Hack and patch more ServiceNow shit.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

Hack and patch more ServiceNow shit.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

🟠 CVE-2026-93289 - High (7.5)

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93289/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93289 - High (7.5)

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93289/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Hack and patch more ServiceNow shit.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

Hack and patch more ServiceNow shit.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

🟠 CVE-2026-93354 - High (8.1)

Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration endpoint...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93354/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93354 - High (8.1)

Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration endpoint...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93354/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-93291 - Critical (9.4)

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93291/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-93291 - Critical (9.4)

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93291/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Hack and patch more ServiceNow shit.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

Hack and patch more ServiceNow shit.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

🚨 [CISA-2026:0924] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0924)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-5430 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-5430)
- Name: WSO2 Multiple Products Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: WSO2
- Product: Multiple Products
- Notes: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/ ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-5430

⚠️ CVE-2026-71362 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-71362)
- Name: Adobe Commerce and Magento Incorrect Authorization Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://helpx.adobe.com/security/products/magento/apsb26-92.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-71362

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260924 #cisa20260924 #cve_2026_5430 #cve_2026_71362 #cve20265430 #cve202671362

🚨 [CISA-2026:0924] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0924)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-5430 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-5430)
- Name: WSO2 Multiple Products Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: WSO2
- Product: Multiple Products
- Notes: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/ ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-5430

⚠️ CVE-2026-71362 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-71362)
- Name: Adobe Commerce and Magento Incorrect Authorization Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://helpx.adobe.com/security/products/magento/apsb26-92.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-71362

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260924 #cisa20260924 #cve_2026_5430 #cve_2026_71362 #cve20265430 #cve202671362

CVE ID: CVE-2026-71362
Vendor: Adobe
Product: Commerce and Magento
Date Added: 2026-09-24
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-71362

🚨 [CISA-2026:0924] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0924)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-5430 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-5430)
- Name: WSO2 Multiple Products Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: WSO2
- Product: Multiple Products
- Notes: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/ ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-5430

⚠️ CVE-2026-71362 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-71362)
- Name: Adobe Commerce and Magento Incorrect Authorization Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://helpx.adobe.com/security/products/magento/apsb26-92.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-71362

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260924 #cisa20260924 #cve_2026_5430 #cve_2026_71362 #cve20265430 #cve202671362

🚨 [CISA-2026:0924] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0924)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-5430 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-5430)
- Name: WSO2 Multiple Products Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: WSO2
- Product: Multiple Products
- Notes: https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/ ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-5430

⚠️ CVE-2026-71362 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-71362)
- Name: Adobe Commerce and Magento Incorrect Authorization Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://helpx.adobe.com/security/products/magento/apsb26-92.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-71362

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260924 #cisa20260924 #cve_2026_5430 #cve_2026_71362 #cve20265430 #cve202671362

CVE ID: CVE-2026-5430
Vendor: WSO2
Product: Multiple Products
Date Added: 2026-09-24
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-5430

Botslab G980H dash cams are affected by CVE-2026-81630 (CRITICAL, CVSS 9.2): Firmware authenticity is not cryptographically verified, enabling remote code execution if updates are intercepted. Avoid untrusted networks until a patch is released. https://radar.offseq.com/threat/cve-2026-81630-cwe-345-insufficient-verification-of-data-authenticity-in-botslab-g980h-23022026fbd9ffd9 #OffSeq #CVE202681630 #IoTSecurity

🟠 CVE-2026-81630 - High (8.1)

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81630/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Botslab G980H dash cams are affected by CVE-2026-81630 (CRITICAL, CVSS 9.2): Firmware authenticity is not cryptographically verified, enabling remote code execution if updates are intercepted. Avoid untrusted networks until a patch is released. https://radar.offseq.com/threat/cve-2026-81630-cwe-345-insufficient-verification-of-data-authenticity-in-botslab-g980h-23022026fbd9ffd9 #OffSeq #CVE202681630 #IoTSecurity

🟠 CVE-2026-81630 - High (8.1)

The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81630/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-85496 - High (8.8)

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85496/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-85496 - High (8.8)

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85496/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-84399 - High (8.8)

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and sub...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84399/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-84399 - High (8.8)

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and sub...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84399/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82566 - High (8.8)

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82566/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82566 - High (8.8)

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82566/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-95699 - Critical (9.6)

Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users' device data and allow the attacker to start and stop other connected users' devices. This...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95699/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-95699 - Critical (9.6)

Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users' device data and allow the attacker to start and stop other connected users' devices. This...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95699/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88419 - High (8.8)

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload) of WuzhiCMS 5.0.0 allows an authenticated low-privileged member to upload a crafted .php file and execute arbitrar...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88419/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93345 - High (7.5)

MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterators of the routing service that allows an unauthenticated on-path attacker to crash the BGP service by sending a malformed MP_REA...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93345/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Technical details and a PoC for a critical Fluent Bit vulnerability (CVE-2026-61674) are public. Patch this Fluent Bit vulnerability to prevent RCE attacks.

#FluentBit #CVE202661674 #BufferOverflow #RCE #Cybersecurity #InfoSec

https://securityonline.info/fluent-bit-vulnerability-poc-cve-2026-61674/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-97359 - Critical unauthenticated RCE in HFS2 (<= 2.4.0) via template injection in multipart uploads. CVSS 10.0. Mitigate immediately. #CVE #infosec #cybersecurity

https://www.valtersit.com/cve/CVE-2026-97359/

🔴 CVE-2026-97359 - Critical (10)

HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler that allows unauthenticated attackers to achieve remote code execution by embedding malicious template syntax in a filename. Attackers can c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97359/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97055 - High (8.1)

SigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret (tokenizer::jwt::secret, set via SIGNOZ_TOKENIZER_JWT_SECRET or the deprecated SIGNOZ_JWT_SECRET) to an empty string, and Config.Validate() does not reject the empty valu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97055/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Hack and patch more ServiceNow shit.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

Hack and patch more ServiceNow shit.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

Hack and patch more ServiceNow shit.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

Hack and patch more ServiceNow shit.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3159623

On September 24, 2026, ServiceNow issued CVE-2026-86857, CVE-2026-86858, CVE-2026-13016, CVE-2026-86859, and CVE-2026-86860.
Each of these security issues was identified through internal security testing, customer security assessments, or reports submitted through ServiceNow's responsible disclosure and bug bounty programs and was remediated independently. For security issues identified through responsible disclosure, researchers may choose to publish their findings.
ServiceNow did not identify evidence of malicious exploitation related to these issues.

🟠 CVE-2026-95519 - High (7.8)

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using `rpm -q -p` or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries ar...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95519/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97059 - High (8.2)

DCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without validating the PixelData buffer length against the declared NumberOfFrames. Attackers can craft malicious DICOM instances decl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97059/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-81549 - Critical (9.6)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81549/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81545 - High (8.8)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81545/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81552 - High (8.8)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of environment variables.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81552/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-78308 - Critical (9.8)

Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass.

This issue affects DIAEnergie: before 1.11.00.022.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78308/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-78308 | CRITICAL | DIAEnergie (<1.11.00.022): Improper Authentication lets attackers bypass auth controls. Patch urgently when available. https://radar.offseq.com/threat/cve-2026-78308-cwe-287-improper-authentication-in-deltaww-diaenergie-6cc9f25ab57e2374 #OffSeq #ICS #Vulnerability #Cybersecurity

🟠 CVE-2026-57590 - High (8.1)

A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler. The affected APIs do not properly verify whether the authenticated user has permission to access the project associated with the target Task Group.

...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57590/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-56737 - High (8.1)

phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authentication verification flow: an unauthenticated attacker can submit an account’s numeric user ID and a va...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56737/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-93425 - Critical (9.9)

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the patch.readRepoDirectories tRPC procedure passes the user-controlled repoPath value from apps/dokploy/server/api/routers/patch.ts into a shell command in packages/...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93425/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

IBM Concert v1.0.0 – 3.0.0 hit by CRITICAL use-after-free bug (CVE-2026-6928, CVSS 9.8). Remote code execution & full compromise possible; no patch confirmed. Monitor IBM advisories. https://radar.offseq.com/threat/cve-2026-6928-cwe-416-use-after-free-in-ibm-concert-2eb5c8a4bd6982d7 #OffSeq #Vuln #IBM #CVE20266928 #Infosec

🟠 CVE-2026-81548 - High (8.8)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81548/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81547 - High (8.8)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to path traversal.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81547/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82093 - High (8.8)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of untrusted data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82093/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-90959 - High (8.1)

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'file_url' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90959/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97362 - High (7.5)

HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving threa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97362/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58008 - High (8.1)

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.

This issue affects Trusted Firmware: through socfpga_v2.14.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58008/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58007 - High (8.1)

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.

This issue affects Trusted Firmware: through socfpga_v2.14.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58007/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77874 - High (8.6)

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, mo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77874/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81539 - High (8.8)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81539/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97057 - High (7.5)

redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length. A malicious or compromised Redis endpoint ca...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97057/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-97360 - Critical (10)

HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, and delete files anywhere the HFS service account has filesystem access outside the shared...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97360/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-95521 - High (7.8)

A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95521/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19072 - Critical (9.9)

Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiled_collector_args" is an internal field, Velociraptor allowed the field to be se...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19072/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-19072 (CRITICAL, CVSS 9.9) impacts Rapid7 Velociraptor <0.77.2. 'Investigator' role can escalate to admin by injecting arbitrary VQL via API. Patch by upgrading to 0.77.2+. Details: https://radar.offseq.com/threat/cve-2026-19072-cwe-1269-product-released-in-non-release-configuration-in-rapid7-velociraptor-1faa73dd4a3adad9 #OffSeq #Velociraptor #CVE #Infosec

🟠 CVE-2026-85682 - High (8.8)

The YOP Poll plugin for WordPress is vulnerable to Origin Validation Error in all versions up to, and including, 7.0.10. This is due to the plugin transmitting a wp_rest nonce to window.opener via postMessage() with a wildcard targetOrigin. This m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85682/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-89078 - Critical (9.9)

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89078/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Toutes nos instances GitLab sont à jour en version 19.4.1 depuis hier soir à 22h.

Il faut mettre à jour rapidement : cette nouvelle version corrige 2 CVE évaluées à 9,9 (CVE-2026-93577 et CVE-2026-84739).

En savoir plus sur nos offres 👇
https://gitlab-saas.bearstech.com/

🟠 CVE-2026-81537 - High (8.8)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81537/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81208 - High (7.7)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81208/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-12227 - Critical (9.8)

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the `vcv-template` parameter. This makes it possible for unauthenticated attackers to include and exec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12227/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Visual Composer Website Builder plugin ≤45.16.0 hit by CRITICAL LFI (CVE-2026-12227). Unauthenticated attackers can execute arbitrary PHP files via 'vcv-template'. Patch unconfirmed. Mitigate & monitor now: https://radar.offseq.com/threat/cve-2026-12227-cwe-98-improper-control-of-filename-for-includerequire-statement-in-php-program-php-ed037e731eb4a3e7 #OffSeq #WordPress #Vuln #LFI

🟠 CVE-2026-80513 - High (7.5)

The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it deserializes a user-supplied profile field value, allowing authenticated users with Subscriber-level access and above to inject a PHP Object...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-80513/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77193 - High (7.5)

The eesy_ID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the `id2wp_path` parameter. This makes it possible for unauthenticated attackers to read the contents of...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77193/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97185 - High (7.8)

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97185/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-78312 - Critical (9.1)

Path Traversal in DIAEnergie.

This issue affects DIAEnergie: before 1.11.00.022.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78312/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-78311 - High (8.8)

SQL Injection vulnerability in DIAEnergie.

This issue affects DIAEnergie: before 1.11.00.022.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78311/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-78309 - High (8.8)

SQL Injection vulnerability in DIAEnergie.

This issue affects DIAEnergie: before 1.11.00.022.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78309/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-18467 - Critical (9.8)

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3. The 5.0.3 patch introduced a wp_hash()/hash_equals() signature gate on the pt-paytium-user-data f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18467/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-18467: CRITICAL privilege escalation in Paytium: Mollie payment forms (≤5.0.3). Unauthenticated users can create admin accounts via exploited payment forms. Restrict forms or disable plugin until full fix. https://radar.offseq.com/threat/cve-2026-18467-cwe-269-improper-privilege-management-in-paytiumsupport-paytium-mollie-payment-forms-816d892a2e04a4c5 #OffSeq #WordPress #CVE202618467 #Security

🔴 CVE-2026-96891 - Critical (9.8)

A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peer_hostname  leads to out-of-bounds write. The attack may be in...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96891/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70125 - High (8.8)

Microsoft Outlook Remote Code Execution Vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70125/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19125 - High (8.1)

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verify_login() function in app/Login.php containing a missing return statement in the signature...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19125/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

plank laravel-mediable <7.0.2 has a CRITICAL vuln (CVE-2026-93352): .pht files not blocked, allowing unauthenticated RCE. Upgrade to 7.0.2+ ASAP. https://radar.offseq.com/threat/cve-2026-93352-unrestricted-upload-of-file-with-dangerous-type-in-plank-laravel-mediable-969ae75c94489a3a #OffSeq #CVE202693352 #RCE #Laravel #Infosec

🔴 CVE-2026-93352 - Critical (9.8)

Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbidden_extensions blocklist in config/mediable.php. The blocklist introduced to address CVE-2026-49972 includes p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93352/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81536 - High (7.7)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81536/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-80423 - High (8.8)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of namespace-wide secrets via accessible file mounts.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-80423/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86583 - High (8.8)

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter wri...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86583/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75887 - High (7.5)

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in the `/locales/resource.json` endpoint. This allows the attacker to read sensit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75887/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Buffer overflow (CVE-2026-6730) in IBM Concert 1.0.0-3.0.0 (CVSS 9.8, CRITICAL) lets local users execute arbitrary code. No patch yet — restrict local access, check vendor updates. https://radar.offseq.com/threat/cve-2026-6730-cwe-120-buffer-copy-without-checking-size-of-input-classic-buffer-overflow-in-ibm-concert-cf9a07df005d3ecc #OffSeq #IBM #Vuln #CyberSecurity

cPanel patched critical cPanel security vulnerabilities including CVE-2026-87899. Update cPanel and WP Toolkit now to prevent privilege escalation.

#cPanel #WHM #WPToolkit #PrivilegeEscalation #Cybersecurity #Infosec #CVE202687899

https://securityonline.info/cpanel-security-vulnerabilities-patch/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-18162: IBM FTM for RedHat OpenShift v4.0.6.0 has a CRITICAL code injection flaw (CVSS 9.8). Remote attackers can execute arbitrary code via improper input neutralization. No patch yet — monitor vendor updates. https://radar.offseq.com/threat/cve-2026-18162-cwe-94-improper-control-of-generation-of-code-code-injection-in-ibm-financial-7385d789acb1bf6d #OffSeq #CVE202618162 #IBM #RCE

CVE-2026-18169: CRITICAL path traversal in IBM FTM for RedHat OpenShift 4.0.6.0 (CVSS 9.9) 🕵️‍♂️. Authenticated attackers can access sensitive info via symlink abuse. Restrict access & monitor logs. Patch status unknown. https://radar.offseq.com/threat/cve-2026-18169-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-871a1d481ef78ea0 #OffSeq #IBM #CVE202618169 #Infosec

🟠 CVE-2026-91818 - High (7.8)

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing during annotation enumeration may release the associated page object, which is subsequently accessed, resu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91818/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

ManageEngine security vulnerabilities expose servers to remote code execution. Patch these OpManager vulnerabilities and CVE-2026-19599 to secure your network.

#ManageEngine #Cybersecurity #CVE202619599 #OpManager #Infosec #Vulnerability

https://securityonline.info/manageengine-security-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-19599: CRITICAL RCE in ManageEngine OpManager MSP (<12.8.711). Improper OS command neutralization enables remote command execution (CVSS 9.9). Upgrade to 12.8.711+ ASAP. https://radar.offseq.com/threat/cve-2026-19599-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-d62870fccbe1d229 #OffSeq #Vuln #InfoSec #RCE

🟠 CVE-2026-91811 - High (7.8)

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an app...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91811/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-91809 - High (7.8)

A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may cause the application to access a released object, resulting in an application crash.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91809/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

A critical ManageEngine ADSelfService Plus vulnerability (CVE-2026-74849) allows system compromise. Update to build 7001 to secure your endpoints.

#ManageEngine #ADSelfServicePlus #CVE202674849 #Cybersecurity #Infosec #RCE

https://securityonline.info/manageengine-adselfservice-plus-vulnerability-cve-2026-74849/?utm_source=mastodon&utm_medium=jetpack_social

Fast FAC1203R Gigabit Edition v2.0.4 hit by CRITICAL stack-based buffer overflow (CVE-2026-96257). Remote, unauthenticated RCE possible. Exploit is public, no patch exists — restrict access to Device Discovery Service now. https://radar.offseq.com/threat/cve-2026-96257-stack-based-buffer-overflow-in-fast-fac1203r-gigabit-edition-4657d2bb397c7614 #OffSeq #CVE #Infosec

CVE-2026-18163 (CRITICAL, CVSS 9.8): IBM FTM for RedHat OpenShift v4.0.6.0 has a deserialization vulnerability enabling remote code execution without auth. Restrict access & monitor activity. Patch status unconfirmed. https://radar.offseq.com/threat/cve-2026-18163-cwe-502-deserialization-of-untrusted-data-in-ibm-financial-transaction-manager-ftm-for-0a85c82f9c689e03 #OffSeq #CVE202618163 #IBM #InfoSec 🛡️

CVE-2026-19202: CRITICAL vuln in Google mcp-toolbox-sdk-python (v0 – 1.1.0). Shared cache flaw lets Google ID tokens be reused across audiences — risk of token replay & impersonation. Patch pending. Details: https://radar.offseq.com/threat/cve-2026-19202-cwe-524-use-of-a-shared-cache-with-insufficient-key-granularity-in-google-mcp-toolbox-9bc343c3bcd3d35b #OffSeq #infosec #CVE202619202 #Python

@quad9dns https://www.tenable.com/cve/CVE-2026-81642

sigh

Go hack more GitHub shit.

https://nvd.nist.gov/vuln/detail/cve-2026-77987

A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated the scheme and host of a user-supplied URL but did not validate the port, allowing requests to be directed to internal services listening on other ports of the same appliance. Response bodies were not returned to the requester, but response timing acted as an oracle that allowed instance secrets to be extracted character by character. An extracted secret could then be used in a separate interaction with an internal service to obtain remote code execution on the appliance. Exploitation required network access to the instance and was unauthenticated when private mode was disabled, or required any authenticated user when private mode was enabled. This vulnerability affected GitHub Enterprise Server versions 3.17 through 3.22 and was fixed in versions 3.22.1, 3.21.6, 3.20.8, 3.19.12, 3.18.15, and 3.17.21. This vulnerability was reported through the GitHub Bug Bounty program.

sev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA reports CVE-2026-88020, XSS in OpenPLC Runtime v3 6.1. Theft of an operator session cookie can enable state-changing requests and PLC-level control. Exposure of OT web interfaces significantly raises impact. #IcsSecurity #OtSecurity #Xss

https://cyberworldops.eu/en/openplc-web-flaw-could-turn-a-stolen-session-into-industrial-process

SolarWinds patched three RCE flaws in Observability Self-Hosted, including CVE-2026-28324 (CVSS 9.8) exploitable without authentication. Monitoring hosts hold broad access, so RCE risks full environment compromise and persistence. Patch and restrict exposure now. #SolarWinds #RemoteCodeExecution #PatchManagement

https://cyberworldops.eu/en/three-solarwinds-rce-flaws-expose-monitoring-and-access-control

SolarWinds Observability vulnerabilities allow RCE via CVE-2026-28324. Update to version 2026.2.3 to secure your monitoring infrastructure today.

#SolarWinds #Cybersecurity #CVE202628324 #CVE202628325 #RCE #Infosec

https://securityonline.info/solarwinds-observability-vulnerabilities-fixed/?utm_source=mastodon&utm_medium=jetpack_social

https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28324

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.

sev:CRIT 9.8 - AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Go hack more MQTT shit.

https://nvd.nist.gov/vuln/detail/cve-2026-87121

🔴 CVE-2026-87121 - Critical (9.8)

lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87121/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

‼️[POC] CVE-2026-94127: When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE)

GitHub: https://github.com/watchtowrlabs/watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127/

WatchTower posted this yesterday:

WatchTower: Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127) https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/ #infosec #vulnerability

New.

Picus: CVE-2026-94127 Explained: F5 BIG-IP APM Heap Overflow Attack https://www.picussecurity.com/resource/blog/cve-2026-94127-explained-f5-big-ip-apm-heap-overflow-attack #infosec #threatresearch

Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)
#CVE_2026_94127
https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/

Is This A Joke? In The Auth Header? (#F5 BIG-IP UnAuth Heap-Overflow to #RCE CVE-2026-94127)

https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/

Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127) - watchTowr Labs https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/

🏆 New Achievement! Terms and Conditions of Your Own Destruction!

LOOTBOX DISCLAIMER: By operating F5 BIG-IP APM versions 21.1.0, 17.5.0–17.5.1, or 17.1.0–17.1.3, you have automatically entered our Unauthenticated Remote Code Execution Sweepstakes. Prizes are awarded via CVE-2026-94127, targeting the OAuth Authorization Server component. Odds of receiving a prize are classified as "active exploitation." The System does not guarantee prize desirability. (1/3)

F5 BIG-IP APM (OAuth Authorization Server) is facing a CRITICAL RCE zero-day, CVE-2026-94127, with active exploitation. Versions 21.1.0, 17.5.0 – 17.5.1, 17.1.0 – 17.1.3 affected. Apply hotfixes now. Details: https://radar.offseq.com/threat/critical-f5-big-ip-vulnerability-exploited-as-zero-day-024f528e7ee83eed #OffSeq #F5 #ZeroDay #Infosec

F5 patched CVE-2026-94127, a heap-based buffer overflow in BIG-IP APM when operating as OAuth Authorization Server, enabling remote code execution. Active zero-day exploitation poses high risk of full appliance compromise. Patch immediately and review for crafted malicious traffic. #F5BigIp #ZeroDay #RemoteCodeExecution

https://cyberworldops.eu/en/actively-exploited-big-ip-apm-flaw-gives-remote-attackers-a-path-to

Der Hersteller F5 veröffentlichte ein Advisory zu einer ausgenutzten Zero-Day Schwachstelle in seinem Produkt BIG-IP Access Policy Manager (APM) zur sicheren Zugriffsteuerung und Anwendungszugriff: CVE-2026-94127, CVSS-Score 9.8/10 ("kritisch")

F5 gibt an, dass die Schwachstelle bereits aktiv ausgenutzt wird. IT-Sicherheitsverantwortliche sollten unverzüglich die Patchstände prüfen und, sofern erforderlich, die verfügbaren Engineering Hotfixes einspielen.

👉️ https://www.bsi.bund.de/dok/1209384

CVE-2026-94127: Critical zero-day in F5 BIG-IP APM exploited for RCE on OAuth Authorization Servers. Patch urgently or use F5's iRule mitigation. Monitor for OAuth auth failures and TMM SIGABRTs. https://radar.offseq.com/threat/f5-patches-big-ip-apm-zero-day-flaw-exploited-in-rce-attacks-191545153729ae57 #OffSeq #F5 #ZeroDay #RCE #Vuln

🚨 [CISA-2026:0922] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0922)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-85102 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85102)
- Name: Check Point Multiple Products Improper Certificate Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Check Point
- Product: Multiple Products
- Notes: https://support.checkpoint.com/results/sk/sk1000117 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85102

⚠️ CVE-2026-93616 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93616)
- Name: Check Point Multiple Products Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Check Point
- Product: Multiple Products
- Notes: https://support.checkpoint.com/results/sk/sk1000171/ ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93616

⚠️ CVE-2026-93952 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93952)
- Name: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Arista
- Product: VeloCloud Orchestrator
- Notes: https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93952

⚠️ CVE-2026-94127 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-94127)
- Name: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: F5
- Product: BIG-IP APM
- Notes: For temporary mitigation to allow for proactive forensic triage, apply the vendor-provided iRule. Once completed, install the final vendor patch as soon as possible. For more information please see: https://my.f5.com/manage/s/article/K000162605 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-94127

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260922 #cisa20260922 #cve_2026_85102 #cve_2026_93616 #cve_2026_93952 #cve_2026_94127 #cve202685102 #cve202693616 #cve202693952 #cve202694127

When it rains, it pours. F5 BIG-IP APM also has an exploited CVE!

https://ifin.network/t/f5-big-ip-cve-2026-94127-rce-exploited/855

#ThreatIntel #ThreatIntelligence #IFIN

CVE ID: CVE-2026-94127
Vendor: F5
Product: BIG-IP APM
Date Added: 2026-09-22
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-94127

An exploited BIG-IP APM vulnerability tracked as CVE-2026-94127 allows RCE attacks. Secure your BIG-IP APM vulnerability deployments with new F5 hotfixes.

#F5 #BIGIP #CVE202694127 #Cybersecurity #InfoSec #RCE #Vulnerability

https://securityonline.info/big-ip-apm-vulnerability-cve-2026-94127/?utm_source=mastodon&utm_medium=jetpack_social

EITW 0day in F5 APM.

https://my.f5.com/manage/s/article/K000162605

When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). (CVE-2026-94127)

This vulnerability allows an unauthenticated attacker to perform RCE. The BIG-IP system in Appliance mode is also vulnerable. This is a data plane issue; there is no control plane exposure.

Check Point VPN Gateways and Management Server Flaws Actively Exploited

Check Point confirmed active exploitation of three critical vulnerabilities (CVE-2026-85102, CVE-2026-85103, and CVE-2026-93616) affecting VPN gateways and management servers, prompting a 72-hour US federal remediation deadline.

**If you run Check Point Security Gateways, Spark Firewalls or Security Management Servers, patch immediately to LivePatch Take 26 or the latest Jumbo Hotfix. Older unsupported versions R80 through R81.10 must be upgraded first. Make sure the management server's web interface is reachable only from trusted internal networks. Patching isn't enough, since attackers have been active since September 12: check your VPN logs for unknown sessions and internal LDAP scanning, and if you find anything suspicious, treat the device as compromised and escalate to your incident response team.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/check-point-vpn-gateways-and-management-server-flaws-actively-exploited-k-i-7-j-s/gD2P6Ple2L

Até 30 de junho, a Check Point confirma ataques ativos a falhas críticas em seus produtos, recomendando atualização urgente. Piratas informáticos exploram vulnerabilidades nos certificados de VPN do Security Gateway (CVE-2026-85102) e no serviço web de Management (CVE-2026-93616), permitindo a execução remota de código sem autenticação prévia. 🚨

🔗 https://tugatech.com.pt/t91581-check-point-confirma-ataques-ativos-a-falhas-criticas-e-exige-atualizacao-urgente

#urgente 

Check Point confirms active exploitation of CVE-2026-85102, unauthenticated RCE in Security Gateway VPN negotiation, and CVE-2026-93616, path traversal leading to script execution on management systems. Internet-exposed gateways and management planes should be patched and reviewed for compromise immediately. #CheckPoint #ThreatIntel #VpnSecurity

https://cyberworldops.eu/en/active-attacks-turn-check-point-vpn-and-management-flaws-into-an

Checkpoint / CVE-2026-93616: https://support.checkpoint.com/results/sk/sk1000171/

Soooo, it is always fun to translate a vendor advisory into real facts. Here, checkpoint says "Directory Traversal and File upload allows execution of arbitrary script", and provide, as an example:

login(loginRequest=LoginRequest{authenticationInfo=AuthenticationInfoBase{username='abcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdababcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcd'}

And: "if a core dump file was generated at the same time as the login attempt [...]"

Sorry guys, but you are totally misleading whoever is trying to qualify/understand your adivsory. Security vendors should really be accountable of whatever they deliver. I am not even mentioning 1. the triviality of the findings, 2. everything is running as root.

They also discovered that ASN.1 parsing requires extensive fuzzing (https://support.checkpoint.com/results/sk/sk1000118).

I was expected more from checkpoint, but at least they provide a bit more info than the other "similar" vendors.

🚨 [CISA-2026:0922] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0922)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-85102 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85102)
- Name: Check Point Multiple Products Improper Certificate Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Check Point
- Product: Multiple Products
- Notes: https://support.checkpoint.com/results/sk/sk1000117 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85102

⚠️ CVE-2026-93616 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93616)
- Name: Check Point Multiple Products Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Check Point
- Product: Multiple Products
- Notes: https://support.checkpoint.com/results/sk/sk1000171/ ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93616

⚠️ CVE-2026-93952 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93952)
- Name: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Arista
- Product: VeloCloud Orchestrator
- Notes: https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93952

⚠️ CVE-2026-94127 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-94127)
- Name: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: F5
- Product: BIG-IP APM
- Notes: For temporary mitigation to allow for proactive forensic triage, apply the vendor-provided iRule. Once completed, install the final vendor patch as soon as possible. For more information please see: https://my.f5.com/manage/s/article/K000162605 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-94127

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260922 #cisa20260922 #cve_2026_85102 #cve_2026_93616 #cve_2026_93952 #cve_2026_94127 #cve202685102 #cve202693616 #cve202693952 #cve202694127

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616

#CyberSecurity #ZeroDay #CheckPoint #Vulnerability #ActiveExploitation #PatchedOrPerish (3/3)

Meanwhile a second zero-day, CVE-2026-93616, materialized in Security Management with its own handful of pinpointed hits.

Policy dictates we inform you patches now exist for both CVE-2026-85102 and CVE-2026-93616. Policy does not require we feel bad about what happens next if you ignore them. Install both immediately.

Reward: Compliance logged. Outcome: your problem. (2/3)

Check Point has disclosed a zero-day (in Security Management Server) and marked an older bug also as exploited in the wild (in Site-to-Site VPN)

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

CVE ID: CVE-2026-93616
Vendor: Check Point
Product: Multiple Products
Date Added: 2026-09-22
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-93616

🚨 Check Point patches Management Server zero-day exploited in attacks
⠀
Check Point has released fixes for CVE-2026-93616, a vulnerability that allows unauthenticated attackers to upload and execute arbitrary scripts on affected management servers.
⠀
The company says a small number of customers have already been attacked.
⠀
Affected products include:

• Security Management Server
• Multi-Domain Security Management Server
• Log Server
• Multi-Domain Log Server
• SmartEvent
⠀
The vulnerability carries a CVSS score of 9.8.
⠀
Check Point advises installing the applicable fixes, restricting management access to trusted IP addresses, and checking for signs of exploitation.
⠀
LivePatch Take 28/29 does not fix this vulnerability.

Source: https://www.bleepingcomputer.com/news/security/check-point-patches-management-server-zero-day-exploited-in-attacks/

A critical exploited Check Point Management vulnerability (CVE-2026-93616) allows attackers to execute arbitrary scripts. Secure your servers now.

#CheckPoint #CVE202693616 #Cybersecurity #InfoSec #Vulnerability #RCE

https://securityonline.info/exploited-cve-2026-93616-checkpoint-scripts/?utm_source=mastodon&utm_medium=jetpack_social

Check Point Quantum Security Management is affected by CVE-2026-93616 (CRITICAL, CVSS 9.8): unauthenticated attackers can upload & execute scripts via path traversal. Restrict access & monitor activity until patch info is released. https://radar.offseq.com/threat/cve-2026-93616-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-4344dfa6a4d98182 #OffSeq #CheckPoint #CyberAlert

Arista Networks Patches Critical VeloCloud Orchestrator Zero-Day Exploited in the Wild

Arista Networks disclosed a critical CVSS 10.0 vulnerability (CVE-2026-93952) in VeloCloud Orchestrator On-Prem that is being actively exploited to gain unauthenticated remote access to orchestrator hosts and managed edge devices.

**If you run VeloCloud Orchestrator On-Prem, this is urgent. Make sure its web interface is not reachable from the internet and is accessible only from trusted admin networks, then update right away to a fixed version (5.2.3.16, 6.4.2.8 or later). Attackers are already using this flaw to take full control without any password. After patching, look for the hidden file /usr/local/sbin/.vcnode.js or the x-vc-opt header in your web logs, and if you find either, treat the orchestrator and every connected Edge device as compromised.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/arista-networks-patches-critical-velocloud-orchestrator-zero-day-exploited-in-the-wild-4-k-v-7-w/gD2P6Ple2L

CVE-2026-93952: CRITICAL zero-day in Arista VeloCloud Orchestrator (on-prem <5.2.3.16, <6.4.2.8) is actively exploited. Remote attackers can access privileged functions w/o creds. Patch now — review logs for signs of compromise. https://radar.offseq.com/threat/arista-urges-immediate-patching-of-exploited-vco-zero-day-0c28c2caa003025a #OffSeq #Arista #ZeroDay #Infosec

Arista confirmed active exploitation of a CVSS 10 VeloCloud Orchestrator vulnerability (CVE-2026-93952) affecting certificate-based SD-WAN setups. Patch now.

#VeloCloud #Arista #CVE202693952 #SDWAN #Vulnerability #CyberSecurity

https://meterpreter.org/arista-velocloud-orchestrator-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

Completing our tour of new known-exploited vulns today, here is Arista's perfect-10.

https://ifin.network/t/arista-cve-2026-93952-auth-bypass-exploited-in-the-wild/856

#ThreatIntel #ThreatIntelligence #IFIN

🚨 [CISA-2026:0922] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0922)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-85102 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85102)
- Name: Check Point Multiple Products Improper Certificate Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Check Point
- Product: Multiple Products
- Notes: https://support.checkpoint.com/results/sk/sk1000117 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85102

⚠️ CVE-2026-93616 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93616)
- Name: Check Point Multiple Products Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Check Point
- Product: Multiple Products
- Notes: https://support.checkpoint.com/results/sk/sk1000171/ ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93616

⚠️ CVE-2026-93952 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93952)
- Name: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Arista
- Product: VeloCloud Orchestrator
- Notes: https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93952

⚠️ CVE-2026-94127 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-94127)
- Name: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: F5
- Product: BIG-IP APM
- Notes: For temporary mitigation to allow for proactive forensic triage, apply the vendor-provided iRule. Once completed, install the final vendor patch as soon as possible. For more information please see: https://my.f5.com/manage/s/article/K000162605 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-94127

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260922 #cisa20260922 #cve_2026_85102 #cve_2026_93616 #cve_2026_93952 #cve_2026_94127 #cve202685102 #cve202693616 #cve202693952 #cve202694127

CVE ID: CVE-2026-93952
Vendor: Arista
Product: VeloCloud Orchestrator
Date Added: 2026-09-22
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-93952

Arista disclosed active exploitation of CVE-2026-93952, a CVSS 10.0 unauthenticated flaw in on-prem VeloCloud Orchestrator with certificate authentication enabled. Compromise of the management plane risks full SD-WAN Edge control and lateral movement. Isolate exposed instances and hunt for abuse. #VeloCloud #ThreatIntel #InfoSec

https://cyberworldops.eu/en/active-attacks-target-certificate-enabled-velocloud-orchestrator

🏆 New Achievement! Exceeds Expectations (Except Security)!

Thank you for joining us for your annual review, Arista VeloCloud Orchestrator team. Uptime? Stellar. Throughput? Impressive. Unauthorized remote access granted to unauthenticated strangers due to CVE-2026-93952, a CVSS 10.0 critical improper-input-validation flaw currently being actively exploited in the wild? That's a "needs improvement," and frankly it drags down the whole scorecard.

Full system compromise is on the table. (1/2)

Check Point VPN Gateways and Management Server Flaws Actively Exploited

Check Point confirmed active exploitation of three critical vulnerabilities (CVE-2026-85102, CVE-2026-85103, and CVE-2026-93616) affecting VPN gateways and management servers, prompting a 72-hour US federal remediation deadline.

**If you run Check Point Security Gateways, Spark Firewalls or Security Management Servers, patch immediately to LivePatch Take 26 or the latest Jumbo Hotfix. Older unsupported versions R80 through R81.10 must be upgraded first. Make sure the management server's web interface is reachable only from trusted internal networks. Patching isn't enough, since attackers have been active since September 12: check your VPN logs for unknown sessions and internal LDAP scanning, and if you find anything suspicious, treat the device as compromised and escalate to your incident response team.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/check-point-vpn-gateways-and-management-server-flaws-actively-exploited-k-i-7-j-s/gD2P6Ple2L

Até 30 de junho, a Check Point confirma ataques ativos a falhas críticas em seus produtos, recomendando atualização urgente. Piratas informáticos exploram vulnerabilidades nos certificados de VPN do Security Gateway (CVE-2026-85102) e no serviço web de Management (CVE-2026-93616), permitindo a execução remota de código sem autenticação prévia. 🚨

🔗 https://tugatech.com.pt/t91581-check-point-confirma-ataques-ativos-a-falhas-criticas-e-exige-atualizacao-urgente

#urgente 

Check Point confirms active exploitation of CVE-2026-85102, unauthenticated RCE in Security Gateway VPN negotiation, and CVE-2026-93616, path traversal leading to script execution on management systems. Internet-exposed gateways and management planes should be patched and reviewed for compromise immediately. #CheckPoint #ThreatIntel #VpnSecurity

https://cyberworldops.eu/en/active-attacks-turn-check-point-vpn-and-management-flaws-into-an

Check Point warns of hackers exploiting Security Gateway VPN RCE flaw

Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE)...

🔗️ [Bleepingcomputer] https://link.is.it/iSJtsD

🚨 [CISA-2026:0922] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0922)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-85102 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85102)
- Name: Check Point Multiple Products Improper Certificate Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Check Point
- Product: Multiple Products
- Notes: https://support.checkpoint.com/results/sk/sk1000117 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85102

⚠️ CVE-2026-93616 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93616)
- Name: Check Point Multiple Products Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Check Point
- Product: Multiple Products
- Notes: https://support.checkpoint.com/results/sk/sk1000171/ ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93616

⚠️ CVE-2026-93952 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93952)
- Name: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Arista
- Product: VeloCloud Orchestrator
- Notes: https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93952

⚠️ CVE-2026-94127 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-94127)
- Name: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: F5
- Product: BIG-IP APM
- Notes: For temporary mitigation to allow for proactive forensic triage, apply the vendor-provided iRule. Once completed, install the final vendor patch as soon as possible. For more information please see: https://my.f5.com/manage/s/article/K000162605 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-94127

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260922 #cisa20260922 #cve_2026_85102 #cve_2026_93616 #cve_2026_93952 #cve_2026_94127 #cve202685102 #cve202693616 #cve202693952 #cve202694127

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616

#CyberSecurity #ZeroDay #CheckPoint #Vulnerability #ActiveExploitation #PatchedOrPerish (3/3)

Meanwhile a second zero-day, CVE-2026-93616, materialized in Security Management with its own handful of pinpointed hits.

Policy dictates we inform you patches now exist for both CVE-2026-85102 and CVE-2026-93616. Policy does not require we feel bad about what happens next if you ignore them. Install both immediately.

Reward: Compliance logged. Outcome: your problem. (2/3)

Check Point has disclosed a zero-day (in Security Management Server) and marked an older bug also as exploited in the wild (in Site-to-Site VPN)

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

CVE ID: CVE-2026-85102
Vendor: Check Point
Product: Multiple Products
Date Added: 2026-09-22
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-85102

Two Check Point critical vulnerabilities are now listed as exploited in the wild.

https://ifin.network/t/cve-2026-85102-and-93616-check-point-security-gateway-rce-path-traversal-exploited/853

#ThreatIntel #ThreatIntelligence #IFIN

An exploited Check Point VPN vulnerability allows remote code execution. Patch this Check Point VPN vulnerability now to block active in-the-wild attacks.

#CheckPoint #CVE202685102 #VPN #Cybersecurity #Infosec #ZeroDay

https://securityonline.info/checkpoint-vpn-vulnerability-cve-2026-85102/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-77322 - High (7.5)

SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/transport_ws.go creates a wsutil.Reader without setting MaxFrameSize, allowing NextFrame to accept a client-controlled header.Length before Pa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77322/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New advisory

CRITICAL: CVE-2026-84388: Fortinet Fortipam Chrome Extension: https://app.opencve.io/cve/?vendor=fortinet&product=fortipam_chrome_extension #Fortinet #Chrome #infosec #vulnerability

🔴 CVE-2026-89275 - Critical (10)

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89275/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Technical details and a PoC for the D-Link DAP-1360 vulnerability (CVE-2026-95675) are public. Learn how this unauthenticated flaw impacts legacy routers.

#DLink #DAP1360 #CVE202695675 #RCE #RouterSecurity #Cybersecurity

https://securityonline.info/d-link-dap-1360-vulnerability-poc/?utm_source=mastodon&utm_medium=jetpack_social

NVIDIA patched critical NVIDIA Infrastructure Controller vulnerabilities across Linux builds. Learn how CVE-2026-65113 impacts systems and update now.

#NVIDIA #Cybersecurity #CVE202665113 #LinuxSecurity #Infosec #DataCenter

https://securityonline.info/nvidia-infrastructure-controller-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Zyxel GS1900 Switches Targeted by Chinese Threat Actor in Data Theft Campaign

Zyxel GS1900 series switches are under active exploitation by a Chinese threat actor using a high-severity buffer overflow (CVE-2026-7273) to steal sensitive data from nearly 1,000 devices worldwide. The campaign has compromised government records and relies on unpatched firmware and default credentials to gain system control.

**If you have Zyxel GS1900 series switches, make sure their management interface is isolated from the internet, accessible from trusted networks only and all default passwords are changed. Then update the firmware to version 2.90(xxxx.2)C0 or later ASAP and check the switches for signs of breach. Attackers are actively exploiting this flaw.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/zyxel-gs1900-switches-targeted-by-chinese-threat-actor-in-data-theft-campaign-y-6-z-t-u/gD2P6Ple2L

The vulnerability, tracked as CVE-2026-7273 (CVSS score: 8.8), is a stack-based buffer overflow vulnerability that could result in arbitrary operating system (OS) command execution. https://thehackernews.com/2026/09/zyxel-and-veeam-flaws-under-active.html

Canonical Patches Critical Trust Store Poisoning Flaw in ADSys

Canonical patched a critical vulnerability (CVE-2026-12249) in ADSys that allows attackers to poison the Ubuntu system trust store by intercepting unencrypted certificate enrollment requests. This flaw enables persistent decryption of TLS traffic and full compromise of encrypted communications on affected hosts.

**If you manage Ubuntu machines connected to Active Directory through ADSys, update ADSys to version 0.16.3 or later on all of them. Oder versions fetch certificates over unencrypted HTTP and let an attacker plant a fake root certificate that exposes all encrypted traffic on the machine. After updating, check each machine's trusted certificates for any unfamiliar root certificates and remove them, since a machine that was already compromised stays exposed even after the patch.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/canonical-patches-critical-trust-store-poisoning-flaw-in-adsys-e-j-r-d-v/gD2P6Ple2L

Exploit released for unpatched Ubuntu kernel flaw that lets containers root the host (CVE-2026-80521)

https://thecybersecguru.com/news/cve-2026-80521-ubuntu-kernel-container-escape/

D-Link warns of two major bugs with public POCs

CVE-2026-86296: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10516

POC: https://tzh00203.notion.site/D-Link-DIR-822A-Stack-Overflow-in-udhcpd-TR-111-Option-125-Parsing-33cb5c52018a80238b80e89e7c7c68f0

CVE-2026-93958: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10518

POC: https://github.com/FoundTL/D-Link-R95-BE9500

CVE-2026-82892: IBM Guardium Data Protection 12.2 OS command injection allows remote arbitrary command execution. CVSS 8.1, no patch yet. Isolate exposed instances now. https://www.valtersit.com/cve/CVE-2026-82892/ #CVE #infosec #IBM

Details and PoC exploit code for a critical WordPress stored XSS are public. Learn how CVE-2026-93485 enables RCE and patch WordPress today.

#WordPress #CVE202693485 #StoredXSS #RCE #Cybersecurity #Infosec

https://securityonline.info/wordpress-stored-xss-poc/?utm_source=mastodon&utm_medium=jetpack_social

(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2026-76460 – Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Analyze the technical mechanics of CVE-2026-76460 with our Cisco TSUITE brief, covering Cisco ISE authentication bypass, path traversal vectors, and endpoint hardening....

https://thecybermind.co/9ysa

Details and PoC for the critical macOS DesktopServicesHelper vulnerability are public. Learn how CVE-2026-43783 enables root access.

#macOS #CVE202643783 #AppleSecurity #Cybersecurity #Infosec #PrivilegeEscalation

https://securityonline.info/macos-desktopserviceshelper-vulnerability-poc/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-91766: PHP had the redirect credential leak curl fixed in 2018 https://daubois.dev/blog/cve-2026-91766-php-http-redirect-credential-leak/

CVE-2026-91766: PHP had the redirect credential leak curl fixed in 2018 https://daubois.dev/blog/cve-2026-91766-php-http-redirect-credential-leak/

Check Point VPN Gateways and Management Server Flaws Actively Exploited

Check Point confirmed active exploitation of three critical vulnerabilities (CVE-2026-85102, CVE-2026-85103, and CVE-2026-93616) affecting VPN gateways and management servers, prompting a 72-hour US federal remediation deadline.

**If you run Check Point Security Gateways, Spark Firewalls or Security Management Servers, patch immediately to LivePatch Take 26 or the latest Jumbo Hotfix. Older unsupported versions R80 through R81.10 must be upgraded first. Make sure the management server's web interface is reachable only from trusted internal networks. Patching isn't enough, since attackers have been active since September 12: check your VPN logs for unknown sessions and internal LDAP scanning, and if you find anything suspicious, treat the device as compromised and escalate to your incident response team.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/check-point-vpn-gateways-and-management-server-flaws-actively-exploited-k-i-7-j-s/gD2P6Ple2L

Siemens Patches Root-Level File Upload Flaw in Siveillance Control OIS Module

Siemens patched a critical root-level file upload vulnerability (CVE-2026-50093) in the Siveillance Control OIS web module that affects physical security management systems worldwide.

**If you use Siemens Siveillance Control or Control Pro, make sure all these systems are isolated from the internet and the OIS web module is reachable only from trusted internal networks. Then update right away to the fixed version for your edition.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/siemens-patches-root-level-file-upload-flaw-in-siveillance-control-ois-module-t-9-0-l-g/gD2P6Ple2L

@solonovamax@tech.lgbt found a PoC for it https://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499

⚪️ D-Link Warns of Unpatched Zero-Day Flaw in DIR-822A Routers

🗨️ D-Link has warned of a critical zero-day vulnerability (CVE-2026-86296) affecting end-of-life DIR-822A dual-band routers. The issue allows an unauthenticated local attacker to cause a denial of service in the DHCP service or achieve remote code execution. No patch is currently…

🔗 https://hackmag.com/news/d-link-0days?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

Discover the critical CVE-2026-86296 vulnerability in D-Link DIR-822A routers. Learn how this DHCP flaw allows attackers to execute arbitrary code locally.

#DLink #RouterSecurity #CVE #CyberSecurity #TechNews

https://meterpreter.org/dlink-dir-822a-router-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

D-Link warns of two major bugs with public POCs

CVE-2026-86296: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10516

POC: https://tzh00203.notion.site/D-Link-DIR-822A-Stack-Overflow-in-udhcpd-TR-111-Option-125-Parsing-33cb5c52018a80238b80e89e7c7c68f0

CVE-2026-93958: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10518

POC: https://github.com/FoundTL/D-Link-R95-BE9500

D-Link warns of max severity zero-day bug in DIR-822A routers

D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch,...

🔗️ [Bleepingcomputer] https://link.is.it/hXngI9

The DJI Bluetooth vulnerability CVE-2026-78306 lets a nearby attacker send unauthenticated DUML commands to 16 drone models. Update firmware now.

#DJI #CVE202678306 #Bluetooth #DroneSecurity #DUML #CyberSecurity

https://meterpreter.org/dji-bluetooth-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

@nyanbinary @cR0w here's one
(from the writeup to CVE-2026-59310 from July/August).
Point at the variables in the picture that traversed your path inappropriately...
https://mobeta.fr/blog/vcenter-cve-2026-59309-cve-2026-59310/

Based on something @cR0w mentioned I wanted to know: Are there CVE records are out there with E:[UP] but that are eitw?

Well, yes. One or two. Or three:

• https://www.cve.org/CVERecord?id=CVE-2026-68820
• https://www.cve.org/CVERecord?id=CVE-2026-55040
• https://www.cve.org/CVERecord?id=CVE-2026-50522
• https://www.cve.org/CVERecord?id=CVE-2026-45659
• https://www.cve.org/CVERecord?id=CVE-2026-41091
• https://www.cve.org/CVERecord?id=CVE-2026-33824
• https://www.cve.org/CVERecord?id=CVE-2026-21525
• https://www.cve.org/CVERecord?id=CVE-2026-21519
• https://www.cve.org/CVERecord?id=CVE-2026-21513
• https://www.cve.org/CVERecord?id=CVE-2026-20805

(and many more that aren't CVE-2026-*).

... ok, are there any that aren't MS?

Yes, a handful:

• https://www.cve.org/CVERecord?id=CVE-2025-68686
• https://www.cve.org/CVERecord?id=CVE-2023-48788
• https://www.cve.org/CVERecord?id=CVE-2022-42475
• https://www.cve.org/CVERecord?id=CVE-2021-44168
• https://www.cve.org/CVERecord?id=CVE-2020-4428
• https://www.cve.org/CVERecord?id=CVE-2020-4427

For no particular reason:

4.5.3.1 CNAs SHOULD update published CVE Records when information material to the Record changes, for example, when a Fix becomes available.

(data may be incomplete & some FPs may have slipped through, this was some quick & dirty regex work)

Based on something @cR0w mentioned I wanted to know: Are there CVE records are out there with E:[UP] but that are eitw?

Well, yes. One or two. Or three:

• https://www.cve.org/CVERecord?id=CVE-2026-68820
• https://www.cve.org/CVERecord?id=CVE-2026-55040
• https://www.cve.org/CVERecord?id=CVE-2026-50522
• https://www.cve.org/CVERecord?id=CVE-2026-45659
• https://www.cve.org/CVERecord?id=CVE-2026-41091
• https://www.cve.org/CVERecord?id=CVE-2026-33824
• https://www.cve.org/CVERecord?id=CVE-2026-21525
• https://www.cve.org/CVERecord?id=CVE-2026-21519
• https://www.cve.org/CVERecord?id=CVE-2026-21513
• https://www.cve.org/CVERecord?id=CVE-2026-20805

(and many more that aren't CVE-2026-*).

... ok, are there any that aren't MS?

Yes, a handful:

• https://www.cve.org/CVERecord?id=CVE-2025-68686
• https://www.cve.org/CVERecord?id=CVE-2023-48788
• https://www.cve.org/CVERecord?id=CVE-2022-42475
• https://www.cve.org/CVERecord?id=CVE-2021-44168
• https://www.cve.org/CVERecord?id=CVE-2020-4428
• https://www.cve.org/CVERecord?id=CVE-2020-4427

For no particular reason:

4.5.3.1 CNAs SHOULD update published CVE Records when information material to the Record changes, for example, when a Fix becomes available.

(data may be incomplete & some FPs may have slipped through, this was some quick & dirty regex work)

🚨 EUVD-2026-66225

📊 Score: 7.7/10 (CVSS v3.1)
📦 Product: compliance-trestle, compliance-trestle
🏢 Vendor: oscal-compass
📅 Updated: 2026-09-24

📝 Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-66225

#cybersecurity #infosec #euvd #cve #vulnerability

Based on something @cR0w mentioned I wanted to know: Are there CVE records are out there with E:[UP] but that are eitw?

Well, yes. One or two. Or three:

• https://www.cve.org/CVERecord?id=CVE-2026-68820
• https://www.cve.org/CVERecord?id=CVE-2026-55040
• https://www.cve.org/CVERecord?id=CVE-2026-50522
• https://www.cve.org/CVERecord?id=CVE-2026-45659
• https://www.cve.org/CVERecord?id=CVE-2026-41091
• https://www.cve.org/CVERecord?id=CVE-2026-33824
• https://www.cve.org/CVERecord?id=CVE-2026-21525
• https://www.cve.org/CVERecord?id=CVE-2026-21519
• https://www.cve.org/CVERecord?id=CVE-2026-21513
• https://www.cve.org/CVERecord?id=CVE-2026-20805

(and many more that aren't CVE-2026-*).

... ok, are there any that aren't MS?

Yes, a handful:

• https://www.cve.org/CVERecord?id=CVE-2025-68686
• https://www.cve.org/CVERecord?id=CVE-2023-48788
• https://www.cve.org/CVERecord?id=CVE-2022-42475
• https://www.cve.org/CVERecord?id=CVE-2021-44168
• https://www.cve.org/CVERecord?id=CVE-2020-4428
• https://www.cve.org/CVERecord?id=CVE-2020-4427

For no particular reason:

4.5.3.1 CNAs SHOULD update published CVE Records when information material to the Record changes, for example, when a Fix becomes available.

(data may be incomplete & some FPs may have slipped through, this was some quick & dirty regex work)

Microsoft Upgrades SharePoint Flaw From Spoofing to 8.8 RCE

A SharePoint Server vulnerability tracked as CVE-2026-65660 turned out to be far more serious than Microsoft first indicated. The company

🔗️ [Thecyberexpress] https://link.is.it/qUvtLM

SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Type-Check Bypass https://blog.viettelcybersecurity.com/sharepoint_cve-2026-65660/

Microsoft Called CVE-2026-65660 a Spoofing Bug. It’s an Authenticated SharePoint RCE

https://thecybersecguru.com/news/cve-2026-65660-sharepoint-rce/

CVE-2026-65660 reportedly enables authenticated, low-privilege attackers to execute arbitrary code remotely on SharePoint Server. Its initial spoofing classification makes accurate advisory tracking and impact reassessment especially important. #SharePointSecurity #VulnerabilityManagement #ThreatIntelligence

https://cyberworldops.eu/en/sharepoint-code-injection-flaw-opens-a-low-privilege-route-to-remote

CISA added CVE-2026-63077 to the KEV catalog after confirming active exploitation in ransomware operations. The flaw allows unauthenticated RCE on JetBrains TeamCity via the agent-polling protocol, putting internet-exposed build infrastructure at direct risk. #TeamCity #Ransomware #InfoSec

https://cyberworldops.eu/en/exploited-teamcity-rce-puts-build-servers-in-the-ransomware-crosshairs

CVE-2026-63077 (CRITICAL): JetBrains TeamCity auth bypass lets unauthenticated attackers run OS commands. Ransomware gangs are actively exploiting this flaw. Patch to 2025.11.7/2026.1.3 or restrict access ASAP. Details: https://radar.offseq.com/threat/cisa-ransomware-gangs-now-exploiting-critical-teamcity-flaw-07e6c455abf6548b #OffSeq #TeamCity #CVE202663077 #Infosec

CVE-2026-63077 - Changed to Known Ransomware Status

JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityVendor: JetBrainsProduct: TeamCityJetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: September 23, 2026 at 14:08:17 UTCDate Added https://nvd.nist.gov/vuln/detail/CVE-2026-63077

Django Fellow Report - Jacob

Jacob reviewed six Django pull requests and authored changes covering GEOS 3.10 support removal and expanded WKT depth-check coverage related to CVE-2026-15830. He also worked on security reports and Django coordination...

https://forum.djangoproject.com/t/django-fellow-report-jacob-2026/43851/39

@nyanbinary @cR0w here's one
(from the writeup to CVE-2026-59310 from July/August).
Point at the variables in the picture that traversed your path inappropriately...
https://mobeta.fr/blog/vcenter-cve-2026-59309-cve-2026-59310/

Based on something @cR0w mentioned I wanted to know: Are there CVE records are out there with E:[UP] but that are eitw?

Well, yes. One or two. Or three:

• https://www.cve.org/CVERecord?id=CVE-2026-68820
• https://www.cve.org/CVERecord?id=CVE-2026-55040
• https://www.cve.org/CVERecord?id=CVE-2026-50522
• https://www.cve.org/CVERecord?id=CVE-2026-45659
• https://www.cve.org/CVERecord?id=CVE-2026-41091
• https://www.cve.org/CVERecord?id=CVE-2026-33824
• https://www.cve.org/CVERecord?id=CVE-2026-21525
• https://www.cve.org/CVERecord?id=CVE-2026-21519
• https://www.cve.org/CVERecord?id=CVE-2026-21513
• https://www.cve.org/CVERecord?id=CVE-2026-20805