Red Hat Exploit Intelligence hit by CVE-2026-121837 (MEDIUM): REST Data Panache flaw lets authenticated users infer sensitive fields by bypassing @SecureField on getters. Review configs & restrict endpoint access. Patch status TBD. https://radar.offseq.com/threat/cve-2026-121837-incorrect-authorization-in-red-hat-exploit-intelligence-faba51d503a28eb7 #OffSeq #RedHat #CVE2026 #Infosec

Red Hat Exploit Intelligence hit by CVE-2026-121837 (MEDIUM): REST Data Panache flaw lets authenticated users infer sensitive fields by bypassing @SecureField on getters. Review configs & restrict endpoint access. Patch status TBD. https://radar.offseq.com/threat/cve-2026-121837-incorrect-authorization-in-red-hat-exploit-intelligence-faba51d503a28eb7 #OffSeq #RedHat #CVE2026 #Infosec

Attackers exploit the GPUStack authentication bypass CVE-2026-102895 in the wild. Update to 2.2.2 now to fix this flaw and CVE-2026-102894.

#GPUStack #AISecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/gpustack-authentication-bypass-cve-2026-102895-exploited/?utm_source=mastodon&utm_medium=jetpack_social

GPUStack CVE-2026-102894: a forged SAML response can give an unauthenticated network user an admin session on versions 0.7.1–2.2.1, even if SAML SSO isn't configured. Fixed in 2.2.2.

Upgrade, or temporarily block /auth/saml/callback at your ingress. The vendor advisory does not report active exploitation.

https://github.com/gpustack/gpustack/security/advisories/GHSA-62m9-f875-rqw6

#Cybersecurity #Infosec #IdentitySecurity #AISecurity

CISA warns of critical Subnet Solutions PowerSYSTEM Center flaws CVE-2026-63017 and CVE-2026-63774 that allow authorization bypass and SQL injection.

#SubnetSolutions #PowerSYSTEMCenter #ICSSecurity #Cybersecurity #InfoSec

https://securityonline.info/subnet-solutions-powersystem-center-flaws-patched/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-63017 - Critical (9)

Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63017/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA warns of critical Subnet Solutions PowerSYSTEM Center flaws CVE-2026-63017 and CVE-2026-63774 that allow authorization bypass and SQL injection.

#SubnetSolutions #PowerSYSTEMCenter #ICSSecurity #Cybersecurity #InfoSec

https://securityonline.info/subnet-solutions-powersystem-center-flaws-patched/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-63017 - Critical (9)

Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63017/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71458 - High (7.5)

FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by get_linkinfo. Remote attackers can inject SQL through the source_se and dest...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71458/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71458 - High (7.5)

FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by get_linkinfo. Remote attackers can inject SQL through the source_se and dest...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71458/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA warns of critical Subnet Solutions PowerSYSTEM Center flaws CVE-2026-63017 and CVE-2026-63774 that allow authorization bypass and SQL injection.

#SubnetSolutions #PowerSYSTEMCenter #ICSSecurity #Cybersecurity #InfoSec

https://securityonline.info/subnet-solutions-powersystem-center-flaws-patched/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-63774 - Critical (9)

Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63774/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA warns of critical Subnet Solutions PowerSYSTEM Center flaws CVE-2026-63017 and CVE-2026-63774 that allow authorization bypass and SQL injection.

#SubnetSolutions #PowerSYSTEMCenter #ICSSecurity #Cybersecurity #InfoSec

https://securityonline.info/subnet-solutions-powersystem-center-flaws-patched/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-63774 - Critical (9)

Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63774/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92697 - High (7.5)

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls  strlen()  on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92697/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92697 - High (7.5)

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls  strlen()  on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92697/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88981 - High (8.6)

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the frontend artifact download path for source=s3 or source=minio accepts providerInfo.Params.endpoint, and the archived pod-log p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88981/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88981 - High (8.6)

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the frontend artifact download path for source=s3 or source=minio accepts providerInfo.Params.endpoint, and the archived pod-log p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88981/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58273 - High (8.1)

Rucio is a scientific data management framework. From 1.16.1 until 35.9.0, 38.6.0, and 41.0.0rc1, the /credentials/signurl endpoint reads X-Rucio-Account instead of the account stored in request.environ['issuer'] by token authentication. Any authe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58273/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58273 - High (8.1)

Rucio is a scientific data management framework. From 1.16.1 until 35.9.0, 38.6.0, and 41.0.0rc1, the /credentials/signurl endpoint reads X-Rucio-Account instead of the account stored in request.environ['issuer'] by token authentication. Any authe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58273/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-33944 - High (8.8)

Dolibarr is an open-source enterprise resource planning and customer relationship management application. Prior to 22.0.5 and 23.0.1, there is a SQL injection vulnerability in the Third Party company update functionality. The application concatena...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33944/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-33944 - High (8.8)

Dolibarr is an open-source enterprise resource planning and customer relationship management application. Prior to 22.0.5 and 23.0.1, there is a SQL injection vulnerability in the Third Party company update functionality. The application concatena...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33944/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-119757 - Critical (9.8)

BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that allows unauthenticated remote attackers to retrieve .macaroon credential files for an LND (Lightning Network Daemon) node. Attack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119757/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

BTCPay Server <2.4.2 has a CRITICAL info disclosure (CVE-2026-119757, CVSS 9.8) – unauthenticated attackers can grab LND .macaroon credentials, gaining full node control & fund access. Restrict access, secure creds! https://radar.offseq.com/threat/btcpay-server-before-242-including-242-release-candidates-contains-an-information-disclosure-fad28409be2be3bd #OffSeq #Vuln #BTCpay

🔴 CVE-2026-119757 - Critical (9.8)

BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that allows unauthenticated remote attackers to retrieve .macaroon credential files for an LND (Lightning Network Daemon) node. Attack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119757/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

BTCPay Server <2.4.2 has a CRITICAL info disclosure (CVE-2026-119757, CVSS 9.8) – unauthenticated attackers can grab LND .macaroon credentials, gaining full node control & fund access. Restrict access, secure creds! https://radar.offseq.com/threat/btcpay-server-before-242-including-242-release-candidates-contains-an-information-disclosure-fad28409be2be3bd #OffSeq #Vuln #BTCpay

SANS Stormcast Friday, November 6th, 2026: RootEvidence Cisco IOS Opt-Out Scans; OpenSSH musl sshhole (CVE-2026-123158); Refrigeration OT Hardening; Zyxel GS1900 OOB Write (CVE-2026-107441)
https://isc.sans.edu/podcastdetail/10168

『OpenSSH 爆出 10 年老漏洞：输入超长密码，就能绕过 SSH 登录验证｜CVE-2026-123158』
一个超长密码，就能攻破 SSH？ OpenSSH 爆出一个隐藏了约 10 年的严重漏洞：攻击者无需知道真实密码，也不需要 SSH 私钥，只需输入一串超长密码，就可能绕过 Linux 账户的密码锁定机制
……
阅读全文： :sys_link: https://www.appinn.com/openssh-sshole-cve-2026-123158/

#小众软件

SANS Stormcast Friday, November 6th, 2026: RootEvidence Cisco IOS Opt-Out Scans; OpenSSH musl sshhole (CVE-2026-123158); Refrigeration OT Hardening; Zyxel GS1900 OOB Write (CVE-2026-107441)
https://isc.sans.edu/podcastdetail/10168

『OpenSSH 爆出 10 年老漏洞：输入超长密码，就能绕过 SSH 登录验证｜CVE-2026-123158』
一个超长密码，就能攻破 SSH？ OpenSSH 爆出一个隐藏了约 10 年的严重漏洞：攻击者无需知道真实密码，也不需要 SSH 私钥，只需输入一串超长密码，就可能绕过 Linux 账户的密码锁定机制
……
阅读全文： :sys_link: https://www.appinn.com/openssh-sshole-cve-2026-123158/

#小众软件

How do you pronounce an asterisk? We're saying "Shh" for longer. Like "Shhhole."

This vulnerability impacts unpatched musl builds of OpenSSH, including Alpine Linux. But there are a lot of required conditions for exploitation.

https://ifin.network/t/cve-2026-123158-sshole-ssh-auth-bypass-in-musl-based-linux-distros/965

#ThreatIntel #ThreatIntelligence

CW: Android biztonsági frissítés — röviden
Google kiadta a novemberi javítócsomagokat: a 2026-11-01-es szint 119 hibát orvosol (főleg Framework, System, runtime), köztük CVE-2026-58868 RCE; a 2026-11-05-ös csomag további 97 hibát a kernel/SoC-összetevőkben. Frissítsen, ha lehet.
https://linuxmint.hu/hir/2026/11/tobb-mint-200-sebezhetoseget-javit-az-android-novemberi-frissitocsomagja-nemzeti
#Android #CVE #infosec #OpenSource

CVE-2026-100109: Security For WooCommerce WordPress plugin v1.0.10 – 1.0.16 has a CRITICAL flaw (CVSS 9.8) allowing unauthenticated admin account creation — full site compromise possible. Disable or restrict now. https://radar.offseq.com/threat/the-security-for-woocommerce-wordpress-plugin-from-1010-to-1016-does-not-perform-capability-checks-c68d3315e500ee5d #OffSeq #WordPress #Security

🔴 CVE-2026-100109 - Critical (9.8)

The Security For WooCommerce WordPress plugin from 1.0.10 to 1.0.16 does not perform capability checks when creating users through an action available to unauthenticated visitors, and lets the caller choose the new account's role, allowing unauthe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-100109/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-100109: Security For WooCommerce v1.0.10 – 1.0.16 suffers a CRITICAL auth bypass. Attackers can create admin accounts without logging in — site takeover possible. Disable or upgrade plugin ASAP. https://radar.offseq.com/threat/cve-2026-100109-cwe-862-missing-authorization-in-security-for-woocommerce-17a9f2ddd03e44c0 #OffSeq #WordPress #CVE2026100109 #Infosec

🟠 CVE-2026-93389 - High (8.2)

The LiteSpeed Cache plugin for WordPress is vulnerable to unauthenticated disclosure of sensitive WooCommerce customer data in all versions up to, and including, 7.9.1 With Cache REST enabled (the shipped default cache-rest=1), LiteSpeed stores Wo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93389/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-122051 | Edimax BR-6208AC v1.32 is affected by a CRITICAL command injection vuln in /goform/mp — remote code execution possible without auth. Exploit is public, no patch. Isolate or replace vulnerable devices. https://radar.offseq.com/threat/a-flaw-has-been-found-in-edimax-br-6208ac-132-cve-2026-122051-18cd449922d0575f #OffSeq #CVE2026122051 #IoTSecurity

🔴 CVE-2026-122051 - Critical (10)

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been pu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122051/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-122051: CRITICAL command injection (CVSS 10) in Edimax BR-6208AC v1.32 enables remote, unauthenticated code execution via /goform/mp. Exploit is public, no patch available. Restrict network access & monitor devices. https://radar.offseq.com/threat/cve-2026-122051-command-injection-in-edimax-br-6208ac-722ad11edef6a006 #OffSeq #CVE2026122051 #IoT

🟠 CVE-2026-118193 - High (8.8)

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.19.1 via the `donor_default_user_role` parameter. This is due to the `sanitize_option_donor_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118193/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71550 - Critical (9.9)

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.2 and 8.10.2, the workflow controller uses a path-traversal-capable aow_action value in require_once() without constraining the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71550/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨PHP2Shell (CVE-2026-109618 / CVE-2026-109619): two pre-auth RCEs in the PHP core, 5.4 through 8.5.11.

From SecDB data, two weeks after disclosure:
📈 EPSS hit 100.0% on Oct 25, one day before CISA added both CVEs to KEV.
🧪 747 GitHub repos reference CVE-2026-109618, 77% of them created in the first 3 days.
📄 64 vendor advisories from 18 sources, plus PAN-OS, Panorama and several Siemens products in the CPE matches.

🩹 Fixed in 8.2.35, 8.3.36, 8.4.27 and 8.5.12. Restart every PHP worker after patching.

Timeline, EPSS, PoC wave, SSVC and remediation in the slides.

https://secdb.nttzen.cloud/blog/2026/11/03/php4shell

#InfoSec #PHP2Shell #CVE2026109618 #CVE2026109619
#NTTDATA #SecDB

🔄 CSAF advisory updated (version 2.0.0)

VDE-2026-139
Two critical PHP vulnerabilities in several Festo Didactic products
CVE-2026-109618, CVE-2026-109619

Changes: Adjusted information about vendor fix for FactoryViews

HTML: https://certvde.com/en/advisories/VDE-2026-139
CSAF JSON: https://festo.csaf-tp.certvde.com/.well-known/csaf/white/2026/fsa-202603.json

#OT #Advisory #csaf #oCSAF #cve

CRITICAL: PHP2Shell (CVE-2026-109618 & 109619) carries a CVSS 9.2 rating.

Zend Engine OOM corruption & stale globals enable pre-auth RCE before userland code executes.

Our production SRE guide covers:
🔍 SAPI Breakdown: mod_php vs. PHP-FPM vs. FrankenPHP
📜 Automated Script: Debian/Ubuntu update playbook
🛡️ Verification: 4-point live worker audit standard

🔗 https://www.servermo.com/howto/php2shell-cve-2026-109618-remediation-guide/

#PHP #AppSec #CyberSecurity #Linux #DevOps #SRE

🚨PHP2Shell (CVE-2026-109618 / CVE-2026-109619): two pre-auth RCEs in the PHP core, 5.4 through 8.5.11.

From SecDB data, two weeks after disclosure:
📈 EPSS hit 100.0% on Oct 25, one day before CISA added both CVEs to KEV.
🧪 747 GitHub repos reference CVE-2026-109618, 77% of them created in the first 3 days.
📄 64 vendor advisories from 18 sources, plus PAN-OS, Panorama and several Siemens products in the CPE matches.

🩹 Fixed in 8.2.35, 8.3.36, 8.4.27 and 8.5.12. Restart every PHP worker after patching.

Timeline, EPSS, PoC wave, SSVC and remediation in the slides.

https://secdb.nttzen.cloud/blog/2026/11/03/php4shell

#InfoSec #PHP2Shell #CVE2026109618 #CVE2026109619
#NTTDATA #SecDB

🔄 CSAF advisory updated (version 2.0.0)

VDE-2026-139
Two critical PHP vulnerabilities in several Festo Didactic products
CVE-2026-109618, CVE-2026-109619

Changes: Adjusted information about vendor fix for FactoryViews

HTML: https://certvde.com/en/advisories/VDE-2026-139
CSAF JSON: https://festo.csaf-tp.certvde.com/.well-known/csaf/white/2026/fsa-202603.json

#OT #Advisory #csaf #oCSAF #cve

🟠 CVE-2026-97175 - High (8.8)

A flaw was found in the idp-auto-link authenticator of the keycloak-services component, which handles user identity federation. The issue occurs when Keycloak automatically links an incoming identity from an external provider to an existing local ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97175/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-96453 - High (8)

A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to manage Keycloak servers from the command line. When a custom truststore is provided to verify the server identity, the tool incorrectly accepts any self-sign...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96453/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

46 Apache OFBiz vulnerabilities, including pre-auth RCE CVE-2026-68524 and CVE-2026-83542, are fixed in OFBiz 24.09.08. Upgrade now.

#ApacheOFBiz #OFBiz #CVE202668524 #RCE #ERP #AuthenticationBypass #PatchNow #Vulnerability

https://securityonline.info/apache-ofbiz-vulnerabilities-24-09-08/?utm_source=mastodon&utm_medium=jetpack_social

46 Apache OFBiz vulnerabilities, including pre-auth RCE CVE-2026-68524 and CVE-2026-83542, are fixed in OFBiz 24.09.08. Upgrade now.

#ApacheOFBiz #OFBiz #CVE202668524 #RCE #ERP #AuthenticationBypass #PatchNow #Vulnerability

https://securityonline.info/apache-ofbiz-vulnerabilities-24-09-08/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-122006 - Critical (9.8)

The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g., reading secret_key_base) because the ImageMagick analyzer runs when a file is attached, and th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122006/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92857 - High (8.1)

Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own applications. A flaw in how Keycloak validates these registration requests allows an attacker to create a malicious application th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92857/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123059 - High (7.5)

In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keycloak enabled store the client secret of the `basyx-technical-user` OAuth2 client in cleartext in a Kubernetes ConfigMap. This client uses...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123059/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-117691 - Critical (9.1)

A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server processes percent-encoded parameter names (like AMLResponse) while the signature verification logic only checks literal parameter na...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117691/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

RE: https://infosec.exchange/@offseq/117564193831527937

Uhh did Red Hat just drop a zero day without a corresponding patch? Because this time the report seems to not be slop. Red Hat advisory: https://access.redhat.com/security/cve/cve-2026-117691

Red Hat Build of Keycloak hit by CRITICAL vuln (CVE-2026-117691): SAML signature check bypass via percent-encoded params enables full account takeover. No fix yet — track Red Hat updates. https://radar.offseq.com/threat/cve-2026-117691-improper-verification-of-cryptographic-signature-in-red-hat-red-hat-build-of-keycloak-73f1b31f62aee735 🔒 #OffSeq #Keycloak #CVE2026117691 #infosec

🚨 Apache OFBiz fixes dozens of vulnerabilities, including critical flaws allowing unauthenticated remote code execution

The Apache Software Foundation has released OFBiz 24.09.08 to address dozens of security vulnerabilities, including critical flaws that could allow attackers to execute malicious code, bypass authentication, and access sensitive business information.

Among the most serious is CVE-2026-68524, which allows remote code execution without authentication. Other vulnerabilities expose internal employee records, product information, and business data, while additional flaws could allow attackers to compromise application security controls.

All Apache OFBiz versions prior to 24.09.08 are affected. Administrators should upgrade immediately, particularly if their deployments are accessible from the internet.

Source: https://ofbiz.apache.org/security.html

46 Apache OFBiz vulnerabilities, including pre-auth RCE CVE-2026-68524 and CVE-2026-83542, are fixed in OFBiz 24.09.08. Upgrade now.

#ApacheOFBiz #OFBiz #CVE202668524 #RCE #ERP #AuthenticationBypass #PatchNow #Vulnerability

https://securityonline.info/apache-ofbiz-vulnerabilities-24-09-08/?utm_source=mastodon&utm_medium=jetpack_social

🚨 Apache OFBiz fixes dozens of vulnerabilities, including critical flaws allowing unauthenticated remote code execution

The Apache Software Foundation has released OFBiz 24.09.08 to address dozens of security vulnerabilities, including critical flaws that could allow attackers to execute malicious code, bypass authentication, and access sensitive business information.

Among the most serious is CVE-2026-68524, which allows remote code execution without authentication. Other vulnerabilities expose internal employee records, product information, and business data, while additional flaws could allow attackers to compromise application security controls.

All Apache OFBiz versions prior to 24.09.08 are affected. Administrators should upgrade immediately, particularly if their deployments are accessible from the internet.

Source: https://ofbiz.apache.org/security.html

46 Apache OFBiz vulnerabilities, including pre-auth RCE CVE-2026-68524 and CVE-2026-83542, are fixed in OFBiz 24.09.08. Upgrade now.

#ApacheOFBiz #OFBiz #CVE202668524 #RCE #ERP #AuthenticationBypass #PatchNow #Vulnerability

https://securityonline.info/apache-ofbiz-vulnerabilities-24-09-08/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-54384 - Critical (9.8)

VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a full session for a victim's account by submitting a linked Google or Facebook account identifier to the POST /front/login...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54384/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54381 - High (7.5)

VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthenticated attackers to list and download stored files without authentication. Attackers can enumerate the publicly accessible bucket...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54381/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-121489 | CRITICAL severity in Apache Juneau (<9.2.1): Path traversal in DirectoryResource allows attackers to read, write, or delete files outside the root directory (if view/upload/delete enabled). Patch to 9.2.1 ASAP! https://radar.offseq.com/threat/cve-2026-121489-cwe-22-path-traversal-in-apache-software-foundation-apache-juneau-94a27222766ae77e #OffSeq #CVE2026121489 #infosec

🟠 CVE-2026-118869 - High (8.8)

An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118869/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118869: OS command injection in SHIRASAGI (1.19.0 – 1.21.0). HIGH severity (CVSS 8.8). Authenticated attackers can execute arbitrary OS commands. Restrict access & monitor logs. Patch status unknown. https://radar.offseq.com/threat/cve-2026-118869-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-1bdd3fe9e296d19c #OffSeq #Vuln #SHIRASAGI #Cybersecurity

🟠 CVE-2026-123033 - High (8.3)

Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 (and in release trains before their respective fixes) allows an attacker on the same network segment to achieve unauthenticated full-administrato...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123033/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123029 - High (7.5)

Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges of the Wowza Streaming Engine process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123029/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116617 - High (8.1)

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because `stm_save_user_extra_fields()`, hooked to `personal_optio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116617/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

RT: @just1cz I used an AI for two hours and found a zero-day that would let a nation-state hack any server running stock Ubuntu. It was patched this morning. CVE-2026-109518. 🧵

🚨 APT PACKAGE VERIFICATION BYPASS: A VERIFIED LINUX PACKAGE CAN STILL BECOME MALICIOUS.

Full technical breakdown, exploitation mechanics, affected versions, and mitigation commands:
🔗 https://thecybersecguru.com/news/cve-2026-109518-apt-download-verification-bypass/

A high-severity vulnerability, CVE-2026-109518 (CVSS 7.7), exposes a dangerous flaw in Debian's APT package manager that could allow an on-path attacker to achieve ROOT CODE EXECUTION on vulnerable Linux systems.

The issue isn't broken cryptography. It's something far more subtle: a TOCTOU race condition combined with hard-link confusion, HTTP redirects, download retries, and file resumption. An attacker can exploit the gap between SHA-256 verification and package installation to overwrite an already verified .deb archive with malicious content. When dpkg subsequently processes the package, malicious maintainer scripts can execute with root privileges.

Even HTTPS isn't a universal escape here. A compromised or malicious repository mirror can still trigger the vulnerable download workflow.

Debian has released security updates. If you manage Debian, Ubuntu, Linux servers, Docker images, or CI/CD build infrastructure, check your APT version and patch immediately.

This is a reminder that package integrity is about more than verifying a checksum. It's also about ensuring the verified bytes remain unchanged until execution.

#Linux #Debian #Ubuntu #CyberSecurity #InfoSec #APT #CVE2026109518 #RCE #LinuxSecurity #DevSecOps

Why the FUCK is apt not cryptographically authenticated by default in the year of our lord 2026?!?!?
ubuntu.com/security/CVE...

The whole castle.

A researcher spent two hours with an AI and found a zero-day that affects essentially every stock Ubuntu server. This module will now be added to your quarterly training. You have failed it preemptively.

Please patch APT on all affected Debian and Ubuntu systems immediately to the version addressing CVE-2026-109518. There will be a quiz.

Reward: You've received the Provisional Trust Badge — it expires the moment you skip a patch cycle. (2/3)

🏆 New Achievement! Man In The Middle Management!

Please direct your attention to slide one of today's compliance module: "Why We Patch Things." CVE-2026-109518 is a flaw in APT, the package manager trusted by Debian, Ubuntu, and their derivatives to install verified software. An on-path attacker able to intercept HTTP traffic between your machine and the archive server can swap a legitimate package with a malicious one after verification, achieving arbitrary code execution as root. Root. (1/3)

SANS Stormcast Thursday, November 5th, 2026: Email Test Scripts; runZero oobscan BMC/IPMI; apt Signature Bypass (CVE-2026-109518); SonicWall GMS EOL Unpatched Flaws
https://isc.sans.edu/podcastdetail/10166

Linux : une faille dans APT permet de remplacer un paquet vérifié et de l’exécuter en root https://www.it-connect.fr/faille-apt-cve-2026-109518-debian-ubuntu-root/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Linux

CW: biztonsági hír — Megjelent az apt 3.3.6: javítja a CVE-2026-109518 letöltésellenőrzés megkerülését (célfájlok kizárólagos megnyitása). Két memóriakezelési javítás (deb parser: hiányzó Version elutasítása; workLess comparator) + tesztek és teljesítményjavítások. Jelenleg Debian Unstable-en; Stable/Ubuntu ritkán veszi át. https://linuxmint.hu/hir/2026/11/megjelent-az-apt-336-fontos-biztonsagi-javitassal-a-letoltesellenorzes-megkerulese-ellen #APT #Debian #CVE2026-109518 #Security #Linux

Update your Linux systems now to fix CVE-2026-109518, a critical APT package manager flaw that lets on-path attackers run arbitrary code as root.

#Linux #Debian #Ubuntu #Cybersecurity #InfoSec

https://securityonline.info/apt-package-manager-cve-2026-109518-root-flaw/?utm_source=mastodon&utm_medium=jetpack_social

Vulnerabilità critica in APT: attacco MITM permette l’esecuzione di codice come Root su Debian e Ubuntu
#Ubuntu #debian #CVE
Scoperta una grave vulnerabilità in APT (CVE-2026-109518) che colpisce Debian e Ubuntu. Un attacco Man-In-The-Middle permette di sostituire pacchetti legittimi ed eseguire codice arbitrario come root durante gli aggiornamenti. Ecco come funziona la falla e come aggiornare subito i tuoi sistemi.

https://www.marcosbox.com/2026/11/04/vulnerabilita-critica-apt-debian-ubuntu-cve-2026-109518/

@sicurezza @linux

A security flaw tracked as CVE-2026-109518 affects APT, the package manager for Debian and Ubuntu.

An attacker positioned to alter HTTP traffic can trick APT during failed download retries into swapping a checked package for a malicious one, achieving root code execution.

Debian and Ubuntu published advisories and fixed builds on November 4, 2026.

Systems using default download retry settings on recent distributions are exposed, and users…

https://en.hacks.gr/keno-asfaleias-se-debian-kai-ubuntu-afinei-perithoria-gia-paremvoles-stis-enimeroseis/

#Debian #Ubuntu #Linux #APT

Debian's Nov 4 DSA-6607-1 fixes APT CVE-2026-109518. With manipulated HTTP downloads and redirects/retries, an on-path attacker could replace a verified package and execute code as root. Debian 13 (trixie) is fixed in apt 3.0.4. Check your distro's advisory and install its security update; exploitation in the wild is not confirmed.

https://lists.debian.org/debian-security-announce/2026/msg00526.html

#Cybersecurity #Infosec #Linux #PatchManagement

Une faille dans APT permet de modifier un paquet après sa vérification de sécurité.

CVE-2026-109518 : un attaquant sur le réseau peut exploiter la reprise des téléchargements HTTP pour exécuter du code en root.

Corrigé dans APT 3.0.4 sur Debian 13

https://www.phoronix.com/news/Debian-APT-MITM-RCE

CVE-2026-109518: APT Download Verification Bypass Explained

https://thecybersecguru.com/news/cve-2026-109518-apt-download-verification-bypass/

CVSS 4.0 scores APT flaw CVE-2026-109518 at 7.7. A man-in-the-middle attacker or malicious mirror can intercept a package download and replace it with code that runs as root, exploiting the default retry of failed HTTP downloads in Debian 12 and Ubuntu 22.04. Vendor advisories confirm fixes across multiple releases, including long-term support, and note HTTPS sources aren't exposed. #CyberSecurity #Technology

The #Debian APT security update fixes "Download verification bypass" CVE-2026-109518:

"On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges. The vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration"

https://www.cve.org/CVERecord?id=CVE-2026-109518

Obviously any Debian based distribution using APT can be affected as well and should install updates as soon as they become available.

The vulnerability description doesn't mention this explicitly but if your system doesn't have Emudhra certificates purged, they can be vulnerable even when using HTTPS sources.

#CVE_2026_109518 #infosec #cybersecurity

"APT can merge two different package downloads after an HTTP redirect gives them the same URI. Improper file handling when resuming an HTTP download allows a man-in-the-middle attacker to replace a package after verification, resulting in the execution of arbitrary code as root." CVE-2026-109518

Oh, I want to know the details of how this "verification" of a partially downloaded file succeeded.

Anyway, make sure you update your apt, which could be MitM'd, using apt.

https://lists.debian.org/debian-security-announce/2026/msg00526.html

🔴 CVE-2026-122321 - Critical (9.1)

Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string (such as a tag) rather than bound to the verified digest, so cache hits skip signatur...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122321/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Kyverno 1.16.0 – 1.19.1: CRITICAL (CVSS 9.9) vuln (CVE-2026-122311) lets attackers escape namespace via resource.get()/post() and take over clusters. Upgrade to v1.19.2+ now! https://radar.offseq.com/threat/kyverno-from-1160-before-1192-fails-to-validate-path-segments-in-the-resource-argument-of-resourceget-ad2085e40b330a10 #OffSeq #Kyverno #Kubernetes #CVE2026122311

CVE-2026-122992: CRITICAL integer underflow in dstarCallsignToAPRS (G4KLX & F4FXL DStarGateway <7b75de6). Remote DoS possible, CVSS 9.2. No patch — restrict access & monitor updates. https://radar.offseq.com/threat/in-g4klx-dstargateway-and-f4fxl-dstargateway-before-7b75de6-dstarcallsigntoaprs-in-aprsutilscpp-has-an-7a56517465ac4a02 #OffSeq #Infosec #HamRadio #CVE2026122992

CVE-2026-122313 (CRITICAL): Kyverno v1.17.0 – 1.19.1 allows privilege escalation via lack of namespace checks in NamespacedMutatingPolicy. Attackers can modify cluster-wide resources. Patch by upgrading to v1.19.2. https://radar.offseq.com/threat/cve-2026-122313-improper-privilege-management-in-kyverno-2b25fa97ddd30181 #OffSeq #Kyverno #CVE2026122313

🟠 CVE-2026-122299 - High (8.8)

Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit resolves a duplicate tree header to the last occurrence instead of the first, diverging from core git's resolution behavior, while Poetry 2.5...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122299/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54382 - High (7.7)

VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated attackers to perform s3:PutObject operations across the entire shared bucket instead of being restricte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54382/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 A Samba printing flaw can turn a malicious print job name into remote code execution; CVE-2026-4480

PoC: https://github.com/0xBlackash/CVE-2026-4480

The vulnerability affects Samba’s printing subsystem when %J is used inside a custom print command. A client-controlled print job name can reach the shell without proper escaping, allowing shell metacharacters to alter the command being executed.

Samba Printing | Command Injection RCE

CVSS: 9.8 Critical
Affected: Samba < 4.22.10, < 4.23.8, and < 4.24.3
Fixed: Samba 4.22.10, 4.23.8, and 4.24.3
Impact: Unauthenticated remote code execution under affected configurations

The repository documents the vulnerable configuration, attack path, affected versions, detection guidance, and mitigation steps.

🟠 CVE-2026-55368 - High (8.1)

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8, H2O's access-log formatter could write past its log-line buffer when an affected custom access-log format was configured....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55368/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🏆 New Achievement! Supply Chain of Fools!

The court calls APT29 to the stand. Charges: infiltrating the Plerdy SEO Tracker supply chain, injecting JavaScript into compromised websites to fingerprint iOS and Android visitors, and exploiting CVE-2025-43529 and CVE-2024-27834 to steal browser cookies, Wi-Fi passwords, and full mobile device data. Sekoia researchers Garçon and Aime have entered the technical evidence. The defendant does not deny the watering hole campaign. It is large-scale. (1/2)

🔵 THREAT INTELLIGENCE

Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

Vulnerability | CRITICAL
CVEs: CVE-2024-27834

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple...

Full analysis:
https://www.yazoul.net/news/article/hackers-exploit-patched-apple-flaw-to-deliver-info-stealing-malware-cisa-says/?utm_source=mastodon&utm_medium=social

by Yazoul AI

#CyberSecurity #CVE #ThreatHunting

🏆 New Achievement! Supply Chain of Fools!

The court calls APT29 to the stand. Charges: infiltrating the Plerdy SEO Tracker supply chain, injecting JavaScript into compromised websites to fingerprint iOS and Android visitors, and exploiting CVE-2025-43529 and CVE-2024-27834 to steal browser cookies, Wi-Fi passwords, and full mobile device data. Sekoia researchers Garçon and Aime have entered the technical evidence. The defendant does not deny the watering hole campaign. It is large-scale. (1/2)

CISA added Apple WebKit CVE-2024-27834 to KEV on Nov 4 based on exploitation evidence. The pointer-authentication bypass requires prior arbitrary read/write access; it is not standalone web RCE. Apple fixed it in May 2024. Check outdated Apple devices in your fleet. CISA has not identified the attack campaign.

https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog

#Cybersecurity #Infosec #Apple #KEV

CVE ID: CVE-2024-27834
Vendor: Apple
Product: Multiple Products
Date Added: 2026-11-04
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2024-27834

One of the vulnerabilities mentioned, CVE-2024-27834 is not on the KEV yet. :thinking:

Update Sonatype Nexus Repository 3 to version 3.98.0 now to fix CVE-2026-113373, CVE-2026-113374, and five other critical security flaws.

#Sonatype #NexusRepository #SupplyChainSecurity #Cybersecurity #InfoSec

https://securityonline.info/sonatype-nexus-repository-3-cve-2026-113373-patched/?utm_source=mastodon&utm_medium=jetpack_social

Update Sonatype Nexus Repository 3 to version 3.98.0 now to fix CVE-2026-113373, CVE-2026-113374, and five other critical security flaws.

#Sonatype #NexusRepository #SupplyChainSecurity #Cybersecurity #InfoSec

https://securityonline.info/sonatype-nexus-repository-3-cve-2026-113373-patched/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-121930 - Critical (9.1)

A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the function system of the file apply.cgi of the component Ping Diagnostic. This manipulation of the argument ping_ip causes os command injection. The attack can be...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121930/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-121931 - Critical (9.1)

A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Such manipulation of the argument traceroute_ip leads to os c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121931/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-122120 - Critical (9)

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122120/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82033 - High (8.4)

DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile HTTP and WebSocket RPC control plane, allowing any local process, including those running as a different O...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82033/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update Sonatype Nexus Repository 3 to version 3.98.0 now to fix CVE-2026-113373, CVE-2026-113374, and five other critical security flaws.

#Sonatype #NexusRepository #SupplyChainSecurity #Cybersecurity #InfoSec

https://securityonline.info/sonatype-nexus-repository-3-cve-2026-113373-patched/?utm_source=mastodon&utm_medium=jetpack_social

Update Sonatype Nexus Repository 3 to version 3.98.0 now to fix CVE-2026-113373, CVE-2026-113374, and five other critical security flaws.

#Sonatype #NexusRepository #SupplyChainSecurity #Cybersecurity #InfoSec

https://securityonline.info/sonatype-nexus-repository-3-cve-2026-113373-patched/?utm_source=mastodon&utm_medium=jetpack_social

🚨 Critical Citrix XenServer Flaw Allows Unauthenticated Attackers to Compromise Virtualization Hosts, CVE-2026-98432

Citrix has released emergency security updates for XenServer 8.4 and 9 after disclosing a critical vulnerability that could allow unauthenticated attackers with access to the management network to compromise virtualization hosts.

The vulnerability, tracked as CVE-2026-98432, also affects Workload Balancing and Conversion Manager appliances, raising concerns about attacks against infrastructure used to manage large numbers of virtual machines.

A second vulnerability, CVE-2026-102703, could allow a privileged attacker inside a guest virtual machine to compromise the underlying host, potentially breaking the security boundaries separating virtualized environments.

Citrix also addressed six additional vulnerabilities involving PXE boot and Secure Boot protections.

Security updates are now available for affected XenServer deployments and related management appliances. Administrators are urged to patch immediately and restrict management network access to trusted systems.

There are currently no confirmed reports of these vulnerabilities being exploited in the wild.

Source: https://support.citrix.com/external/article/CTX697256/xenserver-security-update-for-multiple-issues.html

https://www.rescana.com/post/xen-xsa-523-cve-2026-102703-grant-copy-cross-vm-prepare-now

#Xen #CyberSecurity #Virtualization #PrivilegeEscalation #CriticalVulnerability #PatchedOrPerish (3/3)

Xen's XSA-523 (Nov 3) affects versions 4.6+, allowing a malicious guest to read/write memory of other domains, including Dom0 (CVE-2026-102703/102704). The project says there's no known mitigation: patch affected hosts or apply downstream vendor fixes. No confirmed in-the-wild exploitation was cited.

https://xenbits.xen.org/xsa/advisory-523.html

#Cybersecurity #Infosec #Virtualization #PatchManagement

🟠 CVE-2026-110935 - High (8.4)

The PFI plugin framework deployment routine does not validate path components when extracting archive entries to the local plugin repository. Archive entries containing relative path segments such as '..' are not rejected, allowing an unauthentica...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110935/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-121964 - High (7.5)

FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD Gateway RPC client, where rpc_client_recv_fragment writes BIND_ACK and ALTER_CONTEXT_RESP fragments into a persistent PDU stream after checking only total capacity rather than r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121964/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-121945 - High (7.6)

CoopCycle coopcycle-web before 6.20.1 contains a broken access control vulnerability that allows any courier to read and modify every incident because Incident operations only check ROLE_COURIER. Attackers can enumerate sequential incident ids and...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121945/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-121932 - Critical (10)

A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system of the file /wizard/apply.cgi. Performing a manipulation of the argument ping_ip/traceroute_ip results in os command injection. The attack may be initiated ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121932/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update WatchGuard AuthPoint Gateway to version 7.6.0 now to fix CVE-2026-121639, CVE-2026-121638, and two other critical authentication flaws.

#WatchGuard #AuthPoint #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/watchguard-authpoint-gateway-flaws-patched/?utm_source=mastodon&utm_medium=jetpack_social

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-76506 - High (7.6)

A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.

This vulnerabili...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76506/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco has three advisories today.

New, medium-severity: CVE-2026-76506: Cisco UCS Central Software Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucs-rce-LzHSFRDQ

Here are the others: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #infosec #Cisco #vulnerability

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-119749 - High (7.5)

The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulnerability that allows unauthenticated attackers to bypass payment processing by submitting a negative item quantity on a public payment form. Attackers can ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119749/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-121962 - High (8.1)

FreeRDP before 3.32.2 contains a heap buffer overflow in transport_default_read_pdu when handling partial Early User Authorization reads during PROTOCOL_HYBRID_EX CredSSP. A malicious RDP server can split the four-byte EUA result into short reads ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121962/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-121966 - High (8.7)

Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requests) through an auth-server connection pool shared by all clients, exposing connection-bound NTLM or Negotiate authentication....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Sigh

This is a silly CVE. The Siemens devices shipped Node-RED without authentication, which is Node-RED's default state. It even says so in the docs and tells you to set it up.

Anyway apparently folks are attacking this now.

https://ifin.network/t/cve-2026-58115-no-authentication-on-siemens-simatic-iot2050-node-red/964

#ThreatInte #ThreatIntelligence

Critical Node-RED Vulnerability Exploited to Deploy Botnets and Webshells

Hackers are exploiting a CVSS 10.0 vulnerability in Node-RED (CVE-2026-58115) to deploy botnets and webshells on industrial and commercial servers. The flaw allows unauthenticated remote code execution by creating malicious programming flows on instances that lack proper authentication.

**Make sure all Node-RED instances and Siemens SIMATIC IoT2050 devices are isolated from the internet and can only be reached from trusted networks, then update the IoT2050 to version 4.3.4.1 or later and turn on “adminAuth” so the Node-RED editor asks for a password. Look through your existing flows for any “exec” nodes or HTTP endpoints you don’t recognize, and if you find any, treat the device as hacked: rebuild it from a clean image and change its passwords.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/critical-node-red-vulnerability-exploited-to-deploy-botnets-and-webshells-t-7-0-b-2/gD2P6Ple2L

🟠 CVE-2026-92704 - High (8.3)

SharpEmu is an experimental PlayStation 5 emulator for Windows and Linux. In version 0.0.3-release.3 and earlier, the repository-provided debugger frontend tooling is vulnerable while running. This tooling is not included in the release archives. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92704/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update WatchGuard AuthPoint Gateway to version 7.6.0 now to fix CVE-2026-121639, CVE-2026-121638, and two other critical authentication flaws.

#WatchGuard #AuthPoint #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/watchguard-authpoint-gateway-flaws-patched/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-65555 - Critical (9.8)

Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65555/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL: CVE-2026-121939 in David-Crty Databasement (<1.10.9) allows auth bypass via OIDC email spoofing. Attackers can impersonate users — even super-admins. Upgrade to 1.10.9+ ASAP. https://radar.offseq.com/threat/cve-2026-121939-authentication-bypass-by-spoofing-in-david-crty-databasement-40e4fb539c2e9726 #OffSeq #Vuln #OIDC #Infosec

35 Apache vulnerabilities fixed, including Apache ZooKeeper flaws CVE-2026-115448 and CVE-2026-100252, plus OpenOffice, ActiveMQ and Juneau bugs.

#Apache #ZooKeeper #OpenOffice #ActiveMQ #Juneau #CVE2026115448 #PatchNow #Vulnerability

https://securityonline.info/apache-vulnerabilities-zookeeper-openoffice-activemq/?utm_source=mastodon&utm_medium=jetpack_social

35 Apache vulnerabilities fixed, including Apache ZooKeeper flaws CVE-2026-115448 and CVE-2026-100252, plus OpenOffice, ActiveMQ and Juneau bugs.

#Apache #ZooKeeper #OpenOffice #ActiveMQ #Juneau #CVE2026115448 #PatchNow #Vulnerability

https://securityonline.info/apache-vulnerabilities-zookeeper-openoffice-activemq/?utm_source=mastodon&utm_medium=jetpack_social

ESET found DNS hijacking redirecting Sogou Input Method's insecure HTTP traffic, leading its own components to run DarkVigil malware. Tencent fixed CVE-2026-120422 in v16.10 on Oct 30. The interception point remains unknown. Inventory affected Windows endpoints and update.

https://www.welivesecurity.com/en/eset-research/slippynunchucks-hijacks-sogou-input-methods-brand-promotion-mechanism-to-distribute-malware/

#Cybersecurity #Infosec #EndpointSecurity #ThreatIntel

If your site runs WPForms, patch it now. CVE-2026-54851 is a broken access control flaw scoring 7.1 on the CVSS scale — high severity. A subscriber or customer account is all an attacker needs to exploit it. That includes anyone who submitted a contact or payment form.

#WordPress #WPForms #SecurityHardening #CVE #WordPressSecurity

https://wpguy.uk/blog/wpforms-broken-access-control-flaw-cve-2026-54851/

Patch ManageEngine Key Manager Plus, Log360, and PAM360 now to fix CVE-2026-77690, CVE-2026-13594, and nine other critical and high flaws.

#ManageEngine #Zoho #KeyManagerPlus #Cybersecurity #InfoSec

https://securityonline.info/manageengine-key-manager-plus-cve-2026-77690-patched/?utm_source=mastodon&utm_medium=jetpack_social

Patch ManageEngine Key Manager Plus, Log360, and PAM360 now to fix CVE-2026-77690, CVE-2026-13594, and nine other critical and high flaws.

#ManageEngine #Zoho #KeyManagerPlus #Cybersecurity #InfoSec

https://securityonline.info/manageengine-key-manager-plus-cve-2026-77690-patched/?utm_source=mastodon&utm_medium=jetpack_social

SourceHut disabled registration bypass | CVE-2026-121728 https://lobste.rs/s/x2hcss #security
https://blog.arusekk.pl/posts/srht-disabled-registration-bypass/

Karen IT Security Response Center (@ksrc) Advisory

Advisory ID: KSRC-2026-11051

A #high -severity #vulnerability has been identified in #WordPress Core that allows an unauthenticated remote attacker to achieve Remote Code Execution (#RCE ) during the core upgrade process. The vulnerability is tracked as CVE-2026-119977 and has been assigned a CVSS v3.1 score of 8.1 (High).

This issue is being actively exploited in the wild and was added to the CISA Known Exploited Vulnerabilities (KEV) catalog on 3 November 2026. Organizations and site owners running self-hosted WordPress installations are strongly advised to #update immediately.

https://ksrc.karenit.net/blog/security-alert/critical-remote-code-execution-during-wordpress-core-updates

#cve #cyberSecurity #staysafe #StayInformed #StayProtected

Updated.

Picus: CVE-2026-119977: When Updating WordPress Becomes the Vulnerability https://www.picussecurity.com/resource/blog/cve-2026-119977-when-updating-wordpress-becomes-the-vulnerability #infosec #WordPress #vulnerability #threatresearch

CISA Adds Actively Exploited WordPress Core Race Condition to KEV Catalog

CISA has warned of an actively exploited race condition in WordPress Core (CVE-2026-119977) that allows unauthenticated attackers to execute remote code during the software update window. Site owners must update to WordPress 7.1.4 or the latest patched version for their specific release branch to prevent server takeover.

**If you run WordPress, update to version 7.1.4 (or your version's latest security release) right away, and ask your host to block web access to the `wp-content/upgrade/` and `wp-content/upgrade-temp-backup/` folders. Then check your logs for requests to `wp-admin/setup-config.php`, and if you find any, have your site checked for a break-in.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-adds-actively-exploited-wordpress-core-race-condition-to-kev-catalog-o-8-l-e-g/gD2P6Ple2L

Ivanti Connect Secure needs a second patch. CVE-2026-111357/118527 (CISA KEV) chain to unauth root. If you installed the Oct 13 fix, patch again. CISA/Rapid7 name 25.1.1.3 or 22.8R2.6; confirm on Ivanti's advisory, then hunt for compromise.

Also: Linux Fragnesia (CVE-2026-46300), GitLab CVE-2026-97229 and WordPress CVE-2026-119977 (update to 7.1.4).

https://patchorpass.beehiiv.com/?utm_source=mastodon&utm_medium=social&utm_campaign=issue-3

#infosec #vpn #linux #homelab

CVE-2026-119977: WordPress Core RCE Flaw Exploited During Software Upgrades
#CVE_2026_119977 #WordPress
https://socprime.com/blog/cve-2026-119977-wordpress-core-rce-flaw-exploited-during-software-upgrades/

SonicWall's Nov 3 advisory covers two flaws in EOL GMS 9.5.2 and earlier: unauthenticated file read (CVE-2026-109593) and authenticated SQL injection (CVE-2026-109594). No patch is planned. Inventory legacy GMS, restrict management access and plan replacement. Exploitation isn't confirmed.

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019

#Cybersecurity #Infosec #SonicWall #MSP

SonicWall's Nov 3 advisory covers two flaws in EOL GMS 9.5.2 and earlier: unauthenticated file read (CVE-2026-109593) and authenticated SQL injection (CVE-2026-109594). No patch is planned. Inventory legacy GMS, restrict management access and plan replacement. Exploitation isn't confirmed.

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019

#Cybersecurity #Infosec #SonicWall #MSP

Rsync 3.5.2 megjelent — javítja a CVE-2026-119741 túlzott ellenőrzőösszeg-terhelését, jobb kezelés megszakadt --append/--inplace átvitelekhez, sparse/ismétlődő adatok illesztésén javít, új --nice és --delay-symlinks opciók, daemon verem- és hardlink-problémák javítva. Részletek: https://linuxmint.hu/hir/2026/11/megjelent-az-rsync-352-biztonsagi-res-javitva-megszakadt-atvitelek-tovabbfejlesztve
#Rsync #Linux #OpenSource #security #CVE-2026-119741

Update Control Web Panel to version 1.29 now to patch CVE-2026-73695, CVE-2026-73696, and eight other flaws allowing unauthenticated root RCE.

#ControlWebPanel #CWP #Linux #Cybersecurity #InfoSec

https://securityonline.info/control-web-panel-cve-2026-73695-root-rce/?utm_source=mastodon&utm_medium=jetpack_social

Update Control Web Panel to version 1.29 now to patch CVE-2026-73695, CVE-2026-73696, and eight other flaws allowing unauthenticated root RCE.

#ControlWebPanel #CWP #Linux #Cybersecurity #InfoSec

https://securityonline.info/control-web-panel-cve-2026-73695-root-rce/?utm_source=mastodon&utm_medium=jetpack_social

Patch ManageEngine Key Manager Plus, Log360, and PAM360 now to fix CVE-2026-77690, CVE-2026-13594, and nine other critical and high flaws.

#ManageEngine #Zoho #KeyManagerPlus #Cybersecurity #InfoSec

https://securityonline.info/manageengine-key-manager-plus-cve-2026-77690-patched/?utm_source=mastodon&utm_medium=jetpack_social

Patch ManageEngine Key Manager Plus, Log360, and PAM360 now to fix CVE-2026-77690, CVE-2026-13594, and nine other critical and high flaws.

#ManageEngine #Zoho #KeyManagerPlus #Cybersecurity #InfoSec

https://securityonline.info/manageengine-key-manager-plus-cve-2026-77690-patched/?utm_source=mastodon&utm_medium=jetpack_social

Canonical tarda setmanes en parchear CVE-2026-98432 (CVSS 9.8, use-after-free TCP IPv4 des del 2016) mentre Debian ja ho va fer el 16 d'octubre i SUSE des del 31. Un model de Claude d'Anthropic ja té un exploit de root remot operatiu, encara no public. Ubuntu 22.04/24.04/26.04 encara són vulnerables. El pedaç són dues línies de codi. 🔗 softzone.es/noticias/open-source/parche-cve-2026-98432-ubuntu-critico/

🚨🐛 SIGINT // Cybersecurity Watch — 2026-11-06
CVE-2026-98432 (CVSS 9.8) is a remote code execution flaw in the Linux kernel IPv4 TCP stack; Ubuntu fixes are only in -proposed, so patch and mitigate now.
https://gbhackers.com/ubuntu-releases-security-fixes-for-critical-linux-kernel-vulnerability/amp/
#CVE #Linux #Ubuntu #InfoSec

RT: @IntCyberDigest ‼️ Attackers are scanning the whole internet for Linux servers exposed to a critical 9.8 kernel flaw, Marcus Hutchins says.

They found 2.1M servers that accept it.

Ubuntu still has no patch.

The bug, CVE-2026-98432, is a race condition in the code that handles incoming IPv4 TCP connections. It can let a remote attacker run commands as root during the handshake.

Canonical tarda setmanes en parchear CVE-2026-98432 (CVSS 9.8, use-after-free TCP IPv4 des del 2016) mentre Debian ja ho va fer el 16 d'octubre i SUSE des del 31. Un model de Claude d'Anthropic ja té un exploit de root remot operatiu, encara no public. Ubuntu 22.04/24.04/26.04 encara són vulnerables. El pedaç són dues línies de codi. 🔗 softzone.es/noticias/open-source/parche-cve-2026-98432-ubuntu-critico/

What the fuck Ubuntu?!?!?
ubuntu.com/security/CVE...

STILL no patch for the kernel TCP 0-day!

🚨 Critical Citrix XenServer Flaw Allows Unauthenticated Attackers to Compromise Virtualization Hosts, CVE-2026-98432

Citrix has released emergency security updates for XenServer 8.4 and 9 after disclosing a critical vulnerability that could allow unauthenticated attackers with access to the management network to compromise virtualization hosts.

The vulnerability, tracked as CVE-2026-98432, also affects Workload Balancing and Conversion Manager appliances, raising concerns about attacks against infrastructure used to manage large numbers of virtual machines.

A second vulnerability, CVE-2026-102703, could allow a privileged attacker inside a guest virtual machine to compromise the underlying host, potentially breaking the security boundaries separating virtualized environments.

Citrix also addressed six additional vulnerabilities involving PXE boot and Secure Boot protections.

Security updates are now available for affected XenServer deployments and related management appliances. Administrators are urged to patch immediately and restrict management network access to trusted systems.

There are currently no confirmed reports of these vulnerabilities being exploited in the wild.

Source: https://support.citrix.com/external/article/CTX697256/xenserver-security-update-for-multiple-issues.html

A remote probe that demonstrates the presence of CVE-2026-98432 https://github.com/xen0bit/netprobe-cve-2026-98432

CW: technikai biztonsági frissítés
Az IPFire 2.29 Core Update 205 sürgős javítást tartalmaz a Linux TCP use-after-free sebezhetőségre (CVE-2026-98432). Frissít kernelre 6.18.60; telepítés után kötelező újraindítás. Csak a kernel csomag van benne — rendszergazdák ne halogassák.

https://linuxmint.hu/hir/2026/11/az-ipfire-229-core-update-205-sulyos-linux-tcp-sebezhetoseget-javit

#IPFire #Linux #CVE-2026-98432 #kernel #firewall #security

The server rebooted on November 4 at 19:08 CET and is running 5.14.0-687.64.1.el9_8.x86_64, the kernel with the CVE-2026-98432 fix. Systemd reports zero failed units.

Two services were missing or unavailable when checked:

• Minecraft fabric-lobby was absent from TCP 25574, where the inventory last saw it running. fabric is running on 25572. Both are managed manually.
• friday.... returned HTTP 503 through local Apache. Its configured backend ports, 5173 and 5174, had no listeners. I couldn’t establish whether it was down before the reboot.

Apache, MySQL, SSH, firewalld, Postfix, OpenDKIM, and the inventoried monitoring services were active. Grafana reported its database healthy, InfluxDB answered its health probe, and the expected filesystems were mounted.

Boot logs: mradmin failed three times during startup, with DNS resolution errors for discord.com, then connected successfully.

Systemd ignored an invalid restart policy in wiki.service and an unsupported ImportCredential directive in telegraf.service. Both services are running. The kernel also logged nft_compat deprecation and CPU mitigation warnings.

===

Das ist ein ausgezeichnetes Ergebnis. Der Reboot hat geklappt, das LLM hatte ungefragt ein Verzeichnis der Services angelegt (Im Ansible ist ein docs/ Verzeichnis und es macht sich fleißig Notizen), und das zur Verfikation nutzen können. Und ich habe ein paar Dinge, die ich nach Rückfrage mit dem Sohne aufräumen kann.

Ähnliche Ergebnisse bekomme ich mit den komplexeren Setups meiner eigenen Dedis auch.

Das LLM sagt mir also:

The server is still running a kernel affected by CVE-2026-98432. The fixed kernel is already installed, so the next step is a planned reboot.I verified over SSH that AlmaLinux 9.8 is running 5.14.0-687.29.1.el9_8.x86_64. The installed 5.14.0-687.64.1.el9_8.x86_64 package lists the CVE fix in its changelog.

MPTCP is disabled and the host showed no MPTCP listeners, so the specific exposure the post describes appears absent. The underlying flaw still affects standard IPv4 TCP, and the server has an IPv4 ssh listener.

Nach Absprache mit dem Sohn habe ich die Kiste also gestern abend gebootet und dann nachgefragt.

@GrapheneOS Hi, I updated and saw that my pixel 10 pro now has kernel 6.18.38. [CVE-2026-98432](https://nvd.nist.gov/vuln/detail/cve-2026-98432) mentions that only kernels > v6.18.56 are patched. Is the current kernel vulnerable? If so, anything we can to mitigate until a patch will arrive?

Kernel security reboots for CVE-2026-98432, a different flaw from last week's Fragnesia reboots: Friday, Nov 13, 10:00 AM–1:00 PM PST (18:00–21:00 UTC). Many OSL-hosted project sites and lists will each be down for a few minutes, once. Our FTP mirrors reboot one at a time, so ftp.osuosl.org stays up. Details: https://status.osuosl.org/pages/maintenance/526712bf10cd4e587b000014/6aeb9bf5b435fe0422769f92

Kernel security reboots for CVE-2026-98432, a different flaw from last week's Fragnesia reboots: Thursday, Nov 12, 11:00 AM–3:00 PM PST (19:00–23:00 UTC). Our GitLab CI runners reboot one per architecture at a time, so jobs may queue or need a retry, and git.osuosl.org and a few other OSL services are down a few minutes each. Details: https://status.osuosl.org/pages/maintenance/526712bf10cd4e587b000014/6aeb9bd7f7bb4b038d276f4d

I should know never to update the cluster computing class server mid-semester. However I felt like I shouldn't ignore CVE-2026-98432

so of course now I ran some updates and not only does the NVIDIA driver refuse to build but also slurm/MPI pmix support is broken. sigh

I guess I could just make them do the rest of the assignments on the raspberry pi-cluster instead

CVE-2026-98432 & Synology Linux Kernel Branch 3.10 [NOT AFFECTED / STRUCTURALLY IMMUNE !]

https://www.synoforum.com/threads/cve-2026-98432-synology-linux-kernel-branch-3-10-not-affected-structurally-immune.16480/

#synoforum #synology #NAS

@rl_dane

Well, the latest biggie was a kernel one, CVE-2026-98432. Debian fixed it within 24 hours, whereas Ubuntu still has it in it's 'proposed' branch. Seeing you have the 'stock' Debian kernel, you're good 😅
@r1w1s1

CVE-2026-98432 & Synology Linux Kernel Branch 3.10 NOT AFFECTED / STRUCTURALLY IMMUNE

https://www.synoforum.com/threads/cve-2026-98432-synology-linux-kernel-branch-3-10-not-affected-structurally-immune.16480/

#synoforum #synology #NAS

🚨 CRITICAL WORDPRESS SECURITY ALERT: ACF Extended PRO RCE (CVE-2026-120534)

Full technical breakdown, exploitation paths, detection queries, affected versions, and remediation steps: 🔗 https://thecybersecguru.com/news/acf-extended-pro-cve-2026-120534/

A WordPress plugin vulnerability with a CVSS score of 9.8 is putting websites at serious risk. ACF Extended PRO versions up to 0.9.2.6 contain an unauthenticated Remote Code Execution (RCE) vulnerability that could allow attackers to execute arbitrary PHP functions without logging in.

The attack exploits the plugin's Dynamic Render functionality and PHP's call_user_func_array() mechanism. Even more concerning, servers running PHP without the OpenSSL extension may expose an additional attack path through ACF's insecure encryption fallback. And the patch story gets worse: version 0.9.2.7 was not the finish line. It introduced incomplete authorization fixes that left further account takeover and RCE vulnerabilities.

ACF Extended PRO 0.9.2.8 or later is the minimum upgrade target. Update ACF PRO to 6.8.7 or later, verify that PHP OpenSSL is enabled, and audit publicly accessible forms, administrator accounts, and suspicious PHP files.

If you're running WordPress in production, don't assume that installing the first security patch means you're safe.

#WordPress #CyberSecurity #CVE2026120534 #RCE #RemoteCodeExecution #WordPressSecurity #ACFExtended #PatchManagement #VulnerabilityManagement #InfoSec #AppSec #PHP #WebSecurity

🚨 CRITICAL WORDPRESS SECURITY ALERT: ACF Extended PRO RCE (CVE-2026-120534)

A WordPress plugin vulnerability with a CVSS score of 9.8 is putting websites at serious risk. ACF Extended PRO versions up to 0.9.2.6 contain an unauthenticated Remote Code Execution (RCE) vulnerability that could allow attackers to execute arbitrary PHP functions without logging in.

The attack exploits the plugin's Dynamic Render functionality and PHP's call_user_func_array() mechanism. Even more concerning, servers running PHP without the OpenSSL extension may expose an additional attack path through ACF's insecure encryption fallback. And the patch story gets worse: version 0.9.2.7 was not the finish line. It introduced incomplete authorization fixes that left further account takeover and RCE vulnerabilities.

ACF Extended PRO 0.9.2.8 or later is the minimum upgrade target. Update ACF PRO to 6.8.7 or later, verify that PHP OpenSSL is enabled, and audit publicly accessible forms, administrator accounts, and suspicious PHP files.

If you're running WordPress in production, don't assume that installing the first security patch means you're safe.

Full technical breakdown, exploitation paths, detection queries, affected versions, and remediation steps:

🔗 https://thecybersecguru.com/news/acf-extended-pro-cve-2026-120534/

#WordPress #CyberSecurity #CVE2026120534 #RCE #RemoteCodeExecution #WordPressSecurity #ACFExtended #PatchManagement #VulnerabilityManagement #InfoSec #AppSec #PHP #WebSecurity

SANS Stormcast Friday, November 6th, 2026: RootEvidence Cisco IOS Opt-Out Scans; OpenSSH musl sshhole (CVE-2026-123158); Refrigeration OT Hardening; Zyxel GS1900 OOB Write (CVE-2026-107441)
https://isc.sans.edu/podcastdetail/10168

SANS Stormcast Friday, November 6th, 2026: RootEvidence Cisco IOS Opt-Out Scans; OpenSSH musl sshhole (CVE-2026-123158); Refrigeration OT Hardening; Zyxel GS1900 OOB Write (CVE-2026-107441)
https://isc.sans.edu/podcastdetail/10168

🚨 Hackers exploited Zyxel zero-day to compromise nearly 1,000 network switches across 48 countries

A previously unknown vulnerability in Zyxel GS1900 switches, tracked as CVE-2026-107441, allowed attackers to execute commands remotely without authentication.

The attacks were initially blamed on an older, patched vulnerability, but researchers discovered that hackers were exploiting a separate zero-day, leaving even previously updated devices vulnerable.

The campaign compromised approximately 996 switches across 48 countries, with attackers stealing device configurations and credentials while deploying malicious tools. Zyxel has since released security updates.

Source: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches-11-03-2026

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests. https://www.securityweek.com/zyxel-switch-hacks-blamed-on-patched-flaw-actually-exploited-a-zero-day/

Zyxel fixed CVE-2026-107441 on GS1900 switches. A LAN-side CGI flaw could allow unauthenticated OS command execution. Check the exact model and install its 2.90 firmware patch.

This is separate from CVE-2026-7273, exploited in September; no exploitation of 107441 is confirmed.

https://community.zyxel.com/en/discussion/34523/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches

#Cybersecurity #Infosec #NetworkSecurity

The vulnerability, tracked as CVE-2026-107441, is an out-of-bounds write flaw in the switches' web management interface that allows an unauthenticated attacker with network access to execute operating system commands using specially crafted HTTP requests. https://www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/

Binarly believes that Chinese threat actor Red Heron was exploiting a different Zyxel GS1900 vulnerability than CVE-2026-7273, and its patch remained ineffective. They assess that CVE-2026-107441, a pre-auth RCE vulnerability, was exploited in the wild as a zero-day.

https://www.binarly.io/blog/zyxel-gs1900-rce-cve-2026-107441

#china #redheron #cyberespionage #threatintel #eitw #zeroday #IOC

CW: sebezhetőség, PoC
CVE-2026-58882 — egy speciális WAP Push SMS PoC összeomlaszthatja a com.android.phone folyamatot; hívások (akár segélyhívás) megszakadhatnak, egyes eszközök reboot-loopba kerülnek. PoC nyilvános. Google javítás Android 14–17 okt. patchekben; Android 12–13 sok helyen nem kapott javítást. Ellenőrizd a biztonsági frissítés szintjét.
https://linuxmint.hu/hir/2026/11/egy-specialis-uzenet-tavolrol-is-megbenithatja-az-android-telefonokat
#Android #CVE #InfoSec #MobileSecurity

Broadcom has an upddate for a critical vulnerability first posted yesterday. You'll need a login for details.

Broadcom: CRITICAL: Endevor Bridge for Git 3.0.1 to 3.2.14 Advisory for Compromised eMudhra Intermediate CA Certificates https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Cisco:

New advisory addresses a high-severity vulnerability first posted on October 27.

Cisco: CVE-2026-105482, CVE-2026-105483, and CVE-2026-106069: Vulnerabilities in Node.js and Brotli Affecting Cisco Products https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-oct2026-node-js-Jj3SQ19u @TalosSecurity #Cisco #vulnerability #infosec

Barracuda ESG pre-auth remote root (CVE-2026-116606)

Barracuda Email Security Gateway(ESG)에서 인증 전 인가 우회 취약점 CVE-2026-116606이 발견됐다. 연구진에 따르면 이를 OS 명령 주입 취약점 CVE-2026-111560과 연계해 원격에서 루트 권한으로 명령을 실행할 수 있다. ESG 운영자는 두 취약점이 수정된 9.4.0.029 버전으로 업데이트해야 한다.

https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

#security #rce #barracuda #vulnerability #infrastructure

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

Barracuda has been out of the spotlight for a bit. watchTowr provides a technical analysis of two Email Security Gateway vulnerabilities (CVE-2026-116606 and CVE-2026-111560) that chained together would allow for pre-auth root RCE. Detection artefact generator (PoC) included.

https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

#barracuda #CVE #poc

Barracuda has been out of the spotlight for a bit. watchTowr provides a technical analysis of two Email Security Gateway vulnerabilities (CVE-2026-116606 and CVE-2026-111560) that chained together would allow for pre-auth root RCE. Detection artefact generator (PoC) included.

https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

#barracuda #CVE #poc

CW: sérülékenység részletek

Barracuda javított két kritikus hibát: CVE-2026-116606 (auth bypass az Email Security Gateway-en — BNSF-40425 9.4.017+ / BNSF-40430 régebbi verziók) és CVE-2026-111560 (parancsbefecskendezés több terméknél: ESG, ADC, Message Archiver, WAF, Web Security Gateway — javítócsomagok: BNADC-16586, BNMA-32468, BNWF-60060, BNYF-24789). Azonnali frissítés és admin felületek elkülönítése ajánlott. https://linuxmint.hu/hir/2026/11/kritikus-barracuda-hibakkal-root-jogosultsag-szerezheto

#CVE #Barracuda #InfoSec #Security

Barracuda warns two appliance flaws could be chained for root access. CVE-2026-116606 affects ESG authorization controls; CVE-2026-111560 allows command injection across several products. The vendor says admin-interface access is required and does not report confirmed exploitation.

Verify patches and restrict management access.

https://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection

#Cybersecurity #Infosec #PatchManagement #NetworkSecurity

Barracuda ESG pre-auth remote root (CVE-2026-116606)

Barracuda Email Security Gateway(ESG)에서 인증 전 인가 우회 취약점 CVE-2026-116606이 발견됐다. 연구진에 따르면 이를 OS 명령 주입 취약점 CVE-2026-111560과 연계해 원격에서 루트 권한으로 명령을 실행할 수 있다. ESG 운영자는 두 취약점이 수정된 9.4.0.029 버전으로 업데이트해야 한다.

https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

#security #rce #barracuda #vulnerability #infrastructure

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

Barracuda has been out of the spotlight for a bit. watchTowr provides a technical analysis of two Email Security Gateway vulnerabilities (CVE-2026-116606 and CVE-2026-111560) that chained together would allow for pre-auth root RCE. Detection artefact generator (PoC) included.

https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

#barracuda #CVE #poc

Barracuda has been out of the spotlight for a bit. watchTowr provides a technical analysis of two Email Security Gateway vulnerabilities (CVE-2026-116606 and CVE-2026-111560) that chained together would allow for pre-auth root RCE. Detection artefact generator (PoC) included.

https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

#barracuda #CVE #poc

CW: sérülékenység részletek

Barracuda javított két kritikus hibát: CVE-2026-116606 (auth bypass az Email Security Gateway-en — BNSF-40425 9.4.017+ / BNSF-40430 régebbi verziók) és CVE-2026-111560 (parancsbefecskendezés több terméknél: ESG, ADC, Message Archiver, WAF, Web Security Gateway — javítócsomagok: BNADC-16586, BNMA-32468, BNWF-60060, BNYF-24789). Azonnali frissítés és admin felületek elkülönítése ajánlott. https://linuxmint.hu/hir/2026/11/kritikus-barracuda-hibakkal-root-jogosultsag-szerezheto

#CVE #Barracuda #InfoSec #Security

Barracuda warns two appliance flaws could be chained for root access. CVE-2026-116606 affects ESG authorization controls; CVE-2026-111560 allows command injection across several products. The vendor says admin-interface access is required and does not report confirmed exploitation.

Verify patches and restrict management access.

https://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection

#Cybersecurity #Infosec #PatchManagement #NetworkSecurity

Ivanti Connect Secure needs a second patch. CVE-2026-111357/118527 (CISA KEV) chain to unauth root. If you installed the Oct 13 fix, patch again. CISA/Rapid7 name 25.1.1.3 or 22.8R2.6; confirm on Ivanti's advisory, then hunt for compromise.

Also: Linux Fragnesia (CVE-2026-46300), GitLab CVE-2026-97229 and WordPress CVE-2026-119977 (update to 7.1.4).

https://patchorpass.beehiiv.com/?utm_source=mastodon&utm_medium=social&utm_campaign=issue-3

#infosec #vpn #linux #homelab

Alpine Linux rebuilt its GitLab server after a close call

Alpine Linux의 GitLab 서버에서 CVSS 10.0의 원격 코드 실행 취약점 CVE-2026-97229를 악용하려는 공격이 탐지됐다. GitLab을 업데이트했지만 자체 이미지에 포함된 Ruby의 정규식 엔진은 패치되지 않아 서버가 여전히 취약했다. Alpine은 공격 성공 증거를 찾지 못했지만 로그 부족으로 침해를 배제할 수 없어 서버를 재구축하고 인증 정보 교체를 요구했다. 자체 GitLab 이미지 운영자는 애플리케이션뿐 아니라 Ruby 등 구성 요소에도 수정 사항이 적용됐는지 확인하고 CI/CD 비밀과 접근 권한을 점검해야 한다.

https://www.zdnet.com/tech/alpine-linux-rebuilt-gitlab-server-attack/

#gitlab #security #cicd #rce #supplychain

Ivanti Connect Secure needs a second patch. CVE-2026-111357/118527 (CISA KEV) chain to unauth root. If you installed the Oct 13 fix, patch again. CISA/Rapid7 name 25.1.1.3 or 22.8R2.6; confirm on Ivanti's advisory, then hunt for compromise.

Also: Linux Fragnesia (CVE-2026-46300), GitLab CVE-2026-97229 and WordPress CVE-2026-119977 (update to 7.1.4).

https://patchorpass.beehiiv.com/?utm_source=mastodon&utm_medium=social&utm_campaign=issue-3

#infosec #vpn #linux #homelab

References
------------------

CISA's Known Exploited Vulnerabilities catalog in section CVE-2026-46300 (Fragnesia) mentions the chained attack possibility: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

ENISA: https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107260, https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107265

Report by Italy's National Cybersecurity Authority stating 81.9% of systems running PHP services in the country are vulnerable to PHP2Shell: https://www.acn.gov.it/portale/w/php2shell-aggiornare-immediatamente-i-sistemi-vulnerabili

#CVE-2026-46300 #CVE-2026-109618 #CVE-2026-109619

Ivanti Connect Secure needs a second patch. CVE-2026-111357/118527 (CISA KEV) chain to unauth root. If you installed the Oct 13 fix, patch again. CISA/Rapid7 name 25.1.1.3 or 22.8R2.6; confirm on Ivanti's advisory, then hunt for compromise.

Also: Linux Fragnesia (CVE-2026-46300), GitLab CVE-2026-97229 and WordPress CVE-2026-119977 (update to 7.1.4).

https://patchorpass.beehiiv.com/?utm_source=mastodon&utm_medium=social&utm_campaign=issue-3

#infosec #vpn #linux #homelab

🚨 A Linux kernel vhost flaw can let a local attacker cross virtualization boundaries and escalate privileges; CVE-2026-74580

PoC: https://github.com/YounesHfa/CVE-2026-74580

The vulnerability stems from stale vring metadata caching in the kernel’s vhost subsystem.

Reconfiguring a vring while a device IOTLB is attached can lead to out-of-bounds memory access and host kernel memory corruption.

Details

CVSS: 8.8 High
Impact: Local privilege escalation / host kernel compromise
Affected: Multiple Linux kernel versions using vulnerable vhost implementations
Fixed: Vendor-specific patched kernel releases are available

The exploit repository demonstrates the issue against multiple RHEL 9 and RHEL 10 kernel builds and includes automated checks for vulnerable kernel versions and required vhost device permissions.

You Had Me at "Hello": A Chinese‑Language Framework Targeting AI Infrastructure

Era 연구진은 Flowise 허니팟을 대상으로 CVE-2024-58351을 악용하는 공격 프레임워크 ‘Greeter’를 관찰했다. 공격자는 prediction API의 overrideConfig에 악성 JavaScript를 주입해 저장된 채팅 기록에는 ‘hello’만 남기면서 명령 실행과 자격 증명 탐색을 시도했다. 연구진은 인터넷에 노출된 Flowise 인스턴스 중 46개가 동일한 취약 조건에 해당하는 것으로 추정했지만, 실제 침해 여부는 확인되지 않았다. 운영자는 Flowise를 업데이트하고 인증을 활성화하며, A...

https://era.security/blog/greeter-flowise-ai-infrastructure-attack

Broadcom has an upddate for a critical vulnerability first posted yesterday. You'll need a login for details.

Broadcom: CRITICAL: Endevor Bridge for Git 3.0.1 to 3.2.14 Advisory for Compromised eMudhra Intermediate CA Certificates https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Cisco:

New advisory addresses a high-severity vulnerability first posted on October 27.

Cisco: CVE-2026-105482, CVE-2026-105483, and CVE-2026-106069: Vulnerabilities in Node.js and Brotli Affecting Cisco Products https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-oct2026-node-js-Jj3SQ19u @TalosSecurity #Cisco #vulnerability #infosec

Broadcom has an upddate for a critical vulnerability first posted yesterday. You'll need a login for details.

Broadcom: CRITICAL: Endevor Bridge for Git 3.0.1 to 3.2.14 Advisory for Compromised eMudhra Intermediate CA Certificates https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Cisco:

New advisory addresses a high-severity vulnerability first posted on October 27.

Cisco: CVE-2026-105482, CVE-2026-105483, and CVE-2026-106069: Vulnerabilities in Node.js and Brotli Affecting Cisco Products https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-oct2026-node-js-Jj3SQ19u @TalosSecurity #Cisco #vulnerability #infosec

Oh come on Microsoft!

Seriously?

An RCE in MS Paint?

This is just taking the piss now surely!!!

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

#it #itsecurity #infosec

MS Paint Remote Code Execution Vulnerability
Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Comments: https://news.ycombinator.com/item?id=50384233

https://www.neowin.net/news/microsoft-paint-cve-2026-83844-lets-hackers-hack-windows-11-pcs-over-internet/ lmao fucking called it. Microsoft adds ai to ms paint, and now we have paint RCEs.

MS Paint Remote Code Execution Vulnerability
https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

Microsoft patched Windows Paint RCE vulnerability CVE-2026-83844 with an 8.1 CVSS score. Update now to block potential remote code execution attacks.

#Microsoft #WindowsPaint #CVE202683844 #Cybersecurity #InfoSec

https://securityonline.info/windows-paint-rce-cve-2026-83844-fixed/?utm_source=mastodon&utm_medium=jetpack_social

Windows 小畫家也有 RCE 呀 .....
https://www.cve.org/CVERecord?id=CVE-2026-83844

CVE-2026-83844: Windows Paint RCE Vulnerability https://www.sentinelone.com/vulnerability-database/cve-2026-83844/

*smugly* There's a "Remote code execution over the network, somehow" CVE for MSPaint. And I'm immune because I never upgraded to Windows 11

www.cve.org/CVERecord?id...

*smugly* I'm immune to the MSPaint RCE because I never upgraded to Windows 11

https://www.cve.org/CVERecord?id=CVE-2026-83844

MS Paint Remote Code Execution Vulnerability

Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

🤦🏾‍♂️Windows Paint has a Remote Code Execution #Vulnerability

how would paint have a network-based exploit?

https://www.cve.org/CVERecord?id=CVE-2026-83844

#cve #rce #security #infosec

Hilfe! Notfall alles kaputt!
https://www.cve.org/CVERecord?id=CVE-2026-83844

So, hey gang...lest we start to forget we live in the stupidest timeline; #MSPaint has an #RCE vulnerability at an 8.1 CVSS. A patch dropped in mid October, but there were typos in release numbering that caused a lot of confusion, so people may or may not have the patch.

In English: Microsoft Paint has a remote code execution vulnerability known as CVE-2026-83844, which allows attackers to execute unauthorized code over a network through specially crafted image files. The vulnerability has a severity score of 8.1 out of 10.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

hey how about a network-based rce in MS FUCKING PAINT?
https://www.cve.org/CVERecord?id=CVE-2026-83844

MS Paint Remote Code Execution Vulnerability

Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

Microsoft Paint has an RCE bug. https://www.cve.org/CVERecord?id=CVE-2026-83844

MS Paint Remote Code Execution Vulnerability
Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Comments: https://news.ycombinator.com/item?id=50384233

MS Paint Remote Code Execution Vulnerability

Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

WHY IS MS PAINT *CONNECTED TO THE INTERNET*

WHAT THE FUCK

https://www.cve.org/CVERecord?id=CVE-2026-83844

🚨 Critical Windows Paint vulnerability allows remote code execution without authentication, CVE-2026-83844

Microsoft has disclosed a high-severity vulnerability in Windows Paint that could allow unauthenticated attackers to execute malicious code remotely without user interaction.

Tracked as CVE-2026-83844, the flaw stems from an out-of-bounds read that could compromise the confidentiality, integrity, and availability of affected systems.

The vulnerability carries a CVSS score of 8.1 and affects Microsoft Paint versions earlier than 11.2605.91.0. Microsoft has released a security fix, and administrators are urged to ensure Paint is updated.

There are currently no confirmed reports of active exploitation.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

Telegram: https://t.me/SliceForLifeee

💥 Enterprise level intel, without the enterprise price tag. darkwebinformer.com/pricing

Why the heck does MS Paint have a network listener??

https://www.cve.org/CVERecord?id=CVE-2026-83844

#SysAdmin #cyberSecurity

MS Paint Remote Code Execution Vulnerability - https://www.cve.org/CVERecord?id=CVE-2026-83844

#hackernews

MS Paint Remote Code Execution Vulnerability

https://www.cve.org/CVERecord?id=CVE-2026-83844

Comments: https://news.ycombinator.com/item?id=50384233

#HackerNews

In 2026, we have CVEs for Microsoft Paint...

https://www.cve.org/CVERecord?id=CVE-2026-83844

:neobot_this_is_fine:

https://www.cve.org/CVERecord?id=CVE-2026-83844

Oh come on Microsoft!

Seriously?

An RCE in MS Paint?

This is just taking the piss now surely!!!

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

#it #itsecurity #infosec

MS Paint Remote Code Execution Vulnerability
Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Comments: https://news.ycombinator.com/item?id=50384233

https://www.neowin.net/news/microsoft-paint-cve-2026-83844-lets-hackers-hack-windows-11-pcs-over-internet/ lmao fucking called it. Microsoft adds ai to ms paint, and now we have paint RCEs.

MS Paint Remote Code Execution Vulnerability
https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

Microsoft patched Windows Paint RCE vulnerability CVE-2026-83844 with an 8.1 CVSS score. Update now to block potential remote code execution attacks.

#Microsoft #WindowsPaint #CVE202683844 #Cybersecurity #InfoSec

https://securityonline.info/windows-paint-rce-cve-2026-83844-fixed/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-83844: Windows Paint RCE Vulnerability https://www.sentinelone.com/vulnerability-database/cve-2026-83844/

*smugly* I'm immune to the MSPaint RCE because I never upgraded to Windows 11

https://www.cve.org/CVERecord?id=CVE-2026-83844

MS Paint Remote Code Execution Vulnerability

Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

Hilfe! Notfall alles kaputt!
https://www.cve.org/CVERecord?id=CVE-2026-83844

So, hey gang...lest we start to forget we live in the stupidest timeline; #MSPaint has an #RCE vulnerability at an 8.1 CVSS. A patch dropped in mid October, but there were typos in release numbering that caused a lot of confusion, so people may or may not have the patch.

In English: Microsoft Paint has a remote code execution vulnerability known as CVE-2026-83844, which allows attackers to execute unauthorized code over a network through specially crafted image files. The vulnerability has a severity score of 8.1 out of 10.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

hey how about a network-based rce in MS FUCKING PAINT?
https://www.cve.org/CVERecord?id=CVE-2026-83844

MS Paint Remote Code Execution Vulnerability

Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

Microsoft Paint has an RCE bug. https://www.cve.org/CVERecord?id=CVE-2026-83844

MS Paint Remote Code Execution Vulnerability
Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Comments: https://news.ycombinator.com/item?id=50384233

MS Paint Remote Code Execution Vulnerability

Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

WHY IS MS PAINT *CONNECTED TO THE INTERNET*

WHAT THE FUCK

https://www.cve.org/CVERecord?id=CVE-2026-83844

🚨 Critical Windows Paint vulnerability allows remote code execution without authentication, CVE-2026-83844

Microsoft has disclosed a high-severity vulnerability in Windows Paint that could allow unauthenticated attackers to execute malicious code remotely without user interaction.

Tracked as CVE-2026-83844, the flaw stems from an out-of-bounds read that could compromise the confidentiality, integrity, and availability of affected systems.

The vulnerability carries a CVSS score of 8.1 and affects Microsoft Paint versions earlier than 11.2605.91.0. Microsoft has released a security fix, and administrators are urged to ensure Paint is updated.

There are currently no confirmed reports of active exploitation.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

Telegram: https://t.me/SliceForLifeee

💥 Enterprise level intel, without the enterprise price tag. darkwebinformer.com/pricing

Why the heck does MS Paint have a network listener??

https://www.cve.org/CVERecord?id=CVE-2026-83844

#SysAdmin #cyberSecurity

MS Paint Remote Code Execution Vulnerability

https://www.cve.org/CVERecord?id=CVE-2026-83844

Comments: https://news.ycombinator.com/item?id=50384233

#HackerNews

In 2026, we have CVEs for Microsoft Paint...

https://www.cve.org/CVERecord?id=CVE-2026-83844

Wtf?

Remote Code Execution in fucking Paint?
Warum tut #Paint überhaupt was mit Netzwerk? 🫠

https://nvd.nist.gov/vuln/detail/cve-2026-83844

#cve #cve202683844 #microsoft #rce #cve_2026_83844

A remote code exec vulnerability in M$ #Paint(!) just got a rating of 8.1 … what a time to be alive
https://www.cve.org/CVERecord?id=CVE-2026-83844

lol, MSPAINT.EXE remote code execution

between that and php it’s like golden oldies around here lately https://www.cve.org/CVERecord?id=CVE-2026-83844

RE: https://infosec.exchange/@kajer/117560238580690048

PoC for CVE-2026-83844 just dropped 😱

CVE-2026-83844 is a High (8.1) vulnerability for Microsoft Paint.

Might have to make the logo in ascii

🏆 New Achievement! Supply Chain of Fools!

The court calls APT29 to the stand. Charges: infiltrating the Plerdy SEO Tracker supply chain, injecting JavaScript into compromised websites to fingerprint iOS and Android visitors, and exploiting CVE-2025-43529 and CVE-2024-27834 to steal browser cookies, Wi-Fi passwords, and full mobile device data. Sekoia researchers Garçon and Aime have entered the technical evidence. The defendant does not deny the watering hole campaign. It is large-scale. (1/2)

🏆 New Achievement! Supply Chain of Fools!

The court calls APT29 to the stand. Charges: infiltrating the Plerdy SEO Tracker supply chain, injecting JavaScript into compromised websites to fingerprint iOS and Android visitors, and exploiting CVE-2025-43529 and CVE-2024-27834 to steal browser cookies, Wi-Fi passwords, and full mobile device data. Sekoia researchers Garçon and Aime have entered the technical evidence. The defendant does not deny the watering hole campaign. It is large-scale. (1/2)

CVE-2026-93741: CVSS 10 buffer overflow in Totolink A3002MU formWlWds, exploitable remotely and public exploit out, still unpatched. Check your routers and isolate or replace affected units now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-93741/

Zyxel fixed CVE-2026-107441 on GS1900 switches. A LAN-side CGI flaw could allow unauthenticated OS command execution. Check the exact model and install its 2.90 firmware patch.

This is separate from CVE-2026-7273, exploited in September; no exploitation of 107441 is confirmed.

https://community.zyxel.com/en/discussion/34523/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches

#Cybersecurity #Infosec #NetworkSecurity

Binarly believes that Chinese threat actor Red Heron was exploiting a different Zyxel GS1900 vulnerability than CVE-2026-7273, and its patch remained ineffective. They assess that CVE-2026-107441, a pre-auth RCE vulnerability, was exploited in the wild as a zero-day.

https://www.binarly.io/blog/zyxel-gs1900-rce-cve-2026-107441

#china #redheron #cyberespionage #threatintel #eitw #zeroday #IOC