A 9.9 Foreman RCE flaw, CVE-2026-96658, lets low-privileged users run commands on Red Hat Satellite. A Viewer bug leaks root passwords.

#Foreman #RedHatSatellite #CVE202696658 #CVE202696659 #CVE202686345 #RCE #LDAP

https://securityonline.info/foreman-rce-cve-2026-96658/?utm_source=mastodon&utm_medium=jetpack_social

A 9.9 Foreman RCE flaw, CVE-2026-96658, lets low-privileged users run commands on Red Hat Satellite. A Viewer bug leaks root passwords.

#Foreman #RedHatSatellite #CVE202696658 #CVE202696659 #CVE202686345 #RCE #LDAP

https://securityonline.info/foreman-rce-cve-2026-96658/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-96658 - Critical (9.9)

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE) by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker ca...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96658/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47593 - High (7.8)

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47593/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47592 - High (7.8)

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of serv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47592/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-14378 | CRITICAL vuln in dplugins DevKit Pro (<=2.3.0): Improper authentication lets unauth attackers gain admin access via crafted cookies & nonce. Immediate action: disable or restrict plugin. https://radar.offseq.com/threat/cve-2026-14378-cwe-287-improper-authentication-in-dplugins-devkit-pro-45d2af96cf344d90 #OffSeq #WordPress #Vuln #Infosec

CVE-2026-14378 | CRITICAL vuln in dplugins DevKit Pro (<=2.3.0): Improper authentication lets unauth attackers gain admin access via crafted cookies & nonce. Immediate action: disable or restrict plugin. https://radar.offseq.com/threat/cve-2026-14378-cwe-287-improper-authentication-in-dplugins-devkit-pro-45d2af96cf344d90 #OffSeq #WordPress #Vuln #Infosec

ASUS Routers hit by CRITICAL vuln: CVE-2026-14157 (CVSS 9.4). Remote authenticated users can execute arbitrary commands via crafted file upload in web interface. Restrict access, monitor closely. https://radar.offseq.com/threat/cve-2026-14157-cwe-134-use-of-externally-controlled-format-string-in-asus-router-2ad64f03a537627f #OffSeq #CVE202614157 #ASUS #Vuln #BlueTeam

FortiMail Zero-Day Under Attack: Critical 98 Vulnerability Lets Hackers Write Files Without Authentication + Video

Fortinet Issues Urgent Warning as Attackers Exploit FortiMail Appliances Fortinet has disclosed a critical FortiMail vulnerability that is already being exploited in the wild, putting organizations that expose the email-security platform’s management interface at immediate risk. Tracked as CVE-2026-104286, the vulnerability carries a CVSS score of 9.8 and…

https://undercodenews.com/fortimail-zero-day-under-attack-critical-98-vulnerability-lets-hackers-write-files-without-authentication-video/?utm_source=mastodon&utm_medium=jetpack_social

Fortinet FortiMail management interface is impacted by CVE-2026-104286 (CVSS 9.8), exploited in the wild as zero-day for unauthenticated system file writes and command execution. Internet-exposed instances face immediate full-compromise risk; isolate management and patch urgently. #Fortinet #ZeroDay #ThreatIntel

https://cyberworldops.eu/en/fortimail-zero-day-gives-unauthenticated-attackers-a-route-to-system

Fortinet FortiMail Zero-Day Crisis: Critical CVSS 98 Vulnerability Actively Exploited to Execute Unauthorized Code + Video

Introduction Fortinet has disclosed a critical security vulnerability affecting its FortiMail email security platform, warning that attackers are actively exploiting the flaw in real-world zero-day attacks. The vulnerability, tracked as CVE-2026-104286, carries a CVSS score of 9.8, placing it among the most severe classes of vulnerabilities because…

https://undercodenews.com/fortinet-fortimail-zero-day-crisis-critical-cvss-98-vulnerability-actively-exploited-to-execute-unauthorized-code-video/?utm_source=mastodon&utm_medium=jetpack_social

🔴 New security advisory:

CVE-2026-104286 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-104286-fortimail-path-traversal-exploited-in-the-wild

by Yazoul AI

#InfoSec #VulnerabilityManagement #CyberSec

🚨 NEW on CISA KEV — exploited in the wild

🛡 Fortinet FortiMail
Fortinet FortiMail Path Traversal Vulnerability
CVE: CVE-2026-104286 · patch by 2026-10-04

Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

🔗 https://ninjasignal.ninja/intel/cve/CVE-2026-104286
#cybersecurity #KEV #CVE #infosec

Critical Fortinet FortiMail Vulnerability Enters CISA KEV After Active Exploitation: Unauthenticated Attackers May Achieve File Write and Remote Code Execution + Video

Introduction A critical vulnerability affecting Fortinet FortiMail appliances has been added to the CISA Known Exploited Vulnerabilities (KEV) Catalog, indicating that attackers are actively exploiting the flaw in real-world environments. The vulnerability, tracked as CVE-2026-104286, combines a path…

https://undercodenews.com/critical-fortinet-fortimail-vulnerability-enters-cisa-kev-after-active-exploitation-unauthenticated-attackers-may-achieve-file-write-and-remote-code-execution-video/?utm_source=mastodon&utm_medium=jetpack_social

FortiMail CVE-2026-104286 zero-day exploited in attacks

https://fawkes.rocks/2026/10/02/fortimail-cve-2026-104286-zero-day-exploited-in-attacks/

Critical FortiMail Zero-Day Under Active Attack: Fortinet Urges Immediate Mitigation + Video

Fortinet is warning customers that a critical FortiMail vulnerability is being actively exploited as a zero-day, potentially allowing unauthenticated attackers to write arbitrary files to vulnerable appliances and ultimately execute unauthorized commands or code. The flaw, tracked as CVE-2026-104286 (FG-IR-26-175), carries a CVSS score of 9.8, placing it in the critical…

https://undercodenews.com/critical-fortimail-zero-day-under-active-attack-fortinet-urges-immediate-mitigation-video/?utm_source=mastodon&utm_medium=jetpack_social

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day...

🔗️ [Bleepingcomputer] https://link.is.it/QyRWj6

Fortinet Warns of Zero-Day Attacks Exploiting Critical FortiMail Flaw

Fortinet has issued a critical warning about zero-day attacks exploiting a severe vulnerability in its FortiMail appliances, with a CVSS score of 9.8 that allows unauthenticated attackers to write arbitrary files on the system. This flaw, tracked as CVE-2026-104286, is under active exploitation, putting FortiMail users at risk.

https://osintsights.com/fortinet-warns-of-zero-day-attacks-exploiting-critical-fortimail-flaw?utm_source=mastodon&utm_medium=social

#ZeroDay #Fortimail #Cve2026104286 #PathTraversal #EmergingThreats

Attackers exploit CVE-2026-104286, a 9.8 FortiMail vulnerability allowing unauthenticated file writes. CISA adds it to KEV. Apply the workaround.

#Fortinet #FortiMail #CVE2026104286 #PathTraversal #CISAKEV #ActivelyExploited #ZeroDay

https://securityonline.info/fortimail-vulnerability-cve-2026-104286/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1001] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-104286 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-104286)
- Name: Fortinet FortiMail Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Fortinet
- Product: FortiMail
- Notes: https://fortiguard.fortinet.com/psirt/FG-IR-26-175 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-104286

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261001 #cisa20261001 #cve_2026_104286 #cve2026104286

CVE ID: CVE-2026-104286
Vendor: Fortinet
Product: FortiMail
Date Added: 2026-10-01
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-104286

Happy #zeroday FortiMail customers

CVE-2026-104286: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

This has been reported to be exploited in the wild

https://fortiguard.fortinet.com/psirt/FG-IR-26-175

#fortinet #cve #vulnerability

Fortinet FortiMail management interface is impacted by CVE-2026-104286 (CVSS 9.8), exploited in the wild as zero-day for unauthenticated system file writes and command execution. Internet-exposed instances face immediate full-compromise risk; isolate management and patch urgently. #Fortinet #ZeroDay #ThreatIntel

https://cyberworldops.eu/en/fortimail-zero-day-gives-unauthenticated-attackers-a-route-to-system

FortiMail CVE-2026-104286 zero-day exploited in attacks

https://fawkes.rocks/2026/10/02/fortimail-cve-2026-104286-zero-day-exploited-in-attacks/

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day...

🔗️ [Bleepingcomputer] https://link.is.it/QyRWj6

Attackers exploit CVE-2026-104286, a 9.8 FortiMail vulnerability allowing unauthenticated file writes. CISA adds it to KEV. Apply the workaround.

#Fortinet #FortiMail #CVE2026104286 #PathTraversal #CISAKEV #ActivelyExploited #ZeroDay

https://securityonline.info/fortimail-vulnerability-cve-2026-104286/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1001] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-104286 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-104286)
- Name: Fortinet FortiMail Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Fortinet
- Product: FortiMail
- Notes: https://fortiguard.fortinet.com/psirt/FG-IR-26-175 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-104286

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261001 #cisa20261001 #cve_2026_104286 #cve2026104286

CVE ID: CVE-2026-104286
Vendor: Fortinet
Product: FortiMail
Date Added: 2026-10-01
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-104286

Happy #zeroday FortiMail customers

CVE-2026-104286: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

This has been reported to be exploited in the wild

https://fortiguard.fortinet.com/psirt/FG-IR-26-175

#fortinet #cve #vulnerability

Discord libdave CRITICAL vuln (CVE-2026-104480, CVSS 9.4): Affected versions 1.1.0 – <1.2.0 let attackers inject unauthorized members into encrypted sessions. Patch status unconfirmed — check https://radar.offseq.com/threat/cve-2026-104480-cwe-390-detection-of-error-condition-without-action-in-discord-libdave-b9a84610b93cd7e9 #OffSeq #Discord #CVE2026104480 #infosec

Discord libdave CRITICAL vuln (CVE-2026-104480, CVSS 9.4): Affected versions 1.1.0 – <1.2.0 let attackers inject unauthorized members into encrypted sessions. Patch status unconfirmed — check https://radar.offseq.com/threat/cve-2026-104480-cwe-390-detection-of-error-condition-without-action-in-discord-libdave-b9a84610b93cd7e9 #OffSeq #Discord #CVE2026104480 #infosec

🟠 CVE-2026-103098 - High (7.5)

Transmission of a sensitive key in the URL
over an unencrypted HTTP connection.  The
request is sent over HTTP rather than HTTPS, meaning the key is transmitted in
plaintext across the network. An attacker with the ability to monitor network
traf...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103098/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103098 - High (7.5)

Transmission of a sensitive key in the URL
over an unencrypted HTTP connection.  The
request is sent over HTTP rather than HTTPS, meaning the key is transmitted in
plaintext across the network. An attacker with the ability to monitor network
traf...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103098/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103097 - High (7.5)

An API key is
hardcoded and retrievable from the application package. Since Android
applications can be reverse engineered, embedding sensitive API credentials
directly in the client application may allow unauthorized users to extract and
misuse t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103097/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103097 - High (7.5)

An API key is
hardcoded and retrievable from the application package. Since Android
applications can be reverse engineered, embedding sensitive API credentials
directly in the client application may allow unauthorized users to extract and
misuse t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103097/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103096 - High (7.5)

API
key is hardcoded and retrievable from the application package. Since Android
applications can be reverse engineered, embedding sensitive API credentials
directly in the client application may allow unauthorized users to extract and
misuse the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103096/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103096 - High (7.5)

API
key is hardcoded and retrievable from the application package. Since Android
applications can be reverse engineered, embedding sensitive API credentials
directly in the client application may allow unauthorized users to extract and
misuse the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103096/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12540 - High (8.2)

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an underlying system command (typically grep) without adequate shell neutralization. While the t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12540/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12540 - High (8.2)

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an underlying system command (typically grep) without adequate shell neutralization. While the t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12540/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Red Hat Directory Server 11: CVE-2026-86345 (CRITICAL, CVSS 9) allows on-path attackers to inject LDAP messages post-StartTLS, risking auth bypass. Restrict access, check Red Hat advisory https://radar.offseq.com/threat/cve-2026-86345-improper-restriction-of-communication-channel-to-intended-endpoints-in-red-hat-red-hat-bc48a6c684134ace #OffSeq #CVE202686345 #RedHat #LDAP #infosec

🔴 CVE-2026-86345 - Critical (9)

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86345/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Red Hat Directory Server 11: CVE-2026-86345 (CRITICAL, CVSS 9) allows on-path attackers to inject LDAP messages post-StartTLS, risking auth bypass. Restrict access, check Red Hat advisory https://radar.offseq.com/threat/cve-2026-86345-improper-restriction-of-communication-channel-to-intended-endpoints-in-red-hat-red-hat-bc48a6c684134ace #OffSeq #CVE202686345 #RedHat #LDAP #infosec

🔴 CVE-2026-86345 - Critical (9)

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86345/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-103765 - Critical (9.4)

Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the HTTP metadata server /metadata handler that allows unauthenticated attackers to read, overwrite, and delete transfer engine metadata keys. Attackers can poison se...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103765/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-103765 - Critical (9.4)

Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the HTTP metadata server /metadata handler that allows unauthenticated attackers to read, overwrite, and delete transfer engine metadata keys. Attackers can poison se...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103765/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-103764 - Critical (9.8)

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a cr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103764/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL CVE-2026-103764 in kvcache-ai Mooncake (<0.3.13): Untrusted pointer dereference lets unauthenticated attackers read/write arbitrary memory, risking data leak & code execution. Patch to 0.3.13+ now! https://radar.offseq.com/threat/cve-2026-103764-untrusted-pointer-dereference-in-kvcache-ai-mooncake-1cbac989f2110be6 #OffSeq #CVE #Vuln #infosec

🔴 CVE-2026-103764 - Critical (9.8)

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a cr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103764/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL CVE-2026-103764 in kvcache-ai Mooncake (<0.3.13): Untrusted pointer dereference lets unauthenticated attackers read/write arbitrary memory, risking data leak & code execution. Patch to 0.3.13+ now! https://radar.offseq.com/threat/cve-2026-103764-untrusted-pointer-dereference-in-kvcache-ai-mooncake-1cbac989f2110be6 #OffSeq #CVE #Vuln #infosec

🟠 CVE-2026-86344 - High (7.5)

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86344/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86344 - High (7.5)

A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86344/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103761 - High (7.5)

Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePeerNotify that allows unauthenticated attackers to grow process memory without limit. Attackers can repeatedly send notify frames...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103761/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103761 - High (7.5)

Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePeerNotify that allows unauthenticated attackers to grow process memory without limit. Attackers can repeatedly send notify frames...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103761/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104051 - High (8.2)

PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret delete_code and uploader metadata by calling the API::info() endpoint which returns the complete raw metadata object...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104051/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104051 - High (8.2)

PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret delete_code and uploader metadata by calling the API::info() endpoint which returns the complete raw metadata object...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104051/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-96659 - Critical (9.1)

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user ca...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96659/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104018 - High (8.8)

An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 all versions up to 26.09. when configured to enforce per-user command privileges. Under certain shell operations, a command may be evaluat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104018/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104018 - High (8.8)

An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 all versions up to 26.09. when configured to enforce per-user command privileges. Under certain shell operations, a command may be evaluat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104018/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104057 - High (7.5)

Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps (activePlayers and allConnections) in its WebSocket handler, where Wshandler and HandleWebsocketMessages goroutines read ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104057/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104057 - High (7.5)

Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps (activePlayers and allConnections) in its WebSocket handler, where Wshandler and HandleWebsocketMessages goroutines read ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104057/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Apache HTTP Server 2.4.69 fixes 20 flaws, including CVE-2026-63292, a mod_vhost_alias stack overflow that may enable code execution.

#Apache #ApacheHTTPServer #httpd #CVE202663292 #CVE202657941 #CVE202659685 #PatchNow

https://securityonline.info/apache-http-server-2-4-69/?utm_source=mastodon&utm_medium=jetpack_social

Apache HTTP Server 2.4.69 fixes 20 flaws, including CVE-2026-63292, a mod_vhost_alias stack overflow that may enable code execution.

#Apache #ApacheHTTPServer #httpd #CVE202663292 #CVE202657941 #CVE202659685 #PatchNow

https://securityonline.info/apache-http-server-2-4-69/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-97662 - High (8.2)

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97662 - High (8.2)

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

https://www.fortra.com/security/advisories/product-security/fi-2026-017

No mention of it being EITW yet but if it is, I expect chicken-themed headlines and warez for BoKS.

sev:CRIT 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.

https://nvd.nist.gov/vuln/detail/cve-2026-12627

🔴 CVE-2026-12627 - Critical (9.8)

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12627/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14316 - High (8.1)

The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of the heap ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14316/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-95588 - High (8.6)

Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter &lt;= 11.0.5 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95588/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97297 - High (7.6)

Subscriber Broken Access Control in Gratisfaction &lt;= 4.6.3 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97297/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55230 - High (8.7)

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's HTML sanitizer fails to strip event-handler attributes when a tag carries a greater-than character inside a q...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55230/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55230 - High (8.7)

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's HTML sanitizer fails to strip event-handler attributes when a tag carries a greater-than character inside a q...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55230/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-68496 - High (7.5)

The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limit is not enforced for this format. SmileParser._handleLongFieldNam...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68496/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-68496 - High (7.5)

The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limit is not enforced for this format. SmileParser._handleLongFieldNam...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68496/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55232 - High (7.6)

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's SSRF guard resolves a host with an IPv4-only function and never inspects IPv6, so any host that lacks an A re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55232/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55232 - High (7.6)

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's SSRF guard resolves a host with an IPv4-only function and never inspects IPv6, so any host that lacks an A re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55232/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104059 - High (8.1)

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without CSRF tokens, Origin/Referer ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104059/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104059 - High (8.1)

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without CSRF tokens, Origin/Referer ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104059/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical Capacitor vulnerability CVE-2026-103922 (CVSS 9.3) affects a package with 5.5M weekly downloads. Update to a patched release now.

#Capacitor #Ionic #CVE2026103922 #MobileSecurity #npm #Android #iOS

https://securityonline.info/capacitor-vulnerability-cve-2026-103922/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-103922 - Critical (9.3)

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim wh...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103922/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical Capacitor vulnerability CVE-2026-103922 (CVSS 9.3) affects a package with 5.5M weekly downloads. Update to a patched release now.

#Capacitor #Ionic #CVE2026103922 #MobileSecurity #npm #Android #iOS

https://securityonline.info/capacitor-vulnerability-cve-2026-103922/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-103922 - Critical (9.3)

Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim wh...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103922/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WatchGuard continuing the slow drip of sev:CRIT advisories.

https://psirt.watchguard.com/CVE-2026-13043/

A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of kernel and process memory.

🟠 CVE-2026-79896 - High (7.5)

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is nor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79896/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-86950: The Great Glyph Grift - An in-the-wild iOS bug with a possible WhatsApp zero-click path https://lobste.rs/s/yfttkn #security
https://calif.io/research/the-great-glyph-grift

Researchers published the first public PoC for CVE-2026-86950, an Apple CoreGraphics out-of-bounds write via crafted PDF font data. The PoC shows crash and controlled write only, but Apple reports targeted exploitation in the wild, raising immediate patching priority. #AppleSecurity #CoreGraphics #VulnManagement

https://cyberworldops.eu/en/public-coregraphics-poc-raises-pressure-to-patch-apple-devices-under

Geopolitical: Iran warned UAE following Netanyahu's visit (Sept 30) amidst regional tensions, while Russia conducted a drone strike on Ukraine's National Academy of Sciences (Sept 29).

Technology: OpenAI launched "dots" agents and GPT-6.1 Sol (Sept 29), despite shelving a prior AI model (Astra) due to safety concerns. SpaceX's Starship successfully completed its first orbital flight (Sept 28-29).

Cybersecurity: Urgent advisories were issued for actively exploited Citrix NetScaler zero-days (Sept 30), mandating federal agency patching. Apple also patched a CoreGraphics zero-day (CVE-2026-86950) used in targeted attacks (Sept 29).

#AnonNews_irc #Cybersecurity #News

#Apple released a #security update for #iOS 26, #iPadOS 26, and #macOS 26 to fix a #vulnerability in the #graphicsengine that could be exploited for sophisticated attacks. The bug, CVE-2026-86950, was discovered by Meta and could potentially allow hackers to steal personal data. A separate zero-click bug, CVE-2026-86869, was also fixed, preventing silent data theft via malicious iMessages. https://techcrunch.com/2026/09/29/still-running-ios-26-update-your-iphones-ipads-and-macs-for-this-urgent-security-fix/

Apple released the urgent iOS 26.7.1 update to patch a critical zero-day vulnerability (CVE-2026-86950) in CoreGraphics, preventing arbitrary code execution.

#AppleSecurity #iOSUpdate #ZeroDay #CyberSecurity #TechNews

https://dailytechnow.com/apple-patches-zero-day-ios-26-7-1/

Apple Patches Actively Exploited Zero-Day in iOS 26, iPadOS 26 and macOS

Apple patched a zero-click vulnerability (CVE-2026-86950) in iOS 26 and macOS 26 that allow remote code execution and data theft, and has been exploited

**If you use an iPhone, iPad or Mac, update it right now to iOS/iPadOS 26.7.1, macOS Tahoe 26.7.1 or macOS Sequoia 15.8.1. Alterantively, where possible, move to iOS 27. Attackers are already using this flaw to take over devices and steal personal data. If you're a likely target, such as a journalist, activist or executive, consider turning on Lockdown Mode for extra protection.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/apple-patches-actively-exploited-zero-day-in-ios-26-ipados-26-and-macos-p-i-5-p-7/gD2P6Ple2L

Apple a corrigé une faille CoreGraphics exploitée pour cibler des utilisateurs d’iPhone (CVE-2026-86950) https://www.it-connect.fr/apple-cve-2026-86950-faille-zero-day-coregraphics/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Apple

CVE-2026-78210: HIGH severity in Octopus Server (CVSS 7.1) lets users with scoped permissions execute unauthorized scripts in certain environments. Patch status unknown — minimize permissions and monitor for updates. https://radar.offseq.com/threat/cve-2026-78210-cwe-863-incorrect-authorization-in-octopus-deploy-octopus-server-50d97dfe20efe99c #OffSeq #OctopusDeploy #Vuln #CVE202678210

CVE-2026-101283: CRITICAL heap buffer overflow in esnet iperf3 (v3.20 & v3.21). Unauthenticated attackers can trigger memory corruption via decrypt_rsa_message(). Upgrade to 3.22 ASAP. https://radar.offseq.com/threat/cve-2026-101283-cwe-122-heap-based-buffer-overflow-in-esnet-iperf3-1608d23cd8415ceb #OffSeq #CVE2026101283 #infosec #vulnerability

🟠 CVE-2026-79899 - High (7.9)

Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79899/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-79898 - Critical (9.1)

Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97284 - High (8.8)

Contributor PHP Object Injection in Icegram &lt;= 3.1.31 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97284/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-79901 - Critical (9.9)

In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79901/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97277 - High (7.6)

Subscriber Broken Access Control in Social Boost &lt;= 3.6.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97277/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62059 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62059/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-92966: CRITICAL code injection in LatePoint Appointment Booking Plugin (<=5.7.0) for WordPress. Unauthenticated attackers can inject & execute shortcodes, risking full site compromise. Disable plugin or restrict access until patched. https://radar.offseq.com/threat/cve-2026-92966-cwe-94-improper-control-of-generation-of-code-code-injection-in-latepoint-appointment-0d4b3da3082989fe #OffSeq #WordPress #CVE202692966

Sharp printer vulnerability CVE-2024-58388 lets attackers read files without login. PoC is public and attacks seen in the wild. Patch now.

#Sharp #ToshibaTec #CVE202458388 #PrinterSecurity #LFI #PoC #ExploitedInTheWild

https://securityonline.info/sharp-printer-vulnerability-cve-2024-58388/?utm_source=mastodon&utm_medium=jetpack_social

Sharp printer vulnerability CVE-2024-58388 lets attackers read files without login. PoC is public and attacks seen in the wild. Patch now.

#Sharp #ToshibaTec #CVE202458388 #PrinterSecurity #LFI #PoC #ExploitedInTheWild

https://securityonline.info/sharp-printer-vulnerability-cve-2024-58388/?utm_source=mastodon&utm_medium=jetpack_social

Fuck this bullshit. This 2024 CVE was just published today. Which, fine, whatever. It happens. Except it specifically says it was observed EITW in July 2024.

https://www.cve.org/CVERecord?id=CVE-2024-58388

Exploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30.

Witholding a CVE for something known to be EITW for over two years is fucking bullshit. Especially when the PoC was published in June 2024:

https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html#pre-auth-lfi

But at least there's a Nuclei template:

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/crocus-lfi.yaml

🟠 CVE-2026-66246 - High (8.8)

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references (IDOR), enabling privilege escalation and the unauthorized modification or d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66246/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Kiteworks Email Protection Gateway <9.5.1 has a CRITICAL vuln (CVE-2026-102149, CVSS 9.4): attackers can assign certificates to other user accounts, risking encrypted email exposure & unauthorized access. Await patch, consider disabling cert login. https://radar.offseq.com/threat/cve-2026-102149-cwe-306-missing-authentication-for-critical-function-in-kiteworks-email-protection-4008bd0cefe1b69f #OffSeq #CVE2026102149 #infosec

CVE-2026-102106 (CRITICAL, CVSS 9.1): Kiteworks Email Protection Gateway (<9.5.0) suffers improper admin authentication — attackers can bypass password checks & gain full admin access. Restrict admin service access & monitor for patches. https://radar.offseq.com/threat/cve-2026-102106-cwe-287-improper-authentication-in-kiteworks-email-protection-gateway-f705d7916e63696f #OffSeq #CVE #Infosec

This is an interesting vuln and one that can be a great example of why a sev:CRIT may not be high priority.

sev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

MISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor. Because the system did not record whether a given TOTP period had already been consumed, the same code remained valid for its entire time window (typically 30 seconds). An attacker who captures a legitimate code during a user's login could replay it to authenticate a second session as that user. Preconditions: - The target user has TOTP-based two-factor authentication enabled. - The attacker is in a position to observe or intercept the TOTP code during a legitimate login (e.g., network-level interception, shoulder surfing, or a compromised client). - The replay must occur within the TOTP validity period. Security impact: - Unauthorized account access by replaying a captured one-time code. - Potential compromise of threat-intelligence data and administrative functions accessible to the targeted user. Affected versions: <v2.5.48.

https://nvd.nist.gov/vuln/detail/cve-2026-103655

🔒 New CSAF advisory published

VDE-2025-102
WAGO: Multiple Devices are affected by a Vulnerability in BACnet IP Stack
CVE-2025-41753

Multiple WAGO devices are affected by a vulnerability in the dynamic creation of BACnet File Objects. The object name is used as a file path without sufficient validation and is not restricted to the intend…

HTML: https://certvde.com/en/advisories/VDE-2025-102
CSAF JSON: https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-102.json

#OT #Advisory

🟠 CVE-2026-47599 - High (7.8)

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerab...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47599/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-13313 (HIGH, CVSS 8.9) in ASUS routers: Authenticated attackers can enable Telnet via debug code, gaining root command execution. Restrict management access & monitor Telnet until patch info is released. https://radar.offseq.com/threat/cve-2026-13313-cwe-489-active-debug-code-in-asus-router-57f2c007e7c82b59 #OffSeq #ASUS #Infosec #Vuln

Learn how to patch critical ASUS security vulnerabilities like CVE-2026-13313 to protect your routers and motherboards from severe network exploits.

#ASUS #Cybersecurity #Vulnerability #Router #Hardware

https://securityonline.info/asus-security-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-101276: esnet iperf3 3.21 suffers a CRITICAL remote use-after-free (CVSS 9.2). Unauthenticated attackers can trigger memory corruption or RCE. Upgrade to 3.22+ now. Details: https://radar.offseq.com/threat/cve-2026-101276-cwe-416-use-after-free-in-esnet-iperf3-8a664a87c0e694fb #OffSeq #CVE2026101276 #iperf3 #infosec

🟠 CVE-2026-92870 - High (7.5)

A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92870/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62146 - High (7.8)

A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62146/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Attackers exploited Zammad zero-day flaws CVE-2026-102489 and CVE-2026-102490 to gain root at DIVD. Upgrade to Zammad 7 or go offline.

#Zammad #ZeroDay #CVE2026102489 #CVE2026102490 #DIVD #AIAgent #ExploitedInTheWild

https://securityonline.info/zammad-zero-day-cve-2026-102489/?utm_source=mastodon&utm_medium=jetpack_social

Attackers exploited Zammad zero-day flaws CVE-2026-102489 and CVE-2026-102490 to gain root at DIVD. Upgrade to Zammad 7 or go offline.

#Zammad #ZeroDay #CVE2026102489 #CVE2026102490 #DIVD #AIAgent #ExploitedInTheWild

https://securityonline.info/zammad-zero-day-cve-2026-102489/?utm_source=mastodon&utm_medium=jetpack_social

🏆 New Achievement! Root in the Wild!

Observe the Zammad ticketing system in its natural habitat — quietly managing support queues, utterly unaware it carries two zero-days, CVE-2026-102489 and CVE-2026-102490, like a doomed species bearing a genetic flaw it cannot name. An autonomous AI agent, patient and efficient as a nature film's apex predator, chained the pair together: session hijack, remote code execution, root escalation — all in mere seconds. The herd had no warning. (1/2)

Attackers exploited Zammad zero-day flaws CVE-2026-102489 and CVE-2026-102490 to gain root at DIVD. Upgrade to Zammad 7 or go offline.

#Zammad #ZeroDay #CVE2026102489 #CVE2026102490 #DIVD #AIAgent #ExploitedInTheWild

https://securityonline.info/zammad-zero-day-cve-2026-102489/?utm_source=mastodon&utm_medium=jetpack_social

Attackers exploited Zammad zero-day flaws CVE-2026-102489 and CVE-2026-102490 to gain root at DIVD. Upgrade to Zammad 7 or go offline.

#Zammad #ZeroDay #CVE2026102489 #CVE2026102490 #DIVD #AIAgent #ExploitedInTheWild

https://securityonline.info/zammad-zero-day-cve-2026-102489/?utm_source=mastodon&utm_medium=jetpack_social

🏆 New Achievement! Root in the Wild!

Observe the Zammad ticketing system in its natural habitat — quietly managing support queues, utterly unaware it carries two zero-days, CVE-2026-102489 and CVE-2026-102490, like a doomed species bearing a genetic flaw it cannot name. An autonomous AI agent, patient and efficient as a nature film's apex predator, chained the pair together: session hijack, remote code execution, root escalation — all in mere seconds. The herd had no warning. (1/2)

Next.js unauthenticated RCE PoC https://github.com/EQSTLab/CVE-2026-94545

Details and PoC exploit code are public for CVE-2026-94545, an unauthenticated Next.js RCE in next/og. Upgrade to Next.js 16.3.6 now.

#NextJS #CVE202694545 #RCE #PoC #Satori #WebSecurity #Vercel

https://securityonline.info/nextjs-rce-poc-cve-2026-94545/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-79625 - High (8.1)

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79625/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 New CSAF advisory published

VDE-2026-097
CODESYS Control Runtime - Improper Synchronization in Monitoring
CVE-2026-79625

The monitoring functionality of affected CODESYS Control runtime systems processes read and write requests to PLC application data sent by the CODESYS Development System and other clients suc…

HTML: https://www.certvde.com/en/advisories/VDE-2026-097/
CSAF JSON: https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-12_vde-2026-097.json

#OT #Advisory

🟠 CVE-2026-76992 - High (7.5)

The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76992/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 New CSAF advisory published

VDE-2026-094
CODESYS Gateway Client - Uncontrolled Memory Allocation
CVE-2026-76992

The CODESYS Gateway Client (CmpGatewayClient) is used by various CODESYS products to establish PLC communication via the CODESYS Gateway.

Due to missing limits on memory allocations derived from a si…

HTML: https://www.certvde.com/en/advisories/VDE-2026-094/
CSAF JSON: https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-11_vde-2026-094.json

#OT #Advisory

🟠 CVE-2026-47591 - High (7.8)

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write access to memory marked read-only. A successfu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47591/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47600 - High (7.8)

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47600/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47601 - High (7.8)

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user could cause improper preservation of memory access permissions when importing a read-onl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47601/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Recent geopolitical news indicates Russia initiated a winter strike campaign targeting Ukraine's energy infrastructure on September 30. In cybersecurity, CISA added a critical Cisco Catalyst SD-WAN Manager authentication bypass flaw (CVE-2026-76504) to its Known Exploited Vulnerabilities catalog on September 30. On the technology front, Chinese hackers were reported to be impersonating AI experts to target US policy minds on October 1. Additionally, the NSA announced new post-quantum cryptography measures to safeguard national security systems on October 1.

#AnonNews_irc #Cybersecurity #News

Cisco SD-WAN CVE-2026-76504 analysis and exploit walk-through available c/o Landon Rice on the @vulncheck team ㊙️

https://www.vulncheck.com/blog/revenge-of-the-sd-wan-cve-2026-76504

🔵 THREAT INTELLIGENCE

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

Vulnerability | CRITICAL
CVEs: CVE-2026-76504

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst...

Full analysis:
https://www.yazoul.net/news/article/cisa-adds-exploited-cisco-catalyst-sd-wan-manager-auth-bypass-to-kev

by Yazoul AI

#ThreatIntel #SecurityNews #CyberNews

Recent geopolitical news indicates Russia initiated a winter strike campaign targeting Ukraine's energy infrastructure on September 30. In cybersecurity, CISA added a critical Cisco Catalyst SD-WAN Manager authentication bypass flaw (CVE-2026-76504) to its Known Exploited Vulnerabilities catalog on September 30. On the technology front, Chinese hackers were reported to be impersonating AI experts to target US policy minds on October 1. Additionally, the NSA announced new post-quantum cryptography measures to safeguard national security systems on October 1.

#AnonNews_irc #Cybersecurity #News

Cisco SD-WAN CVE-2026-76504 analysis and exploit walk-through available c/o Landon Rice on the @vulncheck team ㊙️

https://www.vulncheck.com/blog/revenge-of-the-sd-wan-cve-2026-76504

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

CISA’s active exploitation verification of CVE-2026-76504 demands an immediate, high-priority posture adjustment across all Cisco Catalyst SD-WAN Manager…...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager-4/

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

CISA’s active exploitation verification of CVE-2026-76504 demands an immediate, high-priority posture adjustment across all Cisco Catalyst SD-WAN Manager…...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager-3/

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

Strategic Threat Advisory: CVE-2026-76504 Affected Vendor & Product: Cisco - Catalyst SD-WAN Manager Vulnerability Class (CWE):...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager-2/

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

Threat Advisory: CVE-2026-76504 Affected Vendor/Product: Cisco - Catalyst SD-WAN Manager Vulnerability Type (CWE): N/A Operational Threat Level:...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager/

Cisco Patches Actively Exploited Zero-Day in Catalyst SD-WAN Manager

Cisco released security updates for a zero-day vulnerability (CVE-2026-76504) in Catalyst SD-WAN Manager that attackers are actively exploiting to gain admin privileges. The flaw allows unauthenticated remote access to the management API through URI encoding bypasses.

**If you run Cisco Catalyst SD-WAN Manager, make sure it is isolated from the internet and reachable from trusted networks only, then patch it ASAP to the fixed version for your release (or migrate if you're on anything older than 20.9). Before patching, save an admin-tech file and check the logs for suspicious j_security_check requests or activity from viptela-reserved- accounts. If you find any, assume your whole SD-WAN network is compromised and call in incident response.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisco-patches-actively-exploited-zero-day-in-catalyst-sd-wan-manager-2-0-z-t-k/gD2P6Ple2L

🚨 [CISA-2026:0930] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-76504 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76504)
- Name: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Catalyst SD-WAN Manager
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76504

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260930 #cisa20260930 #cve_2026_76504 #cve202676504

Cisco confirmed active exploitation of CVE-2026-76504, an authentication bypass in Catalyst SD-WAN Manager API session handling. It allows unauthenticated remote admin access, enabling full control of SD-WAN fabrics. Prioritize patching and review management-plane logs for abuse. #CiscoSecurity #SdWan #AuthBypass

https://cyberworldops.eu/en/cisco-sd-wan-authentication-flaw-gives-remote-attackers-full

🚨 Cisco warns critical SD-WAN Manager zero-day is actively exploited

CVE-2026-76504 is a critical authentication bypass affecting Cisco Catalyst SD-WAN Manager.

The flaw allows an unauthenticated remote attacker to send a crafted HTTP request that bypasses an API authentication rule and grants access with admin privileges.
⠀
The vulnerability carries a CVSS score of 9.8 and affects the product regardless of its configuration.

Cisco became aware of active exploitation in September after investigating a support case.
⠀
There are no workarounds. Administrators should install a fixed release immediately and investigate internet-facing systems for signs of compromise.

Source: https://www.bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks/

Well would you look at that; it's Cisco 0-day o'clock again.

https://ifin.network/t/cve-2026-76504-cisco-sd-wan-auth-bypass-actively-exploited/874

#ThreatIntel #ThreatIntelligence #IFIN

CVE ID: CVE-2026-76504
Vendor: Cisco
Product: Catalyst SD-WAN Manager
Date Added: 2026-09-30
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-76504

Cisco SD-WAN Manager zero-day CVE-2026-76504 exploited

https://fawkes.rocks/2026/09/30/cisco-sd-wan-manager-zero-day-cve-2026-76504-exploited/

🏆 New Achievement! Unauthenticated and Loving It!

Welcome to Module 7: API Authentication and Why Your Vendor Forgot To Include It. Today's learning objective is CVE-2026-76504, a critical zero-day in Cisco Catalyst SD-WAN Manager. Attackers are actively exploiting a flaw in the API authentication mechanism to gain full administrator privileges on your systems. Without a username. Without a password. Without so much as a polite knock. (1/3)

New advisory, new flaw.

Cisco: CRITICAL CVE-2026-76504: Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU @TalosSecurity #Cisco

More on that Cisco vulnerability:

Rapid7: Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504) https://www.rapid7.com/blog/post/etr-critical-cisco-catalyst-sd-wan-manager-api-authentication-bypass-exploited-in-the-wild-cve-2026-76504/ @Rapid7Official

Also:

Broadcom has several advisories today, three of them addressing critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom #infosec #vulnerability

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are...

🔗️ [Bleepingcomputer] https://link.is.it/cZgOkH

Attackers exploit CVE-2026-76504, a 9.8 authentication bypass in Cisco SD-WAN Manager that grants admin API access. Patch now.

#Cisco #SDWAN #CVE202676504 #AuthenticationBypass #ActivelyExploited #CyberSecurity

https://securityonline.info/cisco-sd-wan-manager-cve-2026-76504/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-10764 - High (8.7)

Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10764/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

@hlux @bkastl Im Prinzip stimmt das mit meiner Wahrnehmung überein, vor allem im Vergleich mit Citrix, Ivanti, Fortinet, Cisco. Aber auch hier gab's neulich was Spannendes: https://www.netspi.com/blog/technical-blog/web-application-pentesting/cve-2026-78902-xss-to-rce-in-pfsense-with-one-dns-request/

🟠 CVE-2026-92867 - High (8.8)

An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92867/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92871 - High (7.5)

A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92871/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New. This relates to CVE-2026-76570.

VulnCheck: JCTables for Joomla: When "Already Escaped" Means Injectable https://www.vulncheck.com/blog/jctables-unauthenticated-sql-rw-to-rce @vulncheck #infoec #vulnerability #SQL

🔴 CVE-2026-102458 - Critical (9.8)

EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords through a specific API.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-102458/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL vuln in DigiWin EasyFlow .NET (CVE-2026-102458, CVSS 9.3): Missing authentication allows remote attackers to obtain plaintext passwords via API. Affects 6.6 – 6.6.19, 8.1 – 8.1.5. Patch ASAP! https://radar.offseq.com/threat/cve-2026-102458-cwe-306-missing-authentication-for-critical-function-in-digiwin-easyflow-net-3e9316754f2dea13 #OffSeq #CVE2026_102458 #infosec #appsec

🔴 CVE-2026-102455 - Critical (9.8)

EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-102455/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75098 - High (7.5)

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrar...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75098/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-18782 - Critical (9.8)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection.

This issue affects Trex MES: through...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18782/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-82307 - Critical (9.8)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection.

This issue affects SOPLOG: before Soplog 2026.9.4.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82307/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-6806 - High (7.5)

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stm_lat/stm_lng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6806/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

A critical Apache PLC4X vulnerability, CVE-2026-102508, lets attackers impersonate OPC UA servers and steal credentials. Upgrade to PLC4X 1.0.0 now.

#ApachePLC4X #PLC4X #OPCUA #CVE2026102508 #ICSSecurity #OTSecurity #PLC #Apache

https://securityonline.info/apache-plc4x-vulnerability-cve-2026-102508/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-94002 - High (7.5)

Possible memory exhaustion in SFTP clients (DefaultSftpClient) in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5.

Apache
MINA SSHD is a Java library for client-side and server-side SSH. The sshd-sftp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-94002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93994 - High (8.1)

Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshd_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93994/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-94052 - Critical (9.1)

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks.

Apache MINA SSHD is a Java library for client-side and server-side SSH. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-94052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62097 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62097/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18783 - High (8.8)

Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass.

This issue affects Trex MES: through 2026-09-29.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18783/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97197 - High (7.5)

Unauthenticated Broken Access Control in WordPress Backup & Migration &lt;= 1.6.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97241 - High (7.5)

Unauthenticated Sensitive Data Exposure in BackupEase &lt;= 2.2.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97240 - High (7.5)

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools &lt;= 2.2.7 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97240/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-97248 - Critical (9.8)

Unauthenticated PHP Object Injection in Booking Activities &lt;= 1.18.7.1 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97248/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97244 - High (7.5)

Contributor Path Traversal in Creator LMS &lt;= 1.2.19 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97244/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-97274 - Critical (9.8)

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) &lt;= 7.1.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97274/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97293 - High (8.5)

Contributor SQL Injection in Media LIbrary Assistant &lt;= 3.41 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97293/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97287 - High (8.5)

Contributor SQL Injection in Event Tickets &lt;= 5.29.5 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97287/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-96837 - High (8.8)

Contributor Remote Code Execution (RCE) in CartFlows &lt;= 3.2.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96837/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-94053 - Critical (9.1)

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5.

Apache MINA SSHD is a Java library for client-side and server-side SSH.
The optional sshd-ldap component p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-94053/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-77185 - Critical (9.1)

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server.

Apache MINA SSHD is a Java library for client- and server-side SSH. In the s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77185/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Apache MINA SSHD auth bypass (CVE-2026-77185, CRITICAL, CVSS 9.1): Async public-key/hostbased auth can be skipped, risking full SSH compromise. Affected: 2.0.0 – 2.19.x, 3.0.0-M1 – M5. Patch to 2.20.0/3.0.0-M6. https://radar.offseq.com/threat/cve-2026-77185-cwe-305-authentication-bypass-by-primary-weakness-in-apache-software-foundation-apache-18a51f96ab18bde1 #OffSeq #Apache #Infosec

🟠 CVE-2026-89294 - High (7.5)

The Simply Schedule Appointments plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.12.27 via the 'ssa_locale' parameter parameter. This makes it possible for authenticated attackers, with subscrib...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89294/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-97196 - Critical (9.1)

Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass.

This issue affects GiveWP: from n/a through 4.16.9.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97196/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

GiveWP (Liquid Web/StellarWP) CRITICAL vuln (CVE-2026-97196): Improper input validation leads to auth bypass (CVSS 9.1). Affects up to 4.16.9. Patch when available. Details: https://radar.offseq.com/threat/cve-2026-97196-cwe-1289-improper-validation-of-unsafe-equivalence-in-input-in-liquid-web-stellarwp-ea2f97fd9b30ac84 #OffSeq #Vulnerability #WordPress

🟠 CVE-2026-103088 - High (7.5)

Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded strings, whereas the template file is opened through ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103088/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WatchGuard Patches Multiple Flaws, One Critical in Fireware OS

WatchGuard patched 15 Fireware OS vulnerabilities, the worst a critical code injection flaw (CVE-2026-86131) that lets a malicious remote BOVPN-over-TLS server run root commands on a connecting Firebox, along several pre-authentication remote code execution and DoS bugs in services such as fingerd, spamd, iked and samld.

**If you run WatchGuard Firebox appliances, upgrade Fireware OS to a fixed version ASAP (2026.3.2, 2026.2.3, 12.12.3, or 12.5.21 on T15/T35). There are 15 flaws, including a critical one with no workaround, so prioritize devices that use Branch Office VPN over TLS. Until you patch, make sure the firewall's management interface is reachable only from trusted admin networks, and only connect VPN tunnels to servers you fully control.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/watchguard-patches-multiple-flaws-one-critical-in-fireware-os-w-l-q-u-2/gD2P6Ple2L

WatchGuard patched CVE-2026-86131 (CVSS 9.2) in Fireware OS, allowing a malicious VPN server to achieve root RCE on connecting Firebox appliances. Unpatched edge devices risk full takeover and network compromise, so prioritize updates and review VPN peers. #WatchGuard #FirewareOS #VulnManagement

https://cyberworldops.eu/en/malicious-vpn-server-could-seize-root-control-of-watchguard-firebox

CRITICAL RCE (CVE-2026-86131) in WatchGuard Fireware OS enables root code execution via BOVPN over TLS. Multiple high-severity flaws also patched. No known in-the-wild attacks, but update ASAP. https://radar.offseq.com/threat/watchguard-patches-critical-fireware-os-code-injection-vulnerability-36035f2a6c97cfc4 #OffSeq #Vuln #WatchGuard #PatchTuesday #InfoSec

CISA warns the Viidure dashcam app leaks hardcoded cloud credentials (CVE-2026-96587) and public storage (CVE-2026-94204). The vendor has not responded.

#Viidure #Dashcam #CISA #CVE202696587 #HardcodedCredentials #CloudSecurity #AndroidSecurity #IoTSecurity

https://securityonline.info/viidure-dashcam-app-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CISA warns the Viidure dashcam app leaks hardcoded cloud credentials (CVE-2026-96587) and public storage (CVE-2026-94204). The vendor has not responded.

#Viidure #Dashcam #CISA #CVE202696587 #HardcodedCredentials #CloudSecurity #AndroidSecurity #IoTSecurity

https://securityonline.info/viidure-dashcam-app-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

OpenSSL disclosed CVE-2026-84782, a high-severity bug in DTLS handshake retransmission that can leak unencrypted heap data to peers or crash the process. Ubuntu describes the impact as incorrect handshake behavior or denial of service. Patch affected builds and audit DTLS-exposed services. #OpenSSL #Dtls #VulnManagement

https://cyberworldops.eu/en/openssl-dtls-retransmission-bug-can-leak-heap-data-or-terminate

found a vuln in openssl's QUIC stack, now CVE-2026-75804.

a remote peer can make an openssl QUIC endpoint hold ~100 MB of heap per connection. the flow control window is supposed to cap that at 768 KiB. ten connections --> a gigabyte.

cause: connection-level flow control wasn't enforced, only the per-stream limit.

rated low. affects 3.4 through 4.0, fixed in 4.0.3, 3.6.5, 3.5.9 and 3.4.8.

https://openssl-library.org/news/vulnerabilities/index.html#CVE-2026-75804

#OpenSSL #QUIC #CVE #InfoSec #Security #Cybersecurity #vulnerability

Mass exploitation of Citrix NetScaler: What we currently know

Citrix NetScaler ADC/Gateway의 치명적 취약점 CVE-2026-88771과 CVE-2026-88772(CVSS 9.5)이 실제 대규모 공격에 악용되고 있다. 인증 없이 원격 명령 실행이 가능한 취약점을 포함하며, 최소 78개 조직과 유럽·북미의 정부·핵심 인프라·금융·의료 기관이 영향을 받은 것으로 조사됐다. 공격자는 PHP 웹셸 Whipshot과 Python 터널러 Slapshot을 사용해 C2 통신 은닉, 정찰, 자격 증명 탈취를 수행한 정황이 있다. NetScaler를 VPN·원격 접...

https://www.cybersecuritydive.com/news/exploitation-citrix-netscaler-what-we-know/831780/

oh wow that grep|sed|awk pipeline...

I keep saying this:
Parsing strings all over the place is a funny idea that #Unix had, but inherently prone to error and, frankly, horribly insecure.

https://labs.watchtowr.com/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771/

LevelBlue THOR observed active exploitation of CVE-2026-88771 in Citrix NetScaler ADC and Gateway for unauthenticated command execution. Payloads establish reverse shells, create persistent superuser accounts, and hide web shells as CSS URLs while staging configs. This enables long-term persistence and credential access on edge devices. #NetScaler #Citrix #ThreatIntel

https://cyberworldops.eu/en/netscaler-attack-payloads-aim-for-superuser-persistence-and-css-masked

Mandiant and GTIG confirm active exploitation of NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 on ADC and Gateway appliances. Edge compromise can escalate to root-level network access, bypassing perimeter controls. Immediate patching and compromise hunting are required. #NetScaler #ZeroDay #ThreatIntel

https://cyberworldops.eu/en/netscaler-intrusions-turn-a-gateway-flaw-into-root-level-network

Great IOCs on the follow up spray and pray activity on #PitScaler so far.

For context this activity definitely is not related to the inital threat actor activity in early September. This is new stuff.

https://github.com/rtkwlf/wolf-tools/tree/main/pack_alerts/202609-citrix-netscaler-active-exploitation-cve-2026-88771

CERT-EU shares their insights on CVE-2026-88771 exploitation and provides threat hunting tips in different logs.

https://cert.europa.eu/blog/taking-execute-logging-a-bit-too-literally-cve-2026-88771

#threatintel #threathunting #citrix #netscaler

Critical Citrix NetScaler RCE (CVE-2026-88772) exploited in the wild: a deep dive into the DTLS buffer overflow

https://thecybersecguru.com/news/citrix-netscaler-cve-2026-88772-rce/

CISA advisory ICSA-26-274-03 documents CVE-2026-15952 and CVE-2026-15953 in ABB PCM600 up to version 2.14. Exploitation risks Windows privilege escalation and integrity of IED project files, with direct impact on substation protection engineering. Patch and restrict engineering workstation access. #AbbPcm600 #IcsSecurity #SubstationSecurity

https://cyberworldops.eu/en/two-abb-pcm600-weaknesses-put-windows-privileges-and-project-files-at

CISA advisory ICSA-26-274-03 documents CVE-2026-15952 and CVE-2026-15953 in ABB PCM600 up to version 2.14. Exploitation risks Windows privilege escalation and integrity of IED project files, with direct impact on substation protection engineering. Patch and restrict engineering workstation access. #AbbPcm600 #IcsSecurity #SubstationSecurity

https://cyberworldops.eu/en/two-abb-pcm600-weaknesses-put-windows-privileges-and-project-files-at

CISA advisory ICSA-26-274-03 documents CVE-2026-15952 and CVE-2026-15953 in ABB PCM600 up to version 2.14. Exploitation risks Windows privilege escalation and integrity of IED project files, with direct impact on substation protection engineering. Patch and restrict engineering workstation access. #AbbPcm600 #IcsSecurity #SubstationSecurity

https://cyberworldops.eu/en/two-abb-pcm600-weaknesses-put-windows-privileges-and-project-files-at

CISA advisory ICSA-26-274-03 documents CVE-2026-15952 and CVE-2026-15953 in ABB PCM600 up to version 2.14. Exploitation risks Windows privilege escalation and integrity of IED project files, with direct impact on substation protection engineering. Patch and restrict engineering workstation access. #AbbPcm600 #IcsSecurity #SubstationSecurity

https://cyberworldops.eu/en/two-abb-pcm600-weaknesses-put-windows-privileges-and-project-files-at

Mass exploitation of Citrix NetScaler: What we currently know

Citrix NetScaler ADC/Gateway의 치명적 취약점 CVE-2026-88771과 CVE-2026-88772(CVSS 9.5)이 실제 대규모 공격에 악용되고 있다. 인증 없이 원격 명령 실행이 가능한 취약점을 포함하며, 최소 78개 조직과 유럽·북미의 정부·핵심 인프라·금융·의료 기관이 영향을 받은 것으로 조사됐다. 공격자는 PHP 웹셸 Whipshot과 Python 터널러 Slapshot을 사용해 C2 통신 은닉, 정찰, 자격 증명 탈취를 수행한 정황이 있다. NetScaler를 VPN·원격 접...

https://www.cybersecuritydive.com/news/exploitation-citrix-netscaler-what-we-know/831780/

Attackers exploit Citrix NetScaler zero-day CVE-2026-88772 for root access, then hide WHIPSHOT web shells and a SLAPSHOT tunneler. Patch now.

#CitrixNetScaler #ZeroDay #CVE202688772 #CVE202688771 #WHIPSHOT #SLAPSHOT #Mandiant #CyberSecurity

https://securityonline.info/citrix-netscaler-zero-day/?utm_source=mastodon&utm_medium=jetpack_social

Mandiant and GTIG confirm active exploitation of NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 on ADC and Gateway appliances. Edge compromise can escalate to root-level network access, bypassing perimeter controls. Immediate patching and compromise hunting are required. #NetScaler #ZeroDay #ThreatIntel

https://cyberworldops.eu/en/netscaler-intrusions-turn-a-gateway-flaw-into-root-level-network

CVE-2026-88772, a Citrix NetScaler DTLS memory overflow, is exploited in the wild. A watchTowr PoC and full details are now public. Patch NetScaler now.

#Citrix #NetScaler #CVE202688772 #DTLS #watchTowr #KEV #ZeroDay #RCE

https://securityonline.info/citrix-netscaler-cve-2026-88772-poc-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Two Citrix NetScaler zero-days (CVE-2026-88772/88771) gave attackers pre-auth root on the box that fronts your whole network. GTIG traced exploitation to early September, weeks before the patch existed.

Once inside, their C2 leaves from your own public IP. No strange domain, no foreign address to block. The call is coming from inside the house.

Reputation Radar #13:
https://www.reput.io/blog/reputation-radar-13

#ThreatIntel #NetScaler #SOC

NetScaler CVE-2026-88772 zero-day tied to state hackers

https://fawkes.rocks/2026/09/30/netscaler-cve-2026-88772-zero-day-tied-to-state-hackers/

Nice blog post on Citrix CVE-2026-88772 exploit:

https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances

#citrix #cve_2026_88772 #pitscaler

Critical Citrix NetScaler RCE (CVE-2026-88772) exploited in the wild: a deep dive into the DTLS buffer overflow

https://thecybersecguru.com/news/citrix-netscaler-cve-2026-88772-rce/

Attackers exploit CVE-2026-100382, a CVSS 10 unauthenticated MediaWiki RCE in External Data. PoC is public. Upgrade to 3.7 now.

#MediaWiki #ExternalData #CVE2026100382 #RCE #CommandInjection #ExploitedInTheWild #PoC

https://securityonline.info/mediawiki-rce-cve-2026-100382/?utm_source=mastodon&utm_medium=jetpack_social

[🚨 #MediaWiki vulnerable extension]

If you are running a MediaWiki instance with Extension:External_Data < v3.7, your instance is vulnerable to arbitrary file loading and #RemoteCodeExecution.

The vulnerability was apparently publicly known since August, but due to the lack of communication, instance admins learned about it due to that vulnerability being exploited en masse.

If you know and like a MediaWiki instance, you can check their Special:Version page to see if they are using the External_Data extension to warn them.

More info:
- https://lists.wikimedia.org/hyperkitty/list/mediawiki-l@lists.wikimedia.org/thread/5N55R3XNFE7BXQLGWKZI7Q4ZXZSF4C5I/
- https://www.cve.org/CVERecord?id=CVE-2026-100382

#infosec #wikipedia #wikidata #adminsys #CVE #pwned cc @mediawiki

Critical Threat Advisory: CVE-2026-67279 MikroTik RouterOS

Immediate CISA KEV threat advisory for CVE-2026-67279 affecting MikroTik RouterOS. Includes behavioral workflow analysis, BOD 26-04 patch compliance guidance, and multi-vendor SOC detection queries....

https://thecybermind.co/9t9e

CVE-2026-61851: SQL injection in Chartbrew's runQuery() - incomplete keyword blocklist lets authenticated users execute dangerous SQL. CVSS 8.8. Patch under review, no fix yet. Track it: https://www.valtersit.com/cve/CVE-2026-61851/ #CVE #infosec

CVE-2026-78806 in Matter Project Chip V1.5.1: local attacker can leak sensitive data via PerformCommissioningStep in ChipDeviceController.cpp. CVSS 5.5, no known patch yet. Restrict local access and watch for updates. https://www.valtersit.com/cve/CVE-2026-78806/ #CVE #infosec #IoT

CVE-2026-18439 Tutor LMS IDOR (CVSS 4.3): tutor_quiz_builder_save AJAX lets low-priv users tamper with quiz questions they shouldn't manage. Patch under review - apply when released. https://www.valtersit.com/cve/CVE-2026-18439/ #CVE #infosec #WordPress

From Check Point Research: Exploitation of CVE-2026-85102 and CVE-2026-93616

Check Point has observed active exploitation of two critical pre-authentication vulnerabilities with CVSS scores of 9.8 - CVE-2026-85102 and CVE-2026-93616. The flaws affect Security Gateway and Security Management products and can enable remote code execution. Fixes for both vulnerabilities are available.

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

#CheckPoint #CheckPointSoftwareTechnologies #CVE #CVE202685102 #CVE202693616

📈 CVE Published in last 30 days (2026-09-01 - 2026-09-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1417
- High: 5956
- Medium: 4625
- Low: 927
- None: 1743

Status:
- : 93
- Analyzed: 3418
- Awaiting Analysis: 2780
- Deferred: 5097
- Modified: 128
- Received: 2835
- Rejected: 130
- Undergoing Analysis: 187

CISA KEVs:
- CISA-2026:0902 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0902)
- CISA-2026:0904 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0904)
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0914 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0916 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916)
- CISA-2026:0918 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)
- CISA-2026:0921 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0921)
- CISA-2026:0922 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0922)
- CISA-2026:0924 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0924)
- CISA-2026:0925 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0925)
- CISA-2026:0927 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0927)
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)

Top CNAs:
- kernel.org: 2117
- VulnCheck: 1638
- GitHub, Inc.: 1424
- Microsoft Corporation: 1000
- VulDB: 900
- Oracle: 634
- WPScan: 552
- MITRE: 497
- Chrome: 467
- Wordfence: 408

Top Affected Products:
- UNKNOWN: 11109
- Microsoft Windows Server 2025: 648
- Microsoft Windows Server 2022: 611
- Microsoft Windows 11 24h2: 600
- Microsoft Windows 11 26h1: 600
- Microsoft Windows 11 25h2: 599
- Microsoft Windows Server 2019: 586
- Microsoft Windows 10 1809: 582
- Microsoft Windows 11 23h2: 574
- Microsoft Windows 10 21h2: 541

Top EPSS Score:
- CVE-2026-85706 - 91.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85706)
- CVE-2026-85046 - 48.88 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85046)
- CVE-2026-76461 - 28.27 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76461)
- CVE-2026-87902 - 19.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-87902)
- CVE-2026-93616 - 19.65 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93616)
- CVE-2026-76460 - 14.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76460)
- CVE-2026-86218 - 12.93 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86218)
- CVE-2026-83549 - 10.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83549)
- CVE-2026-83548 - 8.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83548)
- CVE-2026-85102 - 7.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85102)

#ZEN #SecDB #InfoSec

From Check Point Research: Exploitation of CVE-2026-85102 and CVE-2026-93616

Check Point has observed active exploitation of two critical pre-authentication vulnerabilities with CVSS scores of 9.8 - CVE-2026-85102 and CVE-2026-93616. The flaws affect Security Gateway and Security Management products and can enable remote code execution. Fixes for both vulnerabilities are available.

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

#CheckPoint #CheckPointSoftwareTechnologies #CVE #CVE202685102 #CVE202693616

📈 CVE Published in last 30 days (2026-09-01 - 2026-09-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1417
- High: 5956
- Medium: 4625
- Low: 927
- None: 1743

Status:
- : 93
- Analyzed: 3418
- Awaiting Analysis: 2780
- Deferred: 5097
- Modified: 128
- Received: 2835
- Rejected: 130
- Undergoing Analysis: 187

CISA KEVs:
- CISA-2026:0902 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0902)
- CISA-2026:0904 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0904)
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0914 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0916 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916)
- CISA-2026:0918 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)
- CISA-2026:0921 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0921)
- CISA-2026:0922 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0922)
- CISA-2026:0924 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0924)
- CISA-2026:0925 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0925)
- CISA-2026:0927 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0927)
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)

Top CNAs:
- kernel.org: 2117
- VulnCheck: 1638
- GitHub, Inc.: 1424
- Microsoft Corporation: 1000
- VulDB: 900
- Oracle: 634
- WPScan: 552
- MITRE: 497
- Chrome: 467
- Wordfence: 408

Top Affected Products:
- UNKNOWN: 11109
- Microsoft Windows Server 2025: 648
- Microsoft Windows Server 2022: 611
- Microsoft Windows 11 24h2: 600
- Microsoft Windows 11 26h1: 600
- Microsoft Windows 11 25h2: 599
- Microsoft Windows Server 2019: 586
- Microsoft Windows 10 1809: 582
- Microsoft Windows 11 23h2: 574
- Microsoft Windows 10 21h2: 541

Top EPSS Score:
- CVE-2026-85706 - 91.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85706)
- CVE-2026-85046 - 48.88 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85046)
- CVE-2026-76461 - 28.27 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76461)
- CVE-2026-87902 - 19.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-87902)
- CVE-2026-93616 - 19.65 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93616)
- CVE-2026-76460 - 14.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76460)
- CVE-2026-86218 - 12.93 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86218)
- CVE-2026-83549 - 10.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83549)
- CVE-2026-83548 - 8.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83548)
- CVE-2026-85102 - 7.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85102)