FediSecfeeds

#Weidmueller #Vulnerability #CVE202663586 #CyberSecurity

##

DailyCyberSecurity@infosec.exchange at 2026-08-25T09:47:33.000Z ##

A critical Weidmueller router flaw, CVE-2026-63586 (CVSS 9.8), lets attackers execute arbitrary commands with root privileges. Patch devices immediately.

https://securityonline.info/weidmueller-router-flaw-cve-2026-63586/?utm_source=mastodon&utm_medium=jetpack_social

##

certvde@infosec.exchange at 2026-08-25T08:55:43.000Z ##

🔒 New CSAF advisory published

VDE-2026-083
Weidmueller: Security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by multiple vulnerabilities
CVE-2026-63586, CVE-2026-63587

Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by an unauthenticated remote code execu…

HTML: https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-083.html
CSAF JSON: https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-083.json

https://www.valtersit.com/cve/CVE-2026-59769/

##

CVE-2026-59769
(9.1 CRITICAL)

EPSS: 0.33%

updated 2026-08-25T15:16:35.427000

1 posts

FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number.

hugovalters@mastodon.social at 2026-08-25T15:10:37.000Z ##

CVE-2026-59769 - Hard-coded credentials in FA-50 allow unauthorized settings access and vessel ID alteration. CVSS 9.1. Restrict network access now. #CVE #infosec #cybersecurity

##

CVE-2026-57863
(8.8 HIGH)

EPSS: 0.00%

updated 2026-08-25T15:16:35.297000

2 posts

Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files outside the intended extraction directory by supplying crafted ZIP archives with ../ sequences to the unzip endpoint. Attackers can exploit unsanitized ZIP entry names passed to PHP's ZipArchive::extractTo() to write arbitrary PHP files into

thehackerwire@mastodon.social at 2026-08-25T14:00:11.000Z ##

🟠 CVE-2026-57863 - High (8.8)

Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files outside the intended extraction directory by supplying crafted ZIP archives with ../ sequ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57863/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-25T14:00:11.000Z ##

🟠 CVE-2026-57863 - High (8.8)

Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files outside the intended extraction directory by supplying crafted ZIP archives with ../ sequ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57863/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-18798
(7.5 HIGH)

EPSS: 0.00%

updated 2026-08-25T15:16:31.207000

2 posts

Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to Denial of Service. There is so far no evidence that this double free is exploitable for remote code execution, thus it is considered highly impro

DailyCyberSecurity at 2026-08-25T15:59:01.497Z ##

The August 2026 OpenSSL security update fixes 9 flaws, including a QUIC double free (CVE-2026-18798) and a CMS heap overflow. Patch now.

#OpenSSL #CyberSecurity #CVE #DenialOfService #InfoSec

updated 2026-08-25T14:31:59.517000

EPSS: 0.00%

updated 2026-08-25T13:19:24.810000

4 posts

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.

DailyCyberSecurity at 2026-08-26T01:47:28.637Z ##

Two critical WatchGuard Agent flaws (CVE-2026-57909, CVE-2026-57910) allow unauthenticated remote code execution. Update to 1.25.13.0000 now.

#WatchGuard #RCE #CyberSecurity #CVE202657909 #Infosec

https://securityonline.info/watchguard-agent-rce-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

cR0w at 2026-08-25T14:07:52.568Z ##

And a sev:CRIT RCE. As a treat.

https://nvd.nist.gov/vuln/detail/CVE-2026-57910

##

DailyCyberSecurity@infosec.exchange at 2026-08-26T01:47:28.000Z ##

Two critical WatchGuard Agent flaws (CVE-2026-57909, CVE-2026-57910) allow unauthenticated remote code execution. Update to 1.25.13.0000 now.

#WatchGuard #RCE #CyberSecurity #CVE202657909 #Infosec

https://securityonline.info/watchguard-agent-rce-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

cR0w@infosec.exchange at 2026-08-25T14:07:52.000Z ##

And a sev:CRIT RCE. As a treat.

https://nvd.nist.gov/vuln/detail/CVE-2026-57910

##

CVE-2026-57909
(0 None)

EPSS: 0.00%

updated 2026-08-25T13:19:24.590000

4 posts

A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system.

DailyCyberSecurity at 2026-08-26T01:47:28.637Z ##

Two critical WatchGuard Agent flaws (CVE-2026-57909, CVE-2026-57910) allow unauthenticated remote code execution. Update to 1.25.13.0000 now.

#WatchGuard #RCE #CyberSecurity #CVE202657909 #Infosec

https://securityonline.info/watchguard-agent-rce-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

cR0w at 2026-08-25T14:07:01.584Z ##

sev:CRIT ../ in WatchGuard Agent. Once again, INFOSEC increasing that attack surface instead of decreasing it.

https://nvd.nist.gov/vuln/detail/CVE-2026-57909

##

DailyCyberSecurity@infosec.exchange at 2026-08-26T01:47:28.000Z ##

EPSS: 0.33%

updated 2026-08-25T09:30:36

2 posts

A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends. The webhook, Mattermost, Rocket.Chat, and Grafana notification backends use notification template URLs as direct HTTP request targets without validating the target address against private, loopback, or reserved IP ranges. An organization notification administrator can create notification templates p

thehackerwire@mastodon.social at 2026-08-24T17:00:39.000Z ##

🟠 CVE-2026-71366 - High (7.7)

A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends. The webhook, Mattermost, Rocket.Chat, and Grafana notification backends use notification template URLs as direct HTTP request targets without valid...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71366/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T17:00:39.000Z ##

🟠 CVE-2026-71366 - High (7.7)

A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends. The webhook, Mattermost, Rocket.Chat, and Grafana notification backends use notification template URLs as direct HTTP request targets without valid...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71366/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-63587
(8.6 HIGH)

EPSS: 0.27%

updated 2026-08-25T09:17:32.057000

2 posts

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically disabled. An unauthenticated remote attacker who is able to send SMS messages to the device can deliber

certvde at 2026-08-25T08:55:43.635Z ##

🔒 New CSAF advisory published

VDE-2026-083
Weidmueller: Security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by multiple vulnerabilities
CVE-2026-63586, CVE-2026-63587

Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by an unauthenticated remote code execu…

HTML: https://certvde.com/en/advisories/VDE-2026-083/
CSAF JSON: https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-083.json

HTML: https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-083.html
CSAF JSON: https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-083.json

##

certvde@infosec.exchange at 2026-08-25T08:55:43.000Z ##

🔒 New CSAF advisory published

VDE-2026-083
Weidmueller: Security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by multiple vulnerabilities
CVE-2026-63586, CVE-2026-63587

Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by an unauthenticated remote code execu…

##

CVE-2026-78477
(9.8 CRITICAL)

EPSS: 0.30%

updated 2026-08-25T06:31:36

2 posts

The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.

offseq at 2026-08-25T06:00:24.365Z ##

Privilege escalation vuln (CRITICAL, CVSS 9.8) in MVPThemes Jawn WordPress theme (≤1.4.2): CVE-2026-78477 lets unauth users elevate to admin. Review deployments & monitor for fixes. https://radar.offseq.com/threat/cve-2026-78477-cwe-266-incorrect-privilege-assignment-in-mvpthemes-jawn-ec6b466fa423dd3f #OffSeq #WordPress #Vuln #PrivilegeEscalation

##

offseq@infosec.exchange at 2026-08-25T06:00:24.000Z ##

Privilege escalation vuln (CRITICAL, CVSS 9.8) in MVPThemes Jawn WordPress theme (≤1.4.2): CVE-2026-78477 lets unauth users elevate to admin. Review deployments & monitor for fixes. https://radar.offseq.com/threat/cve-2026-78477-cwe-266-incorrect-privilege-assignment-in-mvpthemes-jawn-ec6b466fa423dd3f #OffSeq #WordPress #Vuln #PrivilegeEscalation

##

CVE-2026-41992
(7.5 HIGH)

EPSS: 0.35%

updated 2026-08-25T06:31:17

2 posts

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation. By decompressing a spe

certvde at 2026-08-25T10:45:02.867Z ##

🔒 New CSAF advisory published

VDE-2026-088
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4
CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2025-58187, CVE-2026-41992 (+37 more)

Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025…

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

certvde@infosec.exchange at 2026-08-25T10:45:02.000Z ##

🔒 New CSAF advisory published

VDE-2026-088
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4
CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2025-58187, CVE-2026-41992 (+37 more)

Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025…

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

#TPLink #CyberSecurity #CVE20269254 #CommandInjection

##

CVE-2026-78541
(0 None)

EPSS: 0.96%

updated 2026-08-25T04:18:21.310000

2 posts

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report generation and may result in arbitrary command execution. Successful exploitation may allow comman

DailyCyberSecurity at 2026-08-25T01:49:25.678Z ##

TP-Link patched an unauthenticated OS command injection flaw (CVE-2026-9254) and other risks like CVE-2026-16348 and CVE-2026-78541 in Archer routers.

https://securityonline.info/cve-2026-9254-unauthenticated-os-command-injection/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-25T01:49:25.000Z ##

TP-Link patched an unauthenticated OS command injection flaw (CVE-2026-9254) and other risks like CVE-2026-16348 and CVE-2026-78541 in Archer routers.

#TPLink #CyberSecurity #CVE20269254 #CommandInjection

https://securityonline.info/cve-2026-9254-unauthenticated-os-command-injection/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-76904
(9.8 CRITICAL)

EPSS: 0.52%

updated 2026-08-25T04:18:20.870000

1 posts

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: `jsonArrayContains` function; Requires PostGIS 12 or greater with a String or JSON field. For PostGIS 12 and greater `jsonArrayContains(<colum

1 repos

https://github.com/YonLiud/CVE-2026-76904

sayzard@mastodon.sayzard.org at 2026-08-23T22:38:27.000Z ##

AI scanner AgentGG found GeoServer SQL injection before zero-day

GeoServer/GeoTools의 `jsonArrayContains` 필터에서 인증 없이 도달 가능한 SQL 인젝션(CVE-2026-76904, CVSS 9.8)이 공개됐으며, PostGIS 12 이상 구성에서는 입력값이 SQL 문자열에 적절히 이스케이프되지 않는 것이 원인이다. 공개 직후 인터넷 노출 GeoServer 인스턴스를 대상으로 대규모 스캔·탐색 시도가 관측됐고, GeoServer는 긴급 패치를 배포했다. 이는 2023...

https://medium.com/@philipgarabandic/a-geoserver-zero-day-that-went-from-private-report-to-public-exploit-in-six-weeks-0fc3724f22d7

##

CVE-2026-21962
(10.0 CRITICAL)

EPSS: 42.02%

updated 2026-08-25T04:18:11.067000

27 posts

Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to c

9 repos

https://github.com/gglessner/cve_2026_21962_scanner

https://github.com/naozibuhao/CVE-2026-21962_Java_GUI_Exploit_Tool

https://github.com/George0Papasotiriou/CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

https://github.com/samael0x4/CVE-2026-21962

https://github.com/boroeurnprach/Ashwesker-CVE-2026-21962

https://github.com/ThumpBo/CVE-2026-21962

https://github.com/gregk4sec/CVE-2026-21962-o

https://github.com/gregk4sec/cve-2026-21962

https://github.com/0xBlackash/CVE-2026-21962

thecybermind at 2026-08-25T22:49:03.835Z ##

🚨 Critical Threat Intel: CVE-2026-21962 impacts Oracle HTTP Server & Weblogic Proxy Plug-in via access control bypass. Review exploitation patterns, web access detection queries, and active endpoint hardening actions.
https://thecybermind.co/jily

##

cyberworldops at 2026-08-25T22:20:00.700Z ##

CISA has added Oracle CVE-2026-21962 to the KEV catalog. CVSS 10.0. This critical flaw in WebLogic Server allows unauthenticated access and is confirmed actively exploited. Federal remediation deadline is August 27, but every WebLogic deployment should be treated as urgent. Patch or isolate immediately.

#OracleCVE202621962 #WebLogic #CISA #KnownExploitedVulnerabilities

https://cyberworldops.eu/en/oracle-cve-2026-21962-enters-kev-maximum-score-and-unauthorized-access

##

undercodenews@mastodon.social at 2026-08-25T18:53:17.000Z ##

CISA Confirms Active Exploitation of Critical Oracle Vulnerability — CVE-2026-21962 Carries a 100 Severity Score + Video

A Critical Oracle Flaw Has Crossed Into the Real-World Threat Landscape A critical vulnerability affecting Oracle HTTP Server and the Oracle WebLogic Server Proxy Plug-in has moved from a serious patching concern to an active cybersecurity threat. On August 24, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added…

https://undercodenews.com/cisa-confirms-active-exploitation-of-critical-oracle-vulnerability-cve-2026-21962-carries-a-100-severity-score-video/?utm_source=mastodon&utm_medium=jetpack_social

##

sayzard@mastodon.sayzard.org at 2026-08-25T18:42:41.000Z ##

CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw

CISA가 실제 악용 중인 CVSS 10.0 취약점 CVE-2026-21962에 대해 연방 기관에 최단 수준인 3일 이내 패치 기한을 부여했습니다. 이 취약점은 Oracle HTTP Server와 WebLogic Server Proxy Plug-in의 부적절한 접근 제어 문제로, 공격자가 중요 데이터를 생성·삭제·변조하거나 영향받는 시스템의 모든 데이터에 완전 접근할 수 있습니다. 영향을 받는 버전은 12...

https://www.theregister.com/security/2026/08/25/cisa-slaps-its-tightest-three-day-patching-deadline-on-perfect-10-oracle-flaw/5292107

##

Matchbook3469@mastodon.social at 2026-08-25T16:39:25.000Z ##

🔵 THREAT INTELLIGENCE

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

Vulnerability | CRITICAL
CVEs: CVE-2026-21962

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and...

Full analysis:
https://www.yazoul.net/news/article/actively-exploited-oracle-weblogic-flaw-lets-unauthenticated-attackers-access-cr

by Yazoul AI

#CyberSecurity #CVE #ThreatHunting

##

netsecio@mastodon.social at 2026-08-25T14:22:08.000Z ##

📰 CISA Adds Actively Exploited Oracle Flaw to KEV Catalog

CISA adds actively exploited Oracle vulnerability CVE-2026-21962 to its KEV catalog. Flaw affects Oracle HTTP Server & WebLogic Server Proxy Plug-in. Federal agencies must patch. #CVE #Oracle #CISA #KEV #PatchNow

🔗 https://cyber.netsecops.io/articles/cisa-adds-oracle-http-server-vulnerability-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

##

cyberveille@mastobot.ping.moi at 2026-08-25T12:00:05.000Z ##

📢 Exploitation active de CVE-2026-21962 dans Oracle HTTP Server — ajout au catalogue KEV de la CISA

GBHackers, publié le 25 août 2026. La CISA (U.S. Cybersecurity and Infrastructure Security Agency) a officiellement ajouté CVE-2026-21962 à son catalogue Known Exploited Vulnerabilities (KEV), confirmant une exploitation active dans la nature.

📖 cyberveille : https://cyberveille.ch/posts/2026-08-25-exploitation-active-de-cve-2026-21962-dans-oracle-http-server-ajout-au-catalogue-kev-de-la-cisa/
🌐 source : https://gbhackers.com/hackers-exploit-critical-oracle-http-server-flaw/
🟡 vérification factuelle moyenne
#OracleHTTPServer #CISAKEV #Cyberveille

##

undercodenews@mastodon.social at 2026-08-25T11:23:19.000Z ##

CISA Sounds the Alarm as Critical Oracle WebLogic Flaw Faces Active Exploitation + Video

A Critical Warning That Oracle Administrators Cannot Ignore A new cybersecurity warning is putting Oracle infrastructure under intense pressure after the U.S. Cybersecurity and Infrastructure Security Agency, CISA, ordered organizations to urgently address CVE-2026-21962, a critical vulnerability affecting Oracle HTTP Server and the WebLogic Server Proxy plugin. The danger is not…

https://undercodenews.com/cisa-sounds-the-alarm-as-critical-oracle-weblogic-flaw-faces-active-exploitation-video/?utm_source=mastodon&utm_medium=jetpack_social

##

youranonnewsirc@nerdculture.de at 2026-08-25T10:26:18.000Z ##

Geopolitical tensions escalate as the US launches "Operation Economic Outcast" against Iran, imposing new sanctions amidst Strait of Hormuz disputes (Aug 25). Canada is set to announce retaliatory tariffs against the US (Aug 25). The UK and Ukraine formalized an AI defense partnership (Aug 24).

In technology, Nvidia's AI chips remain a focal point, with Taiwan indicting nine individuals for illegal AI server exports to China (Aug 24). Hybrid bonding is advancing as a foundational technology for enhanced semiconductor performance (Aug 25).

Cybersecurity: CISA issued a warning regarding the active exploitation of an Oracle WebLogic vulnerability (CVE-2026-21962), urging immediate patching (Aug 25). ReliaQuest also confirmed an employee fell victim to a social engineering attack (Aug 25).

https://undercodenews.com/oracle-weblogic-faces-a-maximum-severity-threat-as-cisa-flags-cve-2026-21962-for-immediate-action-video/?utm_source=mastodon&utm_medium=jetpack_social

##

security_crawler_carl at 2026-08-25T09:45:06.059Z ##

CloudSEK honeypots confirm active attacks, with threat actors also recycling ancient WebLogic RCE charges dating back to 2017 and 2020.

Sentence is immediate: patch CVE-2026-21962 now and audit your exposure to CVE-2020-14882/14883, CVE-2020-2551, and CVE-2017-10271 before this court loses what little patience remains.

Reward: You've received the Gavel of Grudging Compliance — equip it or face contempt charges.

#CyberSecurity #Oracle #WebLogic #ZeroDay #Vulnerability #CriticalHit (2/2)

##

security_crawler_carl at 2026-08-25T09:45:05.905Z ##

🏆 New Achievement! Ten Point Oh, Your Honor!

This court finds Oracle WebLogic Server and Oracle HTTP Server guilty of harboring CVE-2026-21962 — a CVSS 10.0, maximum-severity flaw allowing unauthenticated attackers full network access via HTTP to seize instances and tamper with critical data. The defendant offered no authentication requirement whatsoever. CISA has entered the verdict into its Known Exploited Vulnerabilities catalog. (1/2)

##

undercodenews@mastodon.social at 2026-08-25T09:28:04.000Z ##

Oracle WebLogic Faces a Maximum-Severity Threat as CISA Flags CVE-2026-21962 for Immediate Action + Video

A Critical Warning for Oracle Administrators A vulnerability with the highest possible CVSS severity has moved from a technical security advisory into a much more urgent category: CISA’s Known Exploited Vulnerabilities catalog. The flaw, tracked as CVE-2026-21962, affects Oracle HTTP Server and the Oracle WebLogic Server Proxy Plug-in, creating a potentially…

##

undercodenews@mastodon.social at 2026-08-25T07:11:21.000Z ##

CISA Sounds the Alarm as Maximum-Severity Oracle Flaw CVE-2026-21962 Faces Active Exploitation + Video

Introduction: When a Critical Oracle Server Becomes an Open Door A critical vulnerability does not always become a cybersecurity emergency the moment it is discovered. Sometimes the real danger begins later, when proof-of-concept activity spreads, attackers start scanning the internet, and defenders realize that systems which should have been patched months ago are…

https://undercodenews.com/cisa-sounds-the-alarm-as-maximum-severity-oracle-flaw-cve-2026-21962-faces-active-exploitation-video/?utm_source=mastodon&utm_medium=jetpack_social

##

Analyst207@mastodon.social at 2026-08-25T06:55:40.000Z ##

CISA Warns of Actively Exploited Oracle WebLogic Flaw

A critical Oracle WebLogic flaw, CVE-2026-21962, is being actively exploited, allowing hackers to wreak havoc on your system by creating, deleting, or modifying sensitive data. This severe vulnerability has a CVSS score of 10.0, making it a high-priority threat that demands immediate attention.

https://osintsights.com/cisa-warns-of-actively-exploited-oracle-weblogic-flaw?utm_source=mastodon&utm_medium=social

#OracleWeblogic #Cve202621962 #ImproperAccessControl #EmergingThreats #Cybersecurity

##

youranonnewsirc@nerdculture.de at 2026-08-25T04:26:31.000Z ##

Here's a summary of recent geopolitical, technology, and cybersecurity news:

Geopolitical: The US has launched "Operation Economic Outcast" against Iran (Aug 25) and plans 7.5% tariffs on Chinese goods over excess manufacturing capacity before a September summit (Aug 25).

Technology: Google is reorganizing DeepMind and acquired Spirit Airlines' data for AI model development (Aug 24). Fujitsu is trialing AI for construction process and risk management (Aug 25).

Cybersecurity: CISA added an Oracle HTTP Server vulnerability (CVE-2026-21962) to its Known Exploited Vulnerabilities Catalog (Aug 24). Critical GitLab (CVE-2026-19478) and Cisco vulnerabilities (CVSS 10.0) are under active exploitation (Aug 24).

#Oracle #CVE202621962 #CyberSecurity #CISA #Vulnerability

##

DailyCyberSecurity at 2026-08-25T01:41:50.903Z ##

CISA warned that the CVE-2026-21962 Oracle flaw with a CVSS 10 score is actively exploited in the wild. Patch Oracle Fusion Middleware systems now.

https://securityonline.info/cve-2026-21962-oracle-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

secdb at 2026-08-24T21:00:17.132Z ##

🚨 [CISA-2026:0824] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0824)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-21962 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-21962)
- Name: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Oracle
- Product: HTTP Server and Oracle Weblogic Server Proxy Plug-in
- Notes: https://www.oracle.com/security-alerts/cpujan2026.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-21962

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260824 #cisa20260824 #cve_2026_21962 #cve202621962

##

cisakevtracker@mastodon.social at 2026-08-24T19:00:45.000Z ##

CVE ID: CVE-2026-21962
Vendor: Oracle
Product: HTTP Server and Oracle Weblogic Server Proxy Plug-in
Date Added: 2026-08-24
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-21962

##

thecybermind@infosec.exchange at 2026-08-25T22:49:03.000Z ##

🚨 Critical Threat Intel: CVE-2026-21962 impacts Oracle HTTP Server & Weblogic Proxy Plug-in via access control bypass. Review exploitation patterns, web access detection queries, and active endpoint hardening actions.
https://thecybermind.co/jily

##

cyberworldops@infosec.exchange at 2026-08-25T22:20:00.000Z ##

CISA has added Oracle CVE-2026-21962 to the KEV catalog. CVSS 10.0. This critical flaw in WebLogic Server allows unauthenticated access and is confirmed actively exploited. Federal remediation deadline is August 27, but every WebLogic deployment should be treated as urgent. Patch or isolate immediately.

#OracleCVE202621962 #WebLogic #CISA #KnownExploitedVulnerabilities

https://cyberworldops.eu/en/oracle-cve-2026-21962-enters-kev-maximum-score-and-unauthorized-access

##

youranonnewsirc@nerdculture.de at 2026-08-25T10:26:18.000Z ##

Geopolitical tensions escalate as the US launches "Operation Economic Outcast" against Iran, imposing new sanctions amidst Strait of Hormuz disputes (Aug 25). Canada is set to announce retaliatory tariffs against the US (Aug 25). The UK and Ukraine formalized an AI defense partnership (Aug 24).

In technology, Nvidia's AI chips remain a focal point, with Taiwan indicting nine individuals for illegal AI server exports to China (Aug 24). Hybrid bonding is advancing as a foundational technology for enhanced semiconductor performance (Aug 25).

Cybersecurity: CISA issued a warning regarding the active exploitation of an Oracle WebLogic vulnerability (CVE-2026-21962), urging immediate patching (Aug 25). ReliaQuest also confirmed an employee fell victim to a social engineering attack (Aug 25).

##

security_crawler_carl@infosec.exchange at 2026-08-25T09:45:06.000Z ##

CloudSEK honeypots confirm active attacks, with threat actors also recycling ancient WebLogic RCE charges dating back to 2017 and 2020.

Sentence is immediate: patch CVE-2026-21962 now and audit your exposure to CVE-2020-14882/14883, CVE-2020-2551, and CVE-2017-10271 before this court loses what little patience remains.

Reward: You've received the Gavel of Grudging Compliance — equip it or face contempt charges.

#CyberSecurity #Oracle #WebLogic #ZeroDay #Vulnerability #CriticalHit (2/2)

##

security_crawler_carl@infosec.exchange at 2026-08-25T09:45:05.000Z ##

🏆 New Achievement! Ten Point Oh, Your Honor!

This court finds Oracle WebLogic Server and Oracle HTTP Server guilty of harboring CVE-2026-21962 — a CVSS 10.0, maximum-severity flaw allowing unauthenticated attackers full network access via HTTP to seize instances and tamper with critical data. The defendant offered no authentication requirement whatsoever. CISA has entered the verdict into its Known Exploited Vulnerabilities catalog. (1/2)

##

youranonnewsirc@nerdculture.de at 2026-08-25T04:26:31.000Z ##

Here's a summary of recent geopolitical, technology, and cybersecurity news:

Geopolitical: The US has launched "Operation Economic Outcast" against Iran (Aug 25) and plans 7.5% tariffs on Chinese goods over excess manufacturing capacity before a September summit (Aug 25).

Technology: Google is reorganizing DeepMind and acquired Spirit Airlines' data for AI model development (Aug 24). Fujitsu is trialing AI for construction process and risk management (Aug 25).

Cybersecurity: CISA added an Oracle HTTP Server vulnerability (CVE-2026-21962) to its Known Exploited Vulnerabilities Catalog (Aug 24). Critical GitLab (CVE-2026-19478) and Cisco vulnerabilities (CVSS 10.0) are under active exploitation (Aug 24).

#Oracle #CVE202621962 #CyberSecurity #CISA #Vulnerability

##

DailyCyberSecurity@infosec.exchange at 2026-08-25T01:41:50.000Z ##

CISA warned that the CVE-2026-21962 Oracle flaw with a CVSS 10 score is actively exploited in the wild. Patch Oracle Fusion Middleware systems now.

https://securityonline.info/cve-2026-21962-oracle-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

secdb@infosec.exchange at 2026-08-24T21:00:17.000Z ##

🚨 [CISA-2026:0824] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0824)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-21962 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-21962)
- Name: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Oracle
- Product: HTTP Server and Oracle Weblogic Server Proxy Plug-in
- Notes: https://www.oracle.com/security-alerts/cpujan2026.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-21962

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260824 #cisa20260824 #cve_2026_21962 #cve202621962

##

cisakevtracker@mastodon.social at 2026-08-24T19:00:45.000Z ##

CVE ID: CVE-2026-21962
Vendor: Oracle
Product: HTTP Server and Oracle Weblogic Server Proxy Plug-in
Date Added: 2026-08-24
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-21962

##

CVE-2026-17250
(0 None)

EPSS: 0.19%

updated 2026-08-25T04:18:10.233000

2 posts

A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within a firmware image. Successful exploitation may allow an authenticated attacker to trigger memory corruption and execute arbitrary code on the affected device.

DailyCyberSecurity at 2026-08-24T11:02:37.096Z ##

Three high-severity TL-MR6400 router flaws, including CVE-2026-17250, expose devices to code execution.

#TPLink #CyberSecurity #Vulnerability #CVE202617250

https://securityonline.info/tl-mr6400-router-flaws/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-24T11:02:37.000Z ##

Three high-severity TL-MR6400 router flaws, including CVE-2026-17250, expose devices to code execution.

#TPLink #CyberSecurity #Vulnerability #CVE202617250

https://securityonline.info/tl-mr6400-router-flaws/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-10053
(8.5 HIGH)

EPSS: 0.72%

updated 2026-08-25T04:17:40.250000

2 posts

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package registry.

1 repos

https://github.com/dinosn/CVE-2026-10053-lab

Matchbook3469@mastodon.social at 2026-08-24T07:41:25.000Z ##

🟠 New security advisory:

CVE-2026-10053 affects multiple systems.

• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-10053-gitlab-rce-via-package-registry-path-traversal-poc

by Yazoul AI

#InfoSec #SecurityPatching #HackerNews

##

thehackerwire@mastodon.social at 2026-08-23T11:02:00.000Z ##

🟠 CVE-2026-10053 - High (8.5)

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10053/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-78676
(9.8 CRITICAL)

EPSS: 0.40%

updated 2026-08-25T03:32:20

4 posts

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated GitPython config write, enabling arbitrary code execution via hook invocation.

beyondmachines1 at 2026-08-25T15:01:41.789Z ##

GitPython Patches Critical RCE Vulnerability in Config Parser

GitPython version 3.1.59 patches a critical remote code execution vulnerability (CVE-2026-78676) caused by improper handling of multi-line configuration values. The flaw allows attackers to inject malicious Git directives that execute arbitrary code during routine repository operations.

**If you use GitPython in any application or CI/CD pipeline, update it to version 3.1.59 or later. Еvery version up to 3.1.58 is vulnerable to CVE-2026-78676. Until you can update, don't let GitPython read or write config files from cloned repos, shared configs, or workspace caches you don't fully control. Тreat any repository from an outside source as untrusted.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/gitpython-patches-critical-rce-vulnerability-in-config-parser-g-q-0-2-o/gD2P6Ple2L

##

offseq at 2026-08-25T03:00:25.721Z ##

CVE-2026-78676 | GitPython <3.1.59 has a CRITICAL argument injection flaw: multi-line git-config values can become active directives, enabling arbitrary code execution via git hooks. Patch status unknown — avoid untrusted configs. https://radar.offseq.com/threat/cve-2026-78676-improper-neutralization-of-argument-delimiters-in-a-command-argument-injection-in-98aef85f24190fbe #OffSeq #CVE202678676 #git #infosec

##

updated 2026-08-25T00:30:37

4 posts

Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.

offseq at 2026-08-25T01:30:23.183Z ##

CRITICAL CVE-2026-78265: Nexcess The Events Calendar <=6.17.2 has unauthenticated PHP Object Injection (CWE-502). Full system compromise possible. No patch yet — remove or disable plugin for now. https://radar.offseq.com/threat/cve-2026-78265-cwe-502-deserialization-of-untrusted-data-in-nexcess-the-events-calendar-3dd3af18547313e0 #OffSeq #WordPress #Infosec #CVE2026_78265

##

thehackerwire@mastodon.social at 2026-08-24T23:00:10.000Z ##

🔴 CVE-2026-78265 - Critical (9.8)

Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78265/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-08-25T01:30:23.000Z ##

CRITICAL CVE-2026-78265: Nexcess The Events Calendar <=6.17.2 has unauthenticated PHP Object Injection (CWE-502). Full system compromise possible. No patch yet — remove or disable plugin for now. https://radar.offseq.com/threat/cve-2026-78265-cwe-502-deserialization-of-untrusted-data-in-nexcess-the-events-calendar-3dd3af18547313e0 #OffSeq #WordPress #Infosec #CVE2026_78265

##

thehackerwire@mastodon.social at 2026-08-24T23:00:10.000Z ##

🔴 CVE-2026-78265 - Critical (9.8)

Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78265/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-32556
(7.1 HIGH)

EPSS: 0.15%

updated 2026-08-25T00:30:37

2 posts

Unauthenticated Cross Site Scripting (XSS) in Boost <= 2.0.4 versions.

hugovalters@mastodon.social at 2026-08-25T01:01:34.000Z ##

CVE-2026-32556 - Unauthenticated XSS in Boost <= 2.0.4. CVSS 7.1. Currently unpatched. Audit systems and mitigate risk immediately. #CVE #XSS #infosec

https://www.valtersit.com/cve/CVE-2026-32556/

##

hugovalters@mastodon.social at 2026-08-25T01:01:34.000Z ##

CVE-2026-32556 - Unauthenticated XSS in Boost <= 2.0.4. CVSS 7.1. Currently unpatched. Audit systems and mitigate risk immediately. #CVE #XSS #infosec

https://www.valtersit.com/cve/CVE-2026-32556/

##

CVE-2026-78267
(9.8 CRITICAL)

EPSS: 0.27%

updated 2026-08-25T00:30:37

4 posts

Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.

offseq at 2026-08-25T00:00:35.189Z ##

CVE-2026-78267 (CRITICAL, CVSS 9.8): Cozmoslabs TranslatePress <=3.3.2 is vulnerable to unauthenticated privilege escalation (CWE-266). No patch yet — monitor vendor advisories for updates. https://radar.offseq.com/threat/cve-2026-78267-cwe-266-incorrect-privilege-assignment-in-cozmoslabs-translatepress-ba0caba45d17d814 #OffSeq #WordPress #Vuln #PrivilegeEscalation

##

thehackerwire@mastodon.social at 2026-08-24T23:00:21.000Z ##

🔴 CVE-2026-78267 - Critical (9.8)

Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78267/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-08-25T00:00:35.000Z ##

CVE-2026-78267 (CRITICAL, CVSS 9.8): Cozmoslabs TranslatePress <=3.3.2 is vulnerable to unauthenticated privilege escalation (CWE-266). No patch yet — monitor vendor advisories for updates. https://radar.offseq.com/threat/cve-2026-78267-cwe-266-incorrect-privilege-assignment-in-cozmoslabs-translatepress-ba0caba45d17d814 #OffSeq #WordPress #Vuln #PrivilegeEscalation

##

thehackerwire@mastodon.social at 2026-08-24T23:00:21.000Z ##

🔴 CVE-2026-78267 - Critical (9.8)

Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78267/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-78268
(7.5 HIGH)

EPSS: 0.25%

updated 2026-08-25T00:30:37

2 posts

Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versions.

thehackerwire@mastodon.social at 2026-08-25T00:00:16.000Z ##

🟠 CVE-2026-78268 - High (7.5)

Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78268/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-25T00:00:16.000Z ##

🟠 CVE-2026-78268 - High (7.5)

Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78268/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-19685
(9.8 CRITICAL)

EPSS: 0.14%

updated 2026-08-24T21:34:43

2 posts

NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogu

cR0w at 2026-08-24T18:50:25.704Z ##

i uSe lInUx bEcAuSe iT'S SeCuRe.

https://access.redhat.com/security/cve/cve-2026-19685

NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.

##

cR0w@infosec.exchange at 2026-08-24T18:50:25.000Z ##

i uSe lInUx bEcAuSe iT'S SeCuRe.

https://access.redhat.com/security/cve/cve-2026-19685

NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.

##

CVE-2026-7455
(7.8 HIGH)

EPSS: 0.13%

updated 2026-08-24T21:33:53

2 posts

A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

thehackerwire@mastodon.social at 2026-08-24T21:59:55.000Z ##

🟠 CVE-2026-7455 - High (7.8)

A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the conte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7455/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T21:59:55.000Z ##

🟠 CVE-2026-7455 - High (7.8)

A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the conte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7455/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-61419
(7.8 HIGH)

EPSS: 0.09%

updated 2026-08-24T21:33:52

2 posts

Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

thehackerwire@mastodon.social at 2026-08-24T22:02:00.000Z ##

🟠 CVE-2026-61419 - High (7.8)

Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61419/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T22:02:00.000Z ##

🟠 CVE-2026-61419 - High (7.8)

Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61419/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-16783
(7.8 HIGH)

EPSS: 0.13%

updated 2026-08-24T21:33:46

2 posts

A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

thehackerwire@mastodon.social at 2026-08-24T22:00:14.000Z ##

🟠 CVE-2026-16783 - High (7.8)

A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the conte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16783/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T22:00:14.000Z ##

🟠 CVE-2026-16783 - High (7.8)

A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the conte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16783/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-76835
(9.1 CRITICAL)

EPSS: 0.35%

updated 2026-08-24T20:17:19.623000

2 posts

OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, because the guard added for CVE-2026-40575 is inert in the default reverse-proxy configuration. GetRequestURI in pkg/requests/util/util.go prefers that header over the real request URI whenever CanTrustForwardedHeaders returns true, and isAllowedPath in oauthproxy.go matches the s

thehackerwire@mastodon.social at 2026-08-24T19:01:19.000Z ##

🔴 CVE-2026-76835 - Critical (9.1)

OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, because the guard added for CVE-2026-40575 is inert in the default reverse-proxy configuration. GetRequestURI in pkg/requests/ut...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76835/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T19:01:19.000Z ##

🔴 CVE-2026-76835 - Critical (9.1)

OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, because the guard added for CVE-2026-40575 is inert in the default reverse-proxy configuration. GetRequestURI in pkg/requests/ut...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76835/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-60084
(8.7 HIGH)

EPSS: 0.35%

updated 2026-08-24T20:16:51.410000

1 posts

SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint that accepts an unvalidated path parameter passed directly to os.RemoveAll. Authenticated admin attackers can supply absolute filesystem paths to recursively delete any file or directory the kernel process has permission to remove, anywhere on the host filesystem.

thehackerwire@mastodon.social at 2026-08-22T23:00:32.000Z ##

🟠 CVE-2026-60084 - High (8.7)

SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint that accepts an unvalidated path parameter passed directly to os.RemoveAll. Authenticated admin attackers can supply absolute...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-60084/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-19874
(9.1 CRITICAL)

EPSS: 0.73%

updated 2026-08-24T20:16:42.277000

4 posts

A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kick_num" to determine the number of entries, and individual kicked player IDs supplied via keys in the format "kicked_id_%i". The functio

1 repos

https://github.com/alicealys/mgo3-rce

benzogaga33@mamot.fr at 2026-08-25T09:40:02.000Z ##

Metal Gear Online 3 : rejoindre un salon Steam suffisait à faire exécuter du code sur votre PC https://www.it-connect.fr/metal-gear-online-3-faille-rce-cve-2026-19874/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

##

DailyCyberSecurity at 2026-08-24T15:27:03.281Z ##

Metal Gear Online 3 RCE vulnerability CVE-2026-19874 fixed. Update the game to prevent attackers from executing remote code on your system.

#MetalGearOnline3 #CyberSecurity #Vulnerability #CVE202619874

https://securityonline.info/metal-gear-online-3-rce-cve-2026-19874/?utm_source=mastodon&utm_medium=jetpack_social

##

benzogaga33@mamot.fr at 2026-08-25T09:40:02.000Z ##

Metal Gear Online 3 : rejoindre un salon Steam suffisait à faire exécuter du code sur votre PC https://www.it-connect.fr/metal-gear-online-3-faille-rce-cve-2026-19874/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

##

DailyCyberSecurity@infosec.exchange at 2026-08-24T15:27:03.000Z ##

Metal Gear Online 3 RCE vulnerability CVE-2026-19874 fixed. Update the game to prevent attackers from executing remote code on your system.

#MetalGearOnline3 #CyberSecurity #Vulnerability #CVE202619874

https://securityonline.info/metal-gear-online-3-rce-cve-2026-19874/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-76070
(9.8 CRITICAL)

EPSS: 1.00%

updated 2026-08-24T19:16:58.433000

2 posts

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bin/netis.cgi. Attackers can exploit the custom Base64 decoder's lack of output length validation against the fixed-size stack buffer to achieve remote cod

1 repos

https://github.com/ozcanpng/CVE-2026-76070

thehackerwire@mastodon.social at 2026-08-24T17:00:49.000Z ##

🔴 CVE-2026-76070 - Critical (9.8)

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76070/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T17:00:49.000Z ##

🔴 CVE-2026-76070 - Critical (9.8)

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by submitting an oversized Base64-encoded password to the login handler in /bi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76070/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-71506
(8.1 HIGH)

EPSS: 0.30%

updated 2026-08-24T19:16:49.960000

1 posts

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API delete endpoint that allows authenticated attackers with invoice-deletion rights to permanently delete any payment record by bypassing the intended payment-issuance rights check. Attackers can exploit this misconfigured permission check to zero paid amounts on invoices and remove entries from accountin

1 repos

https://github.com/CyberWarrior9/dolibarr

hugovalters@mastodon.social at 2026-08-25T11:06:42.000Z ##

CVE-2026-71506 - Broken Access Control in Dolibarr REST API allows unauthorized deletion of payment records. CVSS 8.1. Restrict API access immediately. #CVE #Dolibarr #infosec

https://www.valtersit.com/cve/CVE-2026-71506/

##

CVE-2026-9254(CVSS UNKNOWN)

EPSS: 2.35%

updated 2026-08-24T18:32:04

2 posts

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute them with root privileges. Successful exploitation may result in complete device compromise and imp

1 repos

https://github.com/Slagzz/CVE-2026-9254

DailyCyberSecurity at 2026-08-25T01:49:25.678Z ##

TP-Link patched an unauthenticated OS command injection flaw (CVE-2026-9254) and other risks like CVE-2026-16348 and CVE-2026-78541 in Archer routers.

#TPLink #CyberSecurity #CVE20269254 #CommandInjection

https://securityonline.info/cve-2026-9254-unauthenticated-os-command-injection/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-25T01:49:25.000Z ##

TP-Link patched an unauthenticated OS command injection flaw (CVE-2026-9254) and other risks like CVE-2026-16348 and CVE-2026-78541 in Archer routers.

#TPLink #CyberSecurity #CVE20269254 #CommandInjection

https://securityonline.info/cve-2026-9254-unauthenticated-os-command-injection/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-16348(CVSS UNKNOWN)

EPSS: 0.91%

updated 2026-08-24T18:31:59

2 posts

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors, credential theft, LAN reconnaissance, and router-assisted attacks against connected devices.

1 repos

https://github.com/Slagzz/CVE-2026-16348

DailyCyberSecurity at 2026-08-25T01:49:25.678Z ##

TP-Link patched an unauthenticated OS command injection flaw (CVE-2026-9254) and other risks like CVE-2026-16348 and CVE-2026-78541 in Archer routers.

#TPLink #CyberSecurity #CVE20269254 #CommandInjection

https://securityonline.info/cve-2026-9254-unauthenticated-os-command-injection/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-25T01:49:25.000Z ##

TP-Link patched an unauthenticated OS command injection flaw (CVE-2026-9254) and other risks like CVE-2026-16348 and CVE-2026-78541 in Archer routers.

#TPLink #CyberSecurity #CVE20269254 #CommandInjection

https://securityonline.info/cve-2026-9254-unauthenticated-os-command-injection/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-76071
(9.8 CRITICAL)

EPSS: 1.06%

updated 2026-08-24T18:31:59

2 posts

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf conversions that copy user-supplied input into fixed-size stack buffers before authentication is verif

1 repos

https://github.com/ozcanpng/CVE-2026-76071

thehackerwire@mastodon.social at 2026-08-24T17:00:29.000Z ##

🔴 CVE-2026-76071 - Critical (9.8)

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76071/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T17:00:29.000Z ##

🔴 CVE-2026-76071 - Critical (9.8)

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76071/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-76073
(8.8 HIGH)

EPSS: 0.28%

updated 2026-08-24T18:31:57

2 posts

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in label_studio/tasks/api.py declares queryset = Annotation.objects.all() and provides no get_queryset override, so the default lookup retrieves any annotation by primary key. The view's permission_required entries name annotations.view, annotations.change and annotations.delete, and lab

thehackerwire@mastodon.social at 2026-08-24T19:01:07.000Z ##

🟠 CVE-2026-76073 - High (8.8)

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in label_studio/tasks/api.py declares queryset = Annotation.objects.all() and provides no get_queryset override, so the default lookup ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76073/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T19:01:07.000Z ##

🟠 CVE-2026-76073 - High (8.8)

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in label_studio/tasks/api.py declares queryset = Annotation.objects.all() and provides no get_queryset override, so the default lookup ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76073/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-9769
(7.5 HIGH)

EPSS: 0.28%

updated 2026-08-24T18:17:35.520000

1 posts

justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML() construction, TreeBuilder.finish() unconditionally calls _populate_selectedcontent(), which recursively traverses the DOM tree via _find_elements()/_find_element() without a depth bound. An attacker who can supply HTML for parsing can provide deeply nested elements (e.g.

thehackerwire@mastodon.social at 2026-08-23T15:00:07.000Z ##

🟠 CVE-2026-9769 - High (7.5)

justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML() construction, TreeBuilder.finish() unconditionally calls _populate_selectedcontent(), which recursively traverses the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9769/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-78167
(10.0 CRITICAL)

EPSS: 1.03%

updated 2026-08-24T18:17:26.737000

2 posts

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpcon_check_session_url of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure

thehackerwire@mastodon.social at 2026-08-24T03:00:32.000Z ##

🔴 CVE-2026-78167 - Critical (10)

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpcon_check_session_url of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78167/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T03:00:32.000Z ##

🔴 CVE-2026-78167 - Critical (10)

A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpcon_check_session_url of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78167/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-76838
(8.5 HIGH)

EPSS: 0.31%

updated 2026-08-24T18:17:22.363000

2 posts

Hi.Events validates a webhook destination only when it is registered, never when it is used. NoInternalUrlRule in backend/app/Validators/Rules/NoInternalUrlRule.php resolves the hostname with gethostbyname() and rejects private and reserved ranges, which any public hostname passes. At dispatch, WebhookDispatchService takes the stored URL and calls it through spatie/laravel-webhook-server without r

thehackerwire@mastodon.social at 2026-08-24T19:00:56.000Z ##

🟠 CVE-2026-76838 - High (8.5)

Hi.Events validates a webhook destination only when it is registered, never when it is used. NoInternalUrlRule in backend/app/Validators/Rules/NoInternalUrlRule.php resolves the hostname with gethostbyname() and rejects private and reserved ranges...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76838/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T19:00:56.000Z ##

🟠 CVE-2026-76838 - High (8.5)

Hi.Events validates a webhook destination only when it is registered, never when it is used. NoInternalUrlRule in backend/app/Validators/Rules/NoInternalUrlRule.php resolves the hostname with gethostbyname() and rejects private and reserved ranges...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76838/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-78168
(9.8 CRITICAL)

EPSS: 0.93%

updated 2026-08-24T16:40:53.647000

4 posts

A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in a

offseq at 2026-08-24T06:00:24.272Z ##

CRITICAL vuln (CVE-2026-78168) in EFM ipTIME T24000M ≤14.20.0: improper authentication in httpcon_check_session_url enables remote exploit. Public exploit disclosed, no vendor fix. Review access controls now. https://radar.offseq.com/threat/cve-2026-78168-improper-authentication-in-efm-iptime-t24000m-bfa2e716a3fcf0b6 #OffSeq #CVE #IoTSecurity #Exploit

##

thehackerwire@mastodon.social at 2026-08-24T03:00:41.000Z ##

🔴 CVE-2026-78168 - Critical (9.8)

A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78168/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-08-24T06:00:24.000Z ##

CRITICAL vuln (CVE-2026-78168) in EFM ipTIME T24000M ≤14.20.0: improper authentication in httpcon_check_session_url enables remote exploit. Public exploit disclosed, no vendor fix. Review access controls now. https://radar.offseq.com/threat/cve-2026-78168-improper-authentication-in-efm-iptime-t24000m-bfa2e716a3fcf0b6 #OffSeq #CVE #IoTSecurity #Exploit

##

thehackerwire@mastodon.social at 2026-08-24T03:00:41.000Z ##

🔴 CVE-2026-78168 - Critical (9.8)

A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78168/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-59568
(9.1 CRITICAL)

EPSS: 0.38%

updated 2026-08-24T15:31:57

3 posts

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.

undercodenews@mastodon.social at 2026-08-25T12:13:23.000Z ##

Critical Zscaler Client Connector Vulnerability Could Give Attackers Remote Code Execution Without Credentials + Video

Introduction: A Trusted Security Agent Can Become an Attacker’s Doorway Security software is supposed to be one of the strongest layers protecting an enterprise endpoint. But when a vulnerability strikes the security agent itself, the risk can become far more serious than an ordinary application flaw. That is the concern surrounding CVE-2026-59568, a…

https://undercodenews.com/critical-zscaler-client-connector-vulnerability-could-give-attackers-remote-code-execution-without-credentials-video/?utm_source=mastodon&utm_medium=jetpack_social

##

cR0w at 2026-08-24T18:12:33.649Z ##

https://nvd.nist.gov/vuln/detail/CVE-2026-59568

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.

##

cR0w@infosec.exchange at 2026-08-24T18:12:33.000Z ##

https://nvd.nist.gov/vuln/detail/CVE-2026-59568

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.

##

CVE-2026-77995(CVSS UNKNOWN)

EPSS: 0.29%

updated 2026-08-24T15:31:57

2 posts

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins.

offseq at 2026-08-24T13:30:27.026Z ##

CVE-2026-77995 (CRITICAL, CVSS 10): miniOrange OAuth Client for Joomla (v1.0.0 – 3.1.9) allows arbitrary account takeover via cookie manipulation. Patch to 3.2.0+ required. https://radar.offseq.com/threat/cve-2026-77995-cwe-639-authorization-bypass-through-user-controlled-key-in-miniorangecom-miniorange-0e8da876ce4c7e51 #OffSeq #Joomla #Vuln #OAuth

##

offseq@infosec.exchange at 2026-08-24T13:30:27.000Z ##

CVE-2026-77995 (CRITICAL, CVSS 10): miniOrange OAuth Client for Joomla (v1.0.0 – 3.1.9) allows arbitrary account takeover via cookie manipulation. Patch to 3.2.0+ required. https://radar.offseq.com/threat/cve-2026-77995-cwe-639-authorization-bypass-through-user-controlled-key-in-miniorangecom-miniorange-0e8da876ce4c7e51 #OffSeq #Joomla #Vuln #OAuth

##

CVE-2026-73570
(8.9 HIGH)

EPSS: 1.51%

updated 2026-08-24T13:19:17.577000

15 posts

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands a

3 repos

https://github.com/jishino567/CVE-2026-73570

https://github.com/BiuTrap/CVE-2026-73570

https://github.com/HORKimhab/CVE-2026-73570

undercodenews@mastodon.social at 2026-08-25T17:04:58.000Z ##

Zimbra Servers Under Active Attack as a Critical RCE Flaw Turns Into a Real-World Security Emergency + Video

A New Warning for Zimbra Administrators A serious cybersecurity incident is unfolding around Zimbra Collaboration Suite, with organizations facing active exploitation of a high-severity vulnerability that can allow unauthenticated attackers to execute operating-system commands remotely. The vulnerability, tracked as CVE-2026-73570, affects Zimbra Collaboration…

https://undercodenews.com/zimbra-servers-under-active-attack-as-a-critical-rce-flaw-turns-into-a-real-world-security-emergency-video/?utm_source=mastodon&utm_medium=jetpack_social

##

youranonnewsirc@nerdculture.de at 2026-08-25T16:26:22.000Z ##

Here's a concise overview of recent geopolitical, technology, and cybersecurity developments:

Geopolitical: The US has declared an "economic D-Day" against Iran, which is now threatening Strait of Hormuz disruption. China completed its largest South China Sea naval base at Antelope Reef.

Cybersecurity: Norway's public services were hit by a major DDoS attack on August 25. Iran-linked cyberattacks are increasingly targeting critical infrastructure in the UK and US. Over 270 Zimbra servers have been compromised via a high-severity RCE flaw (CVE-2026-73570).

Technology: Apple unveiled its M6 and M5 Ultra chips on August 25, significantly boosting AI performance in new Macs.

#AnonNews_irc #Cybersecurity #Anonymous #News

##

undercodenews@mastodon.social at 2026-08-25T12:48:55.000Z ##

Zimbra Under Siege: Hackers Have Already Breached Hundreds of Servers Through a High-Severity RCE Flaw

A New Zimbra Crisis Is Already Moving Beyond the Patch Window A dangerous Zimbra Collaboration Suite vulnerability has moved from a security advisory into an active compromise campaign, with hundreds of Internet-exposed servers reportedly showing evidence of exploitation. The vulnerability, tracked as CVE-2026-73570, enables unauthenticated remote command execution on…

https://undercodenews.com/zimbra-under-siege-hackers-have-already-breached-hundreds-of-servers-through-a-high-severity-rce-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

Analyst207@mastodon.social at 2026-08-25T12:25:47.000Z ##

Hackers Breach 270 Zimbra Servers in Remote Code Execution Attacks

A massive wave of hacking attacks has hit 270 Zimbra servers, exploiting a vulnerability that lets attackers inject malicious code remotely, with fixes available since July 20. The attacks, tracked as CVE-2026-73570, have been spreading rapidly, sparking urgent security warnings.

https://osintsights.com/hackers-breach-270-zimbra-servers-in-remote-code-execution-attacks?utm_source=mastodon&utm_medium=social

#RemoteCodeExecution #Zimbra #Cve202673570 #SnmpCommandInjection #EmergingThreats

##

tierrasapiens@mastodon.social at 2026-08-25T11:48:09.000Z ##

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Exploited Zimbra Flaw Highlights Shrinking Window to Patch
🔗 https://www.darkreading.com/vulnerabilities-threats/zimbra-flaw-exploitation-shrinking-window-patch

CISA has issued a three-day deadline for agencies to patch a Zimbra security vulnerability, CVE-2026-73570, which allows full takeover of a user's communications.

##

undercodenews@mastodon.social at 2026-08-24T18:38:33.000Z ##

CISA Sounds the Alarm: Actively Exploited Zimbra Vulnerability Puts Mail Servers at Risk + Video

A Critical Warning for Zimbra Administrators A serious cybersecurity warning has emerged for organizations running Zimbra Collaboration Suite, as the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-73570 to its Known Exploited Vulnerabilities catalog. The vulnerability is reportedly being exploited in the wild, turning what might otherwise be…

https://undercodenews.com/cisa-sounds-the-alarm-actively-exploited-zimbra-vulnerability-puts-mail-servers-at-risk-video/?utm_source=mastodon&utm_medium=jetpack_social

##

threatnoir at 2026-08-24T18:06:18.790Z ##

⚠️ CRITICAL: CISA orders urgent patching of actively exploited Zimbra flaw

Zimbra Collaboration Suite (ZCS) has a critical unauthenticated RCE vulnerability (CVE-2026-73570) that is actively exploited in the wild. Any organization running ZCS is at immediate risk of full system compromise. CISA has mandated U.S. government agencies patch within three days.

#Zimbra #CVE202673570 #CISA #KnownExploitedVulnerabilities

🤖 AI generated summary

##

cyberworldops at 2026-08-24T16:20:00.385Z ##

CVE-2026-73570 is an OS command injection in Zimbra Collaboration Suite being actively exploited. CISA added it to the KEV catalog with a 72-hour remediation window. This class of flaw allows full remote code execution, making it one of the most severe issues in any mail and collaboration platform.

https://cyberworldops.eu/en/zimbra-under-attack-command-injection-exploited-in-the-wild-cisa

##

offseq at 2026-08-24T12:00:31.513Z ##

CVE-2026-73570: Actively exploited CRITICAL RCE in Zimbra Collaboration Suite <10.1.20 via SNMP command injection. Patch to 10.1.20 now. Watch for suspicious service restarts & files in /opt/zimbra/jetty/webapps/. Details: https://radar.offseq.com/threat/cisa-orders-urgent-patching-of-actively-exploited-zimbra-flaw-b89f77b410f3bb5f #OffSeq #Zimbra #Infosec #RCE

##

Analyst207@mastodon.social at 2026-08-24T10:56:03.000Z ##

CISA Mandates Emergency Patching for Exploited Zimbra Flaw

A critical Zimbra flaw, CVE-2026-73570, allows hackers to inject malicious code, and the CISA is mandating emergency patching to prevent devastating attacks - don't wait, get protected now!

https://osintsights.com/cisa-mandates-emergency-patching-for-exploited-zimbra-flaw?utm_source=mastodon&utm_medium=social

#Cve202673570 #Zimbra #CommandInjection #RemoteCodeExecution #Snmp

##

youranonnewsirc@nerdculture.de at 2026-08-25T16:26:22.000Z ##

Here's a concise overview of recent geopolitical, technology, and cybersecurity developments:

Geopolitical: The US has declared an "economic D-Day" against Iran, which is now threatening Strait of Hormuz disruption. China completed its largest South China Sea naval base at Antelope Reef.

Cybersecurity: Norway's public services were hit by a major DDoS attack on August 25. Iran-linked cyberattacks are increasingly targeting critical infrastructure in the UK and US. Over 270 Zimbra servers have been compromised via a high-severity RCE flaw (CVE-2026-73570).

Technology: Apple unveiled its M6 and M5 Ultra chips on August 25, significantly boosting AI performance in new Macs.

#AnonNews_irc #Cybersecurity #Anonymous #News

##

threatnoir@infosec.exchange at 2026-08-24T18:06:18.000Z ##

⚠️ CRITICAL: CISA orders urgent patching of actively exploited Zimbra flaw

Zimbra Collaboration Suite (ZCS) has a critical unauthenticated RCE vulnerability (CVE-2026-73570) that is actively exploited in the wild. Any organization running ZCS is at immediate risk of full system compromise. CISA has mandated U.S. government agencies patch within three days.

#Zimbra #CVE202673570 #CISA #KnownExploitedVulnerabilities

🤖 AI generated summary

##

cyberworldops@infosec.exchange at 2026-08-24T16:20:00.000Z ##

CVE-2026-73570 is an OS command injection in Zimbra Collaboration Suite being actively exploited. CISA added it to the KEV catalog with a 72-hour remediation window. This class of flaw allows full remote code execution, making it one of the most severe issues in any mail and collaboration platform.

https://cyberworldops.eu/en/zimbra-under-attack-command-injection-exploited-in-the-wild-cisa

##

offseq@infosec.exchange at 2026-08-24T12:00:31.000Z ##

CVE-2026-73570: Actively exploited CRITICAL RCE in Zimbra Collaboration Suite <10.1.20 via SNMP command injection. Patch to 10.1.20 now. Watch for suspicious service restarts & files in /opt/zimbra/jetty/webapps/. Details: https://radar.offseq.com/threat/cisa-orders-urgent-patching-of-actively-exploited-zimbra-flaw-b89f77b410f3bb5f #OffSeq #Zimbra #Infosec #RCE

##

youranonnewsirc@nerdculture.de at 2026-08-22T10:26:23.000Z ##

Geopolitical tensions rise as the US escalates economic pressure on Iran, which labels new sanctions as a "declaration of war". Ukraine faces critical missile shortages amid intensified Russian strikes. In technology, major investments continue in AI infrastructure, with Google backing Marvell's custom AI chips. Cybersecurity sees CISA adding a critical Zimbra vulnerability (CVE-2026-73570) to its KEV catalog and new banking Trojans actively exploited globally.

https://www.valtersit.com/cve/CVE-2026-28171/

##

CVE-2026-28171
(8.6 HIGH)

EPSS: 0.34%

updated 2026-08-24T12:31:46

1 posts

Unauthenticated Arbitrary File Deletion in WooCommerce File Approval <= 10.7 versions.

hugovalters@mastodon.social at 2026-08-24T18:14:25.000Z ##

CVE-2026-28171 - Unauthenticated Arbitrary File Deletion in WooCommerce File Approval <= 10.7. CVSS 8.6. Currently unpatched. Deactivate plugin now. #CVE #WordPress #infosec

##

CVE-2026-77994(CVSS UNKNOWN)

EPSS: 0.23%

updated 2026-08-24T09:33:52

2 posts

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.

offseq at 2026-08-24T09:00:26.468Z ##

CVE-2026-77994: CRITICAL SQL injection in Joomla Page Builder CK (v1.0.0-3.6.4). Unauthenticated remote SQL execution possible. No official fix yet — disable/remove vulnerable versions. CVSS 9.3. https://radar.offseq.com/threat/cve-2026-77994-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-d508026cac86e490 #OffSeq #Joomla #SQLInjection #Infosec

##

offseq@infosec.exchange at 2026-08-24T09:00:26.000Z ##

CVE-2026-77994: CRITICAL SQL injection in Joomla Page Builder CK (v1.0.0-3.6.4). Unauthenticated remote SQL execution possible. No official fix yet — disable/remove vulnerable versions. CVSS 9.3. https://radar.offseq.com/threat/cve-2026-77994-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-d508026cac86e490 #OffSeq #Joomla #SQLInjection #Infosec

##

CVE-2026-8173
(5.3 MEDIUM)

EPSS: 0.21%

updated 2026-08-24T09:33:52

2 posts

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.

certvde at 2026-08-24T06:50:50.186Z ##

#OT #Advisory VDE-2026-061
Vulnerability in 'Copy learned MAC Addresses' function enables MAC Spoofing on Xelity Switches

An information disclosure vulnerability in the web GUI of Murrelektronik Xelity switches causes MAC addresses from the device's MAC address table to be written into a server-side log that is exposed via the device's web interface to unauthenticated users. The leak is triggered when an authenticated administrator invokes the 'Copy learned MAC Addresses' function, which causes a syslog error that inserts the affected MAC addresses into the log output. Once the error has been triggered, any unauthenticated attacker with network access to the web interface can retrieve the leaked MAC addresses via common browser developer tools. The vulnerable functionality was introduced in version 2.1.0 and is fixed in version 2.1.1.
#CVE CVE-2026-8173

https://certvde.com/en/advisories/vde-2026-061/

#CSAF https://murrelektronik.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-061.json

##

certvde@infosec.exchange at 2026-08-24T06:50:50.000Z ##

#OT #Advisory VDE-2026-061
Vulnerability in 'Copy learned MAC Addresses' function enables MAC Spoofing on Xelity Switches

An information disclosure vulnerability in the web GUI of Murrelektronik Xelity switches causes MAC addresses from the device's MAC address table to be written into a server-side log that is exposed via the device's web interface to unauthenticated users. The leak is triggered when an authenticated administrator invokes the 'Copy learned MAC Addresses' function, which causes a syslog error that inserts the affected MAC addresses into the log output. Once the error has been triggered, any unauthenticated attacker with network access to the web interface can retrieve the leaked MAC addresses via common browser developer tools. The vulnerable functionality was introduced in version 2.1.0 and is fixed in version 2.1.1.
#CVE CVE-2026-8173

https://certvde.com/en/advisories/vde-2026-061/

#CSAF https://murrelektronik.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-061.json

##

CVE-2026-78211
(9.8 CRITICAL)

EPSS: 1.54%

updated 2026-08-24T06:30:35

2 posts

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server.

offseq at 2026-08-24T04:30:23.159Z ##

4MOSAn GCB Doctor faces a CRITICAL OS Command Injection (CVE-2026-78211, CVSS 9.8). Unauthenticated attackers can execute arbitrary system commands via ADOdb test page parameter. No patch — restrict access & monitor closely. https://radar.offseq.com/threat/cve-2026-78211-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-91902877a695e366 #OffSeq #CVE202678211 #Vuln #BlueTeam

##

offseq@infosec.exchange at 2026-08-24T04:30:23.000Z ##

4MOSAn GCB Doctor faces a CRITICAL OS Command Injection (CVE-2026-78211, CVSS 9.8). Unauthenticated attackers can execute arbitrary system commands via ADOdb test page parameter. No patch — restrict access & monitor closely. https://radar.offseq.com/threat/cve-2026-78211-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-91902877a695e366 #OffSeq #CVE202678211 #Vuln #BlueTeam

##

CVE-2026-78170
(8.8 HIGH)

EPSS: 0.44%

updated 2026-08-24T03:31:14

2 posts

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

thehackerwire@mastodon.social at 2026-08-24T04:00:01.000Z ##

🟠 CVE-2026-78170 - High (8.8)

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78170/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T04:00:01.000Z ##

🟠 CVE-2026-78170 - High (8.8)

A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78170/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-78169
(9.9 CRITICAL)

EPSS: 0.44%

updated 2026-08-24T03:31:14

4 posts

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.

thehackerwire@mastodon.social at 2026-08-24T03:00:51.000Z ##

🔴 CVE-2026-78169 - Critical (9.9)

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile resul...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78169/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq at 2026-08-24T03:00:25.953Z ##

CRITICAL: Stack-based buffer overflow (CVE-2026-78169) in UTT HiPER 1250GW v3.2.7-210907-180535. Public exploit code available — no patch yet. Restrict device access & monitor /goform/aspRemoteApConfTempSend traffic. https://radar.offseq.com/threat/cve-2026-78169-stack-based-buffer-overflow-in-utt-hiper-1250gw-b9697a669a575a95 #OffSeq #CVE #Infosec #IoT

##

thehackerwire@mastodon.social at 2026-08-24T03:00:51.000Z ##

🔴 CVE-2026-78169 - Critical (9.9)

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile resul...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78169/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-08-24T03:00:25.000Z ##

CRITICAL: Stack-based buffer overflow (CVE-2026-78169) in UTT HiPER 1250GW v3.2.7-210907-180535. Public exploit code available — no patch yet. Restrict device access & monitor /goform/aspRemoteApConfTempSend traffic. https://radar.offseq.com/threat/cve-2026-78169-stack-based-buffer-overflow-in-utt-hiper-1250gw-b9697a669a575a95 #OffSeq #CVE #Infosec #IoT

##

CVE-2026-78207
(9.4 CRITICAL)

EPSS: 0.44%

updated 2026-08-24T03:31:14

2 posts

exceljs-hardened before 5.0.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype keys when merging note objects. Attackers can assign parsed JSON with a malicious __proto__ property to cell notes, modifying Object.prototype and affecting all plain objects created in the process.

thehackerwire@mastodon.social at 2026-08-24T02:00:05.000Z ##

🔴 CVE-2026-78207 - Critical (9.4)

exceljs-hardened before 5.0.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype keys when merging note objects. Attackers can assign parsed JSON with a malicious __proto_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78207/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T02:00:05.000Z ##

🔴 CVE-2026-78207 - Critical (9.4)

exceljs-hardened before 5.0.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype keys when merging note objects. Attackers can assign parsed JSON with a malicious __proto_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78207/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-78209
(8.2 HIGH)

EPSS: 0.29%

updated 2026-08-24T03:31:06

2 posts

exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially exfiltrating data or performing other malicious actions.

thehackerwire@mastodon.social at 2026-08-24T02:00:27.000Z ##

🟠 CVE-2026-78209 - High (8.2)

exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78209/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T02:00:27.000Z ##

🟠 CVE-2026-78209 - High (8.2)

exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78209/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-78208
(7.5 HIGH)

EPSS: 0.37%

updated 2026-08-24T01:16:58.280000

2 posts

exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths. Attackers can supply arbitrary file paths to read any file accessible to the Node.js process and embed it in the generated workbook.

thehackerwire@mastodon.social at 2026-08-24T02:00:15.000Z ##

🟠 CVE-2026-78208 - High (7.5)

exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths. Attackers can supply arbitrary file paths to read any file accessible to the Node.js process and embed it ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78208/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T02:00:15.000Z ##

🟠 CVE-2026-78208 - High (7.5)

exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths. Attackers can supply arbitrary file paths to read any file accessible to the Node.js process and embed it ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78208/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-18052
(8.1 HIGH)

EPSS: 0.27%

updated 2026-08-23T18:32:50

2 posts

The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link to gain a session as any user on the site, including an administrator.

thehackerwire@mastodon.social at 2026-08-23T22:00:10.000Z ##

🟠 CVE-2026-18052 - High (8.1)

The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link to gain...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-23T22:00:10.000Z ##

🟠 CVE-2026-18052 - High (8.1)

The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link to gain...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-76793
(8.1 HIGH)

EPSS: 0.35%

updated 2026-08-23T18:31:45

2 posts

The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and issuing a session, allowing unauthenticated attackers to log in as any user, including administrators.

thehackerwire@mastodon.social at 2026-08-23T21:59:59.000Z ##

🟠 CVE-2026-76793 - High (8.1)

The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and issuing a session, allowing unauthenticated attackers to log in as...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76793/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-23T21:59:59.000Z ##

🟠 CVE-2026-76793 - High (8.1)

The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and issuing a session, allowing unauthenticated attackers to log in as...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76793/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-77002
(9.8 CRITICAL)

EPSS: 0.34%

updated 2026-08-23T18:31:44

2 posts

The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators.

thehackerwire@mastodon.social at 2026-08-23T18:00:30.000Z ##

🔴 CVE-2026-77002 - Critical (9.8)

The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-23T18:00:30.000Z ##

🔴 CVE-2026-77002 - Critical (9.8)

The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-77001
(9.8 CRITICAL)

EPSS: 0.42%

updated 2026-08-23T18:31:44

3 posts

The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user, including administrators. In the default case a session as the site's original administrator account is obt

thehackerwire@mastodon.social at 2026-08-23T18:00:21.000Z ##

🔴 CVE-2026-77001 - Critical (9.8)

The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77001/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-23T18:00:21.000Z ##

🔴 CVE-2026-77001 - Critical (9.8)

The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77001/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-08-22T13:30:23.000Z ##

CVE-2026-77001: CRITICAL vuln in Social Login & Sharing buttons with Analytics By SoClever (≤1.2.0). No auth checks — attackers can hijack any user session, including admin. Remove/disable plugin pending fix. https://radar.offseq.com/threat/cve-2026-77001-cwe-287-improper-authentication-in-social-login-sharing-buttons-with-analytics-by-c2f4b63e61e43745 #OffSeq #WordPress #CVE202677001 #Vulnerability

##

CVE-2026-77000
(9.8 CRITICAL)

EPSS: 0.34%

updated 2026-08-23T16:16:38.360000

2 posts

The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's email address.

thehackerwire@mastodon.social at 2026-08-23T18:00:11.000Z ##

🔴 CVE-2026-77000 - Critical (9.8)

The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, incl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77000/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-23T18:00:11.000Z ##

🔴 CVE-2026-77000 - Critical (9.8)

The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, incl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77000/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-76789
(8.8 HIGH)

EPSS: 0.34%

updated 2026-08-23T16:16:38.043000

2 posts

The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not escape a stored setting before outputting it, allowing unauthenticated users to store malicious JavaScript which will be executed in the context of an administrator viewing the Slider Hero with Video Background, Animation WordPress

thehackerwire@mastodon.social at 2026-08-23T21:59:49.000Z ##

🟠 CVE-2026-76789 - High (8.8)

The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not escape a stored setting before outputting it, allowing unauthenticated users t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76789/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-23T21:59:49.000Z ##

🟠 CVE-2026-76789 - High (8.8)

The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not escape a stored setting before outputting it, allowing unauthenticated users t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76789/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-7808
(9.8 CRITICAL)

EPSS: 0.35%

updated 2026-08-23T15:33:12

3 posts

justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially leading to cross-site scripting. The issues primarily affect advanced usage rather than the default JustHTML(..., sanitize=True) path for ordinary parsed HTML: mutating or reusing sanitization policy objects (including exporte

offseq at 2026-08-24T01:30:25.778Z ##

CVE-2026-7808 | justhtml <1.16.0 faces CRITICAL XSS risk via HTML sanitization bypass in advanced use cases. Upgrade to 1.16.0+ to fix. Impacts apps with custom/mutated policies. Details: https://radar.offseq.com/threat/cve-2026-7808-improper-input-validation-in-emilstenstrom-justhtml-86dd54d29e0645e9 #OffSeq #CVE20267808 #infosec #XSS

##

offseq@infosec.exchange at 2026-08-24T01:30:25.000Z ##

CVE-2026-7808 | justhtml <1.16.0 faces CRITICAL XSS risk via HTML sanitization bypass in advanced use cases. Upgrade to 1.16.0+ to fix. Impacts apps with custom/mutated policies. Details: https://radar.offseq.com/threat/cve-2026-7808-improper-input-validation-in-emilstenstrom-justhtml-86dd54d29e0645e9 #OffSeq #CVE20267808 #infosec #XSS

##

thehackerwire@mastodon.social at 2026-08-23T15:00:18.000Z ##

🔴 CVE-2026-7808 - Critical (9.8)

justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially leading to cross-site scripting. The issues primarily affect advanced usa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7808/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-8445
(9.8 CRITICAL)

EPSS: 0.38%

updated 2026-08-23T15:33:12

3 posts

justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle brackets) in text nodes when converting a parsed document to Markdown via to_markdown(). While a small set of Markdown metacharacters are escaped, characters such as < and > are preserved, so untrusted input that is safe in to_html() — including entity-decoded text (e.g. <script>) or t

offseq at 2026-08-24T00:00:35.979Z ##

CVE-2026-8445: EmilStenstrom justhtml <=1.11.0 suffers CRITICAL XSS due to improper escaping in Markdown output. Remote attackers can inject scripts. Update to v1.12.0 now. https://radar.offseq.com/threat/cve-2026-8445-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-42aabed1c30bf24b #OffSeq #XSS #AppSec #CVE20268445

updated 2026-08-23T12:31:11

2 posts

privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges

thehackerwire@mastodon.social at 2026-08-23T11:01:51.000Z ##

🔴 CVE-2026-78155 - Critical (9.9)

privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78155/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-08-23T10:30:24.000Z ##

CVE-2026-78155: OnGres StackGres operator has a critical (CVSS 9.9) priv esc vuln via untrusted search path (CWE-426). No patch yet. Restrict tenant privileges & monitor for escalation attempts. More info: https://radar.offseq.com/threat/cve-2026-78155-cwe-426-untrusted-search-path-in-ongres-stackgres-7d9e77e1189aa5d6 #OffSeq #Vulnerability #PrivilegeEscalation

##

CVE-2026-13598(CVSS UNKNOWN)

EPSS: 0.15%

updated 2026-08-23T06:30:28

1 posts

The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full site takeover.

offseq@infosec.exchange at 2026-08-23T07:30:23.000Z ##

CVE-2026-13598: RestrictMate <1.3.0 (WordPress) CRITICAL vuln lets unauthenticated users create admin accounts via improper privilege management. Disable user registration or validate roles until patched. https://radar.offseq.com/threat/cve-2026-13598-cwe-269-improper-privilege-management-in-restrictmate-53a767aba3099df7 #OffSeq #WordPress #CVE202613598 #Infosec

##

CVE-2026-78136
(7.8 HIGH)

EPSS: 0.19%

updated 2026-08-23T03:34:57

3 posts

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

hugovalters@mastodon.social at 2026-08-24T01:03:05.000Z ##

CVE-2026-78136 - High-severity Eval Injection in CHIRP via crafted CSV data. CVSS 7.8. Update to the latest build immediately. #CVE #infosec #cybersecurity

https://www.valtersit.com/cve/CVE-2026-78136/

##

offseq@infosec.exchange at 2026-08-23T06:00:24.000Z ##

CVE-2026-78136: HIGH severity eval injection in chirpmyradio CHIRP (<39178db). Malicious CSV data can trigger arbitrary code execution. No patch yet — avoid untrusted files. Full details: https://radar.offseq.com/threat/cve-2026-78136-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-1763cf4fec8c29f0 #OffSeq #chirpmyradio #Vulnerability #InfoSec

##

thehackerwire@mastodon.social at 2026-08-23T01:59:48.000Z ##

🟠 CVE-2026-78136 - High (7.8)

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78136/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-16149
(8.8 HIGH)

EPSS: 0.43%

updated 2026-08-23T00:30:30

3 posts

The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.4. The vulnerability exists because the plugin's user-enumeration protection, which is enabled by default, hooks the rest_endpoints filter via secure_user_endpoints() and overwrites every registered handler's permission_callback on both the /wp/v2/users and /wp/v2/users/(?P<i

hugovalters@mastodon.social at 2026-08-24T17:08:24.000Z ##

EPSS: 0.62%

updated 2026-08-22T18:30:25

2 posts

The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input from form submission meta values. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has

offseq@infosec.exchange at 2026-08-23T01:30:26.000Z ##

CVE-2026-4703: WS Form LITE ≤1.10.80 has a CRITICAL PHP Object Injection vuln via form meta deserialization. Exploitable if a POP chain exists in another plugin/theme — possible RCE, file deletion, or data leak. Audit plugins/themes. https://radar.offseq.com/threat/the-ws-form-lite-drag-drop-contact-form-builder-plugin-for-wordpress-is-vulnerable-to-php-object-f688cffee1daa479 #OffSeq #WordPress #CVE20264703

##

thehackerwire@mastodon.social at 2026-08-22T20:59:49.000Z ##

🔴 CVE-2026-4703 - Critical (9.8)

The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input from form submission meta values. This makes it p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4703/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-68766
(7.8 HIGH)

EPSS: 0.16%

updated 2026-08-22T15:31:11

2 posts

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code execution when targeting shell startup files.

hugovalters@mastodon.social at 2026-08-24T14:06:30.000Z ##

CVE-2026-68766 - Code execution in hashcat. Command-line option injection via restore files enables arbitrary file writes. CVSS 7.8. Avoid untrusted restore files. #CVE #hashcat #infosec

https://www.valtersit.com/cve/CVE-2026-68766/

##

thehackerwire@mastodon.social at 2026-08-22T20:59:59.000Z ##

🟠 CVE-2026-68766 - High (7.8)

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-contr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68766/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-63312
(7.5 HIGH)

EPSS: 0.49%

updated 2026-08-22T15:31:11

3 posts

NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly instead of pathsec.open(). Attackers who control the fileid argument can read arbitrary local files regardless of the ENFORCE setting, including sensitive system files and application credentials.

hugovalters@mastodon.social at 2026-08-24T12:11:33.000Z ##

CVE-2026-63312 - Arbitrary local file read in NLTK StreamBackedCorpusView bypasses pathsec. CVSS 7.5. Exposes sensitive system files. Update to NLTK 3.10.0+. #CVE #Python #infosec

https://www.valtersit.com/cve/CVE-2026-63312/

##

hugovalters@mastodon.social at 2026-08-24T12:11:33.000Z ##

CVE-2026-63312 - Arbitrary local file read in NLTK StreamBackedCorpusView bypasses pathsec. CVSS 7.5. Exposes sensitive system files. Update to NLTK 3.10.0+. #CVE #Python #infosec

https://www.valtersit.com/cve/CVE-2026-63312/

##

thehackerwire@mastodon.social at 2026-08-22T21:00:09.000Z ##

🟠 CVE-2026-63312 - High (7.5)

NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly instead of pathsec.open(). Attackers who control the fileid argument can read arbitr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63312/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-63310
(7.1 HIGH)

EPSS: 0.11%

updated 2026-08-22T15:31:11

3 posts

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation.

hugovalters@mastodon.social at 2026-08-24T11:08:40.000Z ##

CVE-2026-63310 - MITM package injection flaw in NLTK downloader module. CVSS 7.1. Update NLTK to 3.9.3+ immediately. #CVE #Python #infosec

https://www.valtersit.com/cve/CVE-2026-63310/

##

hugovalters@mastodon.social at 2026-08-24T11:08:40.000Z ##

CVE-2026-63310 - MITM package injection flaw in NLTK downloader module. CVSS 7.1. Update NLTK to 3.9.3+ immediately. #CVE #Python #infosec

https://www.valtersit.com/cve/CVE-2026-63310/

##

offseq@infosec.exchange at 2026-08-23T04:30:25.000Z ##

CVE-2026-63310: NLTK <3.9.3 has a CRITICAL flaw where package integrity isn't checked post-download in the downloader module. Exposes users to MITM & DNS poisoning attacks. Upgrade to 3.9.3+ or avoid insecure networks. https://radar.offseq.com/threat/nltk-before-393-fails-to-verify-file-integrity-after-downloading-packages-and-before-extraction-in-the-f6492d4a6dda17c2 #OffSeq #NLTK #CVE202663310 #infosec

##

CVE-2026-62384
(7.5 HIGH)

EPSS: 0.49%

updated 2026-08-22T15:31:11

3 posts

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validation guard and are resolved to files outside the intended corpus root when accessed via frame_by_name(), _

hugovalters@mastodon.social at 2026-08-23T17:07:03.000Z ##

CVE-2026-62384 - Symlink sandbox bypass in NLTK leads to arbitrary file read. CVSS 7.5. Update to version 3.10.2 now. #CVE #Python #infosec

https://www.valtersit.com/cve/CVE-2026-62384/

##

hugovalters@mastodon.social at 2026-08-23T17:07:03.000Z ##

CVE-2026-62384 - Symlink sandbox bypass in NLTK leads to arbitrary file read. CVSS 7.5. Update to version 3.10.2 now. #CVE #Python #infosec

https://www.valtersit.com/cve/CVE-2026-62384/

##

thehackerwire@mastodon.social at 2026-08-22T22:00:00.000Z ##

🟠 CVE-2026-62384 - High (7.5)

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62384/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-66393
(7.5 HIGH)

EPSS: 0.34%

updated 2026-08-22T15:31:11

2 posts

NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying deeply nested JSON structures. Attackers can craft JSON payloads exceeding the recursion limit to trigger an unhandled RecursionError that crashes the Python process.

hugovalters@mastodon.social at 2026-08-23T15:14:53.000Z ##

updated 2026-08-22T12:30:34

2 posts

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe_get of the file /cgi-bin/apply_time.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument system.ntp.server/system.ntp.enable_server/cameo.time.time_zone/cameo.cameo.syslog_server can lead to stack-based buffer overflow. The attack may

offseq@infosec.exchange at 2026-08-22T12:00:23.000Z ##

CVE-2026-77946: Stack-based buffer overflow in TRENDnet TEW-821DAP v2.2.01b05 (CRITICAL, CVSS 10). Remote code execution possible via NTP config. No patch — limit exposure & monitor traffic. https://radar.offseq.com/threat/cve-2026-77946-stack-based-buffer-overflow-in-trendnet-tew-821dap-679ce40e9d7aa62a #OffSeq #CVE202677946 #infosec #vulnerability

##

thehackerwire@mastodon.social at 2026-08-22T12:00:03.000Z ##

🔴 CVE-2026-77946 - Critical (10)

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe_get of the file /cgi-bin/apply_time.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77946/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-12710
(0 None)

EPSS: 0.32%

updated 2026-08-22T09:16:53.340000

1 posts

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required.

offseq@infosec.exchange at 2026-08-22T10:30:22.000Z ##

CRITICAL (CVSS 9.3): CVE-2026-12710 in Google Cloud Application Integration (QueryEngineTask) enabled unauthorized data access. Patched by Google on 2026-04-04 — no customer action needed. Details: https://radar.offseq.com/threat/cve-2026-12710-cwe-862-missing-authorization-in-google-cloud-application-integration-f732bf9f6ab56812 #OffSeq #CloudSecurity #CVE #Vuln

##

CVE-2026-64531
(7.8 HIGH)

EPSS: 0.38%

updated 2026-08-22T06:31:25

1 posts

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions length check") allowed the total sw_flow_actions stream to grow beyond 64 KiB, which is valid, but also removed the last guar

4 repos

https://github.com/mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool

https://github.com/0xBlackash/CVE-2026-64531

https://github.com/suominen/ovswrap

https://github.com/HackSpeak/CVE-2026-64531

sigint@fosstodon.org at 2026-08-25T23:45:08.000Z ##

🐧 SIGINT // Ubuntu Watch — 2026-08-26

Critical HWE kernel flaw on 24.04 means reboot plus DKMS rebuilds for anyone running ZFS, VFIO passthrough, or Nvidia drivers on the 6.14 HWE stack. Check module status before you reboot blind.

🔗 https://securityarsenal.com/blog/cve-2026-64531-ubuntu-2404-lts-hwe-kernel-linux-hwe-70-vulnerability-patching-and-third-party-module-remediation-guide

#Ubuntu #Linux #infosec

##

CVE-2026-41451
(7.8 HIGH)

EPSS: 0.72%

updated 2026-08-21T18:35:08

1 posts

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings without escaping before execution via eval. Attackers can inject shell metacharacters such as command substitution syntax or semicolons throug

thehackerwire@mastodon.social at 2026-08-22T08:01:56.000Z ##

🟠 CVE-2026-41451 - High (7.8)

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are substituted directly into comma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41451/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-27875(CVSS UNKNOWN)

EPSS: 0.07%

updated 2026-08-21T18:35:07

2 posts

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.

updated 2026-08-21T17:57:13.800000

2 posts

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

secdb at 2026-08-24T00:01:16.947Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

secdb@infosec.exchange at 2026-08-24T00:01:16.000Z ##

updated 2026-08-21T15:32:18

1 posts

updated 2026-08-21T04:18:15.753000

2 posts

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.

security_crawler_carl@infosec.exchange at 2026-08-22T20:01:20.000Z ##

🏆 New Achievement! Port 4307 Is Not a Safe Harbor!

Conducting inventory audit on your TrueConf Server installation. Status: compromised. Line items include two unauthenticated RCE vulnerabilities — CVE-2026-72529 and CVE-2026-72530 — currently checked out under the name Head Mare, a hacktivist group who used them to swap a server file for a web shell and deploy PhantomCore malware. Item condition: cursed. (1/2)

##

threatnoir@infosec.exchange at 2026-08-22T17:05:48.000Z ##

⚠️ CRITICAL: CISA orders feds to patch actively exploited TrueConf Server flaws

Two critical unauthenticated RCE vulnerabilities (CVE-2026-72529, CVE-2026-72530) in TrueConf Server are being actively exploited by Head Mare group to deploy backdoor malware via trojanized installers. Any organization running TrueConf Server is at immediate risk of compromise.

https://github.com/HORKimhab/CVE-2026-69836

🤖 AI generated summary

##

CVE-2026-69836
(10.0 CRITICAL)

EPSS: 1.59%

updated 2026-08-21T00:31:31

4 posts

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

2 repos

https://github.com/sentinel-aidefense/CVE-2026-69836-EXP

PC_Fluesterer@social.tchncs.de at 2026-08-24T13:16:56.000Z ##

Mysterien um Microsofts kritisches Sicherheitsloch in Entra ID

Am vorigen Donnerstag macht Microsoft (MS) ein riesiges Trara um eine höchst gefährliche Sicherheitslücke CVE-2026-69836 (Risiko 10 von 10) in Entra ID*. Ein entfernter, nicht autorisierter Angreifer könne durch Ausnutzung dieser Sicherheitslücke beliebigen Programmcode ausführen (RCE). Und die Lücke würde bereits für Angriffe ausgenutzt. Meldungen beispielsweise hier oder hier. Wie die Ausnutzung entdeckt wurde und wer vielleicht betroffen ist, verlautet MS nicht. Einen Tag später zieht MS die Auskunft "wird bereits ausgenutzt" zurück. Hä? Interessant ist auch, dass ... Weiterlesen:

https://www.pc-fluesterer.info/wordpress/2026/08/24/mysterien-um-microsofts-kritisches-sicherheitsloch-in-entra-id/

#0day #backdoor #cloud #exploits #identität #Microsoft #sicherheit #unplugMicrosoft #UnplugTrump

##

cyberworldops at 2026-08-24T02:20:01.033Z ##

Microsoft released 22 security patches including a zero-day in Entra ID (CVE-2026-69836) actively exploited for remote code execution. The critical identity-layer flaw was weaponized before a fix became available. ShieldBreak remains unpatched, leaving a documented gap in the security posture of affected organizations.

#MicrosoftPatches #EntraIDZeroDay #ShieldBreak #CVE202669836

https://cyberworldops.eu/en/microsoft-patches-22-flaws-entra-id-already-secured-but-shieldbreak

##

undercodenews@mastodon.social at 2026-08-23T17:06:18.000Z ##

Microsoft Entra ID Faces Maximum-Severity Security Emergency as CVE-2026-69836 Reportedly Comes Under Active Exploitation + Video

A Critical Warning for Organizations That Depend on Cloud Identity Identity infrastructure has become the front door to the modern enterprise. Employees sign in through it, administrators manage systems through it, cloud services trust it, and security teams depend on it to decide who should and should not have access. That is why a newly…

https://undercodenews.com/microsoft-entra-id-faces-maximum-severity-security-emergency-as-cve-2026-69836-reportedly-comes-under-active-exploitation-video/?utm_source=mastodon&utm_medium=jetpack_social

##

cyberworldops@infosec.exchange at 2026-08-24T02:20:01.000Z ##

Microsoft released 22 security patches including a zero-day in Entra ID (CVE-2026-69836) actively exploited for remote code execution. The critical identity-layer flaw was weaponized before a fix became available. ShieldBreak remains unpatched, leaving a documented gap in the security posture of affected organizations.

#MicrosoftPatches #EntraIDZeroDay #ShieldBreak #CVE202669836

https://cyberworldops.eu/en/microsoft-patches-22-flaws-entra-id-already-secured-but-shieldbreak

##

CVE-2026-72843
(9.8 CRITICAL)

EPSS: 0.59%

updated 2026-08-21T00:31:24

1 posts

The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/updateCustomer/route.json, which causes the admin authentication middleware to call next() without checking the caller, and no customer-session middleware guards the route; the only middleware in the chain parses the JSON body. The handler in updateCustomer.js then loads the cust

DailyCyberSecurity@infosec.exchange at 2026-08-23T06:30:49.000Z ##

A critical EverShop account takeover flaw, CVE-2026-72843, exposes systems to an eCommerce platform vulnerability. Update to version 2.2.1 immediately.

#EverShop #CyberSecurity #CVE202672843 #Vulnerability #eCommerce

https://securityonline.info/evershop-cve-2026-72843-account-takeover/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-19586(CVSS UNKNOWN)

EPSS: 5.04%

updated 2026-08-20T21:31:30

3 posts

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted input influencing backend command execution logic before authentication completes. Exploitation requir

Byte0x90@mastodon.social at 2026-08-25T09:26:35.000Z ##

In TP-Link Omada Business-Gateways klafft eine kritische Lücke (CVE-2026-19586) bei aktivierter OpenVPN-Funktion. Per Command Injection können Angreifer beim VPN-Verbindungsaufbau ohne Zugangsdaten eigenen Code ausführen und das Gerät kompromittieren. Firmware-Updates stehen bereit!

#TPLink #Omada #VPN #CyberSecurity #ITSecurity #Sicherheitslücke #Patchday #InfoSec

##

secdb at 2026-08-24T00:01:16.947Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

secdb@infosec.exchange at 2026-08-24T00:01:16.000Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

CVE-2026-64849
(9.3 CRITICAL)

EPSS: 16.41%

updated 2026-08-20T19:16:57.867000

3 posts

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated addr

https://github.com/BiuTrap/CVE-2026-64849

3 repos

https://github.com/zavisco/CVE-2026-64849.yaml

https://github.com/codeb0ssx/CVE-2026-64849-PoC

secdb at 2026-08-24T00:01:16.947Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

secdb@infosec.exchange at 2026-08-24T00:01:16.000Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

#CyberSecurity #MLflow #AI #Vulnerability #CISA

##

Hackread@mstdn.social at 2026-08-22T11:59:25.000Z ##

Attackers are exploiting a critical MLflow bug to reach internal systems and cloud metadata, putting cloud secrets at risk. CISA has added CVE-2026-64849 to its KEV catalog.

Listen/Read: https://hackread.com/attackers-exploit-critical-mlflow-ai-platform-flaw/

##

CVE-2026-72530
(9.0 None)

EPSS: 1.83%

updated 2026-08-20T18:31:47

2 posts

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.

1 repos

https://github.com/fevar54/CVE-2026-72530-TrueConf-Sandbox-Escape-

security_crawler_carl@infosec.exchange at 2026-08-22T20:01:20.000Z ##

🏆 New Achievement! Port 4307 Is Not a Safe Harbor!

Conducting inventory audit on your TrueConf Server installation. Status: compromised. Line items include two unauthenticated RCE vulnerabilities — CVE-2026-72529 and CVE-2026-72530 — currently checked out under the name Head Mare, a hacktivist group who used them to swap a server file for a web shell and deploy PhantomCore malware. Item condition: cursed. (1/2)

##

threatnoir@infosec.exchange at 2026-08-22T17:05:48.000Z ##

⚠️ CRITICAL: CISA orders feds to patch actively exploited TrueConf Server flaws

Two critical unauthenticated RCE vulnerabilities (CVE-2026-72529, CVE-2026-72530) in TrueConf Server are being actively exploited by Head Mare group to deploy backdoor malware via trojanized installers. Any organization running TrueConf Server is at immediate risk of compromise.

🤖 AI generated summary

##

CVE-2026-18264
(8.8 HIGH)

EPSS: 1.24%

updated 2026-08-20T18:30:55

2 posts

NoMachine getstat Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4000 by default. The issue results from the lack of proper validation of a user-supp

secdb at 2026-08-24T00:01:16.947Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

secdb@infosec.exchange at 2026-08-24T00:01:16.000Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

https://github.com/toanln-cov/CVE-2026-76565

##

CVE-2026-76565
(0 None)

EPSS: 0.32%

updated 2026-08-20T16:18:17.977000

2 posts

Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

1 repos

DarkWebInformer at 2026-08-24T18:16:26.280Z ##

‼️ CVE PoC Published: CVE-2026-76565 - Reflected XSS in PhocaCart

GitHub: https://github.com/toanln-cov/CVE-2026-76565

A proof-of-concept has been released for CVE-2026-76565, a reflected cross-site scripting (XSS) vulnerability affecting PhocaCart ≤ 6.1.7 for Joomla.

The vulnerability exists in the price_from and price_to filter parameters within the mod_phocacart_filter module. Due to improper output encoding, unauthenticated attackers can craft a malicious URL that injects JavaScript into the page when viewed by a victim.

The PoC demonstrates:

• Reflected XSS through crafted GET parameters
• Exploitation of vulnerable price filter inputs
• Attribute-context injection caused by missing htmlspecialchars() encoding
• No authentication requirement for exploitation
• Affected versions: PhocaCart ≤ 6.1.7
• Fixed version: PhocaCart 6.1.8

💥 No delays. No guessing. No redactions. Get the intel before everyone else with Dark Web Informer.

##

DarkWebInformer@infosec.exchange at 2026-08-24T18:16:26.000Z ##

‼️ CVE PoC Published: CVE-2026-76565 - Reflected XSS in PhocaCart

GitHub: https://github.com/toanln-cov/CVE-2026-76565

A proof-of-concept has been released for CVE-2026-76565, a reflected cross-site scripting (XSS) vulnerability affecting PhocaCart ≤ 6.1.7 for Joomla.

The vulnerability exists in the price_from and price_to filter parameters within the mod_phocacart_filter module. Due to improper output encoding, unauthenticated attackers can craft a malicious URL that injects JavaScript into the page when viewed by a victim.

The PoC demonstrates:

• Reflected XSS through crafted GET parameters
• Exploitation of vulnerable price filter inputs
• Attribute-context injection caused by missing htmlspecialchars() encoding
• No authentication requirement for exploitation
• Affected versions: PhocaCart ≤ 6.1.7
• Fixed version: PhocaCart 6.1.8

💥 No delays. No guessing. No redactions. Get the intel before everyone else with Dark Web Informer.

##

CVE-2026-75616
(0 None)

EPSS: 1.91%

updated 2026-08-20T16:18:03.890000

2 posts

An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticated administrator may exploit insufficient input validation to execute arbitrary system commands, potentially resulting in full device compromise. Successful exploitation may allow arbitrary command execution with el

1 repos

https://github.com/totekuh/CVE-2026-75616

DailyCyberSecurity at 2026-08-24T14:02:55.045Z ##

TP-Link patches CVE-2026-75616, an Archer C20 command injection flaw that can lead to full device compromise. Update firmware now.

#TPLink #ArcherC20 #CommandInjection #CVE #RouterSecurity #InfoSec #PatchNow

http://securityonline.info/tp-link-archer-c20-cve-2026-75616/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-24T14:02:55.000Z ##

TP-Link patches CVE-2026-75616, an Archer C20 command injection flaw that can lead to full device compromise. Update firmware now.

#TPLink #ArcherC20 #CommandInjection #CVE #RouterSecurity #InfoSec #PatchNow

http://securityonline.info/tp-link-archer-c20-cve-2026-75616/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-19490
(0 None)

EPSS: 0.40%

updated 2026-08-20T14:17:10.673000

2 posts

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

security_crawler_carl@infosec.exchange at 2026-08-22T21:32:42.000Z ##

🏆 New Achievement! No Password? No Problem!

Welcome, new player, to the Authentication Bypass Tutorial! This mandatory segment introduces CVE-2026-19490, a CVSS 9.3 critical flaw in Citrix NetScaler ADC and NetScaler Gateway. No account required. No user interaction needed. No elevated privileges. The game just... lets attackers in. Think of it as a permanent debuff applied to your enterprise perimeter. (1/2)

##

benzogaga33@mamot.fr at 2026-08-22T09:40:03.000Z ##

Citrix NetScaler (CVE-2026-19490) : cette faille critique permet de contourner l’authentification https://www.it-connect.fr/citrix-netscaler-cve-2026-19490-contournement-authentification/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

##

CVE-2026-20231
(9.9 CRITICAL)

EPSS: 0.50%

updated 2026-08-19T21:31:33

1 posts

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-20231 are related to improper neutralization of special e

nyanbinary@infosec.exchange at 2026-08-22T20:23:15.000Z ##

Fuck it, CVE dumpster diving.

CVE-2026-20231 - this is one of a batch of Cisco CVEs that stood out to me because they have multiple descriptions: One by the CNA, one by an ADP, "CVE" itself. The ADP one is just "please please please dont do this (bundling multiple vulns into a single cve) :neobot_angel_pleading: ". Cisco dont care, they put out 9 of those over the last 7 days.

##

CVE-2026-16835
(9.6 CRITICAL)

EPSS: 0.23%

updated 2026-08-19T21:30:30

2 posts

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP management network protocol. An unauthenticated attacker on the management network can bypass authentication and perform any administrative operation on the managed system, including control of partition power state, configuration,

DailyCyberSecurity at 2026-08-24T13:16:53.853Z ##

IBM patches two Power Systems Firmware flaws, CVE-2026-16687 and CVE-2026-16835, both CVSS 9.6, that grant full control of the managed system.

#IBM #PowerSystems #Firmware #CVE #RCE #AuthBypass #InfoSec #PatchNow

https://securityonline.info/ibm-power-firmware-cve-2026-16687/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-24T13:16:53.000Z ##

IBM patches two Power Systems Firmware flaws, CVE-2026-16687 and CVE-2026-16835, both CVSS 9.6, that grant full control of the managed system.

#IBM #PowerSystems #Firmware #CVE #RCE #AuthBypass #InfoSec #PatchNow

https://securityonline.info/ibm-power-firmware-cve-2026-16687/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-74480
(9.8 CRITICAL)

EPSS: 0.53%

updated 2026-08-19T18:33:34

2 posts

In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group br_multicast_leave_group() iterates mp->ports with pp = &p->next in its fast-leave path. After br_multicast_del_pg() removes p, continuing the loop advances pp through the deleted entry. If multicast-to-unicast was enabled, the bridge can hold multiple port groups for the

DailyCyberSecurity at 2026-08-24T07:46:39.663Z ##

CVE-2026-74480 (CVSS 9.8) is a Linux kernel bridge flaw enabling root privilege escalation. Exploit code and a demo video are now public.

#Linux #CVE202674480 #PrivilegeEscalation #KernelSecurity #CyberSecurity #InfoSec

https://securityonline.info/linux-cve-2026-74480/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-24T07:46:39.000Z ##

CVE-2026-74480 (CVSS 9.8) is a Linux kernel bridge flaw enabling root privilege escalation. Exploit code and a demo video are now public.

#Linux #CVE202674480 #PrivilegeEscalation #KernelSecurity #CyberSecurity #InfoSec

https://securityonline.info/linux-cve-2026-74480/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-75149
(8.8 HIGH)

EPSS: 0.64%

updated 2026-08-19T18:33:02

1 posts

marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mode, marimo launches the specified command as a local subprocess before any notebook cell is executed, re

Analyst207@mastodon.social at 2026-08-25T13:57:00.000Z ##

Marimo Notebook Flaw Exposes Users to Pre-Execution Code Injection

A high-severity flaw in Marimo Notebook software, tracked as CVE-2026-75149, could allow attackers to inject malicious code on a user's machine simply by opening a specially crafted notebook in edit mode. This vulnerability, rated 8.7 out of 10 in severity, requires no authentication - just a click.

https://osintsights.com/marimo-notebook-flaw-exposes-users-to-pre-execution-code-injection?utm_source=mastodon&utm_medium=social

#MarimoNotebook #CodeInjection #Cve202675149 #ModelContextProtocol #Preexecution

##

CVE-2026-71961
(8.8 HIGH)

EPSS: 3.05%

updated 2026-08-19T15:32:47

2 posts

Cudy WR3000 2.0 running firmware before 2.5.24 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary OS commands with root privileges by sending unsanitized input through the mesh MQTT command interface. The sync_command binary forwards unsanitized input directly to a shell execution sink in command.lua, enabling attackers with access to the MQTT b

secdb at 2026-08-24T00:01:16.947Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

secdb@infosec.exchange at 2026-08-24T00:01:16.000Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

CVE-2026-54796
(7.2 HIGH)

EPSS: 2.36%

updated 2026-08-19T15:32:33

2 posts

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

secdb at 2026-08-24T00:01:16.947Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

secdb@infosec.exchange at 2026-08-24T00:01:16.000Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

CVE-2026-18963
(9.1 CRITICAL)

EPSS: 2.79%

updated 2026-08-19T03:31:21

18 posts

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user

https://github.com/debugactiveprocess/CVE-2026-18963

8 repos

https://github.com/Red-Darkin/CVE-2026-18963-keycloak

https://github.com/gman0x00/keycloak-CVE-2026-18963

https://github.com/Snizi/CVE-2026-18963-Exploit

https://github.com/T0w0T/POC-CVE-2026-18963

https://github.com/prot0tw/Keycloak_CVE-2026-18963_PoC

https://github.com/minh3102011/CVE-2026-18963_analyst

https://github.com/kyos-public/keycloak-cve-2026-18963-hunt

F30@chaos.social at 2026-08-25T10:12:47.000Z ##

CVE-2026-18963: #Keycloak arbitrary account takeover via session confusion using simple HTTP requests. 😱

Nice find and (allegedly) not even AI-powered at its core.
A working exploit is publicly available. Given Keycloak's widespread use in critical auth systems, this appears to be flying a bit under the radar so far.

If you run Keycloak, it needs your attention *now*.

https://github.com/Red-Darkin/CVE-2026-18963-keycloak

##

inw@mastodon.social at 2026-08-25T08:50:00.000Z ##

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html

> Keycloak CVE-2026-18963 could let unauthenticated attackers skip the emailed action token and reset any user's password.

#keycloak

##

undercodenews@mastodon.social at 2026-08-25T04:22:14.000Z ##

Critical Keycloak Flaw Opens the Door to Silent Account Takeovers, and Identity Infrastructure Is Now the Target + Video

Introduction: When the Password Reset Button Becomes the Attack Vector A password reset feature is supposed to be one of the last lines of defense protecting a user who has lost access to an account. In the case of CVE-2026-18963, however, a flaw in the credential recovery process could turn that protective mechanism into the attacker's path to…

https://undercodenews.com/critical-keycloak-flaw-opens-the-door-to-silent-account-takeovers-and-identity-infrastructure-is-now-the-target-video/?utm_source=mastodon&utm_medium=jetpack_social

##

alien@fosstodon.org at 2026-08-24T20:01:50.000Z ##

Note the recently disclosed CVE-2026-18963 for #Keycloak OIDC: https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html . It allows unauthorized users to take over any account on your server.
On the #Slackware #Forgejo instance https://forge.slackware.nl/ I have upgraded Keycloak to 26.7.2 to address this vulnerability.

##

threatnoir at 2026-08-24T18:06:21.146Z ##

⚠️ CRITICAL: Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

Critical flaw in Keycloak (CVE-2026-18963, CVSS 9.1) allows unauthenticated attackers to reset any user password and take over accounts due to improper state validation in the password recovery flow. Any organization running Keycloak without patches is immediately at risk of account takeover on all…

#ransomNews #cyberthreats #Keycloak

🤖 AI generated summary

##

ransomnews@poliversity.it at 2026-08-24T17:37:00.000Z ##

⚠️ Critical Keycloak flaw enables account takeover

CVE-2026-18963 lets unauthenticated attackers reset any user's password, bypassing email verification.

##

security_crawler_carl at 2026-08-24T16:56:45.640Z ##

🏆 New Achievement! Exhibit A: Your Password Reset Button!

Counsel will direct the court's attention to CVE-2026-18963, rated a damning 9.1 out of 10, wherein Keycloak's reset-credentials authentication flow failed to properly validate state — legally speaking, an open invitation any unauthenticated remote party was fully entitled to accept. No user interaction required. The attacker needed nothing. No account, no session, no strongly-worded letter. (1/2)

##

youranonnewsirc@nerdculture.de at 2026-08-24T16:26:26.000Z ##

Geopolitical tensions rise as US-Iran dispute over Strait of Hormuz escalates; UK pledges long-range missile tech to Ukraine. Nvidia increases AI server prices over 15% due to memory costs. Critical Keycloak flaw (CVE-2026-18963) found allowing account takeovers, while Apple warns of mercenary spyware.

🔗 https://cyber.netsecops.io/articles/critical-keycloak-vulnerability-cve-2026-18963-allows-account-takeover/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

##

beyondmachines1 at 2026-08-24T15:01:16.959Z ##

Critical Keycloak Password Reset Flaw Allows Unauthenticated Account Takeover

Red Hat and Keycloak patched a critical vulnerability (CVE-2026-18963) that allows unauthenticated attackers to bypass email verification and take over any account via the password reset flow. The update also addresses over 20 other security flaws, including account-linking bypasses and administrative permission leaks.

**If you run Keycloak or Red Hat Build of Keycloak, update immediately to Keycloak 26.7.2 or RHBK 26.4.15 / 26.6.6 since the older versions let anyone reset the password of any account, including admins. If you cannot patch right away, turn off the "Forgot password" option in every realm (Realm settings → Login → Forgot password) until the update is applied.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-keycloak-password-reset-flaw-allows-unauthenticated-account-takeover-p-n-m-j-1/gD2P6Ple2L

##

netsecio@mastodon.social at 2026-08-24T14:18:09.000Z ##

📰 Critical Keycloak Flaw (CVE-2026-18963) Allows Account Takeover

🚨 CRITICAL FLAW: Keycloak is vulnerable to CVE-2026-18963 (CVSS 9.1), allowing unauthenticated remote attackers to take over any account. Patches are available—update immediately! #Keycloak #Cybersecurity #Vulnerability #CVE #IAM

##

Analyst207@mastodon.social at 2026-08-24T12:56:43.000Z ##

Keycloak Flaw Exposes Accounts to Unauthenticated Takeover

A critical flaw in Keycloak, rated 9.1 by Red Hat, allows hackers to hijack any account, including admin ones, by manipulating the password reset process. This vulnerability, CVE-2026-18963, lets attackers take control without even logging in.

https://osintsights.com/keycloak-flaw-exposes-accounts-to-unauthenticated-takeover?utm_source=mastodon&utm_medium=social

#Cve202618963 #Keycloak #AccountTakeover #AuthenticationBypass #RedHat

##

F30@chaos.social at 2026-08-25T10:12:47.000Z ##

CVE-2026-18963: #Keycloak arbitrary account takeover via session confusion using simple HTTP requests. 😱

Nice find and (allegedly) not even AI-powered at its core.
A working exploit is publicly available. Given Keycloak's widespread use in critical auth systems, this appears to be flying a bit under the radar so far.

If you run Keycloak, it needs your attention *now*.

https://github.com/Red-Darkin/CVE-2026-18963-keycloak

##

inw@mastodon.social at 2026-08-25T08:50:00.000Z ##

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html

> Keycloak CVE-2026-18963 could let unauthenticated attackers skip the emailed action token and reset any user's password.

#keycloak

##

alien@fosstodon.org at 2026-08-24T20:01:50.000Z ##

Note the recently disclosed CVE-2026-18963 for #Keycloak OIDC: https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html . It allows unauthorized users to take over any account on your server.
On the #Slackware #Forgejo instance https://forge.slackware.nl/ I have upgraded Keycloak to 26.7.2 to address this vulnerability.

##

threatnoir@infosec.exchange at 2026-08-24T18:06:21.000Z ##

⚠️ CRITICAL: Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

Critical flaw in Keycloak (CVE-2026-18963, CVSS 9.1) allows unauthenticated attackers to reset any user password and take over accounts due to improper state validation in the password recovery flow. Any organization running Keycloak without patches is immediately at risk of account takeover on all…

🤖 AI generated summary

##

security_crawler_carl@infosec.exchange at 2026-08-24T16:56:45.000Z ##

🏆 New Achievement! Exhibit A: Your Password Reset Button!

Counsel will direct the court's attention to CVE-2026-18963, rated a damning 9.1 out of 10, wherein Keycloak's reset-credentials authentication flow failed to properly validate state — legally speaking, an open invitation any unauthenticated remote party was fully entitled to accept. No user interaction required. The attacker needed nothing. No account, no session, no strongly-worded letter. (1/2)

##

youranonnewsirc@nerdculture.de at 2026-08-24T16:26:26.000Z ##

Geopolitical tensions rise as US-Iran dispute over Strait of Hormuz escalates; UK pledges long-range missile tech to Ukraine. Nvidia increases AI server prices over 15% due to memory costs. Critical Keycloak flaw (CVE-2026-18963) found allowing account takeovers, while Apple warns of mercenary spyware.

https://sethmlarson.dev/when-str-lower-is-a-security-vulnerability

##

beyondmachines1@infosec.exchange at 2026-08-24T15:01:16.000Z ##

Critical Keycloak Password Reset Flaw Allows Unauthenticated Account Takeover

Red Hat and Keycloak patched a critical vulnerability (CVE-2026-18963) that allows unauthenticated attackers to bypass email verification and take over any account via the password reset flow. The update also addresses over 20 other security flaws, including account-linking bypasses and administrative permission leaks.

**If you run Keycloak or Red Hat Build of Keycloak, update immediately to Keycloak 26.7.2 or RHBK 26.4.15 / 26.6.6 since the older versions let anyone reset the password of any account, including admins. If you cannot patch right away, turn off the "Forgot password" option in every realm (Realm settings → Login → Forgot password) until the update is applied.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-keycloak-password-reset-flaw-allows-unauthenticated-account-takeover-p-n-m-j-1/gD2P6Ple2L

##

CVE-2026-17084
(0 None)

EPSS: 0.48%

updated 2026-08-19T01:16:56.650000

1 posts

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 (the "idna" codec) and the in_table_b2() function of the "stringprep" module. This only affects domain names containing characters

sayzard@mastodon.sayzard.org at 2026-08-26T02:43:38.000Z ##

When str.lower() is a security vulnerability in Python – Seth Larson

Python의 IDNA 2003/StringPrep 구현에서 `str.lower()`가 인터프리터에 내장된 최신 Unicode 데이터에 의존해 RFC 3454가 요구하는 Unicode 3.2.0 규칙과 달라질 수 있었던 취약점(CVE-2026-17084)이다. 이 차이로 일부 유니코드 도메인 문자열의 정규화 및 Punycode 결과가 Python/Unicode 버전별로 달라져, IDNA 기반 식별자 비교·검증에서 일관성이 깨질 수 있다. 수정은 최신 Unicode의 `lower()` 결과가 Unicode 3.2.0과 다른 코드포인트를 예외...

##

CVE-2026-59310
(9.8 CRITICAL)

EPSS: 45.88%

updated 2026-08-18T18:32:52

1 posts

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

2 repos

https://github.com/BiuTrap/CVE-2026-59310

https://github.com/HORKimhab/CVE-2026-59310

sekurakbot@mastodon.com.pl at 2026-08-23T15:32:00.000Z ##

Chińskie grupy APT wykorzystują podatność CVE-2026-59310 do masowych ataków na środowiska VMware vCenter

Zespół reagowania na incydenty firmy QUIRSO podczas analizy powłamaniowej serwera VMware vCenter natrafił na ślady globalnej kampanii, sterowanej najprawdopodobniej przez chińską grupę APT. Badania wykazały, że cyberprzestępcy wykorzystali krytyczną podatność CVE-2026-59310 (CVSS 9.8) w usłudze Syslog Server. Równolegle zidentyfikowali próby użycia drugiej luki CVE-2026-59309 (CVSS 9.8) jednak analitycy nie powiązali...

#WBiegu #Apt #Chiny #Cve #DirectoryTraversal #Rce #Vmware

https://sekurak.pl/chinskie-grupy-apt-wykorzystuja-podatnosc-cve-2026-59310-do-masowych-atakow-na-srodowiska-vmware-vcenter/

##

CVE-2026-55040
(9.1 CRITICAL)

EPSS: 5.58%

updated 2026-08-18T18:32:50

7 posts

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

2 repos

https://github.com/sfewer-r7/CVE-2026-55040

https://github.com/l0ggg/CVE-2026-55040

undercodenews@mastodon.social at 2026-08-25T19:00:05.000Z ##

Microsoft SharePoint Under Attack: Critical Authentication Bypass Exposes a Potential Pool of 14,000 Internet-Facing Systems + Video

A Dangerous New Chapter for SharePoint Security Microsoft SharePoint has become the focus of a fresh cybersecurity warning after an underground threat actor reportedly published targeting information connected to CVE-2026-55040, a critical authentication-bypass vulnerability affecting Microsoft SharePoint Server. The development is…

https://undercodenews.com/microsoft-sharepoint-under-attack-critical-authentication-bypass-exposes-a-potential-pool-of-14000-internet-facing-systems-video/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity at 2026-08-25T14:19:20.830Z ##

A public SharePoint RCE vulnerability PoC is actively probed in the wild. Patch CVE-2026-63520 and CVE-2026-55040 now to protect your servers.

#SharePoint #CVE202663520 #CVE202655040 #CyberSecurity #Exploit

https://securityonline.info/sharepoint-cve-2026-63520-rce-2/?utm_source=mastodon&utm_medium=jetpack_social

##

AAKL at 2026-08-24T17:42:16.040Z ##

New.

VulnCheck: Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE Chain https://www.vulncheck.com/blog/cve-2026-63520-sharepoint-unsafe-type-rce @vulncheck #infosec #threatresearch #Microsoft #SharePoint #vulnerability

##

catc0n at 2026-08-24T14:01:24.840Z ##

Chaining CVE-2026-55040 and CVE-2026-63520 for full auth bypass-to-RCE in Microsoft SharePoint: https://www.vulncheck.com/blog/cve-2026-63520-sharepoint-unsafe-type-rce

##

DailyCyberSecurity@infosec.exchange at 2026-08-25T14:19:20.000Z ##

A public SharePoint RCE vulnerability PoC is actively probed in the wild. Patch CVE-2026-63520 and CVE-2026-55040 now to protect your servers.

#SharePoint #CVE202663520 #CVE202655040 #CyberSecurity #Exploit

https://securityonline.info/sharepoint-cve-2026-63520-rce-2/?utm_source=mastodon&utm_medium=jetpack_social

##

AAKL@infosec.exchange at 2026-08-24T17:42:16.000Z ##

New.

VulnCheck: Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE Chain https://www.vulncheck.com/blog/cve-2026-63520-sharepoint-unsafe-type-rce @vulncheck #infosec #threatresearch #Microsoft #SharePoint #vulnerability

##

catc0n@infosec.exchange at 2026-08-24T14:01:24.000Z ##

Chaining CVE-2026-55040 and CVE-2026-63520 for full auth bypass-to-RCE in Microsoft SharePoint: https://www.vulncheck.com/blog/cve-2026-63520-sharepoint-unsafe-type-rce

##

CVE-2026-65400
(7.1 HIGH)

EPSS: 10.43%

updated 2026-08-18T18:31:47

1 posts

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

3 repos

https://github.com/panchocosil/CVE-2026-65400-poc

https://github.com/HORKimhab/CVE-2026-65400

https://github.com/acheong08/CVE-2026-65400

undercodenews@mastodon.social at 2026-08-25T02:15:11.000Z ##

Apple macOS Screen Sharing Under Attack: Someone Claims a Dark Web List Exposes 24,000 Potentially Vulnerable Hosts + Video

A New Warning for Mac Users A disturbing development surrounding a recently disclosed Apple macOS vulnerability has pushed Screen Sharing security back into the spotlight. A threat actor on an underground forum has reportedly distributed a list containing approximately 24,000 internet-accessible hosts that may be relevant to CVE-2026-65400, a…

https://undercodenews.com/apple-macos-screen-sharing-under-attack-someone-claims-a-dark-web-list-exposes-24000-potentially-vulnerable-hosts-video/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-33824
(9.8 CRITICAL)

EPSS: 72.69%

updated 2026-08-18T18:31:46

2 posts

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

2 repos

https://github.com/kaleth4/CVE-2026-33824

https://github.com/EpSiLoNPoInTOrI/IKEV2-POC

security_crawler_carl at 2026-08-24T18:58:32.084Z ##

🏆 New Achievement! UDP Knocking, Nobody's Dropping!

COMPLIANCE MODE ENGAGED. Action item detected: patch CVE-2026-33824. Executing optimal response: notifying you that Microsoft patched this in April 2026 and that Palo Alto Networks Unit 42 has observed a Chinese-speaking threat actor actively exploiting it anyway, on every supported Windows 10, 11, and Server release, via maliciously crafted packets on UDP ports 500 or 4500, requiring zero privileges. Patch applied? No? Logging that. (1/2)

##

security_crawler_carl@infosec.exchange at 2026-08-24T18:58:32.000Z ##

🏆 New Achievement! UDP Knocking, Nobody's Dropping!

COMPLIANCE MODE ENGAGED. Action item detected: patch CVE-2026-33824. Executing optimal response: notifying you that Microsoft patched this in April 2026 and that Palo Alto Networks Unit 42 has observed a Chinese-speaking threat actor actively exploiting it anyway, on every supported Windows 10, 11, and Server release, via maliciously crafted packets on UDP ports 500 or 4500, requiring zero privileges. Patch applied? No? Logging that. (1/2)

##

CVE-2026-24301
(8.8 HIGH)

EPSS: 2.22%

updated 2026-08-18T15:31:45

1 posts

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

1 repos

https://github.com/CSOAI-ORG/memory-poisoning-axis

sekurakbot@mastodon.com.pl at 2026-08-25T15:19:00.000Z ##

CoSnitch: jedno kliknięcie wystarczyło, aby wysłać złośliwego prompta w Microsoft Copilot

Badacze bezpieczeństwa z Varonis odkryli podatność typu one-click w Microsoft Copilot. Otrzymała ona numer CVE-2026-24301 i została nazwana “CoSnitch”. Luka umożliwia wykradnięcie danych użytkownika bez żadnej szczególnej interakcji z jego strony – wystarczy kliknięcie odpowiednio spreparowanego linku. TLDR: Podatność została zgłoszona firmie Microsoft w grudniu 2025 r., a 18 sierpnia...

#Aktualności #Ai #Copilot #Cosnitch #Injection #Podatność

https://sekurak.pl/cosnitch-jedno-klikniecie-wystarczylo-aby-wyslac-zlosliwego-prompta-w-microsoft-copilot/

##

CVE-2026-53365
(5.5 MEDIUM)

EPSS: 0.17%

updated 2026-08-18T15:31:16

2 posts

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages with no completion tracking, so the kernel has no way to notify userspace when those pages are safe

2 repos

https://github.com/HackSpeak/CVE-2026-53365

https://github.com/HORKimhab/CVE-2026-53365

DailyCyberSecurity at 2026-08-25T01:33:42.736Z ##

A public PoC named VsockDrop turns CVE-2026-53365 into unprivileged local privilege escalation to root on Linux.

#CVE202653365 #VsockDrop #LinuxKernel #PrivilegeEscalation #vsock #LPE

https://securityonline.info/cve-2026-53365-vsockdrop-lpe/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-25T01:33:42.000Z ##

A public PoC named VsockDrop turns CVE-2026-53365 into unprivileged local privilege escalation to root on Linux.

#CVE202653365 #VsockDrop #LinuxKernel #PrivilegeEscalation #vsock #LPE

https://securityonline.info/cve-2026-53365-vsockdrop-lpe/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-73522
(7.5 HIGH)

EPSS: 2.36%

updated 2026-08-18T15:17:08.193000

2 posts

COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtp_to_can() function increments its write index without bounding it against the caller-supplied array size, and because the listener accepts da

secdb at 2026-08-24T00:01:16.947Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

secdb@infosec.exchange at 2026-08-24T00:01:16.000Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

CVE-2026-19478
(9.4 CRITICAL)

EPSS: 6.00%

updated 2026-08-18T14:57:10.630000

3 posts

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.

https://github.com/HORKimhab/CVE-2026-19650-CVE-2026-19478

6 repos

https://github.com/punitdarji/Gitlab-CVE-2026-19478

https://github.com/renzi25031469/CVE-2026-19478

https://github.com/davkharrr/CVE-2026-19478-PoC

https://github.com/dinosn/gitlab-cve-2026-19478-lab

https://github.com/n0xdaemon/cve-2026-19478

youranonnewsirc@nerdculture.de at 2026-08-25T04:26:31.000Z ##

Here's a summary of recent geopolitical, technology, and cybersecurity news:

Geopolitical: The US has launched "Operation Economic Outcast" against Iran (Aug 25) and plans 7.5% tariffs on Chinese goods over excess manufacturing capacity before a September summit (Aug 25).

Technology: Google is reorganizing DeepMind and acquired Spirit Airlines' data for AI model development (Aug 24). Fujitsu is trialing AI for construction process and risk management (Aug 25).

Cybersecurity: CISA added an Oracle HTTP Server vulnerability (CVE-2026-21962) to its Known Exploited Vulnerabilities Catalog (Aug 24). Critical GitLab (CVE-2026-19478) and Cisco vulnerabilities (CVSS 10.0) are under active exploitation (Aug 24).

##

youranonnewsirc@nerdculture.de at 2026-08-25T04:26:31.000Z ##

Here's a summary of recent geopolitical, technology, and cybersecurity news:

Geopolitical: The US has launched "Operation Economic Outcast" against Iran (Aug 25) and plans 7.5% tariffs on Chinese goods over excess manufacturing capacity before a September summit (Aug 25).

Technology: Google is reorganizing DeepMind and acquired Spirit Airlines' data for AI model development (Aug 24). Fujitsu is trialing AI for construction process and risk management (Aug 25).

Cybersecurity: CISA added an Oracle HTTP Server vulnerability (CVE-2026-21962) to its Known Exploited Vulnerabilities Catalog (Aug 24). Critical GitLab (CVE-2026-19478) and Cisco vulnerabilities (CVSS 10.0) are under active exploitation (Aug 24).

#GitLab #CVE202619478 #Vulnerability #InfoSec #CyberSecurity #PatchNow

##

DailyCyberSecurity@infosec.exchange at 2026-08-23T14:00:39.000Z ##

Critical GitLab vulnerability CVE-2026-19478 lets unauthenticated attackers delete public projects. It is exploited in the wild with public PoC.

https://securityonline.info/gitlab-cve-2026-19478/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-15748
(9.8 CRITICAL)

EPSS: 4.61%

updated 2026-08-18T06:31:55

2 posts

The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type validation in handle_file_upload, where the dangerous-extension blocklist performs exact-key matching that is bypassed by pipe-alternative MIME type keys, combined with a public submission handler th

3 repos

https://github.com/yora1928/cve-2026-15748

https://github.com/ubaydev/CVE-2026-15748

https://github.com/HORKimhab/CVE-2026-15826-CVE-2026-15748

secdb at 2026-08-24T00:01:16.947Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

secdb@infosec.exchange at 2026-08-24T00:01:16.000Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

CVE-2026-75094
(9.1 CRITICAL)

EPSS: 2.11%

updated 2026-08-18T03:31:14

2 posts

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.

secdb at 2026-08-24T00:01:16.947Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

secdb@infosec.exchange at 2026-08-24T00:01:16.000Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

CVE-2026-19976
(6.6 MEDIUM)

EPSS: 2.05%

updated 2026-08-17T03:30:28

2 posts

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub_44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptest_macaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but

secdb at 2026-08-24T00:01:16.947Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

##

secdb@infosec.exchange at 2026-08-24T00:01:16.000Z ##

📈 CVE Published in last 7 days (2026-08-17 - 2026-08-17)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 515
- High: 1465
- Medium: 1011
- Low: 196
- None: 372

Status:
- : 66
- Analyzed: 407
- Awaiting Analysis: 323
- Deferred: 288
- Modified: 30
- Received: 1755
- Rejected: 84
- Undergoing Analysis: 606

CISA KEVs:
- CISA-2026:0817 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0817)
- CISA-2026:0818 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0818)
- CISA-2026:0819 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)
- CISA-2026:0820 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)
- CISA-2026:0821 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

Top CNAs:
- Oracle: 889
- GitHub, Inc.: 540
- VulnCheck: 339
- IBM Corporation: 183
- Patchstack: 181
- kernel.org: 155
- VulDB: 141
- Cisco Systems, Inc.: 125
- MITRE: 87
- WPScan: 85

Top Affected Products:
- UNKNOWN: 2691
- Oracle Helidon: 84
- Splunk: 60
- Oracle Hyperion Financial Management: 48
- Mozilla Firefox: 40
- Ibm Vios: 40
- Ibm Aix: 40
- Mozilla Thunderbird: 40
- Commerce Guided Search / Oracle Commerce Experience Manager: 33
- Apple Iphone Os: 32

https://github.com/fevar54/CVE-2026-68820-Mitigation-PoC-

##

CVE-2026-68820
(7.0 HIGH)

EPSS: 6.18%

updated 2026-08-16T19:17:24.183000

2 posts

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

4 repos

https://github.com/ubitquity/Windows-WinSock-UAF-Mitigation

https://github.com/HORKimhab/CVE-2026-68820

https://github.com/maxprog-svg/CVE-2026-68820_Mass_Exploit

daniel1820815 at 2026-08-24T15:24:01.536Z ##

From Check Point Research:

Check Point Research has exposed a new wave of the #Lazarus-linked Operation Dream Job targeting defense organizations in Europe, India and Brazil. Attackers used fraudulent job opportunities and trojanized PDF software to deploy #malware, while exploiting Windows zero-day CVE-2026-68820 to obtain SYSTEM privileges and disable security visibility.

https://research.checkpoint.com/2026/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack/

#CheckPoint #CheckPointSoftwareTechnologies

##

daniel1820815@infosec.exchange at 2026-08-24T15:24:01.000Z ##

From Check Point Research:

Check Point Research has exposed a new wave of the #Lazarus-linked Operation Dream Job targeting defense organizations in Europe, India and Brazil. Attackers used fraudulent job opportunities and trojanized PDF software to deploy #malware, while exploiting Windows zero-day CVE-2026-68820 to obtain SYSTEM privileges and disable security visibility.

https://research.checkpoint.com/2026/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack/

#CheckPoint #CheckPointSoftwareTechnologies

##

CVE-2026-19598
(9.8 CRITICAL)

EPSS: 2.46%

updated 2026-08-15T18:31:24

2 posts

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the pods_admin AJAX router funnels every access check — including the method allowlist, nonce verification, login enforcement, and capability gate — through pods_error(), which under the JSON met

https://github.com/DeadExpl0it/CVE-2026-19598-PoC

3 repos

https://github.com/sag-asab/CVE-2026-19598

https://github.com/ksotaria1337/CVE-2026-19598

beyondmachines1 at 2026-08-24T16:01:16.949Z ##

Critical Authorization Bypass in Pods Plugin Allows Full WordPress Site Takeover

A critical vulnerability in the Pods WordPress plugin (CVE-2026-19598) allows unauthenticated attackers to bypass security checks and gain administrator access. The flaw enables full site takeover by letting attackers reset administrator passwords through an exposed AJAX router.

**If you use the Pods Custom Content Types and Fields plugin on WordPress, update it ASAP to version 3.3.9.1 (or the patched release matching your branch: 2.8.23.4, 2.9.19.4, 3.0.10.4, 3.1.4.2, or 3.2.8.3). Then check your user list for admin accounts you don't recognise and reset your administrator passwords, since attackers could already have taken over the site.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-authorization-bypass-in-pods-plugin-allows-full-wordpress-site-takeover-1-j-h-h-0/gD2P6Ple2L

##

beyondmachines1@infosec.exchange at 2026-08-24T16:01:16.000Z ##

Critical Authorization Bypass in Pods Plugin Allows Full WordPress Site Takeover

A critical vulnerability in the Pods WordPress plugin (CVE-2026-19598) allows unauthenticated attackers to bypass security checks and gain administrator access. The flaw enables full site takeover by letting attackers reset administrator passwords through an exposed AJAX router.

**If you use the Pods Custom Content Types and Fields plugin on WordPress, update it ASAP to version 3.3.9.1 (or the patched release matching your branch: 2.8.23.4, 2.9.19.4, 3.0.10.4, 3.1.4.2, or 3.2.8.3). Then check your user list for admin accounts you don't recognise and reset your administrator passwords, since attackers could already have taken over the site.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-authorization-bypass-in-pods-plugin-allows-full-wordpress-site-takeover-1-j-h-h-0/gD2P6Ple2L

##

CVE-2026-61979
(8.1 HIGH)

EPSS: 0.28%

updated 2026-08-13T15:34:46

4 posts

Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.

Byte0x90@mastodon.social at 2026-08-25T08:58:33.000Z ##

Angreifer nutzen zwei kritische Lücken im WordPress-Plugin miniOrange SAML SSO aus. Durch die Kombination von CVE-2026-61979 und CVE-2026-15981 lassen sich SAML-Antworten fälschen und Admin-Konten komplett übernehmen. Da der Hersteller Patches für Bezahlversionen kaum kommuniziert hat, sind viele Seiten ungepatcht. Scans laufen bereits – Admins sollten installierte Plugins sofort aktualisieren!

#WordPress #CyberSecurity #ITSecurity #Sicherheitslücke #Patchday #InfoSec

##

cyberworldops at 2026-08-25T00:20:00.394Z ##

Two critical authentication bypass flaws in the miniOrange SAML SSO WordPress plugin can be chained to forge SAML responses and obtain admin access without credentials. Both CVE-2026-61979 and CVE-2026-15981 affect a family of seven plugins, including a free version. Exploitation attempts are already in the wild.

#WordPressSecurity #AuthenticationBypass #CriticalVulnerability #SAMLAttacks

https://cyberworldops.eu/en/wordpress-attacks-two-vulnerabilities-in-miniorange-saml-sso-plugin

##

Analyst207@mastodon.social at 2026-08-24T19:55:55.000Z ##

Hackers Exploit WordPress Sites in miniOrange Auth Bypass Attacks

Hackers are actively exploiting WordPress sites using a clever combination of two vulnerabilities, CVE-2026-61979 and CVE-2026-15981, to bypass authentication and gain administrator access. This stealthy attack uses the miniOrange SAML 2.0 Single Sign On plugin to forge SAML responses and hijack user sessions.

https://osintsights.com/hackers-exploit-wordpress-sites-in-miniorange-auth-bypass-attacks?utm_source=mastodon&utm_medium=social

#Wordpress #AuthBypass #Saml #Miniorange #Cve202661979

##

cyberworldops@infosec.exchange at 2026-08-25T00:20:00.000Z ##

Two critical authentication bypass flaws in the miniOrange SAML SSO WordPress plugin can be chained to forge SAML responses and obtain admin access without credentials. Both CVE-2026-61979 and CVE-2026-15981 affect a family of seven plugins, including a free version. Exploitation attempts are already in the wild.

#WordPressSecurity #AuthenticationBypass #CriticalVulnerability #SAMLAttacks

https://cyberworldops.eu/en/wordpress-attacks-two-vulnerabilities-in-miniorange-saml-sso-plugin

##

CVE-2026-14669
(8.8 HIGH)

EPSS: 0.58%

updated 2026-08-13T15:34:40

2 posts

Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

1 repos

https://github.com/HackSpeak/CVE-2026-14669

DailyCyberSecurity at 2026-08-24T12:53:59.308Z ##

A PostgreSQL vulnerability (CVE-2026-14669, CVSS 8.8) with public PoC exploit code allows remote code execution via to_char. Update now.

#PostgreSQL #CVE202614669 #RCE #HeapOverflow #Database #InfoSec

http://securityonline.info/postgresql-vulnerability-cve-2026-14669/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-24T12:53:59.000Z ##

A PostgreSQL vulnerability (CVE-2026-14669, CVSS 8.8) with public PoC exploit code allows remote code execution via to_char. Update now.

#PostgreSQL #CVE202614669 #RCE #HeapOverflow #Database #InfoSec

http://securityonline.info/postgresql-vulnerability-cve-2026-14669/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-72898
(10.0 CRITICAL)

EPSS: 79.22%

updated 2026-08-12T15:18:30.347000

2 posts

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.

https://github.com/4minx/CVE-2026-72898

6 repos

https://github.com/Franc-Zar/CVE-2026-72898-safe-detection

https://github.com/VuxNx/CVE-2026-72898

https://github.com/0xBlackash/CVE-2026-72898

https://github.com/codeb0ssx/CVE-2026-72898-PoC

https://github.com/ubitquity/Metabase-Setup-Endpoint-SQLi-Fix

guru@thecybersecguru.com at 2026-08-25T18:30:39.000Z ##

CVE-2026-72898: Critical Metabase SQL Injection Is Being Actively Exploited, Allowing Unauthenticated Admin Takeover

CVE-2026-72898 is a critical Metabase SQL injection flaw actively exploited in the wild. Learn affected versions, attack path, impact, detection and mitigation

https://thecybersecguru.com/exploits/cve-2026-72898-metabase-sql-injection/

##

DarkWebInformer@infosec.exchange at 2026-08-22T17:52:48.000Z ##

🚨🇫🇷 iMapper allegedly breached through critical Metabase vulnerability, account data and database access leaked on a cybercrime forum
⠀
A forum actor claims to have compromised iMapper, a French web-connected 2D laser measurement platform for building professionals, using a vulnerability identified in the listing as CVE-2026-72898 with a claimed CVSS score of 10.0.
⠀
The exposed account dataset reportedly contains 2,463 records and includes:
⠀
• User IDs and usernames
• Password hashes
• Account roles
• Email addresses
• Phone numbers
• Professions
• MFA status and related metadata
• Language preferences
• Stripe customer IDs
• Stripe tax-related identifiers
• Measurement and display configuration fields
⠀
The data is being distributed in XLSX format. The listing also claims the compromised environment contains additional database tables and offers credentials that could provide access to those systems.
⠀
The claims, exploitation method and authenticity, availability and scope of the allegedly exposed data and database access have not been independently verified.
⠀
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

##

CVE-2026-52923
(7.8 HIGH)

EPSS: 0.13%

updated 2026-08-12T12:19:41.090000

2 posts

In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request the next SysV IPC id through ids->next_id. ipc_idr_alloc() currently forwards that request to idr_alloc() with an open-ended upper bound. If the valid tail of the SysV IPC id space is full, the allocation can spill beyond ipc_mni

DailyCyberSecurity at 2026-08-25T12:49:12.039Z ##

A public PoC for the Linux kernel flaw CVE-2026-52923 allows local attackers to escalate to root privilege. Learn about the patch and technical details.

#Linux #CVE202652923 #CyberSecurity #PrivilegeEscalation #KernelFlaw

http://securityonline.info/cve-2026-52923-linux-kernel-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-25T12:49:12.000Z ##

A public PoC for the Linux kernel flaw CVE-2026-52923 allows local attackers to escalate to root privilege. Learn about the patch and technical details.

#Linux #CVE202652923 #CyberSecurity #PrivilegeEscalation #KernelFlaw

http://securityonline.info/cve-2026-52923-linux-kernel-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-63520
(8.1 HIGH)

EPSS: 2.93%

updated 2026-08-11T18:31:39

8 posts

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

DailyCyberSecurity at 2026-08-25T14:19:20.830Z ##

A public SharePoint RCE vulnerability PoC is actively probed in the wild. Patch CVE-2026-63520 and CVE-2026-55040 now to protect your servers.

#SharePoint #CVE202663520 #CVE202655040 #CyberSecurity #Exploit

https://securityonline.info/sharepoint-cve-2026-63520-rce-2/?utm_source=mastodon&utm_medium=jetpack_social

##

AAKL at 2026-08-24T17:42:16.040Z ##

New.

VulnCheck: Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE Chain https://www.vulncheck.com/blog/cve-2026-63520-sharepoint-unsafe-type-rce @vulncheck #infosec #threatresearch #Microsoft #SharePoint #vulnerability

##

AAKL at 2026-08-24T17:33:40.985Z ##

New.

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520) https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-remote-code-execution-cve-2026-63520/ @Rapid7Official #infosec #Microsoft #vulnerability #threatresearch #SharePoint

##

catc0n at 2026-08-24T14:01:24.840Z ##

Chaining CVE-2026-55040 and CVE-2026-63520 for full auth bypass-to-RCE in Microsoft SharePoint: https://www.vulncheck.com/blog/cve-2026-63520-sharepoint-unsafe-type-rce

##

DailyCyberSecurity@infosec.exchange at 2026-08-25T14:19:20.000Z ##

A public SharePoint RCE vulnerability PoC is actively probed in the wild. Patch CVE-2026-63520 and CVE-2026-55040 now to protect your servers.

#SharePoint #CVE202663520 #CVE202655040 #CyberSecurity #Exploit

https://securityonline.info/sharepoint-cve-2026-63520-rce-2/?utm_source=mastodon&utm_medium=jetpack_social

##

AAKL@infosec.exchange at 2026-08-24T17:42:16.000Z ##

New.

VulnCheck: Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE Chain https://www.vulncheck.com/blog/cve-2026-63520-sharepoint-unsafe-type-rce @vulncheck #infosec #threatresearch #Microsoft #SharePoint #vulnerability

##

AAKL@infosec.exchange at 2026-08-24T17:33:40.000Z ##

New.

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520) https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-remote-code-execution-cve-2026-63520/ @Rapid7Official #infosec #Microsoft #vulnerability #threatresearch #SharePoint

##

catc0n@infosec.exchange at 2026-08-24T14:01:24.000Z ##

Chaining CVE-2026-55040 and CVE-2026-63520 for full auth bypass-to-RCE in Microsoft SharePoint: https://www.vulncheck.com/blog/cve-2026-63520-sharepoint-unsafe-type-rce

##

CVE-2026-14540
(6.1 MEDIUM)

EPSS: 0.11%

updated 2026-08-08T00:32:15

1 posts

A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox implements baseline input sanitization for user-controlled parameters, the underlying HTTP client (internal/sources/http/http.go) fails to safely regulate request redirection boundaries. Specifically, the client is initialize

sayzard@mastodon.sayzard.org at 2026-08-25T07:39:04.000Z ##

I found an SSRF in Google's official AI tooling, and how Google reacted

Google의 공식 에이전트 연동 서버인 MCP Toolbox에서 리디렉션 후 대상 주소를 재검증하지 않아 클라우드 메타데이터 엔드포인트 등으로 접근할 수 있는 SSRF 취약점(CVE-2026-14540, CVSS 8.0)이 수정됐다. 공격자는 모델이 제어 가능한 URL을 통해 리디렉션을 유도하고, 서버 워크로드의 자격 증명이 노출될 수 있었다. 수정안은 모든 리디렉션 홉의 목적지 검증, DNS rebinding 방어, private/link-local 및 IPv6 우회 주소 차단, 초기 base URL 검증을 포함한다. MCP 기반 에이전트는 비신뢰 웹·문서·DB 내용...

https://news.ycombinator.com/item?id=49429926

##

CVE-2026-63077
(9.8 CRITICAL)

EPSS: 84.73%

updated 2026-08-05T18:32:31

3 posts

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

https://github.com/unveiledhistory49/teamcity-cve-2026-63077-remediation

4 repos

https://github.com/sfewer-r7/CVE-2026-63077

https://github.com/BoredHackerBlog/teamcity-CVE-2026-63077-pcap

https://github.com/AnggaTechI/CVE-2026-63077

undercodenews@mastodon.social at 2026-08-25T11:44:07.000Z ##

Critical TeamCity Flaw Is Now Under Active Attack: Why CVE-2026-63077 Puts CI/CD Infrastructure at Serious Risk

Introduction: The Security Alarm Around TeamCity Is Getting Louder A critical vulnerability in JetBrains TeamCity On-Premises has moved from a serious patching concern to an active exploitation problem. Tracked as CVE-2026-63077, the flaw can allow an unauthenticated remote attacker to bypass authentication and execute arbitrary operating-system commands on a…

https://undercodenews.com/critical-teamcity-flaw-is-now-under-active-attack-why-cve-2026-63077-puts-ci-cd-infrastructure-at-serious-risk/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity at 2026-08-24T07:34:43.264Z ##

CVE-2026-63077 is a TeamCity unauthenticated RCE, now exploited in the wild with a public PoC. Australia's ACSC confirms active attacks.

#TeamCity #CVE202663077 #RCE #CyberSecurity #JetBrains #CISAKEV

https://securityonline.info/teamcity-cve-2026-63077/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-24T07:34:43.000Z ##

CVE-2026-63077 is a TeamCity unauthenticated RCE, now exploited in the wild with a public PoC. Australia's ACSC confirms active attacks.

#TeamCity #CVE202663077 #RCE #CyberSecurity #JetBrains #CISAKEV

https://securityonline.info/teamcity-cve-2026-63077/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-8508
(6.5 MEDIUM)

EPSS: 0.70%

updated 2026-08-04T03:31:16

2 posts

An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypass captive portal authentication.

1 repos

https://github.com/minanagehsalalma/zyxel-social-login-bypass-cve-2026-8508

_r_netsec at 2026-08-25T13:43:05.200Z ##

CVE-2026-8508: Trust-Boundary Bypass in Zyxel social_login.cgi Facebook Identity Handling https://minanagehsalalma.github.io/zyxel-social-login-bypass-cve-2026-8508/

##

_r_netsec@infosec.exchange at 2026-08-25T13:43:05.000Z ##

CVE-2026-8508: Trust-Boundary Bypass in Zyxel social_login.cgi Facebook Identity Handling https://minanagehsalalma.github.io/zyxel-social-login-bypass-cve-2026-8508/

##

CVE-2026-23479
(8.8 HIGH)

EPSS: 1.36%

updated 2026-07-25T11:10:00.100000

2 posts

Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3.

5 repos

https://github.com/rizlmaulanaa/CVE-2026-23479-Redis-UAF-Proof-of-Concept

https://github.com/pduggusa/redis-cve-2026-23479-check

https://github.com/v1c0mmrt/redis-cve-2026-23479-scanner

https://github.com/mgiay/CVE-2026-25589-25588-25243-23631-23479-REDIS

https://github.com/HackSpeak/CVE-2026-23479

DailyCyberSecurity at 2026-08-26T00:59:20.268Z ##

A public PoC exploits a Redis RCE use-after-free flaw tied to CVE-2026-23479, running system commands as the Redis server. Update to 8.8.2.

#Redis #RCE #UseAfterFree #CVE202623479 #InfoSec

https://securityonline.info/redis-rce-use-after-free-poc/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-26T00:59:20.000Z ##

A public PoC exploits a Redis RCE use-after-free flaw tied to CVE-2026-23479, running system commands as the Redis server. Update to 8.8.2.

#Redis #RCE #UseAfterFree #CVE202623479 #InfoSec

https://securityonline.info/redis-rce-use-after-free-poc/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-15981
(9.8 CRITICAL)

EPSS: 0.81%

updated 2026-07-23T21:31:09

4 posts

The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is due to the mo_saml_validate_signature() function performing a loose boolean check on the raw tri-state integer returned by PHP's openssl_verify(), causing an error return value of -1 to be evaluated as truthy and therefore treated as a successful sign

1 repos

https://github.com/Nxploited/CVE-2026-15981

Byte0x90@mastodon.social at 2026-08-25T08:58:33.000Z ##

Angreifer nutzen zwei kritische Lücken im WordPress-Plugin miniOrange SAML SSO aus. Durch die Kombination von CVE-2026-61979 und CVE-2026-15981 lassen sich SAML-Antworten fälschen und Admin-Konten komplett übernehmen. Da der Hersteller Patches für Bezahlversionen kaum kommuniziert hat, sind viele Seiten ungepatcht. Scans laufen bereits – Admins sollten installierte Plugins sofort aktualisieren!

#WordPress #CyberSecurity #ITSecurity #Sicherheitslücke #Patchday #InfoSec

##

cyberworldops at 2026-08-25T00:20:00.394Z ##

Two critical authentication bypass flaws in the miniOrange SAML SSO WordPress plugin can be chained to forge SAML responses and obtain admin access without credentials. Both CVE-2026-61979 and CVE-2026-15981 affect a family of seven plugins, including a free version. Exploitation attempts are already in the wild.

#WordPressSecurity #AuthenticationBypass #CriticalVulnerability #SAMLAttacks

https://cyberworldops.eu/en/wordpress-attacks-two-vulnerabilities-in-miniorange-saml-sso-plugin

##

Analyst207@mastodon.social at 2026-08-24T19:55:55.000Z ##

Hackers Exploit WordPress Sites in miniOrange Auth Bypass Attacks

Hackers are actively exploiting WordPress sites using a clever combination of two vulnerabilities, CVE-2026-61979 and CVE-2026-15981, to bypass authentication and gain administrator access. This stealthy attack uses the miniOrange SAML 2.0 Single Sign On plugin to forge SAML responses and hijack user sessions.

https://osintsights.com/hackers-exploit-wordpress-sites-in-miniorange-auth-bypass-attacks?utm_source=mastodon&utm_medium=social

#Wordpress #AuthBypass #Saml #Miniorange #Cve202661979

##

cyberworldops@infosec.exchange at 2026-08-25T00:20:00.000Z ##

Two critical authentication bypass flaws in the miniOrange SAML SSO WordPress plugin can be chained to forge SAML responses and obtain admin access without credentials. Both CVE-2026-61979 and CVE-2026-15981 affect a family of seven plugins, including a free version. Exploitation attempts are already in the wild.

#WordPressSecurity #AuthenticationBypass #CriticalVulnerability #SAMLAttacks

https://cyberworldops.eu/en/wordpress-attacks-two-vulnerabilities-in-miniorange-saml-sso-plugin

##

CVE-2026-40575
(9.1 CRITICAL)

EPSS: 0.48%

updated 2026-07-21T13:50:16

2 posts

### Impact A configuration-dependent authentication bypass exists in OAuth2 Proxy. Deployments are affected when all of the following are true: * OAuth2 Proxy is configured with `--reverse-proxy` * and at least one rule is defined with `--skip_auth_routes` or the legacy `--skip-auth-regex` OAuth2 Proxy may trust a client-supplied `X-Forwarded-Uri` header when `--reverse-proxy` is enabled and `

thehackerwire@mastodon.social at 2026-08-24T19:01:19.000Z ##

🔴 CVE-2026-76835 - Critical (9.1)

OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, because the guard added for CVE-2026-40575 is inert in the default reverse-proxy configuration. GetRequestURI in pkg/requests/ut...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76835/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-24T19:01:19.000Z ##

🔴 CVE-2026-76835 - Critical (9.1)

OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, because the guard added for CVE-2026-40575 is inert in the default reverse-proxy configuration. GetRequestURI in pkg/requests/ut...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76835/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2025-15467
(9.8 CRITICAL)

EPSS: 47.62%

updated 2026-07-14T15:32:45

2 posts

Issue summary: Parsing CMS AuthEnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 para

6 repos

https://github.com/balgan/CVE-2025-15467

https://github.com/guiimoraes/CVE-2025-15467

https://github.com/WostGit/cve-2025-15467-crash

https://github.com/x-stp/cves-2025-11187_15467_69418

https://github.com/materaj2/cve-2025-15467

https://github.com/mr-r3b00t/CVE-2025-15467

certvde at 2026-08-25T10:45:02.867Z ##

🔒 New CSAF advisory published

VDE-2026-088
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4
CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2025-58187, CVE-2026-41992 (+37 more)

Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025…

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

certvde@infosec.exchange at 2026-08-25T10:45:02.000Z ##

🔒 New CSAF advisory published

VDE-2026-088
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4
CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2025-58187, CVE-2026-41992 (+37 more)

Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025…

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

#CVE202652912 #LinuxKernel #PrivilegeEscalation #Netfilter #UseAfterFree #PoC #Exploit #InfoSec

##

CVE-2026-52912
(7.8 HIGH)

EPSS: 0.19%

updated 2026-07-08T15:31:43

2 posts

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: hold bridge skb->dev while queued br_pass_frame_up() rewrites skb->dev from the ingress port to the bridge master before queueing bridge LOCAL_IN packets. NFQUEUE only holds references on state.in/out and bridge physdevs, so a queued bridge packet can retain a freed bridge master in skb->dev until reinjectio

DailyCyberSecurity at 2026-08-24T02:28:32.059Z ##

CVE-2026-52912, a Linux kernel netfilter use-after-free, now has public PoC exploit code enabling root privilege escalation.

https://securityonline.info/cve-2026-52912-linux-kernel-root-poc/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-24T02:28:32.000Z ##

CVE-2026-52912, a Linux kernel netfilter use-after-free, now has public PoC exploit code enabling root privilege escalation.

#CVE202652912 #LinuxKernel #PrivilegeEscalation #Netfilter #UseAfterFree #PoC #Exploit #InfoSec

https://securityonline.info/cve-2026-52912-linux-kernel-root-poc/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-52945
(7.5 HIGH)

EPSS: 0.40%

updated 2026-07-01T15:34:55

1 posts

In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" This reverts commit 933466fc50a8e4eb167acbd0d8ec96a078462e9c which is commit db9ae3b6b43c79b1ba87eea849fd65efa05b4b2e upstream. We have had three independent production user reports in combination with Cilium utilizing WireGuard as encryption underneath that k8s Pod E/W traffic t

kini@maro.xyz at 2026-08-25T22:51:03.000Z ##

>We have had three independent production user reports in combination with Cilium utilizing WireGuard as encryption underneath that k8s Pod E/W traffic to certain peer nodes fully stalled. The situation appears as follows: - Occurs very rarely but at random times under heavy networking load. - Once the issue triggers the decryption side stops working completely for that WireGuard peer, other peers keep working fine.

https://nvd.nist.gov/vuln/detail/CVE-2026-52945

Yeah pretty I just found out the source of the curse.

##

CVE-2026-12077
(7.5 HIGH)

EPSS: 0.46%

2 posts

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030

1 repos

https://github.com/west-wind/Threat-Hunting-With-Splunk

DailyCyberSecurity at 2026-08-25T08:01:56.825Z ##

The Clop web shell targets PTC Windchill via CVE-2026-12569, stealing credentials and engineering data in a mass-extortion campaign.

#Clop #Windchill #WebShell #Ransomware #DataExfiltration

http://securityonline.info/clop-web-shell-ptc-windchill/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-25T08:01:56.000Z ##

The Clop web shell targets PTC Windchill via CVE-2026-12569, stealing credentials and engineering data in a mass-extortion campaign.

#Clop #Windchill #WebShell #Ransomware #DataExfiltration

http://securityonline.info/clop-web-shell-ptc-windchill/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2025-69419
(7.4 HIGH)

EPSS: 0.55%

updated 2026-06-17T10:00:39.850000

2 posts

Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() functi

1 repos

https://github.com/Kha-Beleh/PoC-CVE-2025-69419

certvde at 2026-08-25T10:45:02.867Z ##

🔒 New CSAF advisory published

VDE-2026-088
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4
CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2025-58187, CVE-2026-41992 (+37 more)

Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025…

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

certvde@infosec.exchange at 2026-08-25T10:45:02.000Z ##

🔒 New CSAF advisory published

VDE-2026-088
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4
CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2025-58187, CVE-2026-41992 (+37 more)

Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025…

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

CVE-2021-33045
(9.8 CRITICAL)

EPSS: 99.56%

updated 2026-06-17T03:54:04.020000

2 posts

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

https://github.com/umair-aziz025/dahua-cve-research

3 repos

https://github.com/bp2008/DahuaLoginBypass

https://github.com/dongpohezui/cve-2021-33045

niebezpiecznikbot@mastodon.com.pl at 2026-08-24T11:43:00.000Z ##

Ktoś przejął 14 530 kamer Dahua

W okresie od 17 czerwca do 22 lipca 2026r. ktoś zhackował co najmniej 14 530 kamer IP (i innych urządzeń) marki Dahua. Ale popełnił jeden błąd, dzięki czemu cała operacja wyszła na jaw — narzędzia włamywaczy wykorzystane do tej operacji, wraz z dodatkowymi informacjami zostały znalezione na jednym z hostów wykorzystywanych do ataków.
Operacja CameraSwarm
Jak ustalili badacze, atak na kamery realizowano głównie na terytorium Ukrainy i Rosji, a włamywacze wykorzystywali 3 techniki:

zgadywanie loginów i haseł na porcie TCP/37777 (skutek: 12324 przejętych urządzeń)
wykorzystanie podatności CVE-2021-33044 i CVE-2021-33045 (umożliwiły dostęp do niezałatanych urządzeń i instaloacje konta-backdoora p2pwn na 1923 kamerach. Tak, to podatność załatana 5 lat temu…)
mechanizm P2P Dahua (dostęp do 283 kamer za NAT-em przy użyciu numeru seryjnego i danych zaszytych w klientach Dahua).

Analiza narzędzi opublikowanych przez włamywaczy ujawniła też, że z przejętych kamer odrzucali ciemne/nieużyteczne klatki a resztę (plus ewentualne dane logowania) wysyłali na Telegram.
Mam kamerę Dahua, co robić, jak żyć?
Choć raport badaczy nie wymienia Polski wśród głównych obszarów potwierdzonych przejęć, to skanowanie miało zasięg globalny. Marka ma w Polsce oficjalnych dystrybutorów i szeroką ofertę sprzętu do domu i firm, dlatego powinniście sprawdzić swoje urządzenia, nawet jeśli nie otrzymaliście żadnego alertu.
Jeśli kamera Dahua była dostępna z internetu na porcie 37777/tcp w czerwcu lub lipcu 2026r., potraktujcie ją jako potencjalnie przejętą i:

sprawdź listę użytkowników i usuń konto p2pwn, jeśli istnieje;
zaktualizuj firmware do najnowszej wersji właściwej dla konkretnego modelu;
wyłącz P2P, jeśli go nie potrzebujesz, oraz nie wystawiaj portu 37777 do internetu;
zmień hasła kamery, [...]

https://niebezpiecznik.pl/post/ktos-przejal-14-530-kamer-dahua/

##

niebezpiecznikbot@mastodon.com.pl at 2026-08-24T11:43:00.000Z ##

Ktoś przejął 14 530 kamer Dahua

W okresie od 17 czerwca do 22 lipca 2026r. ktoś zhackował co najmniej 14 530 kamer IP (i innych urządzeń) marki Dahua. Ale popełnił jeden błąd, dzięki czemu cała operacja wyszła na jaw — narzędzia włamywaczy wykorzystane do tej operacji, wraz z dodatkowymi informacjami zostały znalezione na jednym z hostów wykorzystywanych do ataków.
Operacja CameraSwarm
Jak ustalili badacze, atak na kamery realizowano głównie na terytorium Ukrainy i Rosji, a włamywacze wykorzystywali 3 techniki:

zgadywanie loginów i haseł na porcie TCP/37777 (skutek: 12324 przejętych urządzeń)
wykorzystanie podatności CVE-2021-33044 i CVE-2021-33045 (umożliwiły dostęp do niezałatanych urządzeń i instaloacje konta-backdoora p2pwn na 1923 kamerach. Tak, to podatność załatana 5 lat temu…)
mechanizm P2P Dahua (dostęp do 283 kamer za NAT-em przy użyciu numeru seryjnego i danych zaszytych w klientach Dahua).

Analiza narzędzi opublikowanych przez włamywaczy ujawniła też, że z przejętych kamer odrzucali ciemne/nieużyteczne klatki a resztę (plus ewentualne dane logowania) wysyłali na Telegram.
Mam kamerę Dahua, co robić, jak żyć?
Choć raport badaczy nie wymienia Polski wśród głównych obszarów potwierdzonych przejęć, to skanowanie miało zasięg globalny. Marka ma w Polsce oficjalnych dystrybutorów i szeroką ofertę sprzętu do domu i firm, dlatego powinniście sprawdzić swoje urządzenia, nawet jeśli nie otrzymaliście żadnego alertu.
Jeśli kamera Dahua była dostępna z internetu na porcie 37777/tcp w czerwcu lub lipcu 2026r., potraktujcie ją jako potencjalnie przejętą i:

sprawdź listę użytkowników i usuń konto p2pwn, jeśli istnieje;
zaktualizuj firmware do najnowszej wersji właściwej dla konkretnego modelu;
wyłącz P2P, jeśli go nie potrzebujesz, oraz nie wystawiaj portu 37777 do internetu;
zmień hasła kamery, [...]

https://niebezpiecznik.pl/post/ktos-przejal-14-530-kamer-dahua/

##

CVE-2025-9615
(3.3 LOW)

EPSS: 0.15%

updated 2026-05-19T15:31:20

4 posts

A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.

cR0w at 2026-08-24T18:55:29.991Z ##

@agowa338 It's an incomplete fix for CVE-2025-9615:

A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.

##

cR0w at 2026-08-24T18:50:25.704Z ##

i uSe lInUx bEcAuSe iT'S SeCuRe.

https://access.redhat.com/security/cve/cve-2026-19685

NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.

##

cR0w@infosec.exchange at 2026-08-24T18:55:29.000Z ##

@agowa338 It's an incomplete fix for CVE-2025-9615:

A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.

##

cR0w@infosec.exchange at 2026-08-24T18:50:25.000Z ##

i uSe lInUx bEcAuSe iT'S SeCuRe.

https://access.redhat.com/security/cve/cve-2026-19685

NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.

##

CVE-2025-58187
(6.5 MEDIUM)

EPSS: 0.38%

updated 2026-01-29T18:31:31

2 posts

Due to the design of the name constraint checking algorithm, the processing time of some inputs scals non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.

certvde at 2026-08-25T10:45:02.867Z ##

🔒 New CSAF advisory published

VDE-2026-088
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4
CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2025-58187, CVE-2026-41992 (+37 more)

Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025…

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

certvde@infosec.exchange at 2026-08-25T10:45:02.000Z ##

🔒 New CSAF advisory published

VDE-2026-088
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4
CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2025-58187, CVE-2026-41992 (+37 more)

Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025…

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

https://github.com/cyberwulfy200-dev/CVE-2026-0915-json-Patch.-V2.0

##

CVE-2026-0915
(7.5 HIGH)

EPSS: 0.57%

updated 2026-01-20T18:31:56

2 posts

Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.

1 repos

certvde at 2026-08-25T10:45:02.867Z ##

🔒 New CSAF advisory published

VDE-2026-088
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4
CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2025-58187, CVE-2026-41992 (+37 more)

Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025…

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

certvde@infosec.exchange at 2026-08-25T10:45:02.000Z ##

🔒 New CSAF advisory published

VDE-2026-088
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.4
CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2025-58187, CVE-2026-41992 (+37 more)

Multiple vulnerabilities have been discovered in LabX Standard versions 21.3.22 - 21.4.23. The vulnerabilities CVE-2025…

HTML: https://certvde.com/en/advisories/VDE-2026-088/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-088.json

##

CVE-2021-33044
(9.8 CRITICAL)

EPSS: 99.87%

updated 2025-10-22T00:32:20

2 posts

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

https://github.com/bp2008/DahuaLoginBypass

9 repos

https://github.com/litndat/Camera-Dahua-Research-l-h-ng-CVE-2021-33044

https://github.com/eagle-nett/DAHUA_AUTH-BYPASS-CVE-2021-33044

https://github.com/umair-aziz025/dahua-cve-research

https://github.com/nasimanpha-create/ing-switch

https://github.com/Baza-NATO/CVE-2021-33044

https://github.com/haingn/LoHongCam-CVE-2021-33044

https://github.com/jorhelp/Ingram

https://github.com/Spy0x7/CVE-2021-33044

niebezpiecznikbot@mastodon.com.pl at 2026-08-24T11:43:00.000Z ##

Ktoś przejął 14 530 kamer Dahua

W okresie od 17 czerwca do 22 lipca 2026r. ktoś zhackował co najmniej 14 530 kamer IP (i innych urządzeń) marki Dahua. Ale popełnił jeden błąd, dzięki czemu cała operacja wyszła na jaw — narzędzia włamywaczy wykorzystane do tej operacji, wraz z dodatkowymi informacjami zostały znalezione na jednym z hostów wykorzystywanych do ataków.
Operacja CameraSwarm
Jak ustalili badacze, atak na kamery realizowano głównie na terytorium Ukrainy i Rosji, a włamywacze wykorzystywali 3 techniki:

zgadywanie loginów i haseł na porcie TCP/37777 (skutek: 12324 przejętych urządzeń)
wykorzystanie podatności CVE-2021-33044 i CVE-2021-33045 (umożliwiły dostęp do niezałatanych urządzeń i instaloacje konta-backdoora p2pwn na 1923 kamerach. Tak, to podatność załatana 5 lat temu…)
mechanizm P2P Dahua (dostęp do 283 kamer za NAT-em przy użyciu numeru seryjnego i danych zaszytych w klientach Dahua).

Analiza narzędzi opublikowanych przez włamywaczy ujawniła też, że z przejętych kamer odrzucali ciemne/nieużyteczne klatki a resztę (plus ewentualne dane logowania) wysyłali na Telegram.
Mam kamerę Dahua, co robić, jak żyć?
Choć raport badaczy nie wymienia Polski wśród głównych obszarów potwierdzonych przejęć, to skanowanie miało zasięg globalny. Marka ma w Polsce oficjalnych dystrybutorów i szeroką ofertę sprzętu do domu i firm, dlatego powinniście sprawdzić swoje urządzenia, nawet jeśli nie otrzymaliście żadnego alertu.
Jeśli kamera Dahua była dostępna z internetu na porcie 37777/tcp w czerwcu lub lipcu 2026r., potraktujcie ją jako potencjalnie przejętą i:

sprawdź listę użytkowników i usuń konto p2pwn, jeśli istnieje;
zaktualizuj firmware do najnowszej wersji właściwej dla konkretnego modelu;
wyłącz P2P, jeśli go nie potrzebujesz, oraz nie wystawiaj portu 37777 do internetu;
zmień hasła kamery, [...]

https://niebezpiecznik.pl/post/ktos-przejal-14-530-kamer-dahua/

##

niebezpiecznikbot@mastodon.com.pl at 2026-08-24T11:43:00.000Z ##

Ktoś przejął 14 530 kamer Dahua

W okresie od 17 czerwca do 22 lipca 2026r. ktoś zhackował co najmniej 14 530 kamer IP (i innych urządzeń) marki Dahua. Ale popełnił jeden błąd, dzięki czemu cała operacja wyszła na jaw — narzędzia włamywaczy wykorzystane do tej operacji, wraz z dodatkowymi informacjami zostały znalezione na jednym z hostów wykorzystywanych do ataków.
Operacja CameraSwarm
Jak ustalili badacze, atak na kamery realizowano głównie na terytorium Ukrainy i Rosji, a włamywacze wykorzystywali 3 techniki:

zgadywanie loginów i haseł na porcie TCP/37777 (skutek: 12324 przejętych urządzeń)
wykorzystanie podatności CVE-2021-33044 i CVE-2021-33045 (umożliwiły dostęp do niezałatanych urządzeń i instaloacje konta-backdoora p2pwn na 1923 kamerach. Tak, to podatność załatana 5 lat temu…)
mechanizm P2P Dahua (dostęp do 283 kamer za NAT-em przy użyciu numeru seryjnego i danych zaszytych w klientach Dahua).

Analiza narzędzi opublikowanych przez włamywaczy ujawniła też, że z przejętych kamer odrzucali ciemne/nieużyteczne klatki a resztę (plus ewentualne dane logowania) wysyłali na Telegram.
Mam kamerę Dahua, co robić, jak żyć?
Choć raport badaczy nie wymienia Polski wśród głównych obszarów potwierdzonych przejęć, to skanowanie miało zasięg globalny. Marka ma w Polsce oficjalnych dystrybutorów i szeroką ofertę sprzętu do domu i firm, dlatego powinniście sprawdzić swoje urządzenia, nawet jeśli nie otrzymaliście żadnego alertu.
Jeśli kamera Dahua była dostępna z internetu na porcie 37777/tcp w czerwcu lub lipcu 2026r., potraktujcie ją jako potencjalnie przejętą i:

sprawdź listę użytkowników i usuń konto p2pwn, jeśli istnieje;
zaktualizuj firmware do najnowszej wersji właściwej dla konkretnego modelu;
wyłącz P2P, jeśli go nie potrzebujesz, oraz nie wystawiaj portu 37777 do internetu;
zmień hasła kamery, [...]

https://niebezpiecznik.pl/post/ktos-przejal-14-530-kamer-dahua/

##

CVE-2020-14882
(9.8 CRITICAL)

EPSS: 100.00%

updated 2025-10-22T00:31:59

2 posts

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeove

https://github.com/Ormicron/CVE-2020-14882-GUI-Test

42 repos

https://github.com/XTeam-Wing/CVE-2020-14882

https://github.com/jas502n/CVE-2020-14882

https://github.com/b1g-b33f/CVE-2020-14882

https://github.com/kk98kk0/CVE-2020-14882

https://github.com/alexfrancow/CVE-2020-14882

https://github.com/pwn3z/CVE-2020-14882-WebLogic

https://github.com/Root-Shells/CVE-2020-14882

https://github.com/s1kr10s/CVE-2020-14882

https://github.com/ludy-dev/Weblogic_Unauthorized-bypass-RCE

https://github.com/tpdlshdmlrkfmcla/WebLogic_CVE_2020_14882

https://github.com/qianniaoge/CVE-2020-14882_Exploit_Gui

https://github.com/nik0nz7/CVE-2020-14882

https://github.com/mmioimm/cve-2020-14882

https://github.com/pprietosanchez/CVE-2020-14750

https://github.com/0xn0ne/weblogicScanner

https://github.com/zhzyker/vulmap

https://github.com/exploitblizzard/CVE-2020-14882-WebLogic

https://github.com/N0Coriander/CVE-2020-14882-14883

https://github.com/0thm4n3/cve-2020-14882

https://github.com/LucasPDiniz/CVE-2020-14882

https://github.com/KKC73/weblogic-cve-2020-14882

https://github.com/xMr110/CVE-2020-14882

https://github.com/ovProphet/CVE-2020-14882-checker

https://github.com/GGyao/CVE-2020-14882_POC

https://github.com/NS-Sp4ce/CVE-2020-14882

https://github.com/murataydemir/CVE-2020-14883

https://github.com/wsfengfan/cve-2020-14882

https://github.com/milo2012/CVE-2020-14882

https://github.com/Danny-LLi/CVE-2020-14882

https://github.com/QmF0c3UK/CVE-2020-14882

https://github.com/zhzyker/exphub

https://github.com/GGyao/CVE-2020-14882_ALL

https://github.com/BabyTeam1024/CVE-2020-14882

https://github.com/corelight/CVE-2020-14882-weblogicRCE

https://github.com/zesnd/CVE-2020-14882-POC

https://github.com/VelesSecurity/CVE-2020-14882-WebLogic-Analysis

https://github.com/murataydemir/CVE-2020-14882

https://github.com/1n7erface/PocList

https://github.com/xfiftyone/CVE-2020-14882

https://github.com/adm1in/CodeTest

https://github.com/AleksaZatezalo/CVE-2020-14882

security_crawler_carl at 2026-08-25T09:45:06.059Z ##

CloudSEK honeypots confirm active attacks, with threat actors also recycling ancient WebLogic RCE charges dating back to 2017 and 2020.

Sentence is immediate: patch CVE-2026-21962 now and audit your exposure to CVE-2020-14882/14883, CVE-2020-2551, and CVE-2017-10271 before this court loses what little patience remains.

Reward: You've received the Gavel of Grudging Compliance — equip it or face contempt charges.

#CyberSecurity #Oracle #WebLogic #ZeroDay #Vulnerability #CriticalHit (2/2)

##

security_crawler_carl@infosec.exchange at 2026-08-25T09:45:06.000Z ##

CloudSEK honeypots confirm active attacks, with threat actors also recycling ancient WebLogic RCE charges dating back to 2017 and 2020.

Sentence is immediate: patch CVE-2026-21962 now and audit your exposure to CVE-2020-14882/14883, CVE-2020-2551, and CVE-2017-10271 before this court loses what little patience remains.

Reward: You've received the Gavel of Grudging Compliance — equip it or face contempt charges.

#CyberSecurity #Oracle #WebLogic #ZeroDay #Vulnerability #CriticalHit (2/2)

##

CVE-2020-2551
(9.8 CRITICAL)

EPSS: 93.17%

updated 2025-10-22T00:31:50

2 posts

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeove

https://github.com/hktalent/CVE-2020-2551

11 repos

https://github.com/LTiDi2000/CVE-2020-2551

https://github.com/Dido1960/Weblogic-CVE-2020-2551-To-Internet

https://github.com/Y4er/CVE-2020-2551

https://github.com/0xn0ne/weblogicScanner

https://github.com/zzwlpx/weblogicPoc

https://github.com/jas502n/CVE-2020-2551

https://github.com/abbarhissarh/CVE-Exploit

https://github.com/DaMinGshidashi/CVE-2020-2551

https://github.com/DSO-Lab/defvul

https://github.com/zhzyker/exphub

security_crawler_carl at 2026-08-25T09:45:06.059Z ##

CloudSEK honeypots confirm active attacks, with threat actors also recycling ancient WebLogic RCE charges dating back to 2017 and 2020.

Sentence is immediate: patch CVE-2026-21962 now and audit your exposure to CVE-2020-14882/14883, CVE-2020-2551, and CVE-2017-10271 before this court loses what little patience remains.

Reward: You've received the Gavel of Grudging Compliance — equip it or face contempt charges.

#CyberSecurity #Oracle #WebLogic #ZeroDay #Vulnerability #CriticalHit (2/2)

##

security_crawler_carl@infosec.exchange at 2026-08-25T09:45:06.000Z ##

CloudSEK honeypots confirm active attacks, with threat actors also recycling ancient WebLogic RCE charges dating back to 2017 and 2020.

Sentence is immediate: patch CVE-2026-21962 now and audit your exposure to CVE-2020-14882/14883, CVE-2020-2551, and CVE-2017-10271 before this court loses what little patience remains.

Reward: You've received the Gavel of Grudging Compliance — equip it or face contempt charges.

#CyberSecurity #Oracle #WebLogic #ZeroDay #Vulnerability #CriticalHit (2/2)

##

CVE-2017-10271
(7.5 HIGH)

EPSS: 99.99%

updated 2025-10-22T00:31:29

2 posts

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of

https://github.com/bigsizeme/weblogic-XMLDecoder

33 repos

https://github.com/shahdawadfallah-sys/Cybersecurity-Capstone-Project

https://github.com/peterpeter228/Oracle-WebLogic-CVE-2017-10271

https://github.com/JackyTsuuuy/weblogic_wls_rce_poc-exp

https://github.com/1337g/CVE-2017-10271

https://github.com/Cymmetria/weblogic_honeypot

https://github.com/ZH3FENG/PoCs-Weblogic_2017_10271

https://github.com/XHSecurity/Oracle-WebLogic-CVE-2017-10271

https://github.com/0xn0ne/weblogicScanner

https://github.com/testwc/CVE-2017-10271

https://github.com/lonehand/Oracle-WebLogic-CVE-2017-10271-master

https://github.com/kbsec/Weblogic_Wsat_RCE

https://github.com/pizza-power/weblogic-CVE-2019-2729-POC

https://github.com/ianxtianxt/-CVE-2017-10271-

https://github.com/Dungsocool/CVE-2017-10271

https://github.com/r4b3rt/CVE-2017-10271

https://github.com/seoyoung-kang/CVE-2017-10271

https://github.com/SuperHacker-liuan/cve-2017-10271-poc

https://github.com/cjjduck/weblogic_wls_wsat_rce

https://github.com/cved-sources/cve-2017-10271

https://github.com/s3xy/CVE-2017-10271

https://github.com/Yuusuke4/WebLogic_CNVD_C_2019_48814

https://github.com/KKsdall/7kbstormq

https://github.com/kkirsche/CVE-2017-10271

https://github.com/SkyBlueEternal/CNVD-C-2019-48814-CNNVD-201904-961

https://github.com/ETOCheney/JavaDeserialization

https://github.com/shack2/javaserializetools

https://github.com/c0mmand3rOpSec/CVE-2017-10271

https://github.com/Al1ex/CVE-2017-10271

https://github.com/Luffin/CVE-2017-10271

https://github.com/7kbstorm/WebLogic_CNVD_C2019_48814

https://github.com/rambleZzz/weblogic_CVE_2017_10271

https://github.com/pssss/CVE-2017-10271

security_crawler_carl at 2026-08-25T09:45:06.059Z ##

CloudSEK honeypots confirm active attacks, with threat actors also recycling ancient WebLogic RCE charges dating back to 2017 and 2020.

Sentence is immediate: patch CVE-2026-21962 now and audit your exposure to CVE-2020-14882/14883, CVE-2020-2551, and CVE-2017-10271 before this court loses what little patience remains.

Reward: You've received the Gavel of Grudging Compliance — equip it or face contempt charges.

#CyberSecurity #Oracle #WebLogic #ZeroDay #Vulnerability #CriticalHit (2/2)

##

security_crawler_carl@infosec.exchange at 2026-08-25T09:45:06.000Z ##

CloudSEK honeypots confirm active attacks, with threat actors also recycling ancient WebLogic RCE charges dating back to 2017 and 2020.

Sentence is immediate: patch CVE-2026-21962 now and audit your exposure to CVE-2020-14882/14883, CVE-2020-2551, and CVE-2017-10271 before this court loses what little patience remains.

Reward: You've received the Gavel of Grudging Compliance — equip it or face contempt charges.

#CyberSecurity #Oracle #WebLogic #ZeroDay #Vulnerability #CriticalHit (2/2)

##

CVE-2026-75604
(0 None)

EPSS: 0.00%

2 posts

N/A

1 repos

https://github.com/rafabd1/CVE-2026-75604-poc

DailyCyberSecurity at 2026-08-26T01:58:20.310Z ##

Two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.

#NextJS #RCE #CyberSecurity #CVE202675604 #WebSecurity

https://securityonline.info/nextjs-rce-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-26T01:58:20.000Z ##

Two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.

#NextJS #RCE #CyberSecurity #CVE202675604 #WebSecurity

https://securityonline.info/nextjs-rce-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-18431
(0 None)

EPSS: 0.00%

1 posts

N/A

sayzard@mastodon.sayzard.org at 2026-08-26T00:45:55.000Z ##

Wordfence Argus Finds 6 Step Critical RCE in Avada Theme with 1M Sales

Wordfence가 Avada 테마(7.16 이하)와 Fusion Builder 플러그인(3.16 이하)의 6단계 취약점 체인을 이용하는 인증 불필요 원격 코드 실행(CVE-2026-18431, CVSS 9.8)을 공개했습니다. 두 구성요소가 활성화되고 특정 관리자 작성 콘텐츠가 존재할 경우 공격자는 임의 PHP 파일을 작성·실행해 웹 서버 권한으로 사이트를 완전히 장악할 수 있습니다. 패치는 Avada 7.16.1 및 Fusion...

https://www.wordfence.com/blog/2026/08/wordfence-argus-finds-complex-6-step-critical-rce-in-avada-theme-with-1-million-sales/

##

CVE-2026-58090
(0 None)

EPSS: 0.00%

2 posts

N/A

grahamperrin@bsd.cafe at 2026-08-25T23:40:54.000Z ##

<https://www.cve.org/CVERecord?id=CVE-2026-58090>

<https://security.freebsd.org/advisories/FreeBSD-SA-26:57.unix.asc>

Context (unofficial):

<https://bokut.in/freebsd-patch-level-table/#releng/15.0> (releng/15.0) | <https://bokut.in/freebsd-patch-level-table/#releng/15.1> (releng/15.1)

Cc @tychotithonus

##

grahamperrin@bsd.cafe at 2026-08-25T23:40:54.000Z ##

<https://www.cve.org/CVERecord?id=CVE-2026-58090>

<https://security.freebsd.org/advisories/FreeBSD-SA-26:57.unix.asc>

Context (unofficial):

<https://bokut.in/freebsd-patch-level-table/#releng/15.0> (releng/15.0) | <https://bokut.in/freebsd-patch-level-table/#releng/15.1> (releng/15.1)

Cc @tychotithonus

##

CVE-2026-60004
(0 None)

EPSS: 0.00%

8 posts

N/A