🟠 CVE-2026-24010 - High (8.8)

Horilla is a free and open source Human Resource Management System (HRMS). A critical File Upload vulnerability in versions prior to 1.5.0, with Social Engineering, allows authenticated users to deploy phishing attacks. By uploading a malicious HT...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24010/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24010 - High (8.8)

Horilla is a free and open source Human Resource Management System (HRMS). A critical File Upload vulnerability in versions prior to 1.5.0, with Social Engineering, allows authenticated users to deploy phishing attacks. By uploading a malicious HT...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24010/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24010 - High (8.8)

Horilla is a free and open source Human Resource Management System (HRMS). A critical File Upload vulnerability in versions prior to 1.5.0, with Social Engineering, allows authenticated users to deploy phishing attacks. By uploading a malicious HT...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24010/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24010 - High (8.8)

Horilla is a free and open source Human Resource Management System (HRMS). A critical File Upload vulnerability in versions prior to 1.5.0, with Social Engineering, allows authenticated users to deploy phishing attacks. By uploading a malicious HT...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24010/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24006 - High (7.5)

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, serialization of objects with extreme depth can exceed the maximum call stack limit. In version 1.4.1, Sero...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24006/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24006 - High (7.5)

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, serialization of objects with extreme depth can exceed the maximum call stack limit. In version 1.4.1, Sero...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24006/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24002 - Critical (9)

Grist is spreadsheet software using Python as its formula language. Grist offers several methods for running those formulas in a sandbox, for cases where the user may be working with untrusted spreadsheets. One such method runs them in pyodide, bu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24002 - Critical (9)

Grist is spreadsheet software using Python as its formula language. Grist offers several methods for running those formulas in a sandbox, for cases where the user may be working with untrusted spreadsheets. One such method runs them in pyodide, bu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23967 - High (7.5)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An att...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23967 - High (7.5)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An att...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23967 - High (7.5)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An att...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23967 - High (7.5)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A signature malleability vulnerability exists in the SM2 signature verification logic of the sm-crypto library prior to version 0.3.14. An att...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-23966 - Critical (9.1)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-23966 - Critical (9.1)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-23966 - Critical (9.1)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-23966 - Critical (9.1)

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. A private key recovery vulnerability exists in the SM2 decryption logic of sm-crypto prior to version 0.3.14. By interacting with the SM2 decr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23962 - High (7.5)

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23962/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23962 - High (7.5)

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions before v4.3.18, v4.4.12, and v4.5.5 do not have a limit on the maximum number of poll options for remote posts, allowing attackers to create polls with a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23962/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23957 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, overriding encoded array lengths by replacing them with an excessively large value causes the deserializati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23957/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23957 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, overriding encoded array lengths by replacing them with an excessively large value causes the deserializati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23957/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23956 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, overriding RegExp serialization with extremely large patterns can exhaust JavaScript runtime memory during ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23956/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23956 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0
and below, overriding RegExp serialization with extremely large patterns can exhaust JavaScript runtime memory during ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23956/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-27380 - High (7.6)

HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-27380/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-27380 - High (7.6)

HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-27380/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-27378 - High (8.6)

AES contains a SQL injection vulnerability due to an inactive configuration that prevents the latest SQL parsing logic from being applied. When this configuration is not enabled, crafted input may be improperly handled, allowing attackers to injec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-27378/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-27378 - High (8.6)

AES contains a SQL injection vulnerability due to an inactive configuration that prevents the latest SQL parsing logic from being applied. When this configuration is not enabled, crafted input may be improperly handled, allowing attackers to injec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-27378/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco Releases Emergency Patch for Actively Exploited CVE-2026-20045 Zero-Day RCE Flaw + Video

Critical Zero-Day Exposure in Cisco Enterprise Communications Stack Cisco has released an urgent security patch addressing a critical zero-day vulnerability actively exploited in real-world attacks. The flaw, tracked as CVE-2026-20045 with a CVSS score of 8.2, allows unauthenticated remote attackers to execute arbitrary commands on affected systems. The exposure sits at the…

https://undercodenews.com/cisco-releases-emergency-patch-for-actively-exploited-cve-2026-20045-zero-day-rce-flaw-video/

Cisco Confirms Active Exploitation of Critical Unified Communications Zero-Day (CVE-2026-20045)

Introduction: A High-Impact Cisco Flaw Moves From Theory to Reality Cisco has disclosed and patched a critical remote code execution vulnerability affecting its Unified Communications ecosystem, confirming that the flaw has already been exploited in real-world attacks. Tracked as CVE-2026-20045, the vulnerability targets core enterprise communication platforms, including…

https://undercodenews.com/cisco-confirms-active-exploitation-of-critical-unified-communications-zero-day-cve-2026-20045/

Cisco fixes Unified Communications RCE zero day exploited in attacks

Cisco has fixed a critical Unified Communications and Webex Calling remote code execution vulnerability, tracked as CVE-2026-20045, that has been...

🔗️ [Bleepingcomputer] https://link.is.it/WDsEt3

One overlooked flaw in Cisco’s communications platform let hackers break in without even logging on, hitting hospitals and banks worldwide. How did it happen so fast, and could it happen again?

https://thedefendopsdiaries.com/exploiting-cve-2026-20045-lessons-from-the-cisco-unified-communications-zero-day/

‼️Attackers Actively Probing RCE Vulnerability in Cisco Enterprise Communications Products

CVE-2026-20045: Cisco Unified Communications Products Code Injection Vulnerability

CVSS: 8.2
CISA KEV: Added today; January 21st, 2026
CVE Published: January 21st, 2026

Advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-20045

Description: A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.  This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. Note: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.

CVE ID: CVE-2026-20045
Vendor: Cisco
Product: Unified Communications Manager
Date Added: 2026-01-21
Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b ; https://nvd.nist.gov/vuln/detail/CVE-2026-20045
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20045

🚨 [CISA-2026:0121] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0121)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-20045 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20045)
- Name: Cisco Unified Communications Products Code Injection Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Unified Communications Manager
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b ; https://nvd.nist.gov/vuln/detail/CVE-2026-20045

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260121 #cisa20260121 #cve_2026_20045 #cve202620045

New Cisco zero-day, CVE-2026-20045

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

🟠 CVE-2026-20045 - High (8.2)

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Uni...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20045/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

Cisco fixes Unified Communications RCE zero day exploited in attacks

Cisco has fixed a critical Unified Communications and Webex Calling remote code execution vulnerability, tracked as CVE-2026-20045, that has been...

🔗️ [Bleepingcomputer] https://link.is.it/WDsEt3

‼️Attackers Actively Probing RCE Vulnerability in Cisco Enterprise Communications Products

CVE-2026-20045: Cisco Unified Communications Products Code Injection Vulnerability

CVSS: 8.2
CISA KEV: Added today; January 21st, 2026
CVE Published: January 21st, 2026

Advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-20045

Description: A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.  This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. Note: Cisco has assigned this security advisory a Security Impact Rating (SIR) of Critical rather than High as the score indicates. The reason is that exploitation of this vulnerability could result in an attacker elevating privileges to root.

CVE ID: CVE-2026-20045
Vendor: Cisco
Product: Unified Communications Manager
Date Added: 2026-01-21
Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b ; https://nvd.nist.gov/vuln/detail/CVE-2026-20045
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20045

New Cisco zero-day, CVE-2026-20045

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

🟠 CVE-2026-20045 - High (8.2)

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Uni...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20045/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

🟠 CVE-2025-59465 - High (7.5)

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-59465/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-68137 - High (8.3)

EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in `SdpPacket::parse_header()` allows the current buffer length to be set to 7 after a complete header of size 8 has been read. The remaining lengt...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68137/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-68137 - High (8.3)

EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in `SdpPacket::parse_header()` allows the current buffer length to be set to 7 after a complete header of size 8 has been read. The remaining lengt...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68137/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13878 - High (7.5)

Malformed BRID/HHIT records can cause `named` to terminate unexpectedly.
This issue affects BIND 9 versions 9.18.40 through 9.18.43, 9.20.13 through 9.20.17, 9.21.12 through 9.21.16, 9.18.40-S1 through 9.18.43-S1, and 9.20.13-S1 through 9.20.17-S1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13878/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13878 - High (7.5)

Malformed BRID/HHIT records can cause `named` to terminate unexpectedly.
This issue affects BIND 9 versions 9.18.40 through 9.18.43, 9.20.13 through 9.20.17, 9.21.12 through 9.21.16, 9.18.40-S1 through 9.18.43-S1, and 9.20.13-S1 through 9.20.17-S1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13878/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-66692 - High (7.5)

A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5668c67 allows attackers to cause a Denial of Service (DoS) via a crafted input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-66692/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-66692 - High (7.5)

A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5668c67 allows attackers to cause a Denial of Service (DoS) via a crafted input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-66692/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

TP-Link Patches Authentication Bypass Flaw in VIGI Cameras

TP-Link fixed a high-severity authentication bypass vulnerability (CVE-2026-0629) in its VIGI camera series that allowed local attackers to reset administrative passwords. The flaw enables full device takeover and potential lateral movement within corporate networks.

**Make sure all CCTV devices are isolated from the internet and accessible from trusted networks only. Segment your surveillance cameras into a dedicated VLAN and if possible disable the password recovery feature on the local web interface. Then plan a patch cycle.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/tp-link-patches-authentication-bypass-flaw-in-vigi-cameras-6-s-b-i-e/gD2P6Ple2L

TP-Link Patches Authentication Bypass Flaw in VIGI Cameras

TP-Link fixed a high-severity authentication bypass vulnerability (CVE-2026-0629) in its VIGI camera series that allowed local attackers to reset administrative passwords. The flaw enables full device takeover and potential lateral movement within corporate networks.

**Make sure all CCTV devices are isolated from the internet and accessible from trusted networks only. Segment your surveillance cameras into a dedicated VLAN and if possible disable the password recovery feature on the local web interface. Then plan a patch cycle.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/tp-link-patches-authentication-bypass-flaw-in-vigi-cameras-6-s-b-i-e/gD2P6Ple2L

Eine kritische Sicherheitslücke CVE-2026-0629 erlaubt es Angreifern, Admin-Zugriff auf zahlreiche #TPLink Vigi-Überwachungskameras per Fernzugriff zu erlangen. https://www.golem.de/specials/tp-link/

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

🟠 CVE-2025-70650 - High (7.5)

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-70650 - High (7.5)

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-70651 - High (7.5)

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70651/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-70651 - High (7.5)

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70651/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21957 - High (7.5)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrast...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21957/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21957 - High (7.5)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrast...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21957/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

From yesterday, relating to CVE-2026-21945. Oracle has listed this vulnerability in its latest advisory: https://www.oracle.com/security-alerts/cpujan2026.html

Tenable: SSRF Vulnerability in Java TLS Handshakes Creates DoS Risk https://www.tenable.com/blog/tenable-discovers-ssrf-vulnerability-in-java-tls-handshakes-that-creates-dos-risk @tenable #infosec #threatresearch #JavaScript #vulnerability #DDoS #Oracle

🟠 CVE-2026-21945 - High (7.5)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.1...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21945/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

From yesterday, relating to CVE-2026-21945. Oracle has listed this vulnerability in its latest advisory: https://www.oracle.com/security-alerts/cpujan2026.html

Tenable: SSRF Vulnerability in Java TLS Handshakes Creates DoS Risk https://www.tenable.com/blog/tenable-discovers-ssrf-vulnerability-in-java-tls-handshakes-that-creates-dos-risk @tenable #infosec #threatresearch #JavaScript #vulnerability #DDoS #Oracle

🟠 CVE-2026-21945 - High (7.5)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.1...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21945/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21955 - High (8.2)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastru...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21955/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

Four advisories from Cisco today, one of them critical. Too bad some crows no longer follow these things. 😇

- Critical: CVE-2026-20045: Cisco Unified Communications Products Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b

- Medium severity: CVE-2026-20055 and CVE-2026-20109: Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD

- Medium severity: CVE-2026-20092: Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-intersight-privesc-p6tBm6jk

- Medium severity: CVE-2026-20080: Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iec6400-Pem5uQ7v @TalosSecurity #Cisco #infosec #vulnerability

🔴 CVE-2025-65482 - Critical (9.8)

An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-65482/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-65482 - Critical (9.8)

An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-65482/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

I don't know this project ( Jervis ) but the fact that there are five crypto-related vulns at once seems like a legitimate opportunity for people to learn from someone else's mistakes. I don't understand many crypto vulns so they always fascinate me.

https://www.cve.org/CVERecord?id=CVE-2025-68701

https://www.cve.org/CVERecord?id=CVE-2025-68702

https://www.cve.org/CVERecord?id=CVE-2025-68703

https://www.cve.org/CVERecord?id=CVE-2025-68704

https://www.cve.org/CVERecord?id=CVE-2025-68925

I don't know this project ( Jervis ) but the fact that there are five crypto-related vulns at once seems like a legitimate opportunity for people to learn from someone else's mistakes. I don't understand many crypto vulns so they always fascinate me.

https://www.cve.org/CVERecord?id=CVE-2025-68701

https://www.cve.org/CVERecord?id=CVE-2025-68702

https://www.cve.org/CVERecord?id=CVE-2025-68703

https://www.cve.org/CVERecord?id=CVE-2025-68704

https://www.cve.org/CVERecord?id=CVE-2025-68925

I don't know this project ( Jervis ) but the fact that there are five crypto-related vulns at once seems like a legitimate opportunity for people to learn from someone else's mistakes. I don't understand many crypto vulns so they always fascinate me.

https://www.cve.org/CVERecord?id=CVE-2025-68701

https://www.cve.org/CVERecord?id=CVE-2025-68702

https://www.cve.org/CVERecord?id=CVE-2025-68703

https://www.cve.org/CVERecord?id=CVE-2025-68704

https://www.cve.org/CVERecord?id=CVE-2025-68925

I don't know this project ( Jervis ) but the fact that there are five crypto-related vulns at once seems like a legitimate opportunity for people to learn from someone else's mistakes. I don't understand many crypto vulns so they always fascinate me.

https://www.cve.org/CVERecord?id=CVE-2025-68701

https://www.cve.org/CVERecord?id=CVE-2025-68702

https://www.cve.org/CVERecord?id=CVE-2025-68703

https://www.cve.org/CVERecord?id=CVE-2025-68704

https://www.cve.org/CVERecord?id=CVE-2025-68925

🟠 CVE-2026-22022 - High (8.2)

Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components.  Only de...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22022/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22022 - High (8.2)

Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict input validation in those components.  Only de...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22022/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📰 Oracle Issues Critical Patch for CVSS 10.0 Auth Bypass in WebLogic Server

🚨 CRITICAL PATCH: Oracle's January 2026 update fixes 337 flaws, including a CVSS 10.0 auth bypass (CVE-2026-21962) in WebLogic Server. This is remotely exploitable with no user interaction. Patch immediately! ⚠️ #Oracle #PatchTuesday #CVE

🔗 https://cyber.netsecops.io/articles/oracle-january-2026-critical-patch-update-fixes-337-flaws-including-cvss-10-bug/?utm_source=mastodon&utm_medium=social…

🔴 CVE-2026-21962 - Critical (10)

Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that ar...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21962/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21956 - High (8.2)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastru...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21956/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21956 - High (8.2)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastru...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21956/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-70645 - High (7.5)

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70645/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-70645 - High (7.5)

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70645/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22807 - High (8.8)

vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.14.0, vLLM loads Hugging Face `auto_map` dynamic modules during model resolution without gating on `trust_remote_code`, all...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22807/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22807 - High (8.8)

vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.14.0, vLLM loads Hugging Face `auto_map` dynamic modules during model resolution without gating on `trust_remote_code`, all...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22807/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23737 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, improper input handling in the JSON deserialization component can lead to arbitrary JavaScript code executi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23737/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23737 - High (7.5)

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, improper input handling in the JSON deserialization component can lead to arbitrary JavaScript code executi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23737/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-23524 - Critical (9.8)

Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23524/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-23524 - Critical (9.8)

Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. In versions 1.6.3 and below, Reverb passes data from the Redis channel directly into PHP’s unserialize() function without restricting which classes can...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23524/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-57156 - High (7.5)

NULL pointer dereference in the dacp_reply_playqueueedit_clear function in src/httpd_dacp.c in owntone-server through commit 6d604a1 (newer commit after version 28.12) allows remote attackers to cause a Denial of Service (crash).

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-57156/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-57156 - High (7.5)

NULL pointer dereference in the dacp_reply_playqueueedit_clear function in src/httpd_dacp.c in owntone-server through commit 6d604a1 (newer commit after version 28.12) allows remote attackers to cause a Denial of Service (crash).

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-57156/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-63648 - High (7.5)

A NULL pointer dereference in the dacp_reply_playqueueedit_move function (src/httpd_dacp.c) of owntone-server commit b7e385f allows attackers to cause a Denial of Service (DoS) via sending a crafted DACP request to the server.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-63648/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-63648 - High (7.5)

A NULL pointer dereference in the dacp_reply_playqueueedit_move function (src/httpd_dacp.c) of owntone-server commit b7e385f allows attackers to cause a Denial of Service (DoS) via sending a crafted DACP request to the server.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-63648/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-63647 - High (7.5)

A NULL pointer dereference in the parse_meta function (src/httpd_daap.c) of owntone-server commit 334beb allows attackers to cause a Denial of Service (DoS) via sending a crafted DAAP request to the server.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-63647/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-63647 - High (7.5)

A NULL pointer dereference in the parse_meta function (src/httpd_daap.c) of owntone-server commit 334beb allows attackers to cause a Denial of Service (DoS) via sending a crafted DAAP request to the server.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-63647/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21940 - High (7.5)

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21940/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21940 - High (7.5)

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21940/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-56353 - High (7.5)

In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), a memory leak occurs due to the broker's failure to validate or reject malformed UTF-8 strings in topic filters. An attacker can exploit this by sending repeated subscriptio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-56353/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-56353 - High (7.5)

In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), a memory leak occurs due to the broker's failure to validate or reject malformed UTF-8 strings in topic filters. An attacker can exploit this by sending repeated subscriptio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-56353/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-55423 - Critical (9.8)

A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sani...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-55423/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-55423 - Critical (9.8)

A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sani...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-55423/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-57155 - High (7.5)

NULL pointer dereference in the daap_reply_groups function in src/httpd_daap.c in owntone-server through commit 5e6f19a (newer commit after version 28.2) allows remote attackers to cause a Denial of Service.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-57155/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-57155 - High (7.5)

NULL pointer dereference in the daap_reply_groups function in src/httpd_daap.c in owntone-server through commit 5e6f19a (newer commit after version 28.2) allows remote attackers to cause a Denial of Service.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-57155/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21984 - High (7.5)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrast...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21984/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21983 - High (7.5)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrast...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21982 - High (7.5)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physic...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21982/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-66902 - High (7.5)

An input validation issue in in Pithikos websocket-server v.0.6.4 allows a remote attacker to obtain sensitive information or cause unexpected server behavior via the websocket_server/websocket_server.py, WebSocketServer._message_received components.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-66902/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-66902 - High (7.5)

An input validation issue in in Pithikos websocket-server v.0.6.4 allows a remote attacker to obtain sensitive information or cause unexpected server behavior via the websocket_server/websocket_server.py, WebSocketServer._message_received components.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-66902/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-64087 - Critical (9.8)

A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-64087/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-64087 - Critical (9.8)

A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-64087/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

OpenCode patches critical RCE flaw in Web UI

OpenCode patched a critical XSS vulnerability (CVE-2026-22813) that allowed malicious websites to execute arbitrary commands on a user's local system by abusing the tool's internal API.

**If you are using OpenCode, update to version 1.1.10 ASAP to disable the vulnerable web UI and API. Avoid clicking untrusted links, check underling URLs and don't click on any links that you haven't crafted but point to your local machine's ports .**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/opencode-patches-critical-rce-flaw-in-web-ui-c-7-g-n-7/gD2P6Ple2L

Apache bRPC Critical Remote Command Injection Vulnerability

Apache bRPC versions prior to 1.15.0 contain a critical remote command injection vulnerability (CVE-2025-60021) in the heap profiler service. Attackers can exploit unvalidated input in the extra_options parameter to execute arbitrary commands and gain full system control.

**If you are using Apache bRPC, make sure all bRPC instances are isolated from the internet and accessible from trusted networks only. Disable the heap profiler service to prevent attackers from running remote commands on your servers and plan a quick upgrade to version 1.15.0.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/apache-brpc-critical-remote-command-injection-vulnerability-d-8-0-d-6/gD2P6Ple2L

La vulnérabilité CVE-2026-24061 permet à un attaquant de se connecter en root en contournant l'authentification d'un service telnetd. Un code d'exploitation est disponible et son exploitation est triviale.
https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-003/

🔴 CVE-2026-24061 - Critical (9.8)

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24061/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

La vulnérabilité CVE-2026-24061 permet à un attaquant de se connecter en root en contournant l'authentification d'un service telnetd. Un code d'exploitation est disponible et son exploitation est triviale.
https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-003/

🔴 CVE-2026-24061 - Critical (9.8)

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24061/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24016 - High (7.8)

The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24016/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24016 - High (7.8)

The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24016/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-15521 - Critical (9.8)

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.5.0. This is due to the plugin not properly validating...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15521/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-15521 - Critical (9.8)

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.5.0. This is due to the plugin not properly validating...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15521/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical Chainlit AI Vulnerabilities Put Servers and Sensitive Data at Risk

In a troubling development for the AI and cybersecurity communities, two critical vulnerabilities—CVE-2026-22218 and CVE-2026-22219—have been discovered in the Chainlit AI framework. These flaws allow attackers to access sensitive environment variables and perform server-side request forgery (SSRF) attacks, which could potentially lead to full system takeovers. As AI frameworks become…

https://undercodenews.com/critical-chainlit-ai-vulnerabilities-put-servers-and-sensitive-data-at-risk/

Vulnerabilities in Chainlit AI Framework Expose Data and Cloud Environments

Chainlit patched two vulnerabilities, CVE-2026-22218 and CVE-2026-22219, which allow attackers to steal sensitive files, leak private user conversations, and gain unauthorized access to cloud environments.

**Ensure all AI application frameworks are isolated from the internet and accessible only through trusted networks. If you are using Chainlit, plan an update to version 2.9.4 or later. In the meantime, isolate and control PUT requests to the /project/element endpoint.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/vulnerabilities-in-chainlit-ai-framework-expose-data-and-cloud-environments-j-0-n-7-y/gD2P6Ple2L

Vulnerabilities in Chainlit AI Framework Expose Data and Cloud Environments

Chainlit patched two vulnerabilities, CVE-2026-22218 and CVE-2026-22219, which allow attackers to steal sensitive files, leak private user conversations, and gain unauthorized access to cloud environments.

**Ensure all AI application frameworks are isolated from the internet and accessible only through trusted networks. If you are using Chainlit, plan an update to version 2.9.4 or later. In the meantime, isolate and control PUT requests to the /project/element endpoint.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/vulnerabilities-in-chainlit-ai-framework-expose-data-and-cloud-environments-j-0-n-7-y/gD2P6Ple2L

New. Tracked as CVE-2026-22218 and CVE-2026-22219.

Zafran Research: ChainLeak: Critical AI framework vulnerabilities expose data, enable cloud takeover https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover

More:

Infosecurity-Magazine: Chainlit Security Flaws Highlight Infrastructure Risks in AI Apps https://www.infosecurity-magazine.com/news/chainlit-security-flaws-ai-apps/ #infosec #opensource #Python #vulnerability

🟠 CVE-2026-21973 - High (8.1)

Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Security Management System). Supported versions that are affected are 14.5.0.15.0, 14.7.0.8.0 and 14.8.0.1.0. Easily exploitabl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21973/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21988 - High (8.2)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastru...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21988/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21988 - High (8.2)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastru...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21988/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21987 - High (8.2)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastru...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21987/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21987 - High (8.2)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastru...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21987/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21990 - High (8.2)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastru...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21990/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-21969 - Critical (9.8)

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supplier Portal). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21969/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21926 - High (7.5)

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-25.2. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21926/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21926 - High (7.5)

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-25.2. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21926/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21989 - High (8.1)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastru...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21989/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21989 - High (8.1)

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastru...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21989/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21967 - High (8.6)

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected are 5.6.19.23, 5.6.25.17, 5.6.26.10 and 5.6.27.4. Easily exploitable vulnerability allows...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-0905 - Critical (9.8)

Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file. (Chromium security severity: Medium)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0905/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-0905 - Critical (9.8)

Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file. (Chromium security severity: Medium)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0905/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-56005 - Critical (9.8)

An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()`...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-56005/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical Chainlit AI Vulnerabilities Put Servers and Sensitive Data at Risk

In a troubling development for the AI and cybersecurity communities, two critical vulnerabilities—CVE-2026-22218 and CVE-2026-22219—have been discovered in the Chainlit AI framework. These flaws allow attackers to access sensitive environment variables and perform server-side request forgery (SSRF) attacks, which could potentially lead to full system takeovers. As AI frameworks become…

https://undercodenews.com/critical-chainlit-ai-vulnerabilities-put-servers-and-sensitive-data-at-risk/

Vulnerabilities in Chainlit AI Framework Expose Data and Cloud Environments

Chainlit patched two vulnerabilities, CVE-2026-22218 and CVE-2026-22219, which allow attackers to steal sensitive files, leak private user conversations, and gain unauthorized access to cloud environments.

**Ensure all AI application frameworks are isolated from the internet and accessible only through trusted networks. If you are using Chainlit, plan an update to version 2.9.4 or later. In the meantime, isolate and control PUT requests to the /project/element endpoint.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/vulnerabilities-in-chainlit-ai-framework-expose-data-and-cloud-environments-j-0-n-7-y/gD2P6Ple2L

Vulnerabilities in Chainlit AI Framework Expose Data and Cloud Environments

Chainlit patched two vulnerabilities, CVE-2026-22218 and CVE-2026-22219, which allow attackers to steal sensitive files, leak private user conversations, and gain unauthorized access to cloud environments.

**Ensure all AI application frameworks are isolated from the internet and accessible only through trusted networks. If you are using Chainlit, plan an update to version 2.9.4 or later. In the meantime, isolate and control PUT requests to the /project/element endpoint.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/vulnerabilities-in-chainlit-ai-framework-expose-data-and-cloud-environments-j-0-n-7-y/gD2P6Ple2L

New. Tracked as CVE-2026-22218 and CVE-2026-22219.

Zafran Research: ChainLeak: Critical AI framework vulnerabilities expose data, enable cloud takeover https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover

More:

Infosecurity-Magazine: Chainlit Security Flaws Highlight Infrastructure Risks in AI Apps https://www.infosecurity-magazine.com/news/chainlit-security-flaws-ai-apps/ #infosec #opensource #Python #vulnerability

FreeRDP

https://www.cve.org/CVERecord?id=CVE-2026-22851

https://www.cve.org/CVERecord?id=CVE-2026-22852

https://www.cve.org/CVERecord?id=CVE-2026-22853

https://www.cve.org/CVERecord?id=CVE-2026-22854

https://www.cve.org/CVERecord?id=CVE-2026-22855

https://www.cve.org/CVERecord?id=CVE-2026-22856

https://www.cve.org/CVERecord?id=CVE-2026-22857

https://www.cve.org/CVERecord?id=CVE-2026-22858

https://www.cve.org/CVERecord?id=CVE-2026-22859

Edit to add more.

FreeRDP

https://www.cve.org/CVERecord?id=CVE-2026-22851

https://www.cve.org/CVERecord?id=CVE-2026-22852

https://www.cve.org/CVERecord?id=CVE-2026-22853

https://www.cve.org/CVERecord?id=CVE-2026-22854

https://www.cve.org/CVERecord?id=CVE-2026-22855

https://www.cve.org/CVERecord?id=CVE-2026-22856

https://www.cve.org/CVERecord?id=CVE-2026-22857

https://www.cve.org/CVERecord?id=CVE-2026-22858

https://www.cve.org/CVERecord?id=CVE-2026-22859

Edit to add more.

Nvidia has posted two high-severity advisories:

Update: NVIDIA CUDA Toolkit - January 2026, relating to CVE-2025-33228, CVE-2025-33229, CVE-2025-33230, and CVE-2025-33231 https://nvidia.custhelp.com/app/answers/detail/a_id/5755

Update: NVIDIA Merlin - January 2026, relating to CVE-2025-33233 https://nvidia.custhelp.com/app/answers/detail/a_id/5761 #infosec #Nvidia #vulnerability

Nvidia has posted two high-severity advisories:

Update: NVIDIA CUDA Toolkit - January 2026, relating to CVE-2025-33228, CVE-2025-33229, CVE-2025-33230, and CVE-2025-33231 https://nvidia.custhelp.com/app/answers/detail/a_id/5755

Update: NVIDIA Merlin - January 2026, relating to CVE-2025-33233 https://nvidia.custhelp.com/app/answers/detail/a_id/5761 #infosec #Nvidia #vulnerability

🟠 CVE-2026-0943 - High (7.5)

HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability. 

Versions before 0.032 contain HarfBuzz 8.4.0 or earlier bundled as hb_src.tar.gz in the source tarball, which is affected ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0943/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

GLIBC-SA-2026-0002: getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler (CVE-2026-0915)

https://sourceware.org/pipermail/libc-announce/2026/000050.html

https://horizon3.ai/attack-research/disclosures/cve-2025-64155-three-years-of-remotely-rooting-the-fortinet-fortisiem/

CVE-2025-64155: Three Years of Remotely Rooting the #Fortinet #FortiSIEM

https://horizon3.ai/attack-research/disclosures/cve-2025-64155-three-years-of-remotely-rooting-the-fortinet-fortisiem/

Un exploit est disponible pour cette nouvelle faille critique dans Fortinet FortiSIEM : CVE-2025-64155 https://www.it-connect.fr/fortinet-fortisiem-cve-2025-64155/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Fortinet

‼️CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution

Exploit/PoC: https://github.com/horizon3ai/CVE-2025-64155

CVSS: 9.4
Published: Jan 13, 2026

Writeup: https://horizon3.ai/attack-research/disclosures/cve-2025-64155-three-years-of-remotely-rooting-the-fortinet-fortisiem/

Advisory: https://fortiguard.fortinet.com/psirt/FG-IR-25-772

CVE-2025-64155: 3 Years of Remotely Rooting the Fortinet FortiSIEM https://horizon3.ai/attack-research/disclosures/cve-2025-64155-three-years-of-remotely-rooting-the-fortinet-fortisiem/

RE: https://infosec.exchange/@cR0w/115888888335126115

Well would you look at that. Write-up now available. Go fuck up some FortiShit.

https://horizon3.ai/attack-research/disclosures/cve-2025-64155-three-years-of-remotely-rooting-the-fortinet-fortisiem/

🟠 CVE-2025-33233 - High (7.8)

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-33233/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Nvidia has posted two high-severity advisories:

Update: NVIDIA CUDA Toolkit - January 2026, relating to CVE-2025-33228, CVE-2025-33229, CVE-2025-33230, and CVE-2025-33231 https://nvidia.custhelp.com/app/answers/detail/a_id/5755

Update: NVIDIA Merlin - January 2026, relating to CVE-2025-33233 https://nvidia.custhelp.com/app/answers/detail/a_id/5761 #infosec #Nvidia #vulnerability

Nvidia has posted two high-severity advisories:

Update: NVIDIA CUDA Toolkit - January 2026, relating to CVE-2025-33228, CVE-2025-33229, CVE-2025-33230, and CVE-2025-33231 https://nvidia.custhelp.com/app/answers/detail/a_id/5755

Update: NVIDIA Merlin - January 2026, relating to CVE-2025-33233 https://nvidia.custhelp.com/app/answers/detail/a_id/5761 #infosec #Nvidia #vulnerability

Nvidia has posted two high-severity advisories:

Update: NVIDIA CUDA Toolkit - January 2026, relating to CVE-2025-33228, CVE-2025-33229, CVE-2025-33230, and CVE-2025-33231 https://nvidia.custhelp.com/app/answers/detail/a_id/5755

Update: NVIDIA Merlin - January 2026, relating to CVE-2025-33233 https://nvidia.custhelp.com/app/answers/detail/a_id/5761 #infosec #Nvidia #vulnerability

One more Tenda for old time's sake.

https://www.cve.org/CVERecord?id=CVE-2025-71023

https://www.cve.org/CVERecord?id=CVE-2025-71024

https://www.cve.org/CVERecord?id=CVE-2025-71025

https://www.cve.org/CVERecord?id=CVE-2025-71026

https://www.cve.org/CVERecord?id=CVE-2025-71027

cc: @Dio9sys @da_667

#internetOfShit

🟠 CVE-2025-71020 - High (7.5)

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the sub_4C408 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71020/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

I don't know this project ( Jervis ) but the fact that there are five crypto-related vulns at once seems like a legitimate opportunity for people to learn from someone else's mistakes. I don't understand many crypto vulns so they always fascinate me.

https://www.cve.org/CVERecord?id=CVE-2025-68701

https://www.cve.org/CVERecord?id=CVE-2025-68702

https://www.cve.org/CVERecord?id=CVE-2025-68703

https://www.cve.org/CVERecord?id=CVE-2025-68704

https://www.cve.org/CVERecord?id=CVE-2025-68925

🔴 CVE-2026-0610 - Critical (9.8)

SQL Injection vulnerability in remote-sessions in Devolutions Server.This issue affects Devolutions Server 2025.3.1 through 2025.3.12

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0610/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical Zoom Vulnerability Exposes Enterprises to Remote Code Execution Threat

Zoom has revealed a critical security flaw in its Node Multimedia Routers (MMRs), allowing attackers to execute remote code with minimal effort. Tracked as CVE-2026-22844, this vulnerability carries a CVSS severity score of 9.9, signaling an urgent risk for organizations using Zoom Node Hybrid or Meeting Connector deployments. Experts warn that failure to address this flaw could lead to…

https://undercodenews.com/critical-zoom-vulnerability-exposes-enterprises-to-remote-code-execution-threat/

🟠 CVE-2026-0899 - High (8.8)

Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0899/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WP Advanced Custom Fields Extended plugin bug gives admin

Your friendly reminder to minimize the WordPress plugins you deploy to what you actually need. BleepingComputer has an article:

A critical-severity vulnerability in the Advanced Custom Fields: Extended (ACF Extended) plugin for WordPress can be exploited remotely by unauthenticated attackers to obtain administrative permissions.

ACF Extended, currently active on 100,000 websites, is a specialized plugin that extends the capabilities of the Advanced Custom Fields (ACF) plugin with features for developers and advanced site builders.

Unauthenticated privilege escalation to get admin is about as bad as it gets. Though, it does appear the WordPress blog has to have mapped “role” as a custom field. It’s impossible for anyone other than the blog owner to know if that’s the case. Well, probably spammers and scammers seeking sites to compromise and turn into platforms to exploit might given which ones they successfully turn.

It’s tracked as CVE-2025-14533:

• NIST
• tenable

‼️CVE-2025-14533: The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.9.2.1, exposing 100,000 sites.

CVSS: 9.8
CVE Published: January 20th, 2026
Bounty: $975.00

Advisory: https://github.com/advisories/GHSA-jm76-5g2j-p4hp

Writeup: https://www.wordfence.com/blog/2026/01/100000-wordpress-sites-affected-by-privilege-escalation-vulnerability-in-advanced-custom-fields-extended-wordpress-plugin/

Description: The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.9.2.1. This is due to the 'insert_user' function not restricting the roles with which a user can register. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. Note: The vulnerability can only be exploited if 'role' is mapped to the custom field.

🔴 CVE-2025-14533 - Critical (9.8)

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.9.2.1. This is due to the 'insert_user' function not restricting the roles with which a user can register. This...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-14533/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

If you missed this, Microsoft posted three advisories to its security guide yesterday.

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability, CVE-2026-21223 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21223

- Microsoft Power Apps Remote Code Execution Vulnerability, CVE-2026-20960 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20960

- Microsoft Excel Remote Code Execution Vulnerability, CVE-2026-20950 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20950 #infosec #Microsoft #Office #Chromium #Edge #vulnerability

Node.js – CVE-2026-23745 : cette faille de sécurité dans la bibliothèque node-tar est à prendre au sérieux https://www.it-connect.fr/node-js-cve-2026-23745-node-tar-vulnerabilite/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

Node.js – CVE-2026-23745 : cette faille de sécurité dans la bibliothèque node-tar est à prendre au sérieux https://www.it-connect.fr/node-js-cve-2026-23745-node-tar-vulnerabilite/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

If you missed this, Microsoft posted three advisories to its security guide yesterday.

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability, CVE-2026-21223 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21223

- Microsoft Power Apps Remote Code Execution Vulnerability, CVE-2026-20960 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20960

- Microsoft Excel Remote Code Execution Vulnerability, CVE-2026-20950 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20950 #infosec #Microsoft #Office #Chromium #Edge #vulnerability

‼️CVE-2026-23744: Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE)

CVSS: 9.8
CVE Published: January 16th, 2026
PoC/Exploit Published: January 20th, 2026

GitHub PoC: https://github.com/boroeurnprach/CVE-2026-23744-PoC/

Advisory: https://github.com/advisories/GHSA-232v-j27c-5pp6

MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.

‼️CVE-2026-23744: Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE)

CVSS: 9.8
CVE Published: January 16th, 2026
PoC/Exploit Published: January 20th, 2026

GitHub PoC: https://github.com/boroeurnprach/CVE-2026-23744-PoC/

Advisory: https://github.com/advisories/GHSA-232v-j27c-5pp6

MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.

Critical Privilege Escalation in Modular DS WordPress Plugin Actively Exploited

Attackers are actively exploiting a critical privilege escalation vulnerability (CVE-2026-23800) in the Modular DS WordPress plugin to gain full administrative control.

**If you are using Modular DS plugin for Wordpress, this is urgent. Your sites are being attacked. Immediately update Modular DS to version 2.6.0 and scan your user list for unauthorized accounts like 'PoC Admin'.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/critical-privilege-escalation-in-modular-ds-wordpress-plugin-actively-exploited-a-v-g-r-3/gD2P6Ple2L

Critical Privilege Escalation in Modular DS WordPress Plugin Actively Exploited

Attackers are actively exploiting a critical privilege escalation vulnerability (CVE-2026-23800) in the Modular DS WordPress plugin to gain full administrative control.

**If you are using Modular DS plugin for Wordpress, this is urgent. Your sites are being attacked. Immediately update Modular DS to version 2.6.0 and scan your user list for unauthorized accounts like 'PoC Admin'.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/critical-privilege-escalation-in-modular-ds-wordpress-plugin-actively-exploited-a-v-g-r-3/gD2P6Ple2L

Another Tenda

https://www.cve.org/CVERecord?id=CVE-2025-70753

cc: @Dio9sys @da_667

#internetOfShit

One more Tenda for old time's sake.

https://www.cve.org/CVERecord?id=CVE-2025-71023

https://www.cve.org/CVERecord?id=CVE-2025-71024

https://www.cve.org/CVERecord?id=CVE-2025-71025

https://www.cve.org/CVERecord?id=CVE-2025-71026

https://www.cve.org/CVERecord?id=CVE-2025-71027

cc: @Dio9sys @da_667

#internetOfShit

One more Tenda for old time's sake.

https://www.cve.org/CVERecord?id=CVE-2025-71023

https://www.cve.org/CVERecord?id=CVE-2025-71024

https://www.cve.org/CVERecord?id=CVE-2025-71025

https://www.cve.org/CVERecord?id=CVE-2025-71026

https://www.cve.org/CVERecord?id=CVE-2025-71027

cc: @Dio9sys @da_667

#internetOfShit

One more Tenda for old time's sake.

https://www.cve.org/CVERecord?id=CVE-2025-71023

https://www.cve.org/CVERecord?id=CVE-2025-71024

https://www.cve.org/CVERecord?id=CVE-2025-71025

https://www.cve.org/CVERecord?id=CVE-2025-71026

https://www.cve.org/CVERecord?id=CVE-2025-71027

cc: @Dio9sys @da_667

#internetOfShit

One more Tenda for old time's sake.

https://www.cve.org/CVERecord?id=CVE-2025-71023

https://www.cve.org/CVERecord?id=CVE-2025-71024

https://www.cve.org/CVERecord?id=CVE-2025-71025

https://www.cve.org/CVERecord?id=CVE-2025-71026

https://www.cve.org/CVERecord?id=CVE-2025-71027

cc: @Dio9sys @da_667

#internetOfShit

SICK vulns, bro.

https://www.cve.org/CVERecord?id=CVE-2026-0712

https://www.cve.org/CVERecord?id=CVE-2026-0713

https://www.cve.org/CVERecord?id=CVE-2026-22637

https://www.cve.org/CVERecord?id=CVE-2026-22638

https://www.cve.org/CVERecord?id=CVE-2026-22639

https://www.cve.org/CVERecord?id=CVE-2026-22640

https://www.cve.org/CVERecord?id=CVE-2026-22641

https://www.cve.org/CVERecord?id=CVE-2026-22642

https://www.cve.org/CVERecord?id=CVE-2026-22643

https://www.cve.org/CVERecord?id=CVE-2026-22644

https://www.cve.org/CVERecord?id=CVE-2026-22645

https://www.cve.org/CVERecord?id=CVE-2026-22646

https://www.cve.org/CVERecord?id=CVE-2026-22907

https://www.cve.org/CVERecord?id=CVE-2026-22908

https://www.cve.org/CVERecord?id=CVE-2026-22909

https://www.cve.org/CVERecord?id=CVE-2026-22910

https://www.cve.org/CVERecord?id=CVE-2026-22911

https://www.cve.org/CVERecord?id=CVE-2026-22912

https://www.cve.org/CVERecord?id=CVE-2026-22913

https://www.cve.org/CVERecord?id=CVE-2026-22914

https://www.cve.org/CVERecord?id=CVE-2026-22915

https://www.cve.org/CVERecord?id=CVE-2026-22916

https://www.cve.org/CVERecord?id=CVE-2026-22917

https://www.cve.org/CVERecord?id=CVE-2026-22918

https://www.cve.org/CVERecord?id=CVE-2026-22919

https://www.cve.org/CVERecord?id=CVE-2026-22920