Critical Buffer Overflow in PLCnext Firmware

Phoenix Contact addressed three vulnerabilities in PLCnext firmware, including a critical buffer overflow (CVE-2025-41769) that allows unauthenticated remote code execution. The update also fixes denial-of-service and SQL injection flaws affecting various industrial controllers.

**If you run Phoenix Contact PLCnext controllers, first make sure these devices are isolated from the internet and reachable only from trusted networks. Then update the firmware to version 2026.0.3 on every compatible device. For the obsolete EPC 1502 and EPC 1522, which will never be patched, take them off the network or replace them with supported hardware.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/phoenix-contact-patches-critical-buffer-overflow-in-plcnext-firmware-s-e-q-h-v/gD2P6Ple2L

BoF in a PROFINET service?! I'm shocked. Shocked! Well, not that shocked.

https://nvd.nist.gov/vuln/detail/CVE-2025-41769

🔴 CVE-2025-41769 - Critical (9.8)

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-41769/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Phoenix Contact Patches Critical Buffer Overflow in PLCnext Firmware

Phoenix Contact addressed three vulnerabilities in PLCnext firmware, including a critical buffer overflow (CVE-2025-41769) that allows unauthenticated remote code execution. The update also fixes denial-of-service and SQL injection flaws affecting various industrial controllers.

**If you run Phoenix Contact PLCnext controllers, first make sure these devices are isolated from the internet and reachable only from trusted networks. Then update the firmware to version 2026.0.3 on every compatible device. For the obsolete EPC 1502 and EPC 1522, which will never be patched, take them off the network or replace them with supported hardware.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/phoenix-contact-patches-critical-buffer-overflow-in-plcnext-firmware-s-e-q-h-v/gD2P6Ple2L

BoF in a PROFINET service?! I'm shocked. Shocked! Well, not that shocked.

https://nvd.nist.gov/vuln/detail/CVE-2025-41769

🔴 CVE-2025-41769 - Critical (9.8)

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-41769/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2025-056
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware

This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.
#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771

https://certvde.com/en/advisories/vde-2025-056/

#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

🔴 CVE-2026-66659 - Critical (9.3)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection.

This issue affects Tablesome Table: from n/a through 1.2.9.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66659/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66659 - Critical (9.3)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection.

This issue affects Tablesome Table: from n/a through 1.2.9.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66659/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-66659: CRITICAL SQL Injection (CVSS 9.3) in Essekia Tablesome Table ≤1.2.9. Allows unauth’d blind SQLi & data disclosure. No patch yet — monitor vendor updates. https://radar.offseq.com/threat/cve-2026-66659-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-04cbf964b30f2d13 #OffSeq #SQLInjection #Vuln #Infosec

The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation. https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html

SAP Issues Emergency-Grade Patch for CVSS 100 Commerce Cloud Flaw That Could Enable Unauthenticated Code Execution + Video

A Critical Warning for SAP Enterprise Customers A maximum-severity vulnerability in SAP Commerce Cloud has put enterprise e-commerce environments under renewed security pressure. The newly identified flaw, tracked as CVE-2026-58231, carries the highest possible CVSS score of 10.0 and could allow an unauthenticated attacker to execute arbitrary code…

https://undercodenews.com/sap-issues-emergency-grade-patch-for-cvss-100-commerce-cloud-flaw-that-could-enable-unauthenticated-code-execution-video/?utm_source=mastodon&utm_medium=jetpack_social

The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation. https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html

SAP August 2026 Patch Day Fixes Critical Code Injection and Memory Corruption Flaws

SAP's August 2026 Security Patch Day addresses 31 vulnerabilities, including a critical CVSS 10.0 authentication bypass in Commerce Cloud and code injection flaws in Manufacturing Integration and Intelligence. These vulnerabilities allow remote attackers to execute arbitrary commands and gain unauthorized access to internal enterprise systems.

**If you run SAP products, especially Manufacturing Integration and Intelligence (MII) read the advisory in detail. First make sure these systems are isolated from the internet where possible and reachable only from trusted internal networks. Then apply SAP's August 2026 security notes ASAP starting with the critical fixes for Commerce Cloud (CVE-2026-58231) and MII (CVE-2026-44772, CVE-2026-44758), followed by the ABAP Platform patch (CVE-2026-34265).**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/sap-august-2026-patch-day-fixes-critical-code-injection-and-memory-corruption-flaws-p-s-x-p-k/gD2P6Ple2L

Tracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections. https://www.securityweek.com/ivanti-epm-update-patches-remotely-exploitable-flaws/

Tracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections. https://www.securityweek.com/ivanti-epm-update-patches-remotely-exploitable-flaws/