🔴 CVE-2026-93388 - Critical (9.8)

The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading to remote code execution in all versions up to, and including, 2.9.1 The nbdesigner_copy_image_from_url AJAX actio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93388/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17092 - High (8.1)

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1. This is due to the plugin not properly verifying that a user is au...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17092/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Attackers are actively exploiting CVE-2026-0322, a high-severity Palo Alto PAN-OS RCE vulnerability in the management interface. Apply patches right now.

#CVE20260322 #PaloAltoNetworks #PANOS #RCE #FirewallSecurity #Cybersecurity #InfoSec

https://securityonline.info/palo-alto-pan-os-rce-cve-2026-0322-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-0322 is an EITW post-auth RCE in PAN-OS management interface.

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.

The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines.

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

Very limited exploitation has been observed targeting the Palo Alto Networks management interface.

https://security.paloaltonetworks.com/CVE-2026-0322

Attackers are actively exploiting CVE-2026-0322, a high-severity Palo Alto PAN-OS RCE vulnerability in the management interface. Apply patches right now.

#CVE20260322 #PaloAltoNetworks #PANOS #RCE #FirewallSecurity #Cybersecurity #InfoSec

https://securityonline.info/palo-alto-pan-os-rce-cve-2026-0322-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-0322 is an EITW post-auth RCE in PAN-OS management interface.

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.

The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines.

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

Very limited exploitation has been observed targeting the Palo Alto Networks management interface.

https://security.paloaltonetworks.com/CVE-2026-0322

CVE-2026-110165 — CRITICAL use-after-free in Chrome Core for Android <155.0.8059.79. Allows remote code execution outside sandbox via crafted HTML. Patch ASAP: update to 155.0.8059.79+. Details: https://radar.offseq.com/threat/cve-2026-110165-use-after-free-in-google-chrome-a8d190779682275f #OffSeq #Chrome #Android #Infosec

Cisco Secure Email Gateway zero-day CVE-2026-76519 patched

https://fawkes.rocks/2026/10/14/cisco-secure-email-gateway-zero-day-cve-2026-76519-patched/

Cisco Disrupts Zero-Day Attacks on Secure Email Gateway

Cisco is taking swift action to stop zero-day attacks on its Secure Email Gateway, recently discovering a vulnerability that allowed hackers to write arbitrary files and execute commands with root privileges. This critical flaw, tracked as CVE-2026-76519, was triggered by a simple malicious email attachment, making swift patching a top…

https://osintsights.com/cisco-disrupts-zero-day-attacks-on-secure-email-gateway?utm_source=mastodon&utm_medium=social

#ZeroDay #SecureEmailGateway #Cisco #Cve202676519 #AdvancedMalwareProtection

Cisco Secure Email Gateway zero-day CVE-2026-76519 patched

https://fawkes.rocks/2026/10/14/cisco-secure-email-gateway-zero-day-cve-2026-76519-patched/

🔴 CVE-2026-74041 - Critical (9.1)

Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users with manager:update_config can inject an uppercase LOG_FORMAT comm...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-74041/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch four IBM WebSphere Liberty vulnerabilities, including critical 9.1-rated CVE-2026-93895 and CVE-2026-93909 authentication and access bypass flaws.

#IBM #WebSphereLiberty #CVE202693895 #CVE202693909 #Cybersecurity #InfoSec #EnterpriseSecurity

https://securityonline.info/critical-ibm-websphere-liberty-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-105902 - High (7.5)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denia...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105902/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-95634 - High (8.6)

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95634/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.

#NGINX #F5Networks #CVE202697205 #CVE202693479 #CVE202615176 #Cybersecurity #InfoSec

https://securityonline.info/f5-patches-three-critical-nginx-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.

#NGINX #F5Networks #CVE202697205 #CVE202693479 #CVE202615176 #Cybersecurity #InfoSec

https://securityonline.info/f5-patches-three-critical-nginx-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.

#NGINX #F5Networks #CVE202697205 #CVE202693479 #CVE202615176 #Cybersecurity #InfoSec

https://securityonline.info/f5-patches-three-critical-nginx-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.

#NGINX #F5Networks #CVE202697205 #CVE202693479 #CVE202615176 #Cybersecurity #InfoSec

https://securityonline.info/f5-patches-three-critical-nginx-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.

#NGINX #F5Networks #CVE202697205 #CVE202693479 #CVE202615176 #Cybersecurity #InfoSec

https://securityonline.info/f5-patches-three-critical-nginx-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.

#NGINX #F5Networks #CVE202697205 #CVE202693479 #CVE202615176 #Cybersecurity #InfoSec

https://securityonline.info/f5-patches-three-critical-nginx-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

New.

Rapid7: CVE-2026-108065: Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce https://www.rapid7.com/blog/post/ve-unauthenticated-sql-injection-in-channel-software-weballiance-ecommerce/ @Rapid7Official #infosec #SQL #vulnerability

TR7 ASP (TR7 Cyber Defense Inc.) is vulnerable to unauthenticated OS command injection (CVE-2026-16740, CVSS 9.8, CRITICAL). Remote attackers can fully compromise affected versions. Restrict access & monitor for abuse. https://radar.offseq.com/threat/cve-2026-16740-cwe-306-missing-authentication-for-critical-function-in-tr7-cyber-defense-inc-tr7-asp-604c8853c8296eb5 #OffSeq #Vuln #TR7 #CVE202616740

CVE-2026-14851 (CRITICAL, CVSS 9.2): Copart billing service leaks PII & financial data via unauthenticated PDF invoice endpoints. Some URLs are indexed by search engines. Restrict access & block public indexing now. https://radar.offseq.com/threat/cve-2026-14851-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-copart-coparts-ef462fbc1a47157a #OffSeq #CVE #infosec #databreach

🟠 CVE-2026-110284 - High (7.5)

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlms_checkout] shortcode. This is...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110284/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-104800: CRITICAL RCE flaw in streetforce1 AGE-GATE WordPress plugin (≤1.0). Unauthenticated attackers can run arbitrary code via unsafe admin.php endpoint. Remove or restrict plugin use ASAP. https://radar.offseq.com/threat/cve-2026-104800-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-streetforce1-age-gate-02cdeee893e722b9 #OffSeq #WordPress #Vuln #RCE

🟠 CVE-2026-92883 - High (8.7)

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92883/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 PoC published for a critical GitLab CI/CD remote code execution vulnerability; CVE-2026-97229

PoC: https://github.com/jburgess-r7/CVE-2026-97229-PoC

The flaw is caused by an integer overflow in GitLab's regular expression compiler. A crafted CI/CD configuration combined with a specially formed repository path can corrupt Onigmo regex bytecode and ultimately execute operating system commands as the GitLab git user.

CVSS: 10.0 Critical
Affected: GitLab 19.2 < 19.2.8, 19.3 < 19.3.5, and 19.4 < 19.4.2
Fixed: GitLab 19.2.8, 19.3.5, and 19.4.2

The PoC was validated against GitLab CE 19.4.1 on Linux amd64 and demonstrates command execution through the public CI lint endpoint after the required malicious project setup.

GitLab corrige une faille critique qui permet d’exécuter du code sans authentification (CVE-2026-97229) https://www.it-connect.fr/gitlab-cve-2026-97229-faille-critique-regex-ci-cd/ #ActuCybersécurité #Cybersécurité

🚨 PoC published for a critical GitLab CI/CD remote code execution vulnerability; CVE-2026-97229

PoC: https://github.com/jburgess-r7/CVE-2026-97229-PoC

The flaw is caused by an integer overflow in GitLab's regular expression compiler. A crafted CI/CD configuration combined with a specially formed repository path can corrupt Onigmo regex bytecode and ultimately execute operating system commands as the GitLab git user.

CVSS: 10.0 Critical
Affected: GitLab 19.2 < 19.2.8, 19.3 < 19.3.5, and 19.4 < 19.4.2
Fixed: GitLab 19.2.8, 19.3.5, and 19.4.2

The PoC was validated against GitLab CE 19.4.1 on Linux amd64 and demonstrates command execution through the public CI lint endpoint after the required malicious project setup.

GitLab corrige une faille critique qui permet d’exécuter du code sans authentification (CVE-2026-97229) https://www.it-connect.fr/gitlab-cve-2026-97229-faille-critique-regex-ci-cd/ #ActuCybersécurité #Cybersécurité

GitLab CI lint integer-overflow RCE PoC https://github.com/jburgess-r7/CVE-2026-97229-PoC

Technical details and PoC exploit code for CVE-2026-97229, a CVSS 10.0 GitLab RCE vulnerability exposing 25,766 hosts, are now public. Patch to 19.4.2 now.

#CVE202697229 #GitLab #RCE #DevSecOps #Cybersecurity #InfoSec #Vulnerability

https://securityonline.info/gitlab-rce-cve-2026-97229-poc-disclosed/?utm_source=mastodon&utm_medium=jetpack_social

Vorfall-Lagebild: GitLab: kritische Lücke CVE-2026-97229

Erstmeldung zu „GitLab: kritische Lücke CVE-2026-97229“: was bekannt ist, was offen ist und was wahrscheinlich passiert ist.

#OTSecurity #ICS #KRITIS #NIS2 #Cybersicherheit
https://ot-cyber.de/blog/vorfall-lagebild-gitlab-kritische-luecke-cve-2026-97229.html

A GitLab critical vulnerability, CVE-2026-97229, allows unauthenticated code execution. Update to 19.2.8, 19.3.5, or 19.4.2 now.

#GitLab #CVE202697229 #RCE #CICD #DevSecOps #Vulnerability #PatchNow #GitLabDuo

https://meterpreter.org/gitlab-critical-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

🚨 Rapid Response: Critical GitLab CI/CD Remote Code Execution (CVE-2026-97229)
A critical vulnerability (CVSS 10.0) in GitLab Community Edition and Enterprise Edition could allow an unauthenticated attacker to execute arbitrary code on the GitLab server.

Censys currently detects 25,766 hosts and 79,224 web properties with a version of GitLab affected by this vulnerability. This is 31% and 39% of all GitLab hosts and web properties, respectively. These figures reflect detected software versions, not confirmed exploitable instances.

GitLab has released patches for affected versions. Organizations running self-managed GitLab should prioritize updating.

Full Censys ARC advisory, including affected versions, exposure data, and remediation guidance: https://censys.com/advisory/cve-2026-97229/

#CensysARC #GitLab #Cybersecurity #VulnerabilityManagement #InfoSec

CW: Biztonsági hír

GitLab CI/CD-ben távoli kódfuttatást lehetővé tevő, maximális súlyosságú hibát javítottak (CVE-2026-97229). Érintett: CE/EE 19.2–19.4. Javítás: 19.2.8, 19.3.4, 19.4.2. GitLab.com már frissítve; self‑managed rendszerek azonnali frissítése és a CI-regexek átvizsgálása ajánlott. https://linuxmint.hu/hir/2026/10/maximalis-sulyossagu-hibat-javitott-a-gitlab

#GitLab #CVE #Infosec #DevOps #CI

CVE-2026-97229: Critical GitLab RCE Flaw Enables Unauthenticated Code Execution
#GitLab #CVE_2026_97229
https://socprime.com/blog/cve-2026-97229-critical-gitlab-rce-vulnerability/

GitLab Issues Emergency Patch for Maximum-Severity Code Execution Vulnerability

GitLab released emergency security updates to fix a maximum-severity vulnerability (CVE-2026-97229) that allows unauthenticated remote code execution on self-managed servers.

**If you run your own GitLab server, update it ASAP to version 19.4.2, 19.3.5 or 19.2.8. GitLab.com cloud users are already patched. After patching, change all passwords, API keys and other secrets stored in GitLab, and check the logs for anything unusual. If you can't patch immediately, lock down who can edit CI/CD pipeline.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/gitlab-issues-emergency-patch-for-maximum-severity-code-execution-vulnerability-i-y-t-9-y/gD2P6Ple2L

GitLab patched CVE-2026-97229, a CVSS 10.0 unauthenticated RCE in CI/CD. It enables full server takeover without credentials, exposing code, secrets and pipelines. Patch immediately and hunt for prior exploitation. #GitLab #VulnerabilityManagement #SupplyChainSecurity

https://cyberworldops.eu/en/gitlab-fixes-cvss-100-cicd-flaw-enabling-unauthenticated-server-code

🔴 CVE-2026-97229 - Critical (10)

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the G...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97229/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SANS Stormcast Tuesday, October 13th, 2026: GitLab CI/CD RCE (CVE-2026-97229); Let’s Encrypt 64-Day Certificates; Midnight Mimosa Pre-Installed Android Malware; Progress MarkLogic Patches
https://isc.sans.edu/podcastdetail/10134

En savoir plus sur cette mise à jour 👉 https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/

En savoir plus sur la CVE-2026-97229 notée CVSS 10.0 👉 https://gitlab-com.gitlab.io/gl-security/product-security/appsec/cvss-calculator/explain#explain=CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Tak @joaxcar 👉 https://hackerone.com/joaxcar

Toutes les instances GitLab de nos clients sont à jour version 19.4.2

Cette mise à jour critique vient corriger 24 vulnérabilités de sécurité, dont une faille critique notée CVSS 10.0 (CVE-2026-97229)

Donc, we keep Calm and on met à jour (rapidement) !

En savoir plus sur notre offre, contactez nous 👇
https://bearstech.com/contact

🏆 New Achievement! The Court Finds Your Regex Compiler GUILTY!

This tribunal hereby reads the charges: GitLab's CI/CD Regular Expression Compiler, CVE-2026-97229, stands convicted of integer overflow weakness in the first degree. (1/3)

🚨 PoC published for a critical unauthenticated Splunk Enterprise remote code execution vulnerability; CVE-2026-76268

PoC: https://github.com/murrez/CVE-2026-76268

The flaw affects the Patroni REST API used by the PostgreSQL sidecar on Splunk Enterprise search head cluster members. Critical configuration operations can be accessed without authentication, allowing an attacker with network access to the Patroni service to modify PostgreSQL configuration and execute operating system commands.

CVSS: 9.8 Critical
Affected: Splunk Enterprise 10.2.0 - 10.2.6 and 10.4.0 - 10.4.2
Fixed: Splunk Enterprise 10.2.7 and 10.4.3

The PoC includes vulnerability checking, Patroni port discovery, multi-target scanning, out-of-band verification, and an exploit mode demonstrating the RCE chain.

🚨 PoC published for a critical unauthenticated Splunk Enterprise remote code execution vulnerability; CVE-2026-76268

PoC: https://github.com/murrez/CVE-2026-76268

The flaw affects the Patroni REST API used by the PostgreSQL sidecar on Splunk Enterprise search head cluster members. Critical configuration operations can be accessed without authentication, allowing an attacker with network access to the Patroni service to modify PostgreSQL configuration and execute operating system commands.

CVSS: 9.8 Critical
Affected: Splunk Enterprise 10.2.0 - 10.2.6 and 10.4.0 - 10.4.2
Fixed: Splunk Enterprise 10.2.7 and 10.4.3

The PoC includes vulnerability checking, Patroni port discovery, multi-target scanning, out-of-band verification, and an exploit mode demonstrating the RCE chain.

🔴 CVE-2026-85955 - Critical (9.9)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which could res...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85955/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Attackers are exploiting CVE-2026-103671 in the wild, an EC-CUBE AmazonPay Plugin vulnerability that redirects shoppers to steal account credentials.

#CVE2026103671 #ECCUBE #AmazonPay #EcommerceSecurity #JPCERT #Cybersecurity #InfoSec

https://securityonline.info/ec-cube-amazonpay-plugin-cve-2026-103671-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Attackers are exploiting CVE-2026-103671 in the wild, an EC-CUBE AmazonPay Plugin vulnerability that redirects shoppers to steal account credentials.

#CVE2026103671 #ECCUBE #AmazonPay #EcommerceSecurity #JPCERT #Cybersecurity #InfoSec

https://securityonline.info/ec-cube-amazonpay-plugin-cve-2026-103671-exploited/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-109901 - High (8.5)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109901/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104909 - High (8.1)

The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '_type (e.g. foo_type)' parameter parameter. This makes it possible for unauthenticated attackers to include and execute ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104909/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-104748: CRITICAL privilege escalation in SimpleForm WordPress plugin (<=3.10.0). Unauth users can gain admin via exposed AJAX and weak nonce. Disable/limit access until patched. Full details: https://radar.offseq.com/threat/cve-2026-104748-cwe-269-improper-privilege-management-in-wpazleen-simpleform-form-maker-to-chat-apps-e30303ee252058a1 #OffSeq #WordPress #PrivilegeEscalation #CVE2026104748

CVE-2026-89310: CRITICAL SQL injection in JTL-WMS (<2.0.7, <2.1.3, <2.2.1) 🛑 Remote code execution possible via unsanitized request body. No patch yet. Implement input validation & monitor vendor info: https://radar.offseq.com/threat/cve-2026-89310-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-4dc7d194ff0633df #OffSeq #SQLInjection #Vuln #Infosec

"No way to prevent this" say users of only language where this regularly happens

https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/

"No way to prevent this" say u...

"No way to prevent this" say users of only language where this regularly happens

https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/?utm_campaign=mi_irl&utm_medium=social&utm_source=mastodon

"No way to prevent this" say users of only language where this regularly happens

https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/

"No way to prevent this" say u...

"No way to prevent this" say users of only language where this regularly happens

https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/?utm_campaign=mi_irl&utm_medium=social&utm_source=mastodon

A UAF turned RCE

In the #curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free.

https://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/

Vghost: Beyond the Privilege Boundary
#CVE_2026_74580
https://matrix.tencent.com/en/2026/10/12/vghost-cve-2026-74580

Vghost (CVE-2026-74580): Linux kernel vhost stale IOTLB cache leading to universal LPE and Guest-to-Host escape vector https://www.openwall.com/lists/oss-security/2026/10/14/2

Technical details and PoC exploit code for CVE-2026-74580 (Vghost), an 8.8-severity Linux vhost vulnerability allowing root LPE and VM escape, are out.

#CVE202674580 #Vghost #LinuxKernel #PrivilegeEscalation #VMEscape #Cybersecurity #InfoSec

https://securityonline.info/vghost-cve-2026-74580-linux-vhost-poc-disclosed/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-87855: CRITICAL RCE in ntbyk JTL-Connector for WooCommerce (<=2.4.3). Unauthenticated file upload due to weak auth & validation. Restrict/disable plugin while awaiting patch. https://radar.offseq.com/threat/cve-2026-87855-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ntbyk-jtl-connector-for-8335c9f626fb9c36 #OffSeq #WordPress #Security #CVE202687855

🟠 CVE-2026-93907 - High (8.1)

IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93907/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104749 - High (7.5)

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execution in all versions up to, and including, 2.10.6 The vulnerability exists bec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104749/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-92097 - Critical (9.1)

The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialog() function building the {url} template placeholder from a sanitize_text_f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92097/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Attackers are actively exploiting CVE-2026-110447 (CVSS 9.2), a critical Nextcloud Collabora Online RCE flaw in richdocumentscode, to deploy PHP webshells.

#CVE2026110447 #Nextcloud #CollaboraOnline #RCE #Webshell #Cybersecurity #InfoSec #354

https://securityonline.info/nextcloud-collabora-online-cve-2026-110447-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-110447 (CRITICAL, CVSS 9.2) allows RCE via OS command injection in Collabora Online Built-in CODE Server <26.4.303 (richdocumentscode, Nextcloud). Exploited in the wild since Sept 2026. Patch required. https://radar.offseq.com/threat/cve-2026-110447-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-f68ba52513af6028 #OffSeq #Infosec #Nextcloud #CVE2026110447

🔴 CVE-2026-110392 - Critical (9.8)

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110392/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82715 - High (7.9)

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.

This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82715/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-95633 - High (7.5)

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorize...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95633/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-94453 - High (7.5)

Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicious) is received for the same tuple. IKE state is retained in memory after the cl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-94453/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77206 - High (7.5)

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77206/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77207 - High (7.5)

Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS#7 blob with SEC_PKCS7ContainsCertsOrCrls() ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77207/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-106627 - High (7.5)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denia...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-106627/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-95632 - High (7.5)

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorize...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95632/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97830 - High (7.5)

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97830/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 PoC published for a Windows privilege escalation vulnerability involving the Windows Health and Optimized Experiences service; CVE-2026-85884

PoC: https://github.com/Beardhammer/CVE-2026-85884

The issue allows low-privileged code with access to the Windows diagnostics workflow to trigger a trusted ETW event containing an attacker-controlled Lua module path. The LocalSystem whesvc service can then execute that module through WinDiag without properly validating the producer or restricting the module location.

Affected: Windows 11 x64 builds including 26200.8457 and 29617.1000
Impact: Local privilege escalation to SYSTEM

The PoC demonstrates the full chain from a standard non-administrator PowerShell session to execution as NT AUTHORITY\SYSTEM.

🚨 PoC published for a Windows privilege escalation vulnerability involving the Windows Health and Optimized Experiences service; CVE-2026-85884

PoC: https://github.com/Beardhammer/CVE-2026-85884

The issue allows low-privileged code with access to the Windows diagnostics workflow to trigger a trusted ETW event containing an attacker-controlled Lua module path. The LocalSystem whesvc service can then execute that module through WinDiag without properly validating the producer or restricting the module location.

Affected: Windows 11 x64 builds including 26200.8457 and 29617.1000
Impact: Local privilege escalation to SYSTEM

The PoC demonstrates the full chain from a standard non-administrator PowerShell session to execution as NT AUTHORITY\SYSTEM.

🔴 CVE-2026-97381 - Critical (9.9)

Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97381/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch four IBM WebSphere Liberty vulnerabilities, including critical 9.1-rated CVE-2026-93895 and CVE-2026-93909 authentication and access bypass flaws.

#IBM #WebSphereLiberty #CVE202693895 #CVE202693909 #Cybersecurity #InfoSec #EnterpriseSecurity

https://securityonline.info/critical-ibm-websphere-liberty-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

Patch CVE-2026-110005 (CVSS 9.9), a critical Komodo Periphery vulnerability allowing authenticated users to run arbitrary OS commands as root on the host.

#Komodo #CVE2026110005 #DockerSecurity #CommandInjection #CERTCC #Cybersecurity #LinuxSecurity

https://securityonline.info/komodo-periphery-command-injection-cve-2026-110005/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-97816 - Critical (9.8)

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97816/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CW: sebezhetőség(ek) — Microsoft októberi Patch Tuesday: 1 413 javítás, ebből 1 102 Windows-hoz. Aktívan kihasznált: CVE-2026-96951 (Windows Shell, CVSS 8.8) — bekerült a CISA KEV listájára, szövetségi határidő: 2026-10-16. Figyelem még: CVE-2026-108398 (.NET, WDAC kerülés). Részletek: https://linuxmint.hu/hir/2026/10/rekordot-dontott-a-microsoft-1-413-sebezhetoseget-foltoztak-koztuk-egy-aktivan
#Windows #CVE #infosec #cybersecurity

⚠️ CRITICAL: Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

Microsoft patched 1,411 vulnerabilities in October 2026, including three zero-days: CVE-2026-96951 (Windows Shell, actively exploited) and CVE-2026-108398 (.NET Framework, publicly disclosed). CVE-2026-108398 allows attackers to bypass Windows Defender Application Control and execute unauthorized a…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

⚠️ CRITICAL: Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

Microsoft released patches for 1,413 vulnerabilities in October 2026, including CVE-2026-96951, a critical Windows zero-day that bypasses Mark of the Web security controls. This flaw is actively exploited in the wild and tracked by CISA. Windows systems are the primary target across 1,102 of the pa…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

Microsoft Patches 1,411 Vulnerabilities in October 2026 Update Including Actively Exploited Zero-Day

Microsoft's October 2026 Patch Tuesday fixed a record 1,411 vulnerabilities, including 70 critical ones (mostly remote code execution) and three zero-days. The actively exploited zero-day is CVE-2026-96951, a Windows Shell Mark of the Web bypass. A .NET Framework WDAC bypass and a MessagePack-CSharp denial-of-service flaw were publicly disclosed. This month is the final security update for Windows 11 24H2 Home/Pro and Windows 10 Enterprise LTSB 2016.

**Patch the Windows OS first because it has an actively exploited flaw. Next, update .NET Framework on endpoints and servers that depend on Windows Defender Application Control. If you are developing ASP.NET apps, prioritize rebuilding and redeploying anything that ships MessagePack-CSharp, including ASP.NET Core SignalR apps, on version 2.5.303 or 3.1.9. Then work through the 70 critical flaws, starting with the 57 remote code execution bugs on internet-facing and domain-joined systems. Use the Microsoft's new risk cohorts to batch related fixes. Finally, check your fleet for support status: Windows 11 24H2 Home and Pro and Windows 10 Enterprise LTSB 2016 received their last update this month, Windows 11 23H2 Enterprise and Education get their final one on November 10, and Windows Server 2012 and 2012 R2 need manual remediation for the AD FS hardening tied to CVE-2026-56155.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/microsoft-s-record-october-patch-tuesday-fixes-1400-flaws-including-zero-day-under-z-s-e-q-y/gD2P6Ple2L

🚨 NEW on CISA KEV — exploited in the wild

🛡 Microsoft Windows
Microsoft Windows Command Injection Vulnerability
CVE: CVE-2026-96951 · patch by 2026-10-16

Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

🔗 https://ninjasignal.ninja/intel/cve/CVE-2026-96951
#cybersecurity #KEV #CVE #infosec

Placeholder CISA blog post about Ivanti Connect Secure zero-day CVE-2026-104935 and Microsoft Windows Shell Security Feature Bypass zero-day CVE-2026-96951

https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-adds-two-known-exploited-vulnerabilities-catalog

#CISA #KEV #eitw #zeroday #PatchTuesday

CVE ID: CVE-2026-96951
Vendor: Microsoft
Product: Windows
Date Added: 2026-10-13
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-96951

Microsoft Patch Tuesday with an exploited zero-day: CVE-2026-96951 (8.8 high) Windows Shell Security Feature Bypass Vulnerability
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96951

Looks like 1408 CVEs for Patch Tuesday.

#microsoft #zeroday #CVE #PatchTuesday #eitw

two of my findings are in today's Microsoft Patch Tuesday.

CVE-2026-88156, Outlook RCE, 9.8 critical. stack-based buffer overflow, no click needed: previewing the mail in the reading pane is enough.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88156

CVE-2026-70343, MPEG-2 Video Extension RCE, 8.8. heap-based buffer overflow, the user has to open a crafted file.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70343

#InfoSec #PatchTuesday #CVE #Outlook #microsoft #vulnerability #cybersecurity #security

two of my findings are in today's Microsoft Patch Tuesday.

CVE-2026-88156, Outlook RCE, 9.8 critical. stack-based buffer overflow, no click needed: previewing the mail in the reading pane is enough.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88156

CVE-2026-70343, MPEG-2 Video Extension RCE, 8.8. heap-based buffer overflow, the user has to open a crafted file.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70343

#InfoSec #PatchTuesday #CVE #Outlook #microsoft #vulnerability #cybersecurity #security

CW: sebezhetőség(ek) — Microsoft októberi Patch Tuesday: 1 413 javítás, ebből 1 102 Windows-hoz. Aktívan kihasznált: CVE-2026-96951 (Windows Shell, CVSS 8.8) — bekerült a CISA KEV listájára, szövetségi határidő: 2026-10-16. Figyelem még: CVE-2026-108398 (.NET, WDAC kerülés). Részletek: https://linuxmint.hu/hir/2026/10/rekordot-dontott-a-microsoft-1-413-sebezhetoseget-foltoztak-koztuk-egy-aktivan
#Windows #CVE #infosec #cybersecurity

⚠️ CRITICAL: Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

Microsoft patched 1,411 vulnerabilities in October 2026, including three zero-days: CVE-2026-96951 (Windows Shell, actively exploited) and CVE-2026-108398 (.NET Framework, publicly disclosed). CVE-2026-108398 allows attackers to bypass Windows Defender Application Control and execute unauthorized a…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

Adobe releases October 2026 patches for multiple products

Adobe's October 2026 security updates fix critical, high and medium vulnerabilities across eleven product families. The most severe (several rated CVSS 10.0) in ColdFusion, Adobe Commerce/Magento and Experience Manager. Adobe reports no known exploits in the wild but urges urgent updating. Commerce/Magento customers must also apply the separate September 7 hotfix for CVE-2026-75650.

**If you run Adobe products, review the advisory. Prioritize ColdFusion, Adobe Commerce or Magento Open Source, or Adobe Experience Manager, update them first. Each received fixes for critical flaws with a CVSS score of 10.0. In Commerce, CVE-2026-103849 is the same weakness type as last month's actively exploited CVE-2026-75650, so also confirm that the September hotfix for CVE-2026-75650 is installed, since Adobe requires it in addition to this update. Update the Content Credentials SDK components (Rust SDK, C2PA Tool, and JS SDK), which contain network-reachable flaws that could lead to security feature bypass and application denial-of-service. Then update Photoshop, FrameMaker, Dimension, Substance 3D Stager, Substance 3D Designer, Substance 3D Sampler, and Bridge. If you can't update right away, restrict network access to ColdFusion, Commerce, and Experience Manager servers, and avoid opening untrusted files in Photoshop, FrameMaker, Dimension, Substance 3D Stager, Substance 3D Designer, Substance 3D Sampler, and Bridge until patches are applied.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/adobe-releases-october-2026-patches-for-multiple-products-n-n-r-1-8/gD2P6Ple2L

PoC and technical details for CVE-2026-103572, an 8.8-severity Visual Studio Copilot RCE and SSMS flaw, are now public. Patch your IDE immediately.

#CVE2026103572 #VisualStudio #Copilot #RCE #MicrosoftSecurity #SSMS #Cybersecurity

https://securityonline.info/cve-2026-103572-visual-studio-copilot-rce-disclosed/?utm_source=mastodon&utm_medium=jetpack_social

An unpatched Shopware vulnerability, CVE-2026-104937, lets stored XSS steal admin tokens and lead to RCE in Shopware 6.7. Restrict media uploads now.

#Shopware #CVE2026104937 #StoredXSS #Ecommerce #CERTCC #RCE #Unpatched #CyberSecurity

https://securityonline.info/shopware-vulnerability-cve-2026-104937/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-82416 - High (7.7)

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVE_PHP_SESSION at compile...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82416/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59977 - High (8.1)

ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the /delete/{id} endpoint uses HTTP GET for permanent deletion without CSRF protection. If an authenticated user visits attacker-controlled content that requests /delete/{id}, the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59977/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️Alerte CERT-FR⚠️

La vulnérabilité CVE-2026-CVE-2026-104935 permet à un attaquant non authentifié l'exécution de code arbitraire à distance dans Ivanti Connect Secure. Elle est activement exploitée.
https://cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-013/

CISA has issued an urgent directive for organizations to update Ivanti Connect Secure appliances addressing CVE-2026-104935, an authentication bypass with a CVSS score of 8.6 affecting versions 25.1.1.1, 25.1.2.2, 22.8R2.4 and prior.

The flaw enables remote unauthenticated attackers to execute arbitrary commands and is actively exploited in the wild for credential theft and data exfiltration, prompting mandatory federal patching dea…

https://en.hacks.gr/amesi-enimerosi-zita-i-cisa-gia-systimata-ivanti-logo-epitheseon/

#Ivanti #CISA #Vulnerability #Patch

⚠️Alerte CERT-FR⚠️

La vulnérabilité CVE-2026-CVE-2026-104935 permet à un attaquant non authentifié l'exécution de code arbitraire à distance dans Ivanti Connect Secure. Elle est activement exploitée.
https://cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-013/

(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2026-104935 – Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

CVE-2026-104935 calls for version-specific review of Ivanti Connect Secure deployments. This technical brief covers vulnerability impact, remediation decisions, and investigation priorities while clearly identifying the limits of unvalidated detection content....

https://thecybermind.co/kjcm

Ivanti Connect Secure Zero-Day Chain Exploited for Root Access

Ivanti patched a zero-day chain (CVE-2026-104935) in its Connect Secure VPN that allowed attackers to gain root access and steal Active Directory credentials.

**If you use Ivanti Connect Secure VPN, this is urgent. Update right away to a fixed version (25.1.1.2, 25.1.3.0, 25.1.3.1 or 22.8R2.5) and run Ivanti's Integrity Checker Tool. Don't rely on a clean result alone, because the attackers hide in memory and erase their tracks. If your VPN was exposed, assume your network is compromised: get a full forensic review, and reset every domain, admin and LAPS password and BitLocker recovery key that could have passed through it.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/ivanti-connect-secure-zero-day-chain-exploited-for-root-access-l-a-l-7-8/gD2P6Ple2L

Discover how a critical Ivanti Connect Secure vulnerability (CVE-2026-104935) is chained in zero-day attacks to gain root access and steal network secrets.

#Ivanti #ConnectSecure #Cybersecurity #ZeroDay #InfoSec

https://securityexpress.info/ivanti-connect-secure-vulnerability-cve-2026-104935/?utm_source=mastodon&utm_medium=jetpack_social

CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthenticated execution of arbitrary commands, to conduct credential theft and data exfiltration. CISA added CVE-2026-104935 to its Known Exploited Vulnerabilities (KEV) Catalog on Oct. 13, 2026.

https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure

#CISA #KEV #Ivanti #zeroday

Placeholder CISA blog post about Ivanti Connect Secure zero-day CVE-2026-104935 and Microsoft Windows Shell Security Feature Bypass zero-day CVE-2026-96951

https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-adds-two-known-exploited-vulnerabilities-catalog

#CISA #KEV #eitw #zeroday #PatchTuesday

Ivanti disclosed a zero-day chain in Connect Secure (CVE-2026-104935) allowing unauthenticated root access. The flaw affects internet-facing VPN appliances widely used for remote access, making mass exploitation likely. Prioritize patching and compromise hunting over basic remediation. #Ivanti #ConnectSecure #ZeroDay

https://cyberworldops.eu/en/ivanti-connect-secure-zero-day-chain-gives-attackers-unauthenticated

New.

CISA has added the latest Ivanti flaw to the catalogue.

- CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-104935 #infosec #vulnerability #CISA #Ivanti

🚨 [CISA-2026:1013] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1013)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-104935 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-104935)
- Name: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ivanti
- Product: Connect Secure
- Notes: https:/forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935 ; https://nvd.nist.gov/vuln/detail/CVE-2026-104935

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261013 #cisa20261013 #cve_2026_104935 #cve2026104935

New Ivanti zero-day

https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US

UTA0576 chained an Ivanti Connect Secure zero-day, CVE-2026-104935, with a root exploit to steal AD credentials. Patch now and check memory.

#Ivanti #ZeroDay #CVE2026104935 #UTA0576 #Volexity #VPN #ActiveDirectory #Cybersecurity

https://securityonline.info/ivanti-connect-secure-zero-day-cve-2026-104935/?utm_source=mastodon&utm_medium=jetpack_social

An Ivanti 0-day auth bypass is being exploited in the wild with significant post-exploitation activity.

https://ifin.network/t/cve-2026-104935-ivanti-connect-secure-auth-bypass-exploited-for-privilege-escalation-code-execution/900

#ThreatIntel #ThreatIntelligence #IFIN

Volexity has identified active in-the-wild exploitation of a vulnerability chain allowing unauthenticated remote code execution in Ivanti Connect Secure VPN devices. Ivanti has published an advisory (CVE-2026-104935) providing upgrade instructions to customers. Systems exhibiting signs of compromise, such as attempts to move laterally originating from the ICS VPN device, should be forensically investigated to ensure no breach has occurred.

https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/

#ivanti #volexity #ivanticonnectsecure #zeroday #kev #eitw #cve

@GossiTheDog CVE-2026-104935 is now live in CISA's KEV Catalog. https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2026-104935+&field_date_added_wrapper=all&field_cve=&sort_by=field_date_added&items_per_page=20&url=

CVE ID: CVE-2026-104935
Vendor: Ivanti
Product: Connect Secure
Date Added: 2026-10-13
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-104935

Ivanti Connect Secure vulnerability CVE-2026-104935 is exploited in the wild, letting unauthenticated attackers run commands. Update to 25.1.1.2 now.

#Ivanti #ConnectSecure #CVE2026104935 #ExploitedInTheWild #VPNSecurity #ZeroDay #PatchNow #CyberSecurity

https://securityonline.info/ivanti-connect-secure-cve-2026-104935-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Ivanti Secure Connect has an in the wild zero day allowed unauth RCE, patch is out

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US

CVE-2026-104935

related to the above

Ivanti Connect Secure zero-day CVE-2026-104935 (8.6 high)
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands.

We are aware of exploitation in the wild affecting a limited number of customers at the time of disclosure.

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US

#ivanti #ics #zeroday #eitw #cve

🔴 CVE-2026-92892 - Critical (9)

Potential arbitrary code execution, under specific configurations.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92892/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Fortinet has several new advisories today, one of them relates to a critical vulnerability.

Fortinet: CRITICAL: CVE-2026-106173: improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets https://app.opencve.io/cve/CVE-2026-106173 #Fortinet #infosec #vulnerability

@cR0w Not a perfect 10, but you've been quieter recently, so I thought I'd gift you this.

Fortinet has several new advisories today, one of them relates to a critical vulnerability.

Fortinet: CRITICAL: CVE-2026-106173: improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets https://app.opencve.io/cve/CVE-2026-106173 #Fortinet #infosec #vulnerability

@cR0w Not a perfect 10, but you've been quieter recently, so I thought I'd gift you this.

Fortinet has around 11 advisories. Stand outs are

• CVE-2026-106173 (9.4 critical) path traversal in FortiSIEM leads to RCE
• CVE-2026-107656 (9.6 critical) authentication bypass in FortiSandbox GUI

No exploitation mentioned.

https://fortiguard.fortinet.com/psirt/FG-IR-26-180
https://fortiguard.fortinet.com/psirt/FG-IR-26-185

#fortinet #CVE #PatchTuesday

Docker Hub Fixes Critical Token Flaw Enabling User Impersonation

Docker Hub resolved a critical vulnerability (CVE-2026-105445) that allowed attackers to impersonate users and tamper with container images by exploiting a flaw in the account conversion process.

**Check your email for a notification from Docker to see if your account was part of the affected group. Even if you were not notified, rotate your personal access tokens regularly and limit their permissions to only what is necessary.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/docker-hub-fixes-critical-token-flaw-enabling-user-impersonation-1-2-w-t-a/gD2P6Ple2L

Read the latest Docker Hub security advisory regarding CVE-2026-105445. Learn how this critical access token vulnerability impacts supply chain security.

#DockerHub #SecurityAdvisory #CVE2026105445 #CyberSecurity #SupplyChain

https://securityonline.info/docker-hub-security-advisory-cve-2026-105445/?utm_source=mastodon&utm_medium=jetpack_social

"Docker Hub flaw let attackers impersonate users, tamper with images"

"[...] Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT)."

https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/

#Docker

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT). https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/

Docker Hub flaw let attackers impersonate users, tamper with images

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using...

🔗️ [Bleepingcomputer] https://link.is.it/OuRC7Q

Docker fixed critical CVE-2026-105445 in Docker Hub. A holder of a personal access token could impersonate another user at registry level, accessing private repositories and tampering with images. This matters because trusted images become a supply-chain attack vector. #DockerHub #SupplyChainSecurity #ContainerSecurity

https://cyberworldops.eu/en/docker-hub-fixes-cve-2026-105445-blocking-token-based-user

Don't use Docker.

https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/

Hypervisor escape patches for XenServer 8.4 and XenServer 9

CVE-2026-79610
CVE-2026-102700
CVE-2026-102701

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697170&articleTitle=XenServer_Security_Update_for_CVE_2026_79610_CVE_2026_79610_CVE_2026_102700_and_CVE_2026_102701

Hypervisor escape patches for XenServer 8.4 and XenServer 9

CVE-2026-79610
CVE-2026-102700
CVE-2026-102701

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697170&articleTitle=XenServer_Security_Update_for_CVE_2026_79610_CVE_2026_79610_CVE_2026_102700_and_CVE_2026_102701

🟠 CVE-2026-85965 - High (8)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85965/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93892 - High (8.1)

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93892/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-90912 - High (7.5)

IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90912/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-96263 - High (8.2)

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the ser...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96263/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-96265 - High (8.2)

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96265/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65198 - High (8.6)

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-95680 - High (8)

IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95680/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

NVIDIA AIStore vulnerabilities, including a CVSS 10.0 flaw enabling remote code execution, lead 18 fixes across NVIDIA AI tools. Upgrade to AIStore 5.0.

#NVIDIA #AIStore #CVE202665162 #CVE202665173 #CVE202665172 #AISecurity #MegatronLM #CyberSecurity

https://securityonline.info/nvidia-aistore-vulnerabilities-cve-2026-65162/?utm_source=mastodon&utm_medium=jetpack_social

NVIDIA AIStore (Linux) hit by CRITICAL vuln (CVE-2026-65173): missing auth on token-revocation endpoint lets attackers submit forged revocation lists, risking data tampering & DoS. Patch pending. https://radar.offseq.com/threat/cve-2026-65173-cwe-306-missing-authentication-for-critical-function-in-nvidia-aistore-framework-4286dd8ee28d3ef2 #OffSeq #NVIDIA #Infosec

🟠 CVE-2026-101020 - High (7.8)

An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-101020/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-109687 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109687/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

If your WooCommerce store runs any version from 9.8.0 to 11.1.x, it is currently exposed to CVE-2026-106608, a CVSS 7.2 vulnerability that allows unauthenticated remote access to your store data and admin functions. I recommend updating to 11.2.0 immediately.

#WordPress #WooCommerce #CVE #SecurityHardening #WordPressSecurity

https://wpguy.uk/blog/woocommerce-cve-2026-106608-update-to-1120-now/

🔒 New CSAF advisory published

VDE-2026-109
Bender Customer&Partner Platform Vulnerability - Privilege Escalation
CVE-2026-94410

Bender is publishing this advisory to inform customers about a security vulnerability in the Customer&Partner platform.
The issue allows any account to view the roles of other users.
Bender has analyzed the…

HTML: https://certvde.com/en/advisories/VDE-2026-109/
CSAF JSON: https://bender.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-109.json

#OT #Advisory

Siemens SIMATIC Drive Controller CPU 1504D TF affected by CRITICAL XSS (CVE-2026-63354, CVSS 9.6). Malicious CSV imports can trigger attacker JS, risking PLC ops in user’s context. Restrict file imports, review user rights. https://radar.offseq.com/threat/cve-2026-63354-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-ee3b56b4a64e8aeb #OffSeq #ICS #XSS #CVE202663354

CVE-2026-109157: CRITICAL stack-based buffer overflow in TRENDnet TEW-432BRP (v3.10B20). Remote exploit possible via public code — no patch, device EOL. Mitigate by replacing hardware and isolating mgmt interfaces. https://radar.offseq.com/threat/cve-2026-109157-stack-based-buffer-overflow-in-trendnet-tew-432brp-2512bc1f1dee2f64 #OffSeq #Vulnerability #RouterSecurity

🟠 CVE-2026-13138 - High (8.6)

Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State.

This issue affects Biletiva Ticketing Platform: through 2026-07-23.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-13138/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-108179 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through 1.1.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-108179/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-109110 - Critical (10)

A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has bee...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109110/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-109110: CRITICAL OS command injection in Wavlink WL-WN592AX6 (v250422). Remote attackers can execute OS commands — exploit published. No patch. Restrict access & monitor activity. https://radar.offseq.com/threat/cve-2026-109110-os-command-injection-in-wavlink-wl-wn592ax6-254609e635513843 #OffSeq #CVE2026109110 #IoTSecurity #Vuln

🔴 CVE-2026-109109 - Critical (10)

A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COOKIE/X-C...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109109/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-108971 (CRITICAL, CVSS 9.4) in D-Link DCS-930L: improper cryptographic signature verification in Emergency HTTP Recovery Server allows remote, unauthenticated firmware install. Exploit is public. Restrict access & monitor activity. https://radar.offseq.com/threat/cve-2026-108971-improper-verification-of-cryptographic-signature-in-d-link-dcs-930l-53e980de3cb5343b #OffSeq #DLink #IoT #Vuln

🔴 CVE-2026-108971 - Critical (9.6)

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verif...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-108971/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-109758: CRITICAL prototype pollution in Perforce Helix Authentication Service (2022.1-2025.2). Default SCIM token enables attacker access, user/group manipulation, and RCE risk. Upgrade to 2026.1. https://radar.offseq.com/threat/cve-2026-109758-cwe-1321-improperly-controlled-modification-of-object-prototype-attributes-prototype-78bc5506a3b6cf63 #OffSeq #CVE2026109758 #infosec #vuln

If you missed this Friday post:

WatchTower: Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) https://labs.watchtowr.com/death-by-a-thousand-papercuts-papercut-pre-auth-rce-chain-and-patch-bypasses-wt-2026-0141-0144-cve-2026-82077-cve-2026-82078-cve-2026-81578/ #infosec #vulnerability

🟠 CVE-2026-35001 - High (7.8)

OpenS100 through commit daa35b contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser that allows remote attackers to cause a heap-based buffer overflow by opening a crafted S-102 HDF5 file with malicious grid dimension...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35001/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SAP Patches Critical CVSS 10.0 Flaw in Cloud SDK for Python

SAP’s October 2026 security patch delivers 22 notes, including four critical flaws led by CVE-2026-89111.

🔗️ [Thecyberexpress] https://link.is.it/SGH13d

CRITICAL SSRF (CVE-2026-89111) in SAP Cloud SDK for Python: attackers can redirect OAuth2 token requests via tenant_subdomain, exposing client credentials. No patch yet. Restrict input, monitor traffic. https://radar.offseq.com/threat/cve-2026-89111-cwe-918-server-side-request-forgery-in-sapse-sap-cloud-b5baed1f14ad0244 #OffSeq #SAP #SSRF #Vulnerability

Hey blue teams, get active.

https://nvd.nist.gov/vuln/detail/cve-2026-87689

sev:CRIT 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_credential (PUT) and delete_credentials (DELETE) handlers for /api/v1/credentials, which omit the authentication call entirely. Because these handlers call directly into lib/msf/core/db_manager/cred.rb, which performs no authorization check of its own, any client able to reach the web service on its default 0.0.0.0:8080 listener can read, modify, or permanently delete every stored credential record — including passwords, hashes, and private keys stored for a shared team engagement — without presenting any authentication. All published versions of Metasploit Framework through 6.5.4 are affected. The issue is fixed in 6.5.5 by adding warden.authenticate! as the first statement in both handlers, matching the pattern used by every other route in the API.

🔴 CVE-2026-87689 - Critical (9.8)

The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the updat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87689/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-87689 | CRITICAL in Metasploit Framework <=6.5.4: Missing auth on REST API lets unauthenticated users fully access and modify credentials. Upgrade to 6.5.5 or restrict msf-ws access. https://radar.offseq.com/threat/cve-2026-87689-cwe-306-missing-authentication-for-critical-function-in-rapid7-metasploit-framework-3c7c8850454d4a0f #OffSeq #Metasploit #CVE202687689 #infosec

CRITICAL CVE-2026-89110 in SAP NetWeaver Visual Composer: Low-priv users can exploit insufficient auth checks to fully compromise remote systems. No patch yet — restrict access & monitor activity. Details: https://radar.offseq.com/threat/cve-2026-89110-cwe-749-exposed-dangerous-method-or-function-in-sapse-sap-netweaver-visual-composer-f4b6d144b645c4b3 #OffSeq #SAP #Vuln #CVEs

🔴 CVE-2026-89107 - Critical (9.9)

SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privileges coul...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89107/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-89113 - High (8.8)

SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted requests to affected functionality to inject arbitrary SQL commands. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89113/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

IBM i 7.3 – 7.6 HTTP Server Admin is vulnerable (CVE-2026-96119, CRITICAL, CVSS 9.9). Remote authenticated code execution possible via code injection. Patch urgently. https://radar.offseq.com/threat/cve-2026-96119-cwe-94-improper-control-of-generation-of-code-code-injection-f55b8a017b9f656e #OffSeq #IBM #CVE202696119 #infosec

🟠 CVE-2026-93891 - High (7.6)

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93891/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-85457 - High (8.1)

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85457/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-90920 - Critical (9.8)

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90920/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-90911 - High (7.5)

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90911/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-96266 - High (8.2)

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause me...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96266/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-96262 - High (8.2)

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overf...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96262/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-96264 - High (8.2)

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overf...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96264/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18166 - High (7.7)

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAP...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18166/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-87744 - Critical (9.1)

A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls on generated endpoints. When a developer customizes a specific operation using @MethodProperties without explicitly re-d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87744/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-85966 - High (7.7)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict access to certain security-sensitive information. A remote authenticated attacker with limited management permissions could obtain t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-85975 - High (7.5)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept data or credentials transmitted through an affect...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85975/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-85956 - Critical (9.6)

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85956/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 Rapid Response: Critical AnyDesk Linux Vulnerability (CVE-2026-109390)

A critical pre-authentication vulnerability in AnyDesk for Linux could allow an unauthenticated attacker to execute code as root without user interaction. A working proof-of-concept exploit is now publicly available.

Censys currently detects 175,838 Internet-exposed AnyDesk hosts on TCP port 7070. This figure represents total AnyDesk exposure on the default direct-connection port, not just vulnerable hosts.

Full Censys ARC advisory, including affected versions, exposure data, and remediation guidance: https://censys.com/advisory/cve-2026-109390/

#CensysARC #AnyDesk #Cybersecurity #VulnerabilityManagement

Well, there's one down. [redacted] more to go.

https://www.cve.org/CVERecord?id=CVE-2026-92877

Discover the details of the critical Citrix NetScaler SAML vulnerability (CVE-2026-107406) allowing remote code execution, and how to patch affected systems.

#Citrix #NetScaler #CyberSecurity #Vulnerability #InfoSec

https://meterpreter.org/citrix-netscaler-cve-2026-107406-saml/?utm_source=mastodon&utm_medium=jetpack_social

Citrix issues urgent patches for a critical CVE-2026-107406 vulnerability in NetScaler ADC and Gateway. Learn how to update your appliances now.

#Citrix #NetScaler #CyberSecurity #Vulnerability #SAML #SecurityPatch

https://dailytechnow.com/citrix-netscaler-cve-2026-107406/

CISA Urges Immediate Patching of Exploited Citrix NetScaler Vulnerabilities

Citrix and CISA urged immediate patching of NetScaler ADC and Gateway after discovering a severe memory overflow (CVE-2026-107406) and several actively exploited zero-days. Attackers are using these flaws to install web shells and gain persistent access to corporate networks.

**If you run Citrix NetScaler ADC or NetScaler Gateway, update to the latest fixed version immediately. If you can't patch right away, take the appliances offline until you can. After patching, check for signs of compromise like unknown PHP files (web shells) or unexpected reboots. Attackers have been exploiting these flaws since August and a patch won't remove anything they've already installed.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-urges-immediate-patching-of-exploited-citrix-netscaler-vulnerabilities-8-p-5-h-3/gD2P6Ple2L

A critical Bricksforge WordPress plugin vulnerability (CVE-2026-85097) is being actively exploited to upload PHP files. Update to version 3.1.8.10 immediately.

#WordPress #CyberSecurity #Bricksforge #Vulnerability #Malware

https://meterpreter.org/bricksforge-wordpress-plugin-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

Attackers Exploit Maximum-Severity Bricksforge Flaw to Seize WordPress Sites

Bricksforge and several other WordPress plugins are actively exploited. The most critical is a CVE-2026-85097, a perfect CVSS 10.0 RCE flaw in Bricksforge.

**If you use the Bricksforge plugin on your WordPress site, you are under attack. Update ASAP to the latest version (4.0.1, or at least 3.1.8.10). Also update Ninja Forms and WPC Product Bundles if you have them. If your site ran an older version, assume it may be compromised: check for unexpected PHP files in your uploads folders (especially ones named login_admin_*.php) and for unknown administrator accounts, and restore from a clean backup if you find anything suspicious.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/attackers-exploit-maximum-severity-bricksforge-flaw-to-seize-wordpress-sites-b-p-v-k-i/gD2P6Ple2L

🏆 New Achievement! Upload Boss Has Awoken!

HEALTH BAR FULL. PHASE ONE ACTIVE. The Bricksforge WordPress plugin — CVE-2026-85097, CVSS 9.8 — has materialized on the battlefield, and it is not here to negotiate. Unauthenticated arbitrary file upload. Full site takeover. No login required. The dungeon respects no credentials you don't have. (1/2)

🏆 New Achievement! Patched Too Late, Exploited Right On Schedule!

Your quest, brave sysadmin, is simple: patch CVE-2026-102255 in your SonicWall SMA1000 appliances. Thrilling! Heroic! Also, threat actors already started exploiting it days after public disclosure, so the village is somewhat on fire while we speak. (1/3)

SonicWall SMA 1000 Appliances Face Active Exploitation of Critical SSRF Flaw

SonicWall SMA 1000 appliances are under active attack following the publication of a critical SSRF vulnerability (CVE-2026-102255). The flaw is exploited to access internal networks and steal MFA seeds.

**Apply the SonicWall hotfixes immediately because attackers are already using these flaws to bypass your perimeter and steal internal credentials. Do not wait for a formal CISA notice to secure your edge gateways.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/sonicwall-sma-1000-appliances-face-active-exploitation-of-critical-ssrf-flaw-6-q-7-h-q/gD2P6Ple2L

Attackers are exploiting SonicWall SMA 1000 vulnerability, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after its public disclosure.
#CVE_2026_102255
https://securityaffairs.com/200816/hacking/sonicwall-patches-cvss-10-0-ssrf-flaw-as-attacks-begin.html

AhsayCBS Deep-Dive: Auth Bypass to RCE https://horizon3.ai/attack-research/attack-blogs/ahsaycbs-cve-2026-105133-cve-2026-105134-technical-analysis/

AhsayCBS Deep-Dive: Auth Bypass to RCE https://horizon3.ai/attack-research/attack-blogs/ahsaycbs-cve-2026-105133-cve-2026-105134-technical-analysis/

AhsayCBS Deep-Dive: Auth Bypass to RCE https://horizon3.ai/attack-research/attack-blogs/ahsaycbs-cve-2026-105133-cve-2026-105134-technical-analysis/

AhsayCBS Deep-Dive: Auth Bypass to RCE https://horizon3.ai/attack-research/attack-blogs/ahsaycbs-cve-2026-105133-cve-2026-105134-technical-analysis/

🟠 CVE-2026-65954 - High (8.6)

PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until 1.2.3, PHPCSUtils\AbstractSniffs\AbstractArrayDeclarationSniff::getActualArrayKey() evaluates attacker-controlled array-key expressions with eval(), a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65954/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New.

Picus: CVE-2026-88771: Citrix NetScaler Pre-Auth Command Injection Explained https://www.picussecurity.com/resource/blog/cve-2026-88771-citrix-netscaler-pre-auth-command-injection-explained #infosec #vulnerability #Citrix #NetScaler #threatresearch

CVE-2026-94412 jshERP 3.6 auth bypass in /user/resetPwd lets any authenticated user reset any account password, including admin. CVSS 8.8, unpatched. Restrict endpoint access now. https://www.valtersit.com/cve/CVE-2026-94412/ #CVE #infosec #cybersecurity

CVE-2026-82355 Apache Airflow 3.3.0/3.3.1 auth precedence flaw, CVSS 4.2. Bearer tokens ignored, requests run as cookie principal. Patch now. https://www.valtersit.com/cve/CVE-2026-82355/ #CVE #ApacheAirflow #infosec

⚠️ CRITICAL: Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft

Two critical vulnerabilities in LiteLLM (CVE-2026-35029, CVE-2026-59823) allow unauthenticated or low-privilege attackers to execute arbitrary code, steal API keys, and take over admin accounts. Any organization running LiteLLM as an AI gateway is at immediate risk of credential compromise and late…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

“A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files.”

https://www.bleepingcomputer.com/news/security/ghostscript-flaw-lets-hackers-hijack-servers-via-pdf-uploads/

Ghostscript <10.08.0 is affected by CRITICAL CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows code execution via crafted PDFs. Patch to 10.08.0+. https://radar.offseq.com/threat/cve-2026-39919-heap-based-buffer-overflow-in-artifex-software-ghostscript-343c7db1b580e876 #OffSeq #Vuln #Ghostscript #Security

Ghostscript flaw lets hackers hijack servers via PDF uploads

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code...

🔗️ [Bleepingcomputer] https://link.is.it/xeqebp

A critical Ghostscript vulnerability, CVE-2026-39919 (CVSS 9.8), allows remote code execution via crafted PDFs. Update Ghostscript to 10.08.0 now.

#Ghostscript #CVE202639919 #RemoteCodeExecution #WordPress #Wordfence #Linux #PatchNow #CyberSecurity

https://securityonline.info/ghostscript-vulnerability-cve-2026-39919/?utm_source=mastodon&utm_medium=jetpack_social

Adobe releases October 2026 patches for multiple products

Adobe's October 2026 security updates fix critical, high and medium vulnerabilities across eleven product families. The most severe (several rated CVSS 10.0) in ColdFusion, Adobe Commerce/Magento and Experience Manager. Adobe reports no known exploits in the wild but urges urgent updating. Commerce/Magento customers must also apply the separate September 7 hotfix for CVE-2026-75650.

**If you run Adobe products, review the advisory. Prioritize ColdFusion, Adobe Commerce or Magento Open Source, or Adobe Experience Manager, update them first. Each received fixes for critical flaws with a CVSS score of 10.0. In Commerce, CVE-2026-103849 is the same weakness type as last month's actively exploited CVE-2026-75650, so also confirm that the September hotfix for CVE-2026-75650 is installed, since Adobe requires it in addition to this update. Update the Content Credentials SDK components (Rust SDK, C2PA Tool, and JS SDK), which contain network-reachable flaws that could lead to security feature bypass and application denial-of-service. Then update Photoshop, FrameMaker, Dimension, Substance 3D Stager, Substance 3D Designer, Substance 3D Sampler, and Bridge. If you can't update right away, restrict network access to ColdFusion, Commerce, and Experience Manager servers, and avoid opening untrusted files in Photoshop, FrameMaker, Dimension, Substance 3D Stager, Substance 3D Designer, Substance 3D Sampler, and Bridge until patches are applied.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/adobe-releases-october-2026-patches-for-multiple-products-n-n-r-1-8/gD2P6Ple2L

We Let AI Fuzz Adobe Reader for a Week. It Found a Critical Zero-Day CVE-2026-81983 https://remedio.io/blog/cve-2026-81983-integer-overflow-vulnerability-enables-out-of-bounds-write-in-adobe-acrobat/

CVE-2026-83498 allows local attackers to execute code inside a Windows VBS Enclave via SFAPE.dll. It breaks the isolation guarantee underpinning Enhanced Phishing Protection. Patch VBS-enabled systems and audit for local privilege abuse. #WindowsSecurity #VbsEnclave #PrivilegeEscalation

https://cyberworldops.eu/en/cve-2026-83498-lets-local-attackers-run-code-inside-a-windows-vbs

🚨 PoC released for a Hyperledger FireFly server-side request forgery vulnerability; CVE-2026-82957

PoC: https://github.com/hakaioffsec/CVE-2026-82957

The flaw affects FireFly webhook subscriptions, where a user-controlled webhook URL can be accepted without properly validating the destination host. This can allow the FireFly node to send requests to internal services, private networks, loopback addresses, and cloud metadata endpoints.

CVSS: 8.5 High
Affected: Hyperledger FireFly ≤ 1.5.0

The PoC creates a malicious webhook subscription, triggers a matching event, and verifies that the request originates from the FireFly server itself.

If you missed this Friday post:

WatchTower: Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) https://labs.watchtowr.com/death-by-a-thousand-papercuts-papercut-pre-auth-rce-chain-and-patch-bypasses-wt-2026-0141-0144-cve-2026-82077-cve-2026-82078-cve-2026-81578/ #infosec #vulnerability

If you missed this Friday post:

WatchTower: Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) https://labs.watchtowr.com/death-by-a-thousand-papercuts-papercut-pre-auth-rce-chain-and-patch-bypasses-wt-2026-0141-0144-cve-2026-82077-cve-2026-82078-cve-2026-81578/ #infosec #vulnerability

Actively Exploited Zimbra Flaw Lets Unauthenticated Attackers Steal Entire Mailbox Content

A critical command injection flaw in Zimbra's SNMP monitoring component (CVE-2026-73570) is under active exploitation. Attackers are stealing mailbox content and credentials.

**If you run a Zimbra mail server, upgrade to version 10.1.20 or later ASAP, The system is actively attacked. If you can't upgrade yet, turn off the optional SNMP monitoring service to close the hole. Because attackers have been actively exploiting this since July, treat any unpatched server that was reachable from the internet as already hacked: check the Jetty web folders for unknown JSP files, change all Zimbra and LDAP passwords, and allow admin access only from trusted internal machines.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/actively-exploited-zimbra-flaw-lets-unauthenticated-attackers-steal-entire-mailbox-content-0-9-v-m-g/gD2P6Ple2L

Actively Exploited Zimbra Flaw Lets Unauthenticated Attackers Steal Entire Mailbox Content

A critical command injection flaw in Zimbra's SNMP monitoring component (CVE-2026-73570) is under active exploitation. Attackers are stealing mailbox content and credentials.

**If you run a Zimbra mail server, upgrade to version 10.1.20 or later ASAP, The system is actively attacked. If you can't upgrade yet, turn off the optional SNMP monitoring service to close the hole. Because attackers have been actively exploiting this since July, treat any unpatched server that was reachable from the internet as already hacked: check the Jetty web folders for unknown JSP files, change all Zimbra and LDAP passwords, and allow admin access only from trusted internal machines.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/actively-exploited-zimbra-flaw-lets-unauthenticated-attackers-steal-entire-mailbox-content-0-9-v-m-g/gD2P6Ple2L

PoC for FortiClient Endpoint Management Server authentication bypass https://github.com/Alaatk/CVE-2026-35616

🚨 Exploit for a critical Fortinet FortiClient EMS pre-authentication bypass; CVE-2026-35616

Exploit: https://github.com/Alaatk/CVE-2026-35616

The flaw affects FortiClient EMS and stems from improper access control around client-certificate authentication. An unauthenticated attacker can forge trusted certificate-related HTTP headers and access protected API functionality.

CVSS: 9.8 Critical
Affected: FortiClient EMS 7.4.5 - 7.4.6
Fixed: FortiClient EMS 7.4.7 / vendor hotfix

The exploit discovers usable certificate identities, forges the required authentication headers, tests multiple protected API endpoints, and confirms whether the authentication bypass succeeds.

🟠 CVE-2026-57143 - High (8.8)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled searxng_url parameter directly to requests.get without validating its scheme, host, port, or resol...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57143/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CRITICAL: Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft

Two critical vulnerabilities in LiteLLM (CVE-2026-35029, CVE-2026-59823) allow unauthenticated or low-privilege attackers to execute arbitrary code, steal API keys, and take over admin accounts. Any organization running LiteLLM as an AI gateway is at immediate risk of credential compromise and late…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

Microsoft Patches 1,411 Vulnerabilities in October 2026 Update Including Actively Exploited Zero-Day

Microsoft's October 2026 Patch Tuesday fixed a record 1,411 vulnerabilities, including 70 critical ones (mostly remote code execution) and three zero-days. The actively exploited zero-day is CVE-2026-96951, a Windows Shell Mark of the Web bypass. A .NET Framework WDAC bypass and a MessagePack-CSharp denial-of-service flaw were publicly disclosed. This month is the final security update for Windows 11 24H2 Home/Pro and Windows 10 Enterprise LTSB 2016.

**Patch the Windows OS first because it has an actively exploited flaw. Next, update .NET Framework on endpoints and servers that depend on Windows Defender Application Control. If you are developing ASP.NET apps, prioritize rebuilding and redeploying anything that ships MessagePack-CSharp, including ASP.NET Core SignalR apps, on version 2.5.303 or 3.1.9. Then work through the 70 critical flaws, starting with the 57 remote code execution bugs on internet-facing and domain-joined systems. Use the Microsoft's new risk cohorts to batch related fixes. Finally, check your fleet for support status: Windows 11 24H2 Home and Pro and Windows 10 Enterprise LTSB 2016 received their last update this month, Windows 11 23H2 Enterprise and Education get their final one on November 10, and Windows Server 2012 and 2012 R2 need manual remediation for the AD FS hardening tied to CVE-2026-56155.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/microsoft-s-record-october-patch-tuesday-fixes-1400-flaws-including-zero-day-under-z-s-e-q-y/gD2P6Ple2L

Two Discourse vulnerabilities, CVE-2026-55674 and CVE-2026-55420, enable cache poisoning XSS and server file reads. Patch to the fixed releases now.

#Discourse #CVE202655674 #CVE202655420 #CachePoisoning #XSS #ImageMagick #VulnerabilityReport #CyberSecurity

https://securityonline.info/discourse-vulnerabilities-cve-2026-55674-cve-2026-55420/?utm_source=mastodon&utm_medium=jetpack_social

🚨 EUVD-2026-100891

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: GamiPress
🏢 Vendor: Unknown
📅 Updated: 2026-10-14

📝 The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users. This is an incomplete fix of CVE-2026-13450.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100891

#cybersecurity #infosec #euvd #cve #vulnerability

@ives @stroobl @karelbrits ah, ik dacht dat het artikel de publicatie was van degene die het gevonden hadden. Dat blijkt inderdaad niet zo. De publicatie op de CVE site was in mei 2025, die bij Danfoss zelf in maart 2025. Ongeveer anderhalf jaar is een lange periode om iets ongepatcht te laten voor een CVSS score van ruim 8.

https://www.cve.org/cverecord?id=CVE-2025-41450

@wiert @stroobl @karelbrits "August 9th, 2026" is de publicatie datum van dat artikel dat de problemen beschrijft.

De vulnerability zelf (CVE-2025-41450) is in maart 2025 bekend gemaakt.
Zie https://www.danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/danfoss-security-advisories/dsa-2025-03-01/

New advisory. It affects several critical vulnerabilities:

CVE-2024-56171, CVE-2023-4807, CVE-2023-5363, CVE-2024-6119 and CVE-2025-70873

Dell: Security Update for Dell SupportAssist OS Recovery for Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000515036/dsa-2026-446-security-update-for-dell-supportassist-os-recovery-for-multiple-third-party-component-vulnerabilities #infosec #vulnerability #Dell

New advisory. It affects several critical vulnerabilities:

CVE-2024-56171, CVE-2023-4807, CVE-2023-5363, CVE-2024-6119 and CVE-2025-70873

Dell: Security Update for Dell SupportAssist OS Recovery for Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000515036/dsa-2026-446-security-update-for-dell-supportassist-os-recovery-for-multiple-third-party-component-vulnerabilities #infosec #vulnerability #Dell

New advisory. It affects several critical vulnerabilities:

CVE-2024-56171, CVE-2023-4807, CVE-2023-5363, CVE-2024-6119 and CVE-2025-70873

Dell: Security Update for Dell SupportAssist OS Recovery for Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000515036/dsa-2026-446-security-update-for-dell-supportassist-os-recovery-for-multiple-third-party-component-vulnerabilities #infosec #vulnerability #Dell

New advisory. It affects several critical vulnerabilities:

CVE-2024-56171, CVE-2023-4807, CVE-2023-5363, CVE-2024-6119 and CVE-2025-70873

Dell: Security Update for Dell SupportAssist OS Recovery for Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000515036/dsa-2026-446-security-update-for-dell-supportassist-os-recovery-for-multiple-third-party-component-vulnerabilities #infosec #vulnerability #Dell

New advisory. It affects several critical vulnerabilities:

CVE-2024-56171, CVE-2023-4807, CVE-2023-5363, CVE-2024-6119 and CVE-2025-70873

Dell: Security Update for Dell SupportAssist OS Recovery for Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000515036/dsa-2026-446-security-update-for-dell-supportassist-os-recovery-for-multiple-third-party-component-vulnerabilities #infosec #vulnerability #Dell

New.

"In activity observed from June 2025 through August 2026, Talos identified four infection-chain types that use macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and a crafted WinRAR archive exploiting CVE-2025-8088. The recovered payloads include several custom reverse shells that provide interactive remote access."

Cisco: Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations https://blog.talosintelligence.com/break-the-silence-kazakhstan-nexus-uat-6275-targets-cis-government-organizations/ @TalosSecurity Security@mstdn.social #infosec #GitHub #vulnerability #cybercrime #threatresearch

Hikvision sotto il mirino in Ucraina, nove giorni di spionaggio

https://insicurezzadigitale.com/hikvision-sotto-il-mirino-in-ucraina-nove-giorni-di-spionaggio/

Discover how recent Hikvision camera attacks in Ukraine exploit the CVE-2021-36260 vulnerability for potential remote surveillance. Learn how to secure IoT.

#Hikvision #CyberSecurity #Ukraine #Vulnerability #IoT

https://meterpreter.org/hikvision-camera-attacks-ukraine/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-55060 GoCD: authenticated users can read process args and internal paths via a mis-authorized endpoint. CVSS 3.7, patch under review. Patch when it lands. https://www.valtersit.com/cve/CVE-2026-55060/ #CVE #infosec #GoCD

Fortinet Patches Critical Authentication Bypass in FortiSandbox GUI

Fortinet patch a critical authentication bypass vulnerability (CVE-2026-107656) in the FortiSandbox GUI that allows remote attackers to execute unauthorized commands. The flaw affects multiple appliance and PaaS versions and requires an immediate update to secure management interfaces.

**If you run FortiSandbox (hardware appliance or PaaS) on versions 4.4 or 5.0, update ASAP to 4.4.10, 5.0.7 or newer, or move to 5.2. And make sure the management interface is not reachable from the internet and can only be accessed from trusted admin networks.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/fortinet-patches-critical-authentication-bypass-in-fortisandbox-gui-p-e-5-z-l/gD2P6Ple2L

Fortinet has around 11 advisories. Stand outs are

• CVE-2026-106173 (9.4 critical) path traversal in FortiSIEM leads to RCE
• CVE-2026-107656 (9.6 critical) authentication bypass in FortiSandbox GUI

No exploitation mentioned.

https://fortiguard.fortinet.com/psirt/FG-IR-26-180
https://fortiguard.fortinet.com/psirt/FG-IR-26-185

#fortinet #CVE #PatchTuesday

Hypervisor escape patches for XenServer 8.4 and XenServer 9

CVE-2026-79610
CVE-2026-102700
CVE-2026-102701

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697170&articleTitle=XenServer_Security_Update_for_CVE_2026_79610_CVE_2026_79610_CVE_2026_102700_and_CVE_2026_102701

A TanStack Start vulnerability, CVE-2026-102989 (CVSS 9.3), allows unauthenticated reflected XSS via crafted links. Upgrade to the patched packages.

#TanStack #TanStackStart #CVE2026102989 #ReflectedXSS #React #JavaScript #WebSecurity #CyberSecurity