⚠️ HIGH severity: CVE-2026-48962 in PMQS IO::Compress (Perl <2.220) enables eval injection via crafted glob strings. Arbitrary Perl code may execute with process privileges. Restrict untrusted input & monitor for patches. https://radar.offseq.com/threat/cve-2026-48962-cwe-95-improper-neutralization-of-d-a4f0eb17 #OffSeq #Vuln #Perl #Infosec

⚠️ HIGH severity: CVE-2026-48962 in PMQS IO::Compress (Perl <2.220) enables eval injection via crafted glob strings. Arbitrary Perl code may execute with process privileges. Restrict untrusted input & monitor for patches. https://radar.offseq.com/threat/cve-2026-48962-cwe-95-improper-neutralization-of-d-a4f0eb17 #OffSeq #Vuln #Perl #Infosec

CVE-2026-49017: HIGH-severity in OpenStack Swift 2.36.0 & 2.37.0. Infinite loop in s3api lets authenticated attackers exhaust proxy workers → DoS risk. Patch to 2.36.2 or 2.37.2+ now! 🔄 https://radar.offseq.com/threat/cve-2026-49017-cwe-835-loop-with-unreachable-exit--0557d1bf #OffSeq #OpenStack #Vuln #DoS

CVE-2026-49017: HIGH-severity in OpenStack Swift 2.36.0 & 2.37.0. Infinite loop in s3api lets authenticated attackers exhaust proxy workers → DoS risk. Patch to 2.36.2 or 2.37.2+ now! 🔄 https://radar.offseq.com/threat/cve-2026-49017-cwe-835-loop-with-unreachable-exit--0557d1bf #OffSeq #OpenStack #Vuln #DoS

🟠 CVE-2026-9632 - High (8.8)

A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this issue is the function strcpy of the file /goform/formGroupConfig of the component Web Management Interface. Executing a manipulation of the argument Profile can ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9632/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9632 - High (8.8)

A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this issue is the function strcpy of the file /goform/formGroupConfig of the component Web Management Interface. Executing a manipulation of the argument Profile can ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9632/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9631 - High (8.8)

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/formConfigFastDirectionW of the component Web Management Interface. Performing a manipulation of ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9631/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9631 - High (8.8)

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/formConfigFastDirectionW of the component Web Management Interface. Performing a manipulation of ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9631/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9628 - High (8.8)

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown function of the file /goform/formPptpClientConfig of the component Web Management Interface. This manipulation of the argument PPTP server address/userna...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9628/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9628 - High (8.8)

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown function of the file /goform/formPptpClientConfig of the component Web Management Interface. This manipulation of the argument PPTP server address/userna...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9628/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9627 - High (8.8)

A security flaw has been discovered in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/setSysAdm of the component Web Management Interface. The manipulation of the argument sysAdmUser/sysAdmPass results in...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9627/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9627 - High (8.8)

A security flaw has been discovered in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/setSysAdm of the component Web Management Interface. The manipulation of the argument sysAdmUser/sysAdmPass results in...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9627/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9207 - High (8.8)

Tanium addressed an unauthorized code execution vulnerability in Connect.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9207/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9207 - High (8.8)

Tanium addressed an unauthorized code execution vulnerability in Connect.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9207/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 EUVD-2026-31950

📊 Score: n/a
📅 Updated: 2026-05-26

📝 FastNetMon Community Edition through 1.2.9 has a buffer overflow, a different vulnerability than CVE-2026-48686 and CVE-2026-48689.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31950

#cybersecurity #infosec #euvd #cve #vulnerability

🟠 CVE-2025-43306 - High (7.8)

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to gain root privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-43306/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-43306 - High (7.8)

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to gain root privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-43306/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42013 - High (8.2)

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42013/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42013 - High (8.2)

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42013/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5260 - High (8.2)

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnera...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5260/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5260 - High (8.2)

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnera...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5260/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CRITICAL: CVE-2026-9312 (SSRF) in GitHub Enterprise Server 3.16.0 – 3.21.0 lets unauth attackers access internal services via crafted uploads. Patch to 3.16.20+ ASAP! Details: https://radar.offseq.com/threat/cve-2026-9312-cwe-918-server-side-request-forgery--b1f49fcb #OffSeq #SSRF #GitHub #Vuln

🚨 CRITICAL: CVE-2026-9312 (SSRF) in GitHub Enterprise Server 3.16.0 – 3.21.0 lets unauth attackers access internal services via crafted uploads. Patch to 3.16.20+ ASAP! Details: https://radar.offseq.com/threat/cve-2026-9312-cwe-918-server-side-request-forgery--b1f49fcb #OffSeq #SSRF #GitHub #Vuln

🟠 CVE-2026-44966 - High (8.3)

Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and earlier, a prototype pollution vulnerability was discovered in velocityjs. This issue occurs during the processing of #set directives in Velocity templ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44966 - High (8.3)

Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and earlier, a prototype pollution vulnerability was discovered in velocityjs. This issue occurs during the processing of #set directives in Velocity templ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44900 - High (8.1)

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.1, in SignedPublicKeysTrustValidatorImpl.isTrusted(), the ECDSA signature verification at line 45 discards the boolean return value of Signature....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44900/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44900 - High (8.1)

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.1, in SignedPublicKeysTrustValidatorImpl.isTrusted(), the ECDSA signature verification at line 45 discards the boolean return value of Signature....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44900/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-43988 - High (7.5)

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43988/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-43988 - High (7.5)

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43988/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 EUVD-2026-31950

📊 Score: n/a
📅 Updated: 2026-05-26

📝 FastNetMon Community Edition through 1.2.9 has a buffer overflow, a different vulnerability than CVE-2026-48686 and CVE-2026-48689.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31950

#cybersecurity #infosec #euvd #cve #vulnerability

Hackers Exploit KnowledgeDeliver Flaw to Install Web Shells

Hackers have exploited a critical flaw in KnowledgeDeliver, using it as a zero-day to sneakily install a powerful .NET web shell called Godzilla on vulnerable servers. This sneaky attack was made possible by a deserialization vulnerability, CVE-2026-5426, that allowed threat actors to execute code at the operating-system level.

https://osintsights.com/hackers-exploit-knowledgedeliver-flaw-to-install-web-shells?utm_source=mastodon&utm_medium=social

#Cve20265426 #ZeroDay #WebShell #ViewstateDeserialization #Net

🔴 CVE-2026-9642 - Critical (9.8)

There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)

An unauthenticated remote attacker can access configured databases in a DIAView project.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9642/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-9642 - Critical (9.8)

There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)

An unauthenticated remote attacker can access configured databases in a DIAView project.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9642/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8676 - High (8.8)

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8676/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8676 - High (8.8)

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8676/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8854 - High (7.5)

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8854/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8854 - High (7.5)

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8854/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🏛️ CISA Adds LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

📝 CISA adds CVE-2026-48172 to KEV Catalog, affecting federal agencies.

https://www.cisa.gov/news-events/alerts/2026/05/26/cisa-adds-one-known-exploited-vulnerability-catalog

📰 Alerts

#GovSec #CVE

🚨 [CISA-2026:0526] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0526)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-48172 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48172)
- Name: LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: LiteSpeed
- Product: cPanel Plugin
- Notes: https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/ ; https://nvd.nist.gov/vuln/detail/CVE-2026-48172

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260526 #cisa20260526 #cve_2026_48172 #cve202648172

CVE ID: CVE-2026-48172
Vendor: LiteSpeed
Product: cPanel Plugin
Date Added: 2026-05-26
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-48172

🏛️ CISA Adds LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

📝 CISA adds CVE-2026-48172 to KEV Catalog, affecting federal agencies.

https://www.cisa.gov/news-events/alerts/2026/05/26/cisa-adds-one-known-exploited-vulnerability-catalog

📰 Alerts

#GovSec #CVE

🚨 [CISA-2026:0526] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0526)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-48172 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48172)
- Name: LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: LiteSpeed
- Product: cPanel Plugin
- Notes: https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/ ; https://nvd.nist.gov/vuln/detail/CVE-2026-48172

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260526 #cisa20260526 #cve_2026_48172 #cve202648172

CVE ID: CVE-2026-48172
Vendor: LiteSpeed
Product: cPanel Plugin
Date Added: 2026-05-26
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-48172

🟠 CVE-2026-25104 - High (7.8)

MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25104/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 HIGH severity: CVE-2026-25104 impacts MediaArea MediaInfoLib 26.01. Integer underflow in LXF parsing can trigger heap-based buffer overflow. No patch yet — restrict untrusted LXF file parsing and monitor for updates. https://radar.offseq.com/threat/cve-2026-25104-cwe-191-integer-underflow-wrap-or-w-860fcfcf #OffSeq #Vulnerability #Infosec

#OT #Advisory VDE-2026-055
CODESYS Development System - Incorrect Default Permissions

Two local privilege escalation vulnerabilities were identified in the CODESYS Development System. Specifically, the PackageManager and the IPM create temporary directories with insecure default permissions when executed with administrative privileges. This allows low-privileged local users to modify a temporary bootstrap file to force the deployment of arbitrary components, or to exploit a Time-of-Check to Time-of-Use (TOCTOU) race condition to replace digitally verified installation files with malicious ones prior to installation. Both flaws bypass intended security boundaries during the installation of packages or add-ons.
#CVE CVE-2026-44469, CVE-2026-44468

https://certvde.com/en/advisories/vde-2026-055/

#CSAF https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-09_vde-2026-055.json

Na CONFidence 2026 Michał kończy właśnie opowieść o krytycznych lukach, które umożliwiały zalogowanie się na konto dowolnego obywatela w wielu kluczowych systemach administracji publicznej, a @zaufanatrzeciastrona opublikowała przed chwilą cykl artykułów jego autorstwa, dokładnie wyjaśniający problem. Zdecydowanie polecam (zarwałam noc, żeby je na czas skorygować ;-))

👉 Zdalne wykonanie kodu w SzafirHost – [CVE-2026-26928] [Badanie e-podpisów, cz. 1] – https://zaufanatrzeciastrona.pl/post/zdalne-wykonanie-kodu-w-szafirhost-cve-2026-26928-badanie-e-podpisow-cz-1/
👉 Hakowanie e-Sądu YubiKeyem – [Badanie e-podpisów, cz. 2] – https://zaufanatrzeciastrona.pl/post/hakowanie-e-sadu-yubikeyem-badanie-e-podpisow-cz-2/
👉 Ominięcie uwierzytelniania w ZUS-ie i systemach e-Zdrowia, czyli o krok od cyberchaosu – [CVE-2026-9058] [Badanie e-podpisów, cz. 3] – https://zaufanatrzeciastrona.pl/post/ominiecie-uwierzytelniania-w-zus-ie-i-systemach-e-zdrowia-czyli-o-krok-od-cyberchaosu-cve-2026-9058-badanie-e-podpisow-cz-3/
👉 Podsumowanie: Krytyczna podatność umożliwiająca całkowite ominięcie logowania w ZUS-ie, e-Sądzie i systemach e-Zdrowia – https://zaufanatrzeciastrona.pl/post/podsumowanie-krytyczna-podatnosc-umozliwiajaca-calkowite-ominiecie-logowania-w-zus-ie-e-sadzie-i-systemach-e-zdrowia/

#cyberbezpieczenstwo #cybersecurity #confidence

Michał odkrył sposób na logowanie jako dowolny użytkownik do eZUS-u, E-Sądu, eZdrowia i innych rządowych systemów. Poczytajcie, bo to najgrubsze odkrycie tego roku w PL
1. https://zaufanatrzeciastrona.pl/post/zdalne-wykonanie-kodu-w-szafirhost-cve-2026-26928-badanie-e-podpisow-cz-1/
2. https://zaufanatrzeciastrona.pl/post/hakowanie-e-sadu-yubikeyem-badanie-e-podpisow-cz-2/
3. https://zaufanatrzeciastrona.pl/post/ominiecie-uwierzytelniania-w-zus-ie-i-systemach-e-zdrowia-czyli-o-krok-od-cyberchaosu-cve-2026-9058-badanie-e-podpisow-cz-3/
4. https://zaufanatrzeciastrona.pl/post/podsumowanie-krytyczna-podatnosc-umozliwiajaca-calkowite-ominiecie-logowania-w-zus-ie-e-sadzie-i-systemach-e-zdrowia/

🔴 CVE-2026-45247 - Critical (9.8)

Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarm...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45247/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CRITICAL SQL Injection (CVE-2026-42774) in Crocoblock JetEngine ≤ 3.8.8.1 (CVSS 9.3). Unauthenticated attackers could access sensitive DB data. No vendor patch yet — restrict access & monitor activity. More: https://radar.offseq.com/threat/cve-2026-42774-cwe-89-improper-neutralization-of-s-114434a4 #OffSeq #SQLInjection #WordPress

🛡️ CVE-2026-42497 (HIGH): BINGOS Archive::Tar <3.08 lets attackers create hardlinks outside extraction dirs, risking file overwrite or privilege escalation. No patch yet — avoid untrusted tar files. Details: https://radar.offseq.com/threat/cve-2026-42497-cwe-59-improper-link-resolution-bef-91880c39 #OffSeq #Vulnerability #Perl #Security

CVE-2025-1782 - Critical RCE in HylaFAX. Unpatched. CVSS 9.9. Authenticated users can exploit file inclusion for full server compromise. Isolate or disable immediately. #CVE #HylaFAX #infosec

https://www.valtersit.com/cve/CVE-2025-1782/

🔴 CVE-2026-7374 - Critical (9.9)

A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7374/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

JUST IN: Security Advisory for Cargo (CVE-2026-5222)

>> Cargo CVE-2026-5222: Sparse registry URL normalization flaw lets attackers steal credentials from third-party registries under niche conditions. Fixed in Rust 1.96.

#rustlang #rustlang

Link: https://blog.rust-lang.org/2026/05/25/cve-2026-5222/

JUST IN: Security Advisory for Cargo (CVE-2026-5223)

>> Cargo CVE-2026-5223: Malicious crates with symlinks can override other crates from the same third-party registry. Fixed in Rust 1.96.0.

#rustlang #rust

Link: https://blog.rust-lang.org/2026/05/25/cve-2026-5223/

🟠 CVE-2026-8620 - High (7.5)

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a special...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8620/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8620 - High (7.5)

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a special...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8620/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🛡️ CVE-2026-9435: Critical OS command injection in Totolink A8000RU (fw 7.1cu.643_b20200521) allows unauthenticated remote code execution. No patch yet — restrict web UI & monitor advisories. Exploit is public! https://radar.offseq.com/threat/cve-2026-9435-os-command-injection-in-totolink-a80-a8a549f3 #OffSeq #CVE20269435 #IoTSecurity

Totolink A8000RU (v7.1cu.643_b20200521) hit by CRITICAL OS command injection (CVE-2026-9434). Remote unauthenticated attackers may gain full control. No fix yet — restrict management access & monitor for updates. https://radar.offseq.com/threat/cve-2026-9434-os-command-injection-in-totolink-a80-c89a76b9 #OffSeq #Vulnerability #Router

🟠 CVE-2026-7454 - High (7.8)

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7454/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-7454 - High (7.8)

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7454/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8855 - High (8.1)

IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8855 - High (8.1)

IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9170 - High (7.5)

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to denial of service and a potential remote code execution due to impr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9170/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9170 - High (7.5)

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to denial of service and a potential remote code execution due to impr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9170/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8856 - High (7.7)

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8856/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8856 - High (7.7)

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8856/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25112 - High (7.8)

A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25112/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ HIGH severity: CVE-2026-9496 impacts pacote 11.2.7 in cloud-hosted setups. Crafted spec.rawSpec can trigger DoS via CPU exhaustion. Vendor patches are rolling out — verify your service is updated. No active exploitation seen. https://radar.offseq.com/threat/cve-2026-9496-denial-of-service-dos-in-pacote-27dd65a5 #OffSeq #DoS #CloudSec

🟠 CVE-2026-46368 - High (8.8)

luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the https-dns-proxy package, distributed through the OpenWrt community packages feed and not installed by default — contains a command injection vulnerability i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-46368/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-4480 - High (8.5)

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J"
substitution character without escaping shell meta characters. A re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4480/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48131 - High (8.1)

The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service (temporary disrupt...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48131/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-9543 - Critical (9.8)

A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument admpass leads to os comman...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9543/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2026-055
CODESYS Development System - Incorrect Default Permissions

Two local privilege escalation vulnerabilities were identified in the CODESYS Development System. Specifically, the PackageManager and the IPM create temporary directories with insecure default permissions when executed with administrative privileges. This allows low-privileged local users to modify a temporary bootstrap file to force the deployment of arbitrary components, or to exploit a Time-of-Check to Time-of-Use (TOCTOU) race condition to replace digitally verified installation files with malicious ones prior to installation. Both flaws bypass intended security boundaries during the installation of packages or add-ons.
#CVE CVE-2026-44469, CVE-2026-44468

https://certvde.com/en/advisories/vde-2026-055/

#CSAF https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-09_vde-2026-055.json

#OT #Advisory VDE-2026-057
CODESYS Control - Out-of-bounds Write

Successful exploitation allows an unauthenticated remote attacker to trigger an out-of-bounds write, causing the CODESYS Control Runtime to crash and resulting in a denial of service on the affected device.
#CVE CVE-2026-8047

https://certvde.com/en/advisories/vde-2026-057/

#CSAF https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-10_vde-2026-057.json

#OT #Advisory VDE-2026-056
CODESYS Control - Incorrect Authorization

The CODESYS Control runtime system provides a user management mechanism with multiple privilege groups including the visualization administrators group, which is intended solely to manage visualization users.
#CVE CVE-2026-8046

https://certvde.com/en/advisories/vde-2026-056/

#CSAF https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-08_vde-2026-056.json

🚨 CRITICAL: CVE-2026-42773 in eMagicOne Store Manager (≤1.3.2) enables unauthenticated Blind SQL Injection (CVSS 9.3). No patch yet. Restrict app access & monitor databases. Details: https://radar.offseq.com/threat/cve-2026-42773-cwe-89-improper-neutralization-of-s-18afe907 #OffSeq #SQLInjection #Vuln #eMagicOne

🟠 CVE-2026-39661 - High (7.5)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magentech SW Core allows PHP Local File Inclusion.

This issue affects SW Core: from n/a through 1.7.18.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39661/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25713 - High (7.8)

MediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25713/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🛑 CRITICAL: Totolink A8000RU (7.1cu.643_b20200521) is vulnerable (CVE-2026-9478) to remote OS command injection via the web interface. Public exploit available. Restrict access & monitor for patches! https://radar.offseq.com/threat/cve-2026-9478-os-command-injection-in-totolink-a80-020b39d8 #OffSeq #CVE20269478 #IoTSecurity #Infosec

🚩 CVE-2026-42496: HIGH severity vuln in BINGOS Archive::Tar (<3.08). Symlinks in tar archives can escape extraction dir, risking unauthorized file access. No patch yet — avoid untrusted archives! https://radar.offseq.com/threat/cve-2026-42496-cwe-59-improper-link-resolution-bef-ae924259 #OffSeq #vuln #Perl #infosec

🔴 CRITICAL: Totolink A8000RU (7.1cu.643_b20200521) has an unauthenticated OS command injection bug (CVE-2026-9436). Exploit released, no patch yet. Restrict web management access and monitor closely. https://radar.offseq.com/threat/cve-2026-9436-os-command-injection-in-totolink-a80-126727b4 #OffSeq #Vulnerability #Security #Router

🚨 CRITICAL: Totolink A8000RU (7.1cu.643_b20200521) suffers OS command injection (CVE-2026-9404, CVSS 9.3). Exploit is public; no patch yet. Restrict web mgmt interface & watch for updates. https://radar.offseq.com/threat/cve-2026-9404-os-command-injection-in-totolink-a80-e697767b #OffSeq #infosec #CVE20269404 #routersecurity

Microsoft SharePoint RCE Flaw Raises New Security Concerns as Attackers Continue Targeting Enterprise Servers

Introduction Microsoft has released urgent security updates to address a newly discovered remote code execution vulnerability affecting Microsoft SharePoint Server, once again putting enterprise collaboration platforms under the cybersecurity spotlight. The flaw, identified as CVE-2026-45659, carries a high CVSS severity score of 8.8 and could allow attackers…

https://undercodenews.com/microsoft-sharepoint-rce-flaw-raises-new-security-concerns-as-attackers-continue-targeting-enterprise-servers/?utm_source=mastodon&utm_medium=jetpack_social

Faille RCE dans SharePoint : Microsoft publie un patch pour la CVE-2026-45659 https://www.it-connect.fr/faille-rce-sharepoint-patch-cve-2026-45659/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #SharePoint #Microsoft

@lattera How is autoloading zfs.ko related to CVE-2026-45250?

@lattera How is autoloading zfs.ko related to CVE-2026-45250?

Ok, CISA adding CVE-2010-0249 (Use-After-Free in checks notes Internet Explorer 6, 6 SP1, 7, and 8 for Server up to 2008 & Win7 to their KEV list... last week... has me giggle.

Yeah, I guess there may be EITW exploitation? But putting a "you got 2 weeks to fix your Server 2008 Internet Explorer NOW in 2 weeks!!!" is, like, seriously funny.

https://db.gcve.eu/known-exploited-vulnerabilities-catalog/378dd17e-1682-4b50-ad24-e7d16fbfb2fd

Ok, CISA adding CVE-2010-0249 (Use-After-Free in checks notes Internet Explorer 6, 6 SP1, 7, and 8 for Server up to 2008 & Win7 to their KEV list... last week... has me giggle.

Yeah, I guess there may be EITW exploitation? But putting a "you got 2 weeks to fix your Server 2008 Internet Explorer NOW in 2 weeks!!!" is, like, seriously funny.

https://db.gcve.eu/known-exploited-vulnerabilities-catalog/378dd17e-1682-4b50-ad24-e7d16fbfb2fd

Drupal: kritische Sicherheitslücke (CVE-2026-9082). Der Patch steht zur Verfügung. Aktuell sind in Deutschland 61 Instanzen ungepatcht.
Interessiert das irgendjemenschen? Braucht es weitere Informationen? Oder ist der Beitrag flüssiger als Wasser?

https://dashboard.shadowserver.org/statistics/iot-devices/time-series/?date_range=other_range&d1=2026-05-22&d2=2026-05-25&vendor=drupal&type=cms&model=drupal&tag=cve-2026-9082%2B&geo=DE&dataset=count&limit=100&group_by=geo&stacking=stacked

#Drupal #infosec

Drupal: kritische Sicherheitslücke (CVE-2026-9082). Der Patch steht zur Verfügung. Aktuell sind in Deutschland 61 Instanzen ungepatcht.
Interessiert das irgendjemenschen? Braucht es weitere Informationen? Oder ist der Beitrag flüssiger als Wasser?

https://dashboard.shadowserver.org/statistics/iot-devices/time-series/?date_range=other_range&d1=2026-05-22&d2=2026-05-25&vendor=drupal&type=cms&model=drupal&tag=cve-2026-9082%2B&geo=DE&dataset=count&limit=100&group_by=geo&stacking=stacked

#Drupal #infosec

⚪️ Critical Drupal bug could lead to remote code execution

🗨️ The Drupal developers have released emergency patches for a “highly critical” vulnerability in Drupal Core that affects sites using PostgreSQL. The issue has been assigned the identifier CVE-2026-9082 and is related to an SQL injection, which in some scenarios may…

🔗 https://hackmag.com/news/drupal-injection?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

The RedSun vulnerability was "officially fixed" on May 19, with the fix being "let's break the PoC by quarantining the affected .exe". The fix is just part of a Defender definition update. So, I guess the Red Sun no longer prevails.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091

@jhr77 @Hal_9000 Turns out my hunch was right: CVE-2026-41091 is RedSun.

Sparx Systems has failed to patch five security issues in its Pro Cloud Server even after being contacted by CERT Poland

https://cert.pl/en/posts/2026/05/CVE-2026-42096/

NicFab Newsletter #22 is out.

→ Garante fines Ambrosetti €85k for late breach notification (Art. 34 GDPR)
→ Verizon DBIR 2026: vuln exploitation overtakes credentials as #1 vector
→ Commission opens first Article 112(1) AI Act review
→ Colorado CADMA replaces the 2024 AI Act
→ Unpatched RCE in ChromaDB (CVE-2026-45829)

Read: https://www.nicfab.eu/en/newsletter-issues/2026-05-26-issue-22/
Subscribe: https://www.nicfab.eu/en/pages/newsletter/#subscribe-now

#Privacy #AIAct #AI #GDPR #Cybersecurity

🟠 CVE-2026-45298 - High (8.6)

Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deploy (the documented quickstart, no DOZZLE_AUTH_PROVIDER set), POST /api/notifications/test-webhook is reachable without authentication and forwards an a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45298/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45298 - High (8.6)

Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deploy (the documented quickstart, no DOZZLE_AUTH_PROVIDER set), POST /api/notifications/test-webhook is reachable without authentication and forwards an a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45298/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45574 - High (8.1)

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on the network path between the ePA service and the Konnektor can present any TLS certificate (self-signed, expired, wrong CN) and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45574/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45574 - High (8.1)

epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker on the network path between the ePA service and the Konnektor can present any TLS certificate (self-signed, expired, wrong CN) and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45574/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Micropatches released for Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089)
#CVE_2026_41089
https://blog.0patch.com/2026/05/micropatches-released-for-windows_0304568783.html

Blip blop, I'm a #mastobot.
Here is a summary (in beta) of the latest posts in #newsAtKukei https://masto.kukei.eu/browse/news category:
- **Russia's GPS jamming extends deep into Europe**, raising concerns over military and civilian impacts.
- **Citizenship controversies in Moldova**, with discussions on legal and political implications.
- **PostgreSQL security vulnerability (CVE-2026-6637)** in the `refint` module, urging immediate fixes.
- **AI and tech industry developments**, [1/3]

I thought Palo was part of the Mythos seekrit cabal platform and also had their own advanced AI BS that protected enterprises from everything.

Given that, how does CVE-2026-0265 — an at-scale PAN-OS CAS Authentication Bypass — happen now?

Seems like Mythos isn't all its cracked up to be?

CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude https://support.apple.com/en-us/127115

CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude
https://news.ycombinator.com/item?id=48273169

#hackernews #tech

CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude

Link: https://support.apple.com/en-us/127115
Discussion: https://news.ycombinator.com/item?id=48273169

CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude

Link: https://support.apple.com/en-us/127115
Discussion: https://news.ycombinator.com/item?id=48273169

CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude - https://support.apple.com/en-us/127115

#hackernews

CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude

https://support.apple.com/en-us/127115

#HackerNews #CVE202628952 #Apple #macOS #Kernel #Vulnerability #CyberSecurity #Claude

CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude

https://support.apple.com/en-us/127115

#apple #macos

@menos @wabetainfo @mysk

This macOS bug made it easy to exfiltrate WhatsApp chats. If it was encrypted , you'd need more tricks to decrypt the data:

https://mysk.blog/2026/05/19/cve-2026-28910/

⚠️ Un CMS molto usato finisce nel mirino: siti legittimi possono diventare trappole invisibili. Aggiornare, monitorare, verificare. #Cybersecurity #CMS

🔗 https://www.tomshw.it/hardware/ghost-cms-clickfix-falla-sql-cve-2026-26980

Critical Ghost CMS Vulnerability Exploited to Hack 700+ Websites

A critical Ghost CMS vulnerability identified as CVE-2026-26980 has been exploited in a widespread cyber campaign that compromised more than 700...

🔗️ [Thecyberexpress] https://link.is.it/FdS8KE

Ghost CMS SQL Injection Flaw Exploited in Global ClickFix Malware Campaign

A critical SQL injection vulnerability in Ghost CMS (CVE-2026-26980) is being exploited to steal administrative keys and inject malicious 'ClickFix' scripts into over 700 websites. The campaign targets high-profile domains to deliver malware by tricking visitors into running malicious commands in their system terminal.

**If you run a Ghost CMS site, this is urgent. Check your version and update to version 6.19.1 or later. Then rotate all API keys and staff passwords since any credentials from before the patch may already be compromised. Also review your published articles for unauthorized scripts and check API logs for signs of suspicious activity.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/ghost-cms-sql-injection-flaw-exploited-in-global-clickfix-malware-campaign-d-m-c-f-3/gD2P6Ple2L

"A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows.

The campaign was discovered by XLab threat intelligence researchers at Chinese cybersecurity company Qianxin, who confirmed impact on more than 700 domains, including university portals, AI/SaaS companies, media outlets, fintech firms, security sites, and personal blogs.

According to the researchers, threat actors planted malicious code on the websites of Harvard University, Oxford University, Auburn University, and DuckDuckGo."

https://www.bleepingcomputer.com/news/security/ghost-cms-sql-injection-flaw-exploited-in-large-scale-clickfix-campaign/

🚨 CRITICAL: CVE-2026-44895 in yoda-digital mcp-gitlab-server (<0.6.0) allows unauthenticated access to a mutation-capable RPC endpoint, risking full GitLab resource compromise. Upgrade to 0.6.0+ ASAP. https://radar.offseq.com/threat/cve-2026-44895-cwe-306-missing-authentication-for--bc836ac6 #OffSeq #Vuln #GitLab #CVE202644895

🚨 CRITICAL: CVE-2026-44895 in yoda-digital mcp-gitlab-server (<0.6.0) allows unauthenticated access to a mutation-capable RPC endpoint, risking full GitLab resource compromise. Upgrade to 0.6.0+ ASAP. https://radar.offseq.com/threat/cve-2026-44895-cwe-306-missing-authentication-for--bc836ac6 #OffSeq #Vuln #GitLab #CVE202644895

🟠 CVE-2026-44843 - High (8.2)

LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44843/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44843 - High (8.2)

LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44843/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Na CONFidence 2026 Michał kończy właśnie opowieść o krytycznych lukach, które umożliwiały zalogowanie się na konto dowolnego obywatela w wielu kluczowych systemach administracji publicznej, a @zaufanatrzeciastrona opublikowała przed chwilą cykl artykułów jego autorstwa, dokładnie wyjaśniający problem. Zdecydowanie polecam (zarwałam noc, żeby je na czas skorygować ;-))

👉 Zdalne wykonanie kodu w SzafirHost – [CVE-2026-26928] [Badanie e-podpisów, cz. 1] – https://zaufanatrzeciastrona.pl/post/zdalne-wykonanie-kodu-w-szafirhost-cve-2026-26928-badanie-e-podpisow-cz-1/
👉 Hakowanie e-Sądu YubiKeyem – [Badanie e-podpisów, cz. 2] – https://zaufanatrzeciastrona.pl/post/hakowanie-e-sadu-yubikeyem-badanie-e-podpisow-cz-2/
👉 Ominięcie uwierzytelniania w ZUS-ie i systemach e-Zdrowia, czyli o krok od cyberchaosu – [CVE-2026-9058] [Badanie e-podpisów, cz. 3] – https://zaufanatrzeciastrona.pl/post/ominiecie-uwierzytelniania-w-zus-ie-i-systemach-e-zdrowia-czyli-o-krok-od-cyberchaosu-cve-2026-9058-badanie-e-podpisow-cz-3/
👉 Podsumowanie: Krytyczna podatność umożliwiająca całkowite ominięcie logowania w ZUS-ie, e-Sądzie i systemach e-Zdrowia – https://zaufanatrzeciastrona.pl/post/podsumowanie-krytyczna-podatnosc-umozliwiajaca-calkowite-ominiecie-logowania-w-zus-ie-e-sadzie-i-systemach-e-zdrowia/

#cyberbezpieczenstwo #cybersecurity #confidence

Michał odkrył sposób na logowanie jako dowolny użytkownik do eZUS-u, E-Sądu, eZdrowia i innych rządowych systemów. Poczytajcie, bo to najgrubsze odkrycie tego roku w PL
1. https://zaufanatrzeciastrona.pl/post/zdalne-wykonanie-kodu-w-szafirhost-cve-2026-26928-badanie-e-podpisow-cz-1/
2. https://zaufanatrzeciastrona.pl/post/hakowanie-e-sadu-yubikeyem-badanie-e-podpisow-cz-2/
3. https://zaufanatrzeciastrona.pl/post/ominiecie-uwierzytelniania-w-zus-ie-i-systemach-e-zdrowia-czyli-o-krok-od-cyberchaosu-cve-2026-9058-badanie-e-podpisow-cz-3/
4. https://zaufanatrzeciastrona.pl/post/podsumowanie-krytyczna-podatnosc-umozliwiajaca-calkowite-ominiecie-logowania-w-zus-ie-e-sadzie-i-systemach-e-zdrowia/

#OT #Advisory VDE-2026-009
JUMO: Multiple products affected by nodejs vulnerability

A vulnerability in the REST API of the JUMO device allows an attacker to trigger a denial‑of‑service (DoS) condition. Due to an incorrect implementation of the arrayLimit option in the Node.js qs module, limits for incoming request parameters are not properly enforced. As a result, an attacker can send specially crafted requests containing excessively large or deeply nested arrays, causing the web server to become unresponsive. This condition leads to a crash of the web server, followed by an automatic restart of the device.
#CVE CVE-2025-15284

https://certvde.com/en/advisories/vde-2026-009/

#CSAF https://jumo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-009.json

Blip blop, I'm a #mastobot.
Here is a summary (in beta) of the latest posts in #programmingAtKukei https://masto.kukei.eu/browse/programming category:
- **AI coding tools & agentic workflows**: GitHub Copilot, Claude Code, Cursor, DeepSeek Reasonix, and debates on AI’s impact on development (e.g., token efficiency, security risks).
- **PostgreSQL & pgvector**: Security patches (CVE-2026-3172), parallel HNSW index fixes, and pgBackRest’s multi-vendor funding model.
- **Open-source security [1/3]

🚨 EUVD-2026-31970

📊 Score: 9.8/10 (CVSS v3.1)
📦 Product: DIAView
🏢 Vendor: Delta Electronics
📅 Updated: 2026-05-26

📝 There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)

An unauthenticated remote attacker can access configured databases in a DIAView project.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31970

#cybersecurity #infosec #euvd #cve #vulnerability

🔴 CVE-2026-9642 - Critical (9.8)

There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)

An unauthenticated remote attacker can access configured databases in a DIAView project.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9642/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-9642 - Critical (9.8)

There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)

An unauthenticated remote attacker can access configured databases in a DIAView project.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9642/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2025-20286 Critical flaw in Cisco ISE cloud deployments on AWS, Azure, OCI. Unauthenticated remote access to sensitive data, admin ops, config changes, or DoS. CVSS 9.9. No patch yet. Monitor immediately. #CVE #Cisco #infosec

https://www.valtersit.com/cve/CVE-2025-20286/

CVE-2025-46273 - Critical Supply Chain Attack in Uni. Hard-coded credentials expose all managed devices to admin takeover. CVSS 9.8. No patch available yet. Isolate systems now. #CVE #infosec #supplychain

https://www.valtersit.com/cve/CVE-2025-46273/

CVE-2025-27740 - Critical auth bypass in Microsoft AD CS. Allows privilege escalation over network. CVSS 8.8. No patch yet. Mitigate immediately. #CVE #Microsoft #infosec

https://www.valtersit.com/cve/CVE-2025-27740/

CVE-2021-21735: ZTE H168N wizard whitelist exposed PPPoE and WLAN secrets pre-auth https://minanagehsalalma.github.io/cve-2021-21735-zte-zxhn-h168n-admin-compromise/

🟠 CVE-2026-44905 - High (7.5)

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza. When processing incoming V2X messages, the ASN...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44905/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44905 - High (7.5)

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza. When processing incoming V2X messages, the ASN...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44905/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Security Advisory: CVE-2025-70103 - Heap-Based Buffer Overflow in libjxl / cjxl

A heap-based buffer overflow vulnerability was identified in JPEG XL libjxl when processing crafted PBM/PNM images.

Summary:
The vulnerability exists in `jxl::extras::DecodeImagePNM()` in `lib/extras/dec/pnm.cc`. When processing a specially crafted PBM/PNM image, insufficient validation of buffer sizes before memory copy operations may cause `memcpy()` to write past the end of an allocated heap buffer.

The issue was observed as a WRITE of 24 bytes at the end of a 16-byte heap region.

CWE:
CWE-122 - Heap-based Buffer Overflow
CWE-787 - Out-of-bounds Write

Affected product:
JPEG XL / libjxl

Affected component:
`lib/extras/dec/pnm.cc`
Function: `jxl::extras::DecodeImagePNM()`
Affected line: `pnm.cc:554`

Affected version:
The issue was reproduced in `cjxl v0.12.0` at commit `24357f189c233c03fb46368a142a0b2c1a949f9d`.

Attack conditions:
Exploitation requires the vulnerable application or library consumer to process a crafted PBM/PNM image. This can be triggered locally via `cjxl` or through software that exposes the `DecodeImagePNM` decoding path to attacker-controlled input.

Example reproduction command:
`./cjxl ./2_PBM_lib_extras_dec_pnm_cc_554 --disable_output`

Impact:
Successful exploitation may cause memory corruption and process termination. The confirmed impact is denial of service (DoS) due to a crash during image processing. No evidence of reliable arbitrary code execution has been identified.

Fix / mitigation status:
The upstream issue is closed. A mitigation/fix proposal was provided in PR `#4338`, adding additional buffer-size, row-boundary, pixel-size, offset, and extra-channel checks. Users are advised to update to a libjxl build that contains the relevant fix once available, or review and apply the mitigation from PR `#4338` where appropriate.

References:
Issue:
https://github.com/libjxl/libjxl/issues/4337

Fix / mitigation PR:
https://github.com/libjxl/libjxl/pull/4338
https://github.com/libjxl/libjxl/commit/49fb89f23473e57fa1dac416adce7c7679e5d051

PoC:
https://github.com/sigdevel/pocs/blob/main/res/libjxl/2025/2/2_PBM_lib_extras_dec_pnm_cc_554

Credit:
@sigdevel

#fuzzing #infosec #security #afl #revers #cybersecurity #bugbounty #vulnerability #opensource #linux #cve #advisory

Security Advisory: CVE-2025-70103 - Heap-Based Buffer Overflow in libjxl / cjxl

A heap-based buffer overflow vulnerability was identified in JPEG XL libjxl when processing crafted PBM/PNM images.

Summary:
The vulnerability exists in `jxl::extras::DecodeImagePNM()` in `lib/extras/dec/pnm.cc`. When processing a specially crafted PBM/PNM image, insufficient validation of buffer sizes before memory copy operations may cause `memcpy()` to write past the end of an allocated heap buffer.

The issue was observed as a WRITE of 24 bytes at the end of a 16-byte heap region.

CWE:
CWE-122 - Heap-based Buffer Overflow
CWE-787 - Out-of-bounds Write

Affected product:
JPEG XL / libjxl

Affected component:
`lib/extras/dec/pnm.cc`
Function: `jxl::extras::DecodeImagePNM()`
Affected line: `pnm.cc:554`

Affected version:
The issue was reproduced in `cjxl v0.12.0` at commit `24357f189c233c03fb46368a142a0b2c1a949f9d`.

Attack conditions:
Exploitation requires the vulnerable application or library consumer to process a crafted PBM/PNM image. This can be triggered locally via `cjxl` or through software that exposes the `DecodeImagePNM` decoding path to attacker-controlled input.

Example reproduction command:
`./cjxl ./2_PBM_lib_extras_dec_pnm_cc_554 --disable_output`

Impact:
Successful exploitation may cause memory corruption and process termination. The confirmed impact is denial of service (DoS) due to a crash during image processing. No evidence of reliable arbitrary code execution has been identified.

Fix / mitigation status:
The upstream issue is closed. A mitigation/fix proposal was provided in PR `#4338`, adding additional buffer-size, row-boundary, pixel-size, offset, and extra-channel checks. Users are advised to update to a libjxl build that contains the relevant fix once available, or review and apply the mitigation from PR `#4338` where appropriate.

References:
Issue:
https://github.com/libjxl/libjxl/issues/4337

Fix / mitigation PR:
https://github.com/libjxl/libjxl/pull/4338
https://github.com/libjxl/libjxl/commit/49fb89f23473e57fa1dac416adce7c7679e5d051

PoC:
https://github.com/sigdevel/pocs/blob/main/res/libjxl/2025/2/2_PBM_lib_extras_dec_pnm_cc_554

Credit:
@sigdevel

#fuzzing #infosec #security #afl #revers #cybersecurity #bugbounty #vulnerability #opensource #linux #cve #advisory

🟠 CVE-2026-43935 - High (8.1)

e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset links pointing to attacker-controlled domains. Th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43935/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2026-053
METTLER TOLEDO: EVA Karl Fischer titrators affected by libpng vulnerabilities

Titration software versions prior to 2.0.2.6 are affected by libpng vulnerabilities CVE-2026-33416 and CVE-2026-33636.
#CVE CVE-2026-33636, CVE-2026-33416

https://certvde.com/en/advisories/vde-2026-053/

#CSAF https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-053.json

#OT #Advisory VDE-2026-053
METTLER TOLEDO: EVA Karl Fischer titrators affected by libpng vulnerabilities

Titration software versions prior to 2.0.2.6 are affected by libpng vulnerabilities CVE-2026-33416 and CVE-2026-33636.
#CVE CVE-2026-33636, CVE-2026-33416

https://certvde.com/en/advisories/vde-2026-053/

#CSAF https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-053.json

Is your self-hosted network actually secure?
A brand new CVE-2026-40172 just dropped for Authentik, targeting Single Sign-On (SSO) gateways. Don't let hackers compromise your Proxmox cluster.More https://ww.valtersit.com/ #infosec #devops #proxmox #valtersit #CVE #CVEAlert #devsecops #hackers #sysadmins #sysadmin #developers