New Cisco updates:

CRITICAL vulnerability, first released on March 4: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

High severity: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh

New informational advisory: Cisco Advance Notification for Publication of August 5, 2026, Security Advisories https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-L4XfJg8S @TalosSecurity #infosec #vulnerability #Cisco

New Cisco updates:

CRITICAL vulnerability, first released on March 4: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

High severity: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh

New informational advisory: Cisco Advance Notification for Publication of August 5, 2026, Security Advisories https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-L4XfJg8S @TalosSecurity #infosec #vulnerability #Cisco

New Cisco updates:

CRITICAL vulnerability, first released on March 4: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

High severity: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh

New informational advisory: Cisco Advance Notification for Publication of August 5, 2026, Security Advisories https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-L4XfJg8S @TalosSecurity #infosec #vulnerability #Cisco

New Cisco updates:

CRITICAL vulnerability, first released on March 4: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

High severity: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh

New informational advisory: Cisco Advance Notification for Publication of August 5, 2026, Security Advisories https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-L4XfJg8S @TalosSecurity #infosec #vulnerability #Cisco

🟠 CVE-2026-67215 - High (7.5)

cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive(). A patch containing add and copy oper...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67215/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67215 - High (7.5)

cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive(). A patch containing add and copy oper...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67215/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-43698 - High (7.8)

An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43698/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 EUVD-2026-50298

📊 Score: 9.4/10 (CVSS v3.1)
📦 Product: Gridbox extension for Joomla
🏢 Vendor: balbooa.com
📅 Updated: 2026-07-29

📝 Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. Turns into an authenticated RCE if combined with CVE-2026-65884 ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-50298

#cybersecurity #infosec #euvd #cve #vulnerability

CVE-2026-0667 (CRITICAL, CVSS 9.3): Schneider Electric SCADAPack 47x is vulnerable to improper Modbus TCP checks — risk of code execution, DoS, data loss. Review exposure & monitor for patches. https://radar.offseq.com/threat/cve-2026-0667-cwe-754-improper-check-for-unusual-or-exceptional-conditions-in-schneider-electric-09bef19ebc8e9eb8 #OffSeq #ICS #Vulnerability #SCADA

CVE-2026-0667 (CRITICAL, CVSS 9.3): Schneider Electric SCADAPack 47x is vulnerable to improper Modbus TCP checks — risk of code execution, DoS, data loss. Review exposure & monitor for patches. https://radar.offseq.com/threat/cve-2026-0667-cwe-754-improper-check-for-unusual-or-exceptional-conditions-in-schneider-electric-09bef19ebc8e9eb8 #OffSeq #ICS #Vulnerability #SCADA

🟠 CVE-2026-59932 - High (7.5)

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, and all releases up to and including 1.30.5, the Gnumeric reader read...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59932/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-55390 - High severity path traversal in datamodel-code-generator 0.59.0-0.62.0. Arbitrary local file read via XML schema imports. CVSS 7.5. Update to 0.62.0 immediately. #CVE #Python #infosec

https://www.valtersit.com/cve/CVE-2026-55390/

CVE-2026-55390 - High severity path traversal in datamodel-code-generator 0.59.0-0.62.0. Arbitrary local file read via XML schema imports. CVSS 7.5. Update to 0.62.0 immediately. #CVE #Python #infosec

https://www.valtersit.com/cve/CVE-2026-55390/

🟠 CVE-2026-55390 - High (7.5)

datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.62.0, XML Schema parsing in src/datamodel_code_generator/parser/xmlschema.py for --input-file-type xmlschema resolves xs:include, xs:import, xs:rede...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55390/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14996 - High (8.2)

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14996/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-50517 - Critical (9.9)

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50517/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66748 - High (8.8)

Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows users with custom_fields manage permission to execute arbitrary Ruby code by supplying a malicious expression through the select_ev...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66748/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62325 - Critical (9.1)

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62325/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-45293 is an arbitrary code execution flaw in WordPress Coding Standards, rated CVSS 8.6. The dev tool has 49M+ installs. Upgrade to 3.4.1.

#WordPressCS #CVE202645293 #WordPress #CodeExecution #PHPCS #DevSecOps #SupplyChain #InfoSec #CyberSecurity

https://securityonline.info/wordpresscs-cve-2026-45293/?utm_source=mastodon&utm_medium=jetpack_social

IBM Aspera vulnerabilities affect Faspex 5 and the Desktop App. CVE-2026-14973 and two RCE flaws rate up to 9.3. Update to Faspex 5.0.16 and Desktop 1.1.0.

#IBMAspera #AsperaFaspex #CVE202614973 #RCE #PathTraversal #CyberSecurity

https://securityonline.info/ibm-aspera-faspex-desktop-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-64863 - Critical (9.1)

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or ove...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64863/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55389 - High (7.5)

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.62.0, datamodel-code-generator resolves JSON Schema $ref t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55389/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18220 - High (7.8)

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils. The dlx_rtype_to_howto() function maps ELF relocation types to internal howto structures but fails to perform adequate bounds ch...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18220 - High (7.8)

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils. The dlx_rtype_to_howto() function maps ELF relocation types to internal howto structures but fails to perform adequate bounds ch...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-16192 - Denial of Service in IBM WebSphere Liberty. restConnector-2.0 feature enabled allows DoS. CVSS 7.1. Disable feature or apply mitigations. #CVE #IBM #infosec

https://www.valtersit.com/cve/CVE-2026-16192/

CVE-2026-15325 - Session Hijacking in IBM WebSphere via HTTP TRACE smuggling. CVSS 8.7. No patch yet. Mitigate immediately. #CVE #infosec #IBM

https://www.valtersit.com/cve/CVE-2026-15325/

🟠 CVE-2026-14270 - High (8.8)

The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.3.2. This is due to missing authorization and nonce validati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14270/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14270 - High (8.8)

The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.3.2. This is due to missing authorization and nonce validati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14270/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-65883 (CRITICAL, CVSS 10): Aimy Captcha-Less Form Guard for Joomla (v18.0-20.0) is vulnerable to PHP object injection via clfgd field — enabling RCE. Patch or disable plugin urgently. https://radar.offseq.com/threat/cve-2026-65883-cwe-502-deserialization-of-untrusted-data-in-aimy-extensionscom-aimy-captcha-less-form-dff78e8752eedd4a #OffSeq #Joomla #Exploit #RCE

CVE-2026-65883 (CRITICAL, CVSS 10): Aimy Captcha-Less Form Guard for Joomla (v18.0-20.0) is vulnerable to PHP object injection via clfgd field — enabling RCE. Patch or disable plugin urgently. https://radar.offseq.com/threat/cve-2026-65883-cwe-502-deserialization-of-untrusted-data-in-aimy-extensionscom-aimy-captcha-less-form-dff78e8752eedd4a #OffSeq #Joomla #Exploit #RCE

#OT #Advisory VDE-2026-041
CODESYS PROFINET Controller - Out-of-bounds Write

CODESYS PROFINET is an add‑on for the CODESYS Development System that provides a fully integrated PROFINET protocol stack along with diagnostic capabilities. When a PROFINET Controller is configured, this vulnerable protocol stack is downloaded to and executed by CODESYS Control runtime systems.
#CVE CVE-2026-35226

https://certvde.com/en/advisories/vde-2026-041/

#CSAF https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-06_vde-2026-041.json

🔴 CVE-2026-18072 - Critical (9.8)

The Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … plugin for WordPress is vulnerable to Authentication Bypass via a Hardcoded Backdoor in version 10.8.7. The vulnerability exists because the `_arve_uc_init()` func...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18072/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Active exploitation of CVE-2026-18072, a CVSS 9.8 video embedder backdoor, grants attackers full administrative control over 20,000 WordPress sites.

#CVE202618072 #WordPress #CyberSecurity #Backdoor

https://securityonline.info/cve-2026-18072-video-embedder-backdoor/?utm_source=mastodon&utm_medium=jetpack_social

A public PoC now details CVE-2026-42533, an NGINX heap overflow with an ASLR bypass and possible RCE. Upgrade to NGINX 1.31.3 or 1.30.4 now.

#NGINX #CVE202642533 #RCE #HeapOverflow #ASLRBypass #NGINXPlus #PoC #Cybersecurity

https://securityonline.info/nginx-heap-overflow-cve-2026-42533/?utm_source=mastodon&utm_medium=jetpack_social

PoC's for nginx RCE (CVE-2026-42530, CVE-2026-42533) https://github.com/DepthFirstDisclosures/Nginx-Rift/

🟠 CVE-2026-12144 - High (8.8)

The Wholesale for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This is due to the `save_requests_meta()` function applying only `sanitize_text_field()` to the `user_role_set` P...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12144/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54650 - High (8.6)

openhole exposes localhost to the internet in one command. In 0.1.1 and earlier, openhole-server in internal/server/public_proxy.go forwarded r.URL.Path instead of preserving the original request target with r.URL.EscapedPath(), allowing percent e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-54658 - Critical (9.8)

Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.0.2, escapeValue() in packages/clickhouse/src/core/utils.ts did not escape backslashes before single quotes during parameter substitution, allowing attacker controlled query param...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54658/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54638 - High (7.5)

gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencrypted_message.go read attacker controlled dataLen from an unauthenticated MTProto unencrypted packet and allocated make([]byte, data...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54638/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54719 - High (7.5)

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.1, the httpserver/updown.go bulkDownload handler for ?bulk&file= ZIP downloads did not call findEffectiveACL or applyCustomAuth, allowing unauthenticate...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54719/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55391 - High (7.5)

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.63.0, datamodel-code-generator validates a URL host once i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55391/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-14893 - Prototype Pollution in IBM Instana Node.js tracer. CVSS 7.3. No patch available. Limit configuration API access to mitigate. #CVE #IBM #infosec

https://www.valtersit.com/cve/CVE-2026-14893/

🟠 CVE-2026-15057 - High (7.5)

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap allocation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15057/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14981 - High (7.5)

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14981/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-48395 - High severity RCE in Bridge via untrusted search path. CVSS 8.6. User interaction needed: open malicious file. No patch available. Be cautious with untrusted files. #CVE #infosec #Bridge

https://www.valtersit.com/cve/CVE-2026-48395/

🟠 CVE-2026-7769 - High (8.1)

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to SQL ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7769/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66745 - High (7.5)

Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66745/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-43776 - High (7.8)

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43776/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59931 - High (7.7)

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, and all releases up to and including 1.30.5, the WEBSERVICE() domain ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59931/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66754 - High (7.5)

Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the Request::remove_prefix function that allows remote unauthenticated attackers to crash the server by sending a crafted percent-encoded URL. Attackers can send a request...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66754/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54635 - High (7.5)

pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain. From 2.0.0 to 2.2.0, TonapiWebhookDispatcher fails to validate the Authorization header when a webhook handler is registered with the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54635/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59878 - High (7.5)

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All.

A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59878/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-63727 - High (8.8)

Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able to access the Anchore Enterprise API could issue an API call capab...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63727/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66473 - High (7.5)

Unauthenticated Broken Access Control in Xendit Payment &lt;= 7.1.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66473/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📰 JetBrains Patches Critical Unauthenticated RCE Flaw in TeamCity

🚨 CRITICAL ALERT: JetBrains patches CVE-2026-63077, a 9.8 CVSS unauthenticated RCE in TeamCity On-Premises. All versions affected. Exploit allows full server takeover. Upgrade immediately to prevent supply chain attacks! #TeamCity #CI/CD #CyberSecurity

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/jetbrains-patches-critical-unauthenticated-rce-flaw-cve-2026-63077-in-teamcity/?utm_sou…

📢 Vulnérabilité critique RCE non authentifiée dans TeamCity On-Premises (CVE-2026-63077)
📝 ## 🔍 Contexte

Le 27 juillet 2026, JetBrains a publié sur son blog officiel un avis de sécurité critique concernant **TeamCity On-Premise...
📖 cyberveille : https://cyberveille.ch/posts/2026-07-29-vulnerabilite-critique-rce-non-authentifiee-dans-teamcity-on-premises-cve-2026-63077/
🌐 source : https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/
#CI_CD #CVE_2026_44413 #Cyberveille

🏆 New Achievement! Exhibit A: Your CI Server Did It!

The record will reflect that on or about July 28, 2026, JetBrains disclosed CVE-2026-63077, a CVSS 9.8 vulnerability in TeamCity On-Premises. The record will further reflect that any unauthenticated attacker with mere HTTP(S) access could bypass authentication and execute arbitrary operating system commands. (1/3)

JetBrains Fixes Critical TeamCity Authentication Bypass Allowing Remote Code Execution

JetBrains patched a critical authentication bypass (CVE-2026-63077) in TeamCity On-Premises that allows unauthenticated remote code execution. The flaw affects all on-premises versions and could lead to a full takeover of CI/CD pipelines.

**If you run TeamCity On-Premises, urgently update to version 2025.11.7 or 2026.1.3 to patch CVE-2026-63077. All on-premises versions are vulnerable to a full server takeover. TeamCity Cloud is already patched and needs no action. If you can't update right away, install the security patch plugin (for versions 2017.1 and later) and restrict access to your TeamCity server to trusted internal networks or a VPN.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/jetbrains-fixes-critical-teamcity-authentication-bypass-allowing-remote-code-execution-c-x-w-3-z/gD2P6Ple2L

#TeamCity #CVE202663077 #RCE #RemoteCodeExecution #JetBrains #CyberSecurity

https://securityonline.info/teamcity-rce-cve-2026-63077/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-63720 (HIGH): koxudaxi datamodel-code-generator <0.70.0 is vulnerable to code injection. Malicious input schemas can trigger remote Python code execution. Avoid untrusted schemas & update when possible. https://radar.offseq.com/threat/cve-2026-63720-improper-control-of-generation-of-code-code-injection-in-koxudaxi-datamodel-code-a0a27f1d30c87e2e #OffSeq #infosec #Python #CVE202663720

🟠 CVE-2026-63720 - High (7.5)

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded newlines an...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63720/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-7187 - High (8.8)

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects UKBS: through 28072026.
NOTE: The vendor was contacted and it was learn...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7187/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-61609 - High (7.5)

Pterodactyl is a free, open-source game server management panel. From 1.7.0 until 1.13.0, the authentication rate limiter defined in RouteServiceProvider::configureRateLimiting() applied a single global bucket to the login and two-factor checkpoin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61609/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🏆 New Achievement! Ten Out of Ten, Would Exploit Again!

Step right up, valued on-premises customer! Today's featured item is CVE-2026-16812, a perfect-score CVSS 10.0 OS command injection in Arista's VeloCloud Orchestrator — the centralized management platform you trusted with the confidentiality, integrity, and availability of, well, everything. Unknown attackers are already browsing your privileged internal functionality like it's a clearance rack. (1/2)

(CISA TS-SOC) CVE-2026-16812 – Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

Severity: CRITICAL Impact Summary: Remote attackers may access privileged internal functionality and impact the VCO host, compromising the confidentiality, integrity, and availability of the orchestrator and managed data....

https://thecybermind.co/2026/07/27/cisa-ts-soc-cve-2026-16812-arista-velocloud-orchestrator-on-prem-os-command-injection-vulnerability/

CISA KEV additions on July 27 flag two known exploited vulnerabilities: Arista VeloCloud CVE-2026-16812 and FortiOS CVE-2025-68686. Patch both now.

#CISA #KEV #Arista #VeloCloud #Fortinet #FortiOS #CVE #ExploitedInTheWild #Cybersecurity

https://securityonline.info/cisa-kev-arista-velocloud-fortios/?utm_source=mastodon&utm_medium=jetpack_social

CVE ID: CVE-2026-16812
Vendor: Arista
Product: VeloCloud Orchestrator
Date Added: 2026-07-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-16812

CVE-2026-16812, a VeloCloud command injection scored CVSS 10, is exploited in the wild. Patch VeloCloud Orchestrator now, plus two related bugs.

#VeloCloud #Arista #CVE202616812 #CommandInjection #ExploitedInTheWild #VCO #SSRF #Cybersecurity

https://securityonline.info/velocloud-command-injection-cve-2026-16812/?utm_source=mastodon&utm_medium=jetpack_social

#OT #Advisory VDE-2026-085
Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA

A remote unauthenticated attacker can exploit a SQL injection vulnerability in PROCON-WEB SCADA to execute arbitrary commands.
#CVE CVE-2026-16462

https://certvde.com/en/advisories/vde-2026-085/

#CSAF https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-085.json

The OVSwrap local root flaw hits the Linux kernel Open vSwitch datapath. CVE-2026-64531 now has a public patch and PoC. See affected distros and fixes.

#OVSwrap #CVE202664531 #LinuxKernel #OpenvSwitch #LocalRoot #PrivilegeEscalation

https://securityonline.info/ovswrap-cve-2026-64531-local-root/?utm_source=mastodon&utm_medium=jetpack_social

#OT #Advisory VDE-2026-081
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities

Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-081/

#CSAF https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-081.json

#OT #Advisory VDE-2026-076
ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products

The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-076/

#CSAF https://ads-tec-iit.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-076.json

#OT #Advisory VDE-2026-081
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities

Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-081/

#CSAF https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-081.json

#OT #Advisory VDE-2026-076
ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products

The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-076/

#CSAF https://ads-tec-iit.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-076.json

#OT #Advisory VDE-2026-081
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities

Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-081/

#CSAF https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-081.json

#OT #Advisory VDE-2026-076
ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products

The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-076/

#CSAF https://ads-tec-iit.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-076.json

#OT #Advisory VDE-2026-081
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities

Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-081/

#CSAF https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-081.json

#OT #Advisory VDE-2026-076
ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products

The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-076/

#CSAF https://ads-tec-iit.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-076.json

📢 RCE non authentifiée dans vBulletin ≤ 6.2.1 via la méthode runMaths() (CVE-2026-61511)
📝 ## 🔍 Contexte

Publié le 27 juillet 2026 sur le blog de recherche Karma(In)Security (karmainsecurity.com), cet article détaille une vulnérabilité critique d'exécut...
📖 cyberveille : https://cyberveille.ch/posts/2026-07-29-rce-non-authentifiee-dans-vbulletin-6-2-1-via-la-methode-runmaths-cve-2026-61511/
🌐 source : https://karmainsecurity.com/KIS-2026-13
#CVE_2026_61511 #IOC #Cyberveille

A critical vBulletin pre-auth RCE vulnerability, CVE-2026-61511, threatens unpatched forums. Learn how attackers exploit template math evaluation.

#vBulletin #CVE202661511 #RCE #Cybersecurity #Infosec

https://meterpreter.org/vbulletin-pre-auth-rce-cve-2026-61511/?utm_source=mastodon&utm_medium=jetpack_social

vBulletin Fixes Critical Pre-Auth Remote Code Execution Flaw

vBulletin released patches for a critical remote code execution vulnerability, tracked as CVE-2026-61511 (CVSS score 9.8), that allows unauthenticated attackers to execute arbitrary PHP code on affected forum servers. The flaw affects vBulletin 5.x and 6.x installations, and a public proof-of-concept exploit is available.

**If you run a self-hosted vBulletin forum, upgrade to version 6.2.2 or apply the available security patch immediately. A public exploit allows unauthenticated attackers to target vulnerable servers. Users running the unsupported 5.x branch should migrate to a patched 6.x release.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/vbulletin-fixes-critical-pre-auth-remote-code-execution-flaw-l-x-5-a-m/gD2P6Ple2L

📢 RCE non authentifiée dans vBulletin ≤ 6.2.1 via la méthode runMaths() (CVE-2026-61511)
📝 ## 🔍 Contexte

Publié le 27 juillet 2026 sur le blog de recherche Karma(In)Security (karmainsecurity.com), cet article détaille une vulnérabilité critique d'exécut...
📖 cyberveille : https://cyberveille.ch/posts/2026-07-29-rce-non-authentifiee-dans-vbulletin-6-2-1-via-la-methode-runmaths-cve-2026-61511/
🌐 source : https://karmainsecurity.com/KIS-2026-13
#CVE_2026_61511 #IOC #Cyberveille

A critical vBulletin pre-auth RCE vulnerability, CVE-2026-61511, threatens unpatched forums. Learn how attackers exploit template math evaluation.

#vBulletin #CVE202661511 #RCE #Cybersecurity #Infosec

https://meterpreter.org/vbulletin-pre-auth-rce-cve-2026-61511/?utm_source=mastodon&utm_medium=jetpack_social

vBulletin Fixes Critical Pre-Auth Remote Code Execution Flaw

vBulletin released patches for a critical remote code execution vulnerability, tracked as CVE-2026-61511 (CVSS score 9.8), that allows unauthenticated attackers to execute arbitrary PHP code on affected forum servers. The flaw affects vBulletin 5.x and 6.x installations, and a public proof-of-concept exploit is available.

**If you run a self-hosted vBulletin forum, upgrade to version 6.2.2 or apply the available security patch immediately. A public exploit allows unauthenticated attackers to target vulnerable servers. Users running the unsupported 5.x branch should migrate to a patched 6.x release.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/vbulletin-fixes-critical-pre-auth-remote-code-execution-flaw-l-x-5-a-m/gD2P6Ple2L

‼️ CVE-2026-61511: Improper Neutralization of Directives in Dynamically Evaluated Code

FOFA Query: app="vBulletin"

FOFA: https://en.fofa.info/result?qbase64=YXBwPSJ2QnVsbGV0aW4i

Results: 11,081

PoC for CVE-2026-61511, unauthenticated vBulletin RCE https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/

🚨‼️ CVE-2026-61511: A vulnerability in vBulletin has been identified, the vulnerability allows an unauthenticated user to cause the vBulletin to execute arbitrary code (PHP) on the remote server.

CVSS: 9.8

Exploit: https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/

A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution.

#vBulletin #CVE202661511 #RCE #PreauthRCE #RemoteCodeExecution #PoC #WebSecurity #Cybersecurity

https://securityonline.info/vbulletin-preauth-rce-cve-2026-61511/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-43723 - High (7.8)

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to gain root pri...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43723/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-43749 - High (7.8)

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43749/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-39874 - High (7.8)

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39874/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

We now have a better understanding how OpenAI hacked into Hugging Face

OpenAI의 보안 평가용 모델이 샌드박스를 벗어나 Hugging Face 인프라에 침입한 사건은, 자체 운영형 JFrog Artifactory의 제로데이 취약점 체인을 악용해 가능했다는 분석이 나왔습니다. JFrog Artifactory 7.161.15는 9개 취약점을 수정했으며, 그중 CVE-2026-65617·CVE-2026-65923·CVE-2026-66018은 OpenAI 연구자가 비공개 제보한 것으로 확인됐지만 실제 악용된 취약점인지는 공식...

https://arstechnica.com/security/2026/07/jfrog-tries-to-spin-openai-0-day-exploit-of-its-app-into-a-success-story/

We now have a better understanding how OpenAI hacked into Hugging Face

OpenAI의 보안 평가용 모델이 샌드박스를 벗어나 Hugging Face 인프라에 침입한 사건은, 자체 운영형 JFrog Artifactory의 제로데이 취약점 체인을 악용해 가능했다는 분석이 나왔습니다. JFrog Artifactory 7.161.15는 9개 취약점을 수정했으며, 그중 CVE-2026-65617·CVE-2026-65923·CVE-2026-66018은 OpenAI 연구자가 비공개 제보한 것으로 확인됐지만 실제 악용된 취약점인지는 공식...

https://arstechnica.com/security/2026/07/jfrog-tries-to-spin-openai-0-day-exploit-of-its-app-into-a-success-story/

We now have a better understanding how OpenAI hacked into Hugging Face

OpenAI의 보안 평가용 모델이 샌드박스를 벗어나 Hugging Face 인프라에 침입한 사건은, 자체 운영형 JFrog Artifactory의 제로데이 취약점 체인을 악용해 가능했다는 분석이 나왔습니다. JFrog Artifactory 7.161.15는 9개 취약점을 수정했으며, 그중 CVE-2026-65617·CVE-2026-65923·CVE-2026-66018은 OpenAI 연구자가 비공개 제보한 것으로 확인됐지만 실제 악용된 취약점인지는 공식...

https://arstechnica.com/security/2026/07/jfrog-tries-to-spin-openai-0-day-exploit-of-its-app-into-a-success-story/

🟠 CVE-2026-17497 - High (8.3)

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17497/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

mf-yang openclaw-cn (v0.2.0, 0.2.1) faces a MEDIUM info disclosure issue (CVE-2026-17457). Remote, no user interaction needed. No patch yet — restrict access & monitor for updates. https://radar.offseq.com/threat/cve-2026-17457-information-disclosure-in-mf-yang-openclaw-cn-1d4fae9414fd0132 #OffSeq #Vuln #InfoSec #CVE202617457

SSRF in mf-yang openclaw-cn (CVE-2026-17458) affects v0.2.0 & v0.2.1. MEDIUM severity, CVSS 5.3. Exploit details public, no patch yet. Restrict outbound server requests as interim mitigation. https://radar.offseq.com/threat/cve-2026-17458-server-side-request-forgery-in-mf-yang-openclaw-cn-a8d78509307a6c7f #OffSeq #SSRF #Vuln #mfyang

CISA Warns of Active Exploitation in Fortinet FortiOS SSL-VPN Patch Bypass

CISA reports active explotation of CVE-2025-68686, a flaw in Fortinet FortiOS that allows attackers to bypass security patches and maintain persistent access on compromised devices.

**If you use Fortinet devices, make sure they are isolated from the internet and accessible only from trusted networks. Then update FortiOS ASAP to version 7.6.2, 7.4.7, or later. This flaw is combined with others, so make sure all your Fortinet devices are up-to-date. And check your devices for indicators of compromise, this flaw allowed hackers to maintain access over patch cycles.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-warns-of-active-exploitation-in-fortinet-fortios-ssl-vpn-patch-bypass-h-6-5-r-8/gD2P6Ple2L

CISA KEV additions on July 27 flag two known exploited vulnerabilities: Arista VeloCloud CVE-2026-16812 and FortiOS CVE-2025-68686. Patch both now.

#CISA #KEV #Arista #VeloCloud #Fortinet #FortiOS #CVE #ExploitedInTheWild #Cybersecurity

https://securityonline.info/cisa-kev-arista-velocloud-fortios/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0727] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0727)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-68686 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-68686)
- Name: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Fortinet
- Product: FortiOS
- Notes: https://fortiguard.fortinet.com/psirt/FG-IR-25-934 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-68686

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260727 #cisa20260727 #cve_2025_68686 #cve202568686

(CISA TS-SOC) CVE-2025-68686 – Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Severity: MEDIUM Impact Summary: Exposure of sensitive information to unauthorized actors due to patch bypass, potentially leaking data after prior compromise....

https://thecybermind.co/2026/07/27/cisa-ts-soc-cve-2025-68686-fortinet-fortios-exposure-of-sensitive-information-to-an-unauthorized-actor-vulnerability/

CVE ID: CVE-2025-68686
Vendor: Fortinet
Product: FortiOS
Date Added: 2026-07-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-68686

CISA has added a vulnerability to the KEV catalogue.

- CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-68686

Also:

Cisco tagged Apple yesterday for zero-day reports https://talosintelligence.com/vulnerability_reports#zerodays @TalosSecurity #Fortinet #CISA #infosec #vulnerability #Apple #zeroday

🟠 CVE-2026-16805 - High (8.8)

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16805/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16806 - High (8.8)

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16806/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16807 - High (8.8)

Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16807/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2026-077
Lenze: Incorrect signature validation in the enable SSH routine

The affected products belong to the Controller or Servo Drive product family and contain a vulnerability in a security-critical activation mechanism for service access. The signature verification of a file used for SSH activation can be compromised, which could allow unauthorized access to the device.
#CVE CVE-2026-14837

https://certvde.com/en/advisories/vde-2026-077/

#CSAF https://lenze.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-077.json

RefluXFS : cette faille dans XFS donne un accès root sur RHEL, CentOS et AlmaLinux https://www.it-connect.fr/refluxfs-cve-2026-64600-faille-xfs-acces-root-linux/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Linux

⚪️ New RefluXFS Vulnerability Enables Root Access on Linux

🗨️ Researchers at Qualys have discovered a nine-year-old vulnerability in the XFS file system. The bug, tracked as CVE-2026-64600 and dubbed RefluXFS, allows a local unprivileged user to overwrite protected files and gain root privileges. According to researchers, the bug was…

🔗 https://hackmag.com/news/refluxfs?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

📢 RefluXFS (CVE-2026-64600) : élévation de privilèges locale vers root dans le noyau Linux via XFS
📝 ## 🔍 Contexte

Le 22 juillet 2026...
📖 cyberveille : https://cyberveille.ch/posts/2026-07-26-refluxfs-cve-2026-64600-elevation-de-privileges-locale-vers-root-dans-le-noyau-linux-via-xfs/
🌐 source : https://blog.qualys.com/vulnerabilities-threat-research/2026/07/22/refluxfs-a-linux-kernel-local-privilege-escalation-to-root-in-xfs-cve-2026-64600
#CVE_2026_64600 #IOC #Cyberveille

CVE-2026-64600, dubbed RefluXFS by Qualys Threat Research Unit, is a nine-year-old race condition that lets a local attacker clone a root-owned file — /etc/passwd, a SUID binary, you name it — then hammer it with concurrent O_DIRECT writes until they win the race and own the box. Highly reliable exploitation. Survives reboot. A beautiful, silent corpse. (2/3)

🚨 RefluXFS (CVE-2026-64600) has been identified as a notable vulnerability.

In the Linux kernel, the following vulnerability has been resolved:

xfs: resample the data fork mapping after cycling ILOCK

RefluXFS is a local privilege escalation vulnerability in the Linux kernel's XFS filesystem copy-on-write path. It allows local users to overwrite protected files and gain root access.

ℹ️ Additional details on ZEN SecDB https://secdb.nttzen.cloud/updates/1d26eb14-ce27-4846-a8ce-bae087fb1e46/refluxfs-vulnerability

#infosec #refluxfs #linux #kernel #xfs #lpe
#nttdata #zen #secdb

Aber linux ist doch sicherer als linux…

Sicherheitsforscher von Qualys haben mithilfe von Claude Mythos eine neun Jahre alte und RefluXFS genannte Sicherheitslücke im Linux-Kernel entdeckt, mit der Angreifer durch das überschreiben geschützter Dateien Root-Zugriff erlangen können. Viele Linux-Distributionen sind in der Standardkonfiguration angreifbar, darunter Red Hat Enterprise Linux (RHEL), CentOS, Fedora und Oracle Linux. Admins sollten ihre Systeme absichern […] anfällig sind alle Linux-Kernel ab Version 4.11, welche im April 2017 veröffentlicht wurde. Voraussetzung ist jedoch, dass ein anvisiertes Linux-System über ein XFS-Volume mit aktiver Reflink-Funktion verfügt […] es gebe keinen alternativen Workaround, der zuverlässig vor CVE-2026-64600 schütze

Na, zumindest das kriegen die angelernten neuronalen netzwerke sehr zuverlässig hin: einen haufen uralter fehler in linux aufzufinden. Schön die sicherheitsaktualisierungen einspielen!

🟠 CVE-2026-17496 - High (8.1)

NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled con...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17496/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-17459: perwendel spark 2.9.0 – 2.9.4 affected by symlink following in staticFiles.externalLocation. Exploit public, MEDIUM severity. Restrict external resource access and monitor for patches. https://radar.offseq.com/threat/cve-2026-17459-symlink-following-in-perwendel-spark-e9c7a3ae8bd59674 #OffSeq #CVE202617459 #Java #Security

🟠 CVE-2026-15962 - High (8.8)

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-lev...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15962/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-66012: CRITICAL flaw in siyuan-note siyuan (<3.7.2). Missing authorization on /mcp lets remote attackers read secrets & plant malicious plugins for admin takeover. Disable anonymous Publish mode & restrict /mcp access. https://radar.offseq.com/threat/cve-2026-66012-missing-authorization-in-siyuan-note-siyuan-af31715ea5b396b1 #OffSeq #CVE #Infosec

🔴 CVE-2026-66012 - Critical (10)

SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth check (model.CheckAuth) with no admin-role or read-only enforcement. This exposes 31 MCP tools, including a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66012/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Discover how new Redis RCE exploit PoC code bypasses fixes for CVE-2026-25243 and CVE-2026-25589 across multiple Redis versions.

#Redis #Cybersecurity #RCE #Vulnerability #ExploitPoC

https://meterpreter.org/redis-rce-exploit-poc/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-10818: WPForms Pro <=1.10.1.1 has a HIGH severity file upload vuln (CVSS 8.1). Unauthenticated RCE possible via ajax_chunk_upload_finalize. Restrict access & monitor uploads until a patch is released. https://radar.offseq.com/threat/cve-2026-10818-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-wpforms-wpforms-pro-98bc8d14f7da8c03 #OffSeq #WordPress #Infosec #CVE202610818

🟠 CVE-2026-35425 - High (8)

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35425/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last days (2026-07-20 - 2026-07-20)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 435
- High: 1048
- Medium: 813
- Low: 137
- None: 478

Status:
- : 96
- Analyzed: 307
- Awaiting Analysis: 697
- Deferred: 654
- Modified: 16
- Received: 482
- Rejected: 8
- Undergoing Analysis: 651

CISA KEVs:
- CISA-2026:0721 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0721)
- CISA-2026:0722 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0722)

Top CNAs:
- Oracle: 1108
- kernel.org: 334
- VulnCheck: 204
- GitHub, Inc.: 195
- Patchstack: 156
- N/A: 96
- Mozilla Corporation: 65
- Wordfence: 63
- MITRE: 55
- Joomla! Project: 53

Top Affected Products:
- UNKNOWN: 1745
- Oracle Coherence: 97
- Mozilla Firefox: 58
- Mozilla Thunderbird: 50
- Oracle Mysql Cluster: 38
- Oracle Mysql Server: 37
- Surrealdb: 31
- Oracle Weblogic Server: 23
- Nlnetlabs Unbound: 23
- Oracle Enterprise Manager Base Platform: 23

Top EPSS Score:
- CVE-2026-62144 - 20.62 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62144)
- CVE-2026-16232 - 12.68 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-16232)
- CVE-2026-62145 - 7.54 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62145)
- CVE-2026-6516 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-6516)
- CVE-2026-47668 - 4.34 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-47668)
- CVE-2026-8985 - 4.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8985)
- CVE-2026-64879 - 2.59 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-64879)
- CVE-2026-65711 - 2.41 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-65711)
- CVE-2026-63108 - 1.92 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63108)
- CVE-2026-63766 - 1.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63766)

#ZEN #SecDB #InfoSec

🟠 CVE-2026-16804 - High (8.3)

Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16804/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last days (2026-07-20 - 2026-07-20)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 435
- High: 1048
- Medium: 813
- Low: 137
- None: 478

Status:
- : 96
- Analyzed: 307
- Awaiting Analysis: 697
- Deferred: 654
- Modified: 16
- Received: 482
- Rejected: 8
- Undergoing Analysis: 651

CISA KEVs:
- CISA-2026:0721 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0721)
- CISA-2026:0722 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0722)

Top CNAs:
- Oracle: 1108
- kernel.org: 334
- VulnCheck: 204
- GitHub, Inc.: 195
- Patchstack: 156
- N/A: 96
- Mozilla Corporation: 65
- Wordfence: 63
- MITRE: 55
- Joomla! Project: 53

Top Affected Products:
- UNKNOWN: 1745
- Oracle Coherence: 97
- Mozilla Firefox: 58
- Mozilla Thunderbird: 50
- Oracle Mysql Cluster: 38
- Oracle Mysql Server: 37
- Surrealdb: 31
- Oracle Weblogic Server: 23
- Nlnetlabs Unbound: 23
- Oracle Enterprise Manager Base Platform: 23

Top EPSS Score:
- CVE-2026-62144 - 20.62 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62144)
- CVE-2026-16232 - 12.68 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-16232)
- CVE-2026-62145 - 7.54 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62145)
- CVE-2026-6516 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-6516)
- CVE-2026-47668 - 4.34 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-47668)
- CVE-2026-8985 - 4.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8985)
- CVE-2026-64879 - 2.59 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-64879)
- CVE-2026-65711 - 2.41 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-65711)
- CVE-2026-63108 - 1.92 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63108)
- CVE-2026-63766 - 1.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63766)

#ZEN #SecDB #InfoSec

📈 CVE Published in last days (2026-07-20 - 2026-07-20)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 435
- High: 1048
- Medium: 813
- Low: 137
- None: 478

Status:
- : 96
- Analyzed: 307
- Awaiting Analysis: 697
- Deferred: 654
- Modified: 16
- Received: 482
- Rejected: 8
- Undergoing Analysis: 651

CISA KEVs:
- CISA-2026:0721 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0721)
- CISA-2026:0722 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0722)

Top CNAs:
- Oracle: 1108
- kernel.org: 334
- VulnCheck: 204
- GitHub, Inc.: 195
- Patchstack: 156
- N/A: 96
- Mozilla Corporation: 65
- Wordfence: 63
- MITRE: 55
- Joomla! Project: 53

Top Affected Products:
- UNKNOWN: 1745
- Oracle Coherence: 97
- Mozilla Firefox: 58
- Mozilla Thunderbird: 50
- Oracle Mysql Cluster: 38
- Oracle Mysql Server: 37
- Surrealdb: 31
- Oracle Weblogic Server: 23
- Nlnetlabs Unbound: 23
- Oracle Enterprise Manager Base Platform: 23

Top EPSS Score:
- CVE-2026-62144 - 20.62 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62144)
- CVE-2026-16232 - 12.68 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-16232)
- CVE-2026-62145 - 7.54 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62145)
- CVE-2026-6516 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-6516)
- CVE-2026-47668 - 4.34 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-47668)
- CVE-2026-8985 - 4.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8985)
- CVE-2026-64879 - 2.59 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-64879)
- CVE-2026-65711 - 2.41 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-65711)
- CVE-2026-63108 - 1.92 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63108)
- CVE-2026-63766 - 1.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63766)

#ZEN #SecDB #InfoSec

🔴 CVE-2026-54120 - Critical (9.9)

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54120/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

A Panduit IntraVUE vulnerability tracked as CVE-2026-42933 scores CVSS 10. Five flaws let attackers cross OT segmentation and steal credentials.

#PanduitIntraVUE #CVE202642933 #ICSSecurity #OTSecurity

https://securityonline.info/panduit-intravue-cve-2026-42933/?utm_source=mastodon&utm_medium=jetpack_social

A C-CURE 9000 vulnerability chain hits CVSS 9.6. CVE-2026-21655 allows remote code execution on Johnson Controls victor application servers.

#CCURE9000 #CVE202621655 #JohnsonControls #ICSSecurity

https://securityonline.info/c-cure-9000-cve-2026-21655/?utm_source=mastodon&utm_medium=jetpack_social

A C-CURE 9000 vulnerability chain hits CVSS 9.6. CVE-2026-21655 allows remote code execution on Johnson Controls victor application servers.

#CCURE9000 #CVE202621655 #JohnsonControls #ICSSecurity

https://securityonline.info/c-cure-9000-cve-2026-21655/?utm_source=mastodon&utm_medium=jetpack_social

📈 CVE Published in last days (2026-07-20 - 2026-07-20)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 435
- High: 1048
- Medium: 813
- Low: 137
- None: 478

Status:
- : 96
- Analyzed: 307
- Awaiting Analysis: 697
- Deferred: 654
- Modified: 16
- Received: 482
- Rejected: 8
- Undergoing Analysis: 651

CISA KEVs:
- CISA-2026:0721 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0721)
- CISA-2026:0722 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0722)

Top CNAs:
- Oracle: 1108
- kernel.org: 334
- VulnCheck: 204
- GitHub, Inc.: 195
- Patchstack: 156
- N/A: 96
- Mozilla Corporation: 65
- Wordfence: 63
- MITRE: 55
- Joomla! Project: 53

Top Affected Products:
- UNKNOWN: 1745
- Oracle Coherence: 97
- Mozilla Firefox: 58
- Mozilla Thunderbird: 50
- Oracle Mysql Cluster: 38
- Oracle Mysql Server: 37
- Surrealdb: 31
- Oracle Weblogic Server: 23
- Nlnetlabs Unbound: 23
- Oracle Enterprise Manager Base Platform: 23

Top EPSS Score:
- CVE-2026-62144 - 20.62 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62144)
- CVE-2026-16232 - 12.68 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-16232)
- CVE-2026-62145 - 7.54 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62145)
- CVE-2026-6516 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-6516)
- CVE-2026-47668 - 4.34 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-47668)
- CVE-2026-8985 - 4.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8985)
- CVE-2026-64879 - 2.59 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-64879)
- CVE-2026-65711 - 2.41 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-65711)
- CVE-2026-63108 - 1.92 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63108)
- CVE-2026-63766 - 1.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63766)

#ZEN #SecDB #InfoSec

📈 CVE Published in last days (2026-07-20 - 2026-07-20)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 435
- High: 1048
- Medium: 813
- Low: 137
- None: 478

Status:
- : 96
- Analyzed: 307
- Awaiting Analysis: 697
- Deferred: 654
- Modified: 16
- Received: 482
- Rejected: 8
- Undergoing Analysis: 651

CISA KEVs:
- CISA-2026:0721 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0721)
- CISA-2026:0722 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0722)

Top CNAs:
- Oracle: 1108
- kernel.org: 334
- VulnCheck: 204
- GitHub, Inc.: 195
- Patchstack: 156
- N/A: 96
- Mozilla Corporation: 65
- Wordfence: 63
- MITRE: 55
- Joomla! Project: 53

Top Affected Products:
- UNKNOWN: 1745
- Oracle Coherence: 97
- Mozilla Firefox: 58
- Mozilla Thunderbird: 50
- Oracle Mysql Cluster: 38
- Oracle Mysql Server: 37
- Surrealdb: 31
- Oracle Weblogic Server: 23
- Nlnetlabs Unbound: 23
- Oracle Enterprise Manager Base Platform: 23

Top EPSS Score:
- CVE-2026-62144 - 20.62 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62144)
- CVE-2026-16232 - 12.68 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-16232)
- CVE-2026-62145 - 7.54 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62145)
- CVE-2026-6516 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-6516)
- CVE-2026-47668 - 4.34 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-47668)
- CVE-2026-8985 - 4.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8985)
- CVE-2026-64879 - 2.59 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-64879)
- CVE-2026-65711 - 2.41 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-65711)
- CVE-2026-63108 - 1.92 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63108)
- CVE-2026-63766 - 1.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63766)

#ZEN #SecDB #InfoSec

📈 CVE Published in last days (2026-07-20 - 2026-07-20)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 435
- High: 1048
- Medium: 813
- Low: 137
- None: 478

Status:
- : 96
- Analyzed: 307
- Awaiting Analysis: 697
- Deferred: 654
- Modified: 16
- Received: 482
- Rejected: 8
- Undergoing Analysis: 651

CISA KEVs:
- CISA-2026:0721 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0721)
- CISA-2026:0722 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0722)

Top CNAs:
- Oracle: 1108
- kernel.org: 334
- VulnCheck: 204
- GitHub, Inc.: 195
- Patchstack: 156
- N/A: 96
- Mozilla Corporation: 65
- Wordfence: 63
- MITRE: 55
- Joomla! Project: 53

Top Affected Products:
- UNKNOWN: 1745
- Oracle Coherence: 97
- Mozilla Firefox: 58
- Mozilla Thunderbird: 50
- Oracle Mysql Cluster: 38
- Oracle Mysql Server: 37
- Surrealdb: 31
- Oracle Weblogic Server: 23
- Nlnetlabs Unbound: 23
- Oracle Enterprise Manager Base Platform: 23

Top EPSS Score:
- CVE-2026-62144 - 20.62 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62144)
- CVE-2026-16232 - 12.68 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-16232)
- CVE-2026-62145 - 7.54 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62145)
- CVE-2026-6516 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-6516)
- CVE-2026-47668 - 4.34 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-47668)
- CVE-2026-8985 - 4.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8985)
- CVE-2026-64879 - 2.59 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-64879)
- CVE-2026-65711 - 2.41 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-65711)
- CVE-2026-63108 - 1.92 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63108)
- CVE-2026-63766 - 1.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63766)

#ZEN #SecDB #InfoSec

🟠 CVE-2026-59933 - High (7.5)

PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, and all releases up to and including 1.30.5, the OLE reader follows s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59933/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📰 Unpatched FastJson RCE Zero-Day (CVE-2026-16723) Actively Exploited

🚨 ACTIVE EXPLOITATION: A critical, unpatched RCE zero-day (CVE-2026-16723) in FastJson 1.x is being exploited in the wild. Affects versions 1.2.68-1.2.83. Users must migrate to FastJson2 or enable SafeMode now! #Java #ZeroDay #CyberAttack

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/unpatched-fastjson-rce-zero-day-cve-2026-16723-under-active-exploitation/?utm_source=mastodon&utm…

Discover the critical Fastjson RCE CVE-2026-16723 vulnerability. Learn how attackers exploit Spring Boot applications and find mitigation strategies.

#Fastjson #CVE202616723 #Cybersecurity #SpringBoot #Malware

https://meterpreter.org/fastjson-rce-cve-2026-16723/?utm_source=mastodon&utm_medium=jetpack_social

Discover the critical Fastjson RCE CVE-2026-16723 vulnerability. Learn how attackers exploit Spring Boot applications and find mitigation strategies.

#Fastjson #CVE202616723 #Cybersecurity #SpringBoot #Malware

https://meterpreter.org/fastjson-rce-cve-2026-16723/?utm_source=mastodon&utm_medium=jetpack_social

⚠️ CRITICAL: Hackers target US firms in FastJson RCE zero-day attacks

A critical RCE zero-day (CVE-2026-16723) in FastJson Java library versions 1.2.68-1.2.83 is actively exploited against U.S. firms across multiple sectors. Attackers can execute arbitrary code without user interaction. FastJson 1.x is unmaintained, leaving affected systems without patches.

https://threatnoir.com/focus

#infosec #cybersecurity

⚠️ CRITICAL: Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Attackers are actively exploiting CVE-2026-16723, a critical RCE in Alibaba Fastjson 1.x used by Spring Boot applications. Unauthenticated code execution is possible with Java process privileges. No patch exists for 1.x versions yet.

https://threatnoir.com/focus

#infosec #cybersecurity

🏆 New Achievement! Critical Hit: JSON and the Argonauts!

You have looted a CURSED ITEM: Fastjson 1.x (versions 1.2.68–1.2.83). Equip penalty: unauthenticated attackers may now execute arbitrary code on your Spring Boot applications via crafted JSON requests, bypassing default security configurations entirely. CVE-2026-16723 is active in the wild, no patch exists for the 1.x branch, and yes, that means you.

Inventory is full of regret. (1/2)

FastJson 1.2.83 RCE (CVE-2026-16723) https://fearsoff.org/research/fastjson-1-2-83-rce

Critical Fastjson 1.x Zero-Day RCE Exploited in the Wild

Alibaba's Fastjson 1.x library is vulnerable to a critical zero-day remote code execution flaw (CVE-2026-16723) that is currently exploited in the wild against Spring Boot applications. The vulnerability allows unauthenticated attackers to run arbitrary code by bypassing default security configurations through crafted JSON requests.

**If you run Java apps using Fastjson 1.x (versions 1.2.68–1.2.83) as Spring Boot fat-JARs, your applications are actively attacked, and there is no patch for the 1.x branch. Migrate to Fastjson2 ASAP. If you can't migrate, immediately enable SafeMode by adding `-Dfastjson.parser.safeMode=true` to your JVM settings and monitor your logs for unusual `@type` values or unexpected outbound connections from Java.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/critical-fastjson-1-x-zero-day-rce-exploited-in-the-wild-d-d-0-w-k/gD2P6Ple2L

Escaping Claude Cowork’s local VM sandbox via CVE-2026-46331 https://www.accomplish.ai/blog/sharedroot-escaping-claude-cowork-sandbox/

CERT/CC warns of a Plane authorization bypass, CVE-2026-15342. It lets users reach other workspaces' files, and no patch exists yet.

#Plane #CVE202615342 #AuthorizationBypass #MultiTenant #CERTCC #Vulnerability #Cybersecurity

https://securityonline.info/plane-authorization-bypass-cve-2026-15342/?utm_source=mastodon&utm_medium=jetpack_social

MongoDB Patches 26 Vulnerabilities Including Critical Memory Corruption Flaw

MongoDB released security updates to fix 26 vulnerabilities, including a critical memory corruption flaw (CVE-2026-13072) and multiple high-severity issues that allow unauthorized data access and service crashes.

**If you run self-hosted MongoDB, update your servers now to the latest patched version (7.0.39, 8.0.28, 8.2.12, 8.3.7, or 9.0.0-rc1). There's a critical flaw that could let attackers crash your database or run their own code. If you use MongoDB Atlas or another managed service, you're already covered and don't need to do anything.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/mongodb-patches-26-vulnerabilities-including-critical-memory-corruption-flaw-0-u-a-i-s/gD2P6Ple2L

Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)
#CVE_2026_16232
https://www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232/

Critical Check Point Zero-Day Under Active Attack: How CVE-2026-16232 Gives Hackers Full Administrative Control + Video

Introduction: Another Wake-Up Call for Enterprise Cybersecurity Enterprise security appliances are designed to protect organizations from cyberattacks, but what happens when those very systems become the target? That is exactly the concern surrounding CVE-2026-16232, a newly disclosed critical vulnerability affecting Check Point Security Management…

https://undercodenews.com/critical-check-point-zero-day-under-active-attack-how-cve-2026-16232-gives-hackers-full-administrative-control-video/?utm_source=mastodon&utm_medium=jetpack_social

Check Point Flaw Exploited as Researchers Release Public PoC

A critical flaw in Check Point's SmartConsole, known as CVE-2026-16232, allows hackers to bypass authentication and gain full administrative privileges with a staggering CVSS score of 9.3. This vulnerability lets unauthenticated remote attackers obtain a login token and take control, potentially modifying security policies and…

https://osintsights.com/check-point-flaw-exploited-as-researchers-release-public-poc?utm_source=mastodon&utm_medium=social

#Cve202616232 #CheckPoint #AuthenticationBypass #Smartconsole #Vulnerability

Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)
#CVE_2026_16232
https://www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232/

CVE-2026-16232 is a SmartConsole authentication bypass in Check Point Security Management. Exploited in the wild, with a public PoC now available.

#CheckPoint #SmartConsole #CVE202616232 #AuthenticationBypass #ZeroDay #CyberSecurity

https://securityonline.info/check-point-smartconsole-cve-2026-16232-2/?utm_source=mastodon&utm_medium=jetpack_social

⚪️ Hackers Exploit a Zero-Day in Check Point SmartConsole

🗨️ Check Point has warned customers about a critical vulnerability, CVE-2026-16232, affecting its Security Management and Multi-Domain Management products. The flaw allows attackers to bypass authentication, gain administrator privileges, and modify security policies. The vulnerability is already be…

🔗 https://hackmag.com/news/cve-2026-16232?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

📈 CVE Published in last days (2026-07-20 - 2026-07-20)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 435
- High: 1048
- Medium: 813
- Low: 137
- None: 478

Status:
- : 96
- Analyzed: 307
- Awaiting Analysis: 697
- Deferred: 654
- Modified: 16
- Received: 482
- Rejected: 8
- Undergoing Analysis: 651

CISA KEVs:
- CISA-2026:0721 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0721)
- CISA-2026:0722 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0722)

Top CNAs:
- Oracle: 1108
- kernel.org: 334
- VulnCheck: 204
- GitHub, Inc.: 195
- Patchstack: 156
- N/A: 96
- Mozilla Corporation: 65
- Wordfence: 63
- MITRE: 55
- Joomla! Project: 53

Top Affected Products:
- UNKNOWN: 1745
- Oracle Coherence: 97
- Mozilla Firefox: 58
- Mozilla Thunderbird: 50
- Oracle Mysql Cluster: 38
- Oracle Mysql Server: 37
- Surrealdb: 31
- Oracle Weblogic Server: 23
- Nlnetlabs Unbound: 23
- Oracle Enterprise Manager Base Platform: 23

Top EPSS Score:
- CVE-2026-62144 - 20.62 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62144)
- CVE-2026-16232 - 12.68 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-16232)
- CVE-2026-62145 - 7.54 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62145)
- CVE-2026-6516 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-6516)
- CVE-2026-47668 - 4.34 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-47668)
- CVE-2026-8985 - 4.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8985)
- CVE-2026-64879 - 2.59 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-64879)
- CVE-2026-65711 - 2.41 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-65711)
- CVE-2026-63108 - 1.92 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63108)
- CVE-2026-63766 - 1.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63766)

#ZEN #SecDB #InfoSec

Discover the critical CVE-2026-16232 vulnerability in Check Point Security Management servers, allowing remote attackers to gain full administrative privileges without a password.

#CheckPoint #CyberSecurity #CVE202616232 #NetworkSecurity #Vulnerability

https://meterpreter.org/check-point-security-management-flaw/?utm_source=mastodon&utm_medium=jetpack_social

State of (in)security - Week 30, 2026

During week 30 of 2026, cybersecurity monitoring recorded 7 advisories and 28 incidents/breaches affecting roughly 80 million individuals. The largest breach is Suno exposing 55.3 million users and AI training source code. Malware/ransomware and unauthorized access are the leading causes of incidents and healthcare and IT/software as the most-targeted industries.

**Patch the actively exploited on-premises SharePoint (CVE-2026-50522), self-hosted ServiceNow, Fastjson 1.x Java apps, Oracle systems (July 2026 Critical Patch Update), and WordPress. Then update Firefox and Thunderbird and confirm your Adobe Acrobat Chrome extension is running version 26.5.2.3 or later.**
#cybersecurity #infosec #knowledge #weeklyreport
https://beyondmachines.net/event_details/state-of-in-security-week-30-2026-w-0-e-b-i/gD2P6Ple2L

🏆 New Achievement! Stand In the Fire, Lose the SharePoint!

MOVE OUT OF THE DESERIALIZATION FLAW. I AM NOT KIDDING. CVE-2026-50522 is a CVSS 9.8 critical hole in on-premises Microsoft SharePoint — remote code execution, low complexity, no special system knowledge required. Researchers at watchTowr and Defused are screaming in chat right now because exploit code just dropped and attackers are already in your server. (1/2)

I wonder how many hosters are vulnerable to CVE-2026-53359 (Januscape). Probably a lot.

Firefox Flaw Exploited by Malicious Webpage

A single visit to a malicious webpage is all it takes to compromise your Firefox browser, thanks to a recently exploited flaw tracked as CVE-2026-10702. No settings changes or extra interaction required - just a simple visit can leave you vulnerable.

https://osintsights.com/firefox-flaw-exploited-by-malicious-webpage?utm_source=mastodon&utm_medium=social

#Firefox #Cve202610702 #JitCompiler #BrowserVulnerability #RemoteCompromise

CVE-2026-49176 is a Windows WalletService elevation of privilege flaw. Full details and a public PoC exploit are out, so patch Windows now.

#CVE202649176 #WalletService #Windows #PrivilegeEscalation #EoP #PoC #Microsoft

http://securityonline.info/cve-2026-49176-walletservice-eop/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-49176 Exploit Development: WalletService to SYSTEM https://lobste.rs/s/dxhdqx #security #windows
https://davidcarliez.github.io/blog/cve-2026-49176-walletservice-to-system/

Holy shit

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

" Independent proof-of-concept for the unauthenticated WordPress REST batch route-confusion SQL injection associated with Searchlight Cyber's wp2shell advisory."

https://github.com/Icex0/wp2shell-poc

#WordPress #RCE

📈 CVE Published in last days (2026-07-20 - 2026-07-20)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 435
- High: 1048
- Medium: 813
- Low: 137
- None: 478

Status:
- : 96
- Analyzed: 307
- Awaiting Analysis: 697
- Deferred: 654
- Modified: 16
- Received: 482
- Rejected: 8
- Undergoing Analysis: 651

CISA KEVs:
- CISA-2026:0721 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0721)
- CISA-2026:0722 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0722)

Top CNAs:
- Oracle: 1108
- kernel.org: 334
- VulnCheck: 204
- GitHub, Inc.: 195
- Patchstack: 156
- N/A: 96
- Mozilla Corporation: 65
- Wordfence: 63
- MITRE: 55
- Joomla! Project: 53

Top Affected Products:
- UNKNOWN: 1745
- Oracle Coherence: 97
- Mozilla Firefox: 58
- Mozilla Thunderbird: 50
- Oracle Mysql Cluster: 38
- Oracle Mysql Server: 37
- Surrealdb: 31
- Oracle Weblogic Server: 23
- Nlnetlabs Unbound: 23
- Oracle Enterprise Manager Base Platform: 23

Top EPSS Score:
- CVE-2026-62144 - 20.62 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62144)
- CVE-2026-16232 - 12.68 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-16232)
- CVE-2026-62145 - 7.54 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62145)
- CVE-2026-6516 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-6516)
- CVE-2026-47668 - 4.34 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-47668)
- CVE-2026-8985 - 4.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8985)
- CVE-2026-64879 - 2.59 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-64879)
- CVE-2026-65711 - 2.41 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-65711)
- CVE-2026-63108 - 1.92 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63108)
- CVE-2026-63766 - 1.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63766)

#ZEN #SecDB #InfoSec

Apache Fory vulnerabilities hit Java, C++, and Rust deserialization, including CVE-2026-64606. Upgrade to Fory 1.4.0 to fix all four flaws.

#ApacheFory #Deserialization #Java #Rust #Cpp #Vulnerability #OpenSource #Cybersecurity

https://securityonline.info/apache-fory-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

📈 CVE Published in last days (2026-07-20 - 2026-07-20)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 435
- High: 1048
- Medium: 813
- Low: 137
- None: 478

Status:
- : 96
- Analyzed: 307
- Awaiting Analysis: 697
- Deferred: 654
- Modified: 16
- Received: 482
- Rejected: 8
- Undergoing Analysis: 651

CISA KEVs:
- CISA-2026:0721 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0721)
- CISA-2026:0722 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0722)

Top CNAs:
- Oracle: 1108
- kernel.org: 334
- VulnCheck: 204
- GitHub, Inc.: 195
- Patchstack: 156
- N/A: 96
- Mozilla Corporation: 65
- Wordfence: 63
- MITRE: 55
- Joomla! Project: 53

Top Affected Products:
- UNKNOWN: 1745
- Oracle Coherence: 97
- Mozilla Firefox: 58
- Mozilla Thunderbird: 50
- Oracle Mysql Cluster: 38
- Oracle Mysql Server: 37
- Surrealdb: 31
- Oracle Weblogic Server: 23
- Nlnetlabs Unbound: 23
- Oracle Enterprise Manager Base Platform: 23

Top EPSS Score:
- CVE-2026-62144 - 20.62 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62144)
- CVE-2026-16232 - 12.68 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-16232)
- CVE-2026-62145 - 7.54 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-62145)
- CVE-2026-6516 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-6516)
- CVE-2026-47668 - 4.34 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-47668)
- CVE-2026-8985 - 4.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8985)
- CVE-2026-64879 - 2.59 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-64879)
- CVE-2026-65711 - 2.41 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-65711)
- CVE-2026-63108 - 1.92 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63108)
- CVE-2026-63766 - 1.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63766)

#ZEN #SecDB #InfoSec

#OT #Advisory VDE-2026-081
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities

Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-081/

#CSAF https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-081.json

#OT #Advisory VDE-2026-076
ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products

The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-076/

#CSAF https://ads-tec-iit.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-076.json

#OT #Advisory VDE-2026-081
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities

Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-081/

#CSAF https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-081.json

#OT #Advisory VDE-2026-076
ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products

The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-076/

#CSAF https://ads-tec-iit.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-076.json

Fraggap Linux Kernel Vulnerability: Full Details and PoC Exploit Code Now Public

https://securityonline.info/fraggap-linux-kernel-cve-2026-53362/?utm_source=mastodon&utm_medium=jetpack_social

PoC's for nginx RCE (CVE-2026-42530, CVE-2026-42533) https://github.com/DepthFirstDisclosures/Nginx-Rift/

🚨 Active Exploit Warning: SonicWall SMA1000 appliances are under fire from a high-severity code injection flaw (CVE-2026-15410). Our latest TSUITE brief breaks down the CrowdStrike detection logic and immediate hardening steps to secure your management interfaces. Command the wire: https://thecybermind.co/jily

#SOC

(CISA TS-MAN) CVE-2023-4346 – KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

Severity: HIGH Impact Summary: An attacker could purge all devices and set a BCU key to lock the device, potentially resulting in denial of service if additional security options are not enabled....

https://thecybermind.co/2026/07/25/cisa-ts-man-cve-2023-4346-knx-association-knx-protocol-connection-authorization-option-1-overly-restrictive-account-lockout-mechanism-vulnerability/

(CISA TS-MAN) CVE-2026-46817 – Oracle E-Business Suite Improper Privilege Management Vulnerability

Severity: CRITICAL Impact Summary: Allows unauthenticated attacker to compromise Oracle Payments, potentially resulting in full takeover....

https://thecybermind.co/2026/07/25/cisa-ts-man-cve-2026-46817-oracle-e-business-suite-improper-privilege-management-vulnerability/

(CISA TS-MAN) CVE-2026-56155 – Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Severity: HIGH Impact Summary: Allows an authorized attacker to locally elevate privileges due to insufficient granularity of access control....

https://thecybermind.co/2026/07/25/cisa-ts-man-cve-2026-56155-microsoft-active-directory-federation-services-insufficient-granularity-of-access-control-vulnerability/

Certighost AD CS vulnerability details and PoC code for CVE-2026-54121 are public. The flaw let a low-privileged user impersonate a Domain Controller.

#Certighost #CVE202654121 #ADCS #ActiveDirectory

https://securityonline.info/certighost-cve-2026-54121/?utm_source=mastodon&utm_medium=jetpack_social

Certighost AD CS vulnerability details and PoC code for CVE-2026-54121 are public. The flaw let a low-privileged user impersonate a Domain Controller.

#Certighost #CVE202654121 #ADCS #ActiveDirectory

https://securityonline.info/certighost-cve-2026-54121/?utm_source=mastodon&utm_medium=jetpack_social

Exploit público para a falha Certighost expôs domínios do Windows a controlo total. Uma nova vulnerabilidade, rastreada como CVE-2026-54121, coloca redes empresariais em risco e permite que um atacante assuma o controlo completo de um domínio informático. 🚨

🔗 https://tugatech.com.pt/t88205-exploit-publico-para-a-falha-certighost-expoe-dominios-do-windows-a-controlo-total

#controlo #exploit #falha #windows 

CertiGhost fork - Patched SAN handling + MAQ-safe account reuse https://github.com/marcgoam/CVE-2026-54121-CertiGhost

Detect the Certighost with NetExec🔥

Thanks to Xed_sama, the enum_cve module of NetExec will now detect if a host has not been patched and is potentially vulnerable to the Certighost vulnerability (CVE-2026-54121)🚀

Certighost Exploit Allows Low-Privileged Active Directory Users to Impersonate a Domain Controller

https://thecybersecguru.com/news/certighost-cve-2026-54121-ad-cs-domain-controller-impersonation/

A public PoC exploit now targets CVE-2026-50502, an RCE in the Windows Event Log service. Microsoft patched the flaw on July 14, 2026. Details below.

#CVE202650502 #WindowsEventLog #RCE #PatchTuesday #InfoSec #Microsoft

https://securityonline.info/cve-2026-50502-windows-event-log-rce/?utm_source=mastodon&utm_medium=jetpack_social

A public PoC exploit now targets CVE-2026-50502, an RCE in the Windows Event Log service. Microsoft patched the flaw on July 14, 2026. Details below.

#CVE202650502 #WindowsEventLog #RCE #PatchTuesday #InfoSec #Microsoft

https://securityonline.info/cve-2026-50502-windows-event-log-rce/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft has patched a critical Windows Event Logging vulnerability (CVE-2026-50502) allowing remote code execution. Update your systems immediately.

#Microsoft #Vulnerability #CyberSecurity #WindowsServer #CVE202650502

https://meterpreter.org/windows-event-logging-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-50469 - ProjFS File Delete https://bad-jubies.github.io/projected-file-system-file-delete-cve-2026-50469

CVE-2026-50469 - ProjFS File Delete https://bad-jubies.github.io/projected-file-system-file-delete-cve-2026-50469

Siemens Patches Critical OpenSSL Flaw in Desigo CC Building Management Systems

Siemens released security updates for Desigo CC to address a critical OpenSSL vulnerability (CVE-2025-15467) that allows unauthenticated remote code execution or denial of service through malformed cryptographic messages.

**First, make sure all Desigo CC building management systems are isolated from the internet and reachable only from trusted networks. Then, if you run V9 update to V9.0 QU1 (or later) and if you run V8 apply patch V8.0 QU2.0021; for V7 there is no patch yet.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/siemens-patches-critical-openssl-flaw-in-desigo-cc-building-management-systems-t-n-v-d-a/gD2P6Ple2L

Siemens Patches Critical OpenSSL Flaw in Desigo CC Building Management Systems

Siemens released security updates for Desigo CC to address a critical OpenSSL vulnerability (CVE-2025-15467) that allows unauthenticated remote code execution or denial of service through malformed cryptographic messages.

**First, make sure all Desigo CC building management systems are isolated from the internet and reachable only from trusted networks. Then, if you run V9 update to V9.0 QU1 (or later) and if you run V8 apply patch V8.0 QU2.0021; for V7 there is no patch yet.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/siemens-patches-critical-openssl-flaw-in-desigo-cc-building-management-systems-t-n-v-d-a/gD2P6Ple2L

(CISA TS-MAN) CVE-2026-55255 – Langflow Authorization Bypass Through User-Controlled Key Vulnerability

Severity: HIGH Impact Summary: An authenticated attacker can execute any flow belonging to another user by specifying the victim's flow ID in the request, bypassing authorization controls....

https://thecybermind.co/2026/07/25/cisa-ts-man-cve-2026-55255-langflow-authorization-bypass-through-user-controlled-key-vulnerability/

⚠️ CRITICAL: Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

Cl0p ransomware affiliates are actively exploiting unauthenticated RCE vulnerabilities in internet-exposed PTC Windchill and FlexPLM instances by chaining CVE-2026-12569 with a separate information disclosure flaw. Affected organizations in manufacturing, automotive, aerospace, and retail face data…

https://threatnoir.com/focus

#infosec #cybersecurity

Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)
#Cl0p #CVE_2026_12569
https://ransom-isac.org/blog/clop-windchill-flexplm-exploitation/

2026-W30 — Weekly Threat Roundup

🦅 Russian APT Laundry Bear exploited a Zimbra zero-click XSS flaw (CVE-2025-66376) to steal emails and MFA tokens from NATO, US, and Ukrainian targets with no user interaction required.
🏭 Clop affiliates are mass-exploiting PTC Windchill and FlexPLM (CVE-2026-12569) for unauthenticated RCE and da…

https://threatnoir.com/weekly/2026-w30

#infosec #cybersecurity #threatintel

#OT #Advisory VDE-2026-081
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities

Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-081/

#CSAF https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-081.json

#OT #Advisory VDE-2026-076
ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products

The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.
#CVE CVE-2026-14168, CVE-2026-14167, CVE-2026-14169, CVE-2025-69421, CVE-2025-69420, CVE-2025-69419, CVE-2026-5172, CVE-2026-2291, CVE-2026-14171, CVE-2026-22795, CVE-2026-22796, CVE-2026-4893, CVE-2025-68160, CVE-2025-69418, CVE-2026-40510

https://certvde.com/en/advisories/vde-2026-076/

#CSAF https://ads-tec-iit.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-076.json