CVE-2026-13486 | SQL injection in SourceCodester Class and Exam Timetabling System (v1.0/6.php). MEDIUM severity. Exploit public for /preview6.php — remote attackers can target course_year_section param. Monitor & mitigate. https://radar.offseq.com/threat/cve-2026-13486-sql-injection-in-sourcecodester-cla-1dca720c361e2250 #OffSeq #Vuln #SQLi #AppSec

CVE-2026-13486 | SQL injection in SourceCodester Class and Exam Timetabling System (v1.0/6.php). MEDIUM severity. Exploit public for /preview6.php — remote attackers can target course_year_section param. Monitor & mitigate. https://radar.offseq.com/threat/cve-2026-13486-sql-injection-in-sourcecodester-cla-1dca720c361e2250 #OffSeq #Vuln #SQLi #AppSec

Linux Kernel Pedit COW Vulnerability Grants Root Access via Page Cache Poisoning

The Linux kernel "pedit COW" vulnerability (CVE-2026-46331) allows local attackers to gain root access by poisoning the in-memory page cache of privileged binaries.

**This flaw lets attackers hide in your server memory without ever touching the files on your disk. You should patch and reboot your Linux systems ASAP to clear any potential memory poisoning. If you can't patch right away, disable the act_pedit module or restrict unprivileged user namespaces as a temporary fix.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/linux-kernel-pedit-cow-vulnerability-grants-root-access-via-page-cache-poisoning-x-3-v-q-e/gD2P6Ple2L

Linux té un exploit que dona root mentre els file-integrity checks diuen "tot bé" ✨

**pedit COW** (CVE-2026-46331): OOB write a `act_pedit` que enverina la page cache de binaris setuid. PoC en 24h. RHEL 10 i Debian 13 afectats.

Mitigació: `echo 'install act_pedit /bin/true' > /etc/modprobe.d/disable.conf`

https://thehackernews.com/2026/06/new-linux-pedit-cow-exploit-enables.html
#Linux #CVE #seguridad #sysadmin

Uma nova vulnerabilidade no kernel do Linux, a pedit COW (CVE-2026-46331), permite a um utilizador local sem privilégios obter acesso root em máquinas afetadas. O exploit público está disponível desde junho de 2026. 🚨

🔗 https://tugatech.com.pt/t86365-protege-o-teu-sistema-linux-contra-a-nova-falha-critica-pedit-cow

#falha #linux #sistema 

Linux Kernel Pedit COW Vulnerability Grants Root Access via Page Cache Poisoning

The Linux kernel "pedit COW" vulnerability (CVE-2026-46331) allows local attackers to gain root access by poisoning the in-memory page cache of privileged binaries.

**This flaw lets attackers hide in your server memory without ever touching the files on your disk. You should patch and reboot your Linux systems ASAP to clear any potential memory poisoning. If you can't patch right away, disable the act_pedit module or restrict unprivileged user namespaces as a temporary fix.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/linux-kernel-pedit-cow-vulnerability-grants-root-access-via-page-cache-poisoning-x-3-v-q-e/gD2P6Ple2L

Linux té un exploit que dona root mentre els file-integrity checks diuen "tot bé" ✨

**pedit COW** (CVE-2026-46331): OOB write a `act_pedit` que enverina la page cache de binaris setuid. PoC en 24h. RHEL 10 i Debian 13 afectats.

Mitigació: `echo 'install act_pedit /bin/true' > /etc/modprobe.d/disable.conf`

https://thehackernews.com/2026/06/new-linux-pedit-cow-exploit-enables.html
#Linux #CVE #seguridad #sysadmin

Uma nova vulnerabilidade no kernel do Linux, a pedit COW (CVE-2026-46331), permite a um utilizador local sem privilégios obter acesso root em máquinas afetadas. O exploit público está disponível desde junho de 2026. 🚨

🔗 https://tugatech.com.pt/t86365-protege-o-teu-sistema-linux-contra-a-nova-falha-critica-pedit-cow

#falha #linux #sistema 

Two new Linux LPEs hit page cache from opposite ends of the kernel

https://thecybersecguru.com/news/linux-lpe-pedit-cow-dirtyclone-cve-2026-46331-cve-2026-43503/

CVE-2026-13482 affects skypilot-org skypilot ≤0.12.0: MEDIUM severity due to weak hash in username.encode (User ID Handler). Remote attack possible, exploit is public, but complex. Review exposure. https://radar.offseq.com/threat/cve-2026-13482-use-of-weak-hash-in-skypilot-org-sk-84e3e218c6191951 #OffSeq #Vulnerability #AppSec #CVE202613482

CVE-2026-13482 affects skypilot-org skypilot ≤0.12.0: MEDIUM severity due to weak hash in username.encode (User ID Handler). Remote attack possible, exploit is public, but complex. Review exposure. https://radar.offseq.com/threat/cve-2026-13482-use-of-weak-hash-in-skypilot-org-sk-84e3e218c6191951 #OffSeq #Vulnerability #AppSec #CVE202613482

🔴 CVE-2026-58053 - Critical (9.9)

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging opt...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58053/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-58053 (CRITICAL, CVSS 9.9) in Gitea act_runner: Improper privilege management lets workflow users escape Docker containers to host as root. Restrict workflow rights & watch for patches. https://radar.offseq.com/threat/cve-2026-58053-improper-privilege-management-in-gi-9dae0ab1a83a7575 #OffSeq #CVE202658053 #Gitea #containers #security

🔴 CVE-2026-58053 - Critical (9.9)

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging opt...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58053/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-58053 (CRITICAL, CVSS 9.9) in Gitea act_runner: Improper privilege management lets workflow users escape Docker containers to host as root. Restrict workflow rights & watch for patches. https://radar.offseq.com/threat/cve-2026-58053-improper-privilege-management-in-gi-9dae0ab1a83a7575 #OffSeq #CVE202658053 #Gitea #containers #security

🟠 CVE-2026-58056 - High (7.6)

RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer session does not clear those flags. A peer holding only a valid FileTransfer authorization can inject key...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58056/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58056 - High (7.6)

RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer session does not clear those flags. A peer holding only a valid FileTransfer authorization can inject key...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58056/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Researchers publicly disclosed a libssh2 vulnerability, CVE-2026-58050, with PoC code. A malicious SSH server can corrupt a client's heap. Patch now.

#libssh2 #CVE202658050 #SSH #HeapOverflow #PoC #Cybersecurity #Infosec

https://securityonline.info/libssh2-vulnerability-cve-2026-58050/?utm_source=mastodon&utm_medium=jetpack_social

Researchers publicly disclosed a libssh2 vulnerability, CVE-2026-58050, with PoC code. A malicious SSH server can corrupt a client's heap. Patch now.

#libssh2 #CVE202658050 #SSH #HeapOverflow #PoC #Cybersecurity #Infosec

https://securityonline.info/libssh2-vulnerability-cve-2026-58050/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-58049 - High (8.6)

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58049/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58049 - High (8.6)

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58049/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8095 - High (8.1)

The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and including 23.6. This is due to a case-sensitive bypass of the wpfm_dir_path parameter sanitization in the wpfm_file_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8095/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-8095: nmedia Frontend File Manager Plugin (WordPress) HIGH severity vuln (CVSS 8.1) allows Subscriber+ users to delete arbitrary files 🛡️. Patch ASAP and monitor for unauthorized deletions. https://radar.offseq.com/threat/cve-2026-8095-cwe-73-external-control-of-file-name-2b96707b1c289da8 #OffSeq #WordPress #Vuln #Infosec

🟠 CVE-2026-8095 - High (8.1)

The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and including 23.6. This is due to a case-sensitive bypass of the wpfm_dir_path parameter sanitization in the wpfm_file_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8095/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-8095: nmedia Frontend File Manager Plugin (WordPress) HIGH severity vuln (CVSS 8.1) allows Subscriber+ users to delete arbitrary files 🛡️. Patch ASAP and monitor for unauthorized deletions. https://radar.offseq.com/threat/cve-2026-8095-cwe-73-external-control-of-file-name-2b96707b1c289da8 #OffSeq #WordPress #Vuln #Infosec

🟠 CVE-2026-10643 - High (8.7)

Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary (msg_control) buffer using only the payload length (msg-msg_controllen < pktinfo_len) before writing a f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10643/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-10643: Zephyr (3.6.0 – 4.4.0) HIGH severity bug enables out-of-bounds kernel heap writes via recvmsg() with IP_PKTINFO. Local users can exploit for memory corruption or escalation. Patch pending — check advisories. https://radar.offseq.com/threat/cve-2026-10643-bounds-in-zephyrproject-zephyr-e3c8c9055812b105 #OffSeq #Zephyr #CVE202610643 #infosec

🟠 CVE-2026-10643 - High (8.7)

Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary (msg_control) buffer using only the payload length (msg-msg_controllen < pktinfo_len) before writing a f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10643/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-10643: Zephyr (3.6.0 – 4.4.0) HIGH severity bug enables out-of-bounds kernel heap writes via recvmsg() with IP_PKTINFO. Local users can exploit for memory corruption or escalation. Patch pending — check advisories. https://radar.offseq.com/threat/cve-2026-10643-bounds-in-zephyrproject-zephyr-e3c8c9055812b105 #OffSeq #Zephyr #CVE202610643 #infosec

CVE-2026-9677: HIGH severity stored XSS in Shariff for WordPress (<=1.0.11). Unsanitized shariff_infourl allows high privilege users to inject persistent scripts — risk increases in multisite setups. Restrict admin access. https://radar.offseq.com/threat/cve-2026-9677-cwe-79-cross-site-scripting-xss-in-s-101a28f25d1f6f06 #OffSeq #WordPress #XSS #Infosec

CVE-2026-9677: HIGH severity stored XSS in Shariff for WordPress (<=1.0.11). Unsanitized shariff_infourl allows high privilege users to inject persistent scripts — risk increases in multisite setups. Restrict admin access. https://radar.offseq.com/threat/cve-2026-9677-cwe-79-cross-site-scripting-xss-in-s-101a28f25d1f6f06 #OffSeq #WordPress #XSS #Infosec

🔴 CVE-2026-12415 - Critical (9.8)

The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the pravel_invoice_edit_account() AJAX action in versions up to, and including, 1.0.0. The handler is exposed via wp_ajax_nopriv_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12415/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-12415: pravel Invoice Generator ≤1.0.0 suffers CRITICAL privilege escalation — unauthenticated users can reset any account, incl. admins, via exposed AJAX handler. Disable plugin or restrict access ASAP. https://radar.offseq.com/threat/cve-2026-12415-cwe-269-improper-privilege-manageme-3c4b296b228a674f #OffSeq #WordPress #Vuln #Infosec

🔴 CVE-2026-12415 - Critical (9.8)

The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the pravel_invoice_edit_account() AJAX action in versions up to, and including, 1.0.0. The handler is exposed via wp_ajax_nopriv_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12415/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-12415: pravel Invoice Generator ≤1.0.0 suffers CRITICAL privilege escalation — unauthenticated users can reset any account, incl. admins, via exposed AJAX handler. Disable plugin or restrict access ASAP. https://radar.offseq.com/threat/cve-2026-12415-cwe-269-improper-privilege-manageme-3c4b296b228a674f #OffSeq #WordPress #Vuln #Infosec

CVE-2026-11807 (CRITICAL, CVSS 9.6) affects Red Hat Ansible Automation Platform 2.5: missing authorization in EDA websocket API lets any authenticated user access plaintext credentials. Patch immediately. https://radar.offseq.com/threat/cve-2026-11807-missing-authorization-in-red-hat-re-1c4967af375a0bf5 #OffSeq #RedHat #Ansible #Vuln

We treat containers as a boundary: the image runs, the host stays private. CVE-2026-57231 punched through that for Podman before 5.8.4, letting a crafted image read the host's own environment variables by shipping malformed Env entries, even via glob patterns. Environments are where registry tokens and CI secrets usually sit. Now that 5.8.4 is out, how fast can you roll it across your build fleet?
#containers #security

Podman 5.8.4 closes CVE-2026-57231. A malicious image could ship malformed Env entries that, when the container started, leaked the host's environment variables into it, including through glob operators that grab multiple variables without knowing their names. The release also updates golang.org/x/crypto to v0.53.0 for CVE-2026-39830 and CVE-2026-42508. When you pull a public image, do you think about what its metadata can read from your host?
#containers #security

🔴 CVE-2026-54352 - Critical (9.6)

Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/static.ts:24 accepts a builder-uploaded .zip, extracts it with extract-zip@2.0.1 into a temp directory, then for each entr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54352/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-54352 - Critical Path Traversal in Budibase. Symlink extraction allows reading arbitrary files. CVSS 9.6. Unpatched - limit builder access immediately. #CVE #Budibase #infosec

https://www.valtersit.com/cve/CVE-2026-54352/

🔴 CVE-2026-54352 - Critical (9.6)

Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/static.ts:24 accepts a builder-uploaded .zip, extracts it with extract-zip@2.0.1 into a temp directory, then for each entr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54352/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-50136 - Supply Chain Attack in Budibase. Unauthenticated endpoint exposes S3 presigned URLs. CVSS 7.4. No known patch. Mitigate immediately. #CVE #Budibase #infosec

https://www.valtersit.com/cve/CVE-2026-50136/

CVE-2026-56414: H.VIEW HV-500S6 IP Camera has a HIGH-severity vuln (CVSS 7.2) allowing authenticated users to upload arbitrary files via certificate upload, risking persistent compromise. Restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-56414-cwe-434-in-hview-hv-500s6-ip-camera-2fc4d58c6ce82381 #OffSeq #IoTSecurity #CVE #Vulnerability

CVE-2026-56414: H.VIEW HV-500S6 IP Camera has a HIGH-severity vuln (CVSS 7.2) allowing authenticated users to upload arbitrary files via certificate upload, risking persistent compromise. Restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-56414-cwe-434-in-hview-hv-500s6-ip-camera-2fc4d58c6ce82381 #OffSeq #IoTSecurity #CVE #Vulnerability

H.VIEW HV-500S6 IP Camera has a HIGH severity bug (CVE-2026-55975, CVSS 7.2): Authenticated users may inject commands using unsanitized XML in cert generation. Restrict access, monitor activity, and check for patches. https://radar.offseq.com/threat/cve-2026-55975-cwe-78-in-hview-hv-500s6-ip-camera-32fd47fcf53b8f7c #OffSeq #Vulnerability #IoTSecurity 🔒

H.VIEW HV-500S6 IP Camera has a HIGH severity bug (CVE-2026-55975, CVSS 7.2): Authenticated users may inject commands using unsanitized XML in cert generation. Restrict access, monitor activity, and check for patches. https://radar.offseq.com/threat/cve-2026-55975-cwe-78-in-hview-hv-500s6-ip-camera-32fd47fcf53b8f7c #OffSeq #Vulnerability #IoTSecurity 🔒

Daktronics VFC-DMP-5000 is affected by CVE-2026-33560 (HIGH, CVSS 7.1) — authenticated users can upload any file type, risking code execution. No patch yet; restrict permissions, monitor uploads. Details: https://radar.offseq.com/threat/cve-2026-33560-cwe-434-in-daktronics-vfc-dmp-5000-1fa9852c2479abf9 #OffSeq #Vulnerability #Daktronics #CVE202633560

Daktronics VFC-DMP-5000 is affected by CVE-2026-33560 (HIGH, CVSS 7.1) — authenticated users can upload any file type, risking code execution. No patch yet; restrict permissions, monitor uploads. Details: https://radar.offseq.com/threat/cve-2026-33560-cwe-434-in-daktronics-vfc-dmp-5000-1fa9852c2479abf9 #OffSeq #Vulnerability #Daktronics #CVE202633560

🟠 CVE-2026-31928 - High (8.1)

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-31928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-31928 (HIGH, CVSS 8.1) affects Daktronics VFC-DMP-5000: default admin creds + weak auth allow full device takeover via web interface. No patch yet — change creds & restrict access now. https://radar.offseq.com/threat/cve-2026-31928-cwe-798-in-daktronics-vfc-dmp-5000-1b5c53a213436e5b
#OffSeq #Cybersecurity #Vulnerability #CVE202631928

🟠 CVE-2026-31928 - High (8.1)

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-31928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-31928 (HIGH, CVSS 8.1) affects Daktronics VFC-DMP-5000: default admin creds + weak auth allow full device takeover via web interface. No patch yet — change creds & restrict access now. https://radar.offseq.com/threat/cve-2026-31928-cwe-798-in-daktronics-vfc-dmp-5000-1b5c53a213436e5b
#OffSeq #Cybersecurity #Vulnerability #CVE202631928

🔴 CVE-2026-28701 - Critical (9.8)

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28701/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Daktronics VFC-DMP-5000 firmware has a CRITICAL vuln (CVE-2026-28701, CVSS 9.8): remote attackers can traverse directories & enumerate file paths — no auth needed. No patch yet. Restrict network access & monitor closely. https://radar.offseq.com/threat/cve-2026-28701-cwe-22-in-daktronics-vfc-dmp-5000-fcca115843b7a100 #OffSeq #CVE #Infosec #IoT

🔴 CVE-2026-28701 - Critical (9.8)

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28701/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Daktronics VFC-DMP-5000 firmware has a CRITICAL vuln (CVE-2026-28701, CVSS 9.8): remote attackers can traverse directories & enumerate file paths — no auth needed. No patch yet. Restrict network access & monitor closely. https://radar.offseq.com/threat/cve-2026-28701-cwe-22-in-daktronics-vfc-dmp-5000-fcca115843b7a100 #OffSeq #CVE #Infosec #IoT

🟠 CVE-2026-55069 - High (8.7)

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the Postgre...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55069/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55069 - High (8.7)

Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability exists in the BasicAuth authentication component of the Kestra OSS workflow orchestration platform. An attacker who gains read access to the Postgre...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55069/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-53576 - Critical (10)

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@filter("/api/v1/**")) treats any request whose path ends in /configs as the public instance-config endpoint and...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53576/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-53576 - Critical (10)

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@filter("/api/v1/**")) treats any request whose path ends in /configs as the public instance-config endpoint and...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53576/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49984 - High (7.7)

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.23, the local internal-storage backend validates user-supplied paths for .. traversal before it converts Windows-style backslashes to forward slashes. An attack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49984/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49984 - High (7.7)

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.23, the local internal-storage backend validates user-supplied paths for .. traversal before it converts Windows-style backslashes to forward slashes. An attack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49984/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49869 - Critical (10)

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs") to whitelist the public configuration endpoint from Basic Auth. Because the c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49869/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49869 - Critical (10)

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs") to whitelist the public configuration endpoint from Basic Auth. Because the c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49869/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45807 - High (7.7)

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.43 and 1.3.19, several Kestra API endpoints accept a kestra:// URI from the client and pass it through StorageInterface.parentTraversalGuard before reading the underlying ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45807/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45807 - High (7.7)

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.43 and 1.3.19, several Kestra API endpoints accept a kestra:// URI from the client and pass it through StorageInterface.parentTraversalGuard before reading the underlying ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45807/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54353 - High (8.5)

Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS rebinding. The outbound fetch flow validates a hostname against the blacklist before th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54353/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54353 - High (8.5)

Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS rebinding. The outbound fetch flow validates a hostname against the blacklist before th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54353/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54351 - High (8.2)

Budibase is an open-source low-code platform. Prior to 3.39.9, the webhook trigger endpoint in Budibase is publicly accessible and passes the full HTTP request body into automation execution parameters. A mass assignment vulnerability in externalT...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54351/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54351 - High (8.2)

Budibase is an open-source low-code platform. Prior to 3.39.9, the webhook trigger endpoint in Budibase is publicly accessible and passes the full HTTP request body into automation execution parameters. A mass assignment vulnerability in externalT...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54351/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-54350 - Critical (10)

Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every document of the backing MongoDB, CouchDB, Elasticsearch, DynamoDB-PartiQL, or REST-with-JSON-body collection and,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54350/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-54350 - Critical (10)

Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every document of the backing MongoDB, CouchDB, Elasticsearch, DynamoDB-PartiQL, or REST-with-JSON-body collection and,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54350/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48778 - High (7.8)

Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the tag in config.xml is read by NppXml::value() (Parameters.cpp:6430) and stored in _nppGUI._commandLineInterpreter without any validation, whitelist, or digital signature...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48778/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-48778 - Supply chain attack in Notepad++ pre-8.9.6.1. Unsanitized config.xml input leads to arbitrary command execution via File > Open Containing Folder > cmd. CVSS 7.8. No patch available. Disable feature or isolate. #CVE #Notepad #infosec

https://www.valtersit.com/cve/CVE-2026-48778/

🟠 CVE-2026-48778 - High (7.8)

Notepad++ is a free and open-source source code editor. Prior to 8.9.6.1, the tag in config.xml is read by NppXml::value() (Parameters.cpp:6430) and stored in _nppGUI._commandLineInterpreter without any validation, whitelist, or digital signature...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48778/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

HIGH severity: CVE-2026-8797 impacts NEC ExpressUpdate Agent for Windows. Exposed IOCTL enables local privilege escalation to SYSTEM. No patch yet — restrict local access, monitor activity. Details: https://radar.offseq.com/threat/cve-2026-8797-cwe-782-exposed-ioctl-with-insuffici-3ae62ec0cc5d59d0 #OffSeq #Vulnerability #Windows #PrivilegeEscalation

CVE-2026-55189 - Unauthorized data access in Rustfs FTP frontend. IAM bypass allows read/stat operations on restricted objects. CVSS 7.7. Unpatched - disable FTP or restrict network access immediately. #CVE #rustfs #infosec

https://www.valtersit.com/cve/CVE-2026-55189/

CVE-2026-52784 - Critical CSRF in OpenProject. Attackers can escalate privileges via /users/:id. CVSS 8.8. Update to 17.3.3 or 17.4.1 immediately. #CVE #OpenProject #infosec

https://www.valtersit.com/cve/CVE-2026-52784/

Node.js WebCrypto in v22.22.3, v24.16.0, v26.3.0 is affected by CVE-2026-48933 (HIGH). Integer overflow in subtle.encrypt() can crash processes with inputs ≥ 2 GiB, causing DoS. Avoid large inputs while awaiting a fix. 🔐 https://radar.offseq.com/threat/cve-2026-48933-cwe-190-integer-overflow-in-nodejs--5c33db78fed81dbe #OffSeq #Nodejs #Vuln

CVE-2026-48618: Node.js HIGH severity vuln in TLS hostname handling (Unicode dot normalization flaw). Affects 22.22.3, 24.16.0, 26.3.0. No patch yet — restrict use & monitor vendor advisory. https://radar.offseq.com/threat/cve-2026-48618-cwe-176-improper-handling-of-unicod-6526a729870e7650 #OffSeq #NodeJS #Vulnerability #TLS #Security

CVE-2026-54317 - Authentication Bypass in Home Assistant. Konnected integration exposes an unauthenticated HTTP endpoint allowing unauthorized write requests. CVSS 7.6. Update to 2026.6.0 immediately. #CVE #HomeAssistant #infosec

https://www.valtersit.com/cve/CVE-2026-54317/

Setracker2 Android app (com.tgelec.setracker) hit by CRITICAL vuln (CVE-2026-9222, CVSS 9.2): uses password hash for authentication. Anyone with the hash can access backend services. Update guidance pending. https://radar.offseq.com/threat/cve-2026-9222-cwe-836-use-of-password-hash-instead-9894d1554efb5333 #OffSeq #AndroidSec #CVE20269222

CVE-2026-56876 - Path Traversal in Extract-zip. Symlink handling flaw allows arbitrary file read/write via malicious zip. CVSS 8.1. No patch available. Avoid untrusted archives. #CVE #infosec #cybersecurity

https://www.valtersit.com/cve/CVE-2026-56876/

CVE-2026-55454: CRITICAL (CVSS 9.9) vuln in appsmithorg Appsmith <2.1. Unauth Caddy admin API inside container can be exploited via SSRF by low-priv users to control reverse proxy. Upgrade to 2.1+ ASAP. https://radar.offseq.com/threat/cve-2026-55454-cwe-749-exposed-dangerous-method-or-64dab1aa9059ef90 #OffSeq #infosec #CVE202655454 #appsmith

Apache Kerby, the Java implementation of Kerberos, shipped a fix for CVE-2026-57915: an authentication bypass where an attacker could skip pre-authentication by sending PA-DATA with an unrecognized or unsupported type. The severity is rated important, and the fix is in Kerby 2.1.2. How many Kerberos stacks silently accept PA-DATA types they do not understand, and how many of those are known to operators?
#Kerberos #security

CVE-2026-56663 - SSRF bypass in AutoGPT allows authenticated users to access internal networks. CVSS 8.5. No patch available. Block special-use IPs and restrict access immediately. #CVE #AutoGPT #infosec

https://www.valtersit.com/cve/CVE-2026-56663/

Just saw there is an exploit example for that libssh2 vuln. Has anyone given it a try yet? I might be too lazy to get my laptop out.

https://github.com/0xBlackash/CVE-2026-55200

"No way to prevent this" say users of only language where this regularly happens https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-55200/

"No way to prevent this" say u...

"No way to prevent this" say users of only language where this regularly happens

https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-55200/?utm_campaign=mi_irl&utm_medium=social&utm_source=mastodon

ljharb shell-quote <=1.8.4 is impacted by CVE-2026-13311 (HIGH). Inefficient parsing can let attackers trigger DoS by blocking the Node.js event loop. Patch to 1.8.5+ now! 🛡️ https://radar.offseq.com/threat/cve-2026-13311-cwe-407-inefficient-algorithmic-com-ed9f913ba365deea #OffSeq #InfoSec #NodeJS #CVE202613311

Nova vulnerabilidade DirtyClone no Linux permite controlo total do sistema. A falha, conhecida como CVE-2026-43503, permite a um utilizador local com poucos privilégios corromper a memória suportada por ficheiros através de um pacote de rede clonado, obtendo acesso de administrador. 🛡️

🔗 https://tugatech.com.pt/t86364-nova-vulnerabilidade-dirtyclone-no-linux-permite-controlo-total-do-sistema

#controlo #linux #sistema #vulnerabilidade 

Nova vulnerabilidade DirtyClone no Linux permite controlo total do sistema. A falha, conhecida como CVE-2026-43503, permite a um utilizador local com poucos privilégios corromper a memória suportada por ficheiros através de um pacote de rede clonado, obtendo acesso de administrador. 🛡️

🔗 https://tugatech.com.pt/t86364-nova-vulnerabilidade-dirtyclone-no-linux-permite-controlo-total-do-sistema

#controlo #linux #sistema #vulnerabilidade 

Two new Linux LPEs hit page cache from opposite ends of the kernel

https://thecybersecguru.com/news/linux-lpe-pedit-cow-dirtyclone-cve-2026-46331-cve-2026-43503/

GeoVision GV-LPC2011/2211 devices (≤1.12) face CRITICAL CVE-2026-57880: stack-based buffer overflow in RTSP auth enables remote, unauthenticated DoS or code execution. Restrict RTSP access, monitor traffic. Patch status unknown. https://radar.offseq.com/threat/cve-2026-57880-cwe-121-stack-based-buffer-overflow-1d88eee9b47ed7bb #OffSeq #Vuln #IoTSecurity #CVE

GeoVision GV-LPC2011/2211 (<=1.12) hit by CVE-2026-57881: CRITICAL stack-based buffer overflow in vlsvr enables unauthenticated RCE or DoS. No patch yet — restrict access & monitor activity. https://radar.offseq.com/threat/cve-2026-57881-cwe-121-stack-based-buffer-overflow-0de9014b0e3f1945 #OffSeq #Vuln #IoTSecurity #CVE202657881

GeoVision GV-LPC2011/2211 (≤v1.12) affected by CVE-2026-57879: CRITICAL stack-based buffer overflow in ssvr (CVSS 9.8). Remote, unauthenticated code execution possible via crafted RTSP. Restrict RTSP & monitor. https://radar.offseq.com/threat/cve-2026-57879-cwe-121-stack-based-buffer-overflow-92b9e3b3fdb94e2a #OffSeq #CVE202657879 #infosec #IoT

CVE-2026-8380: HIGH severity in Frontend File Manager Plugin (≤23.6) for WordPress. Author+ users can delete any post/page; guest deletion possible if enabled. Disable 'Allow guest uploads' until patched. https://radar.offseq.com/threat/cve-2026-8380-cwe-73-external-control-of-file-name-aa5b0eb592b68479 #OffSeq #WordPress #Vuln #BlueTeam

CVE-2026-54825 - SQL Injection in wpDataTables <=7.4. Unauthenticated exploit. CVSS 9.3. No patch yet. Disable plugin or restrict access immediately. #CVE #WordPress #infosec

https://www.valtersit.com/cve/CVE-2026-54825/

🛡️ The patch window has collapsed. This week's Cyber Mind Brief breaks down CISA's emergency Cisco SSRF (CVE-2026-20230) mandate, the 2026 Verizon DBIR shift to machine-speed exploits, and tactical moves to harden your Zero Trust perimeter. Read the full operational intel: https://thecybermind.co/5ee6

CVE-2026-20230 (Cisco UCM) and CVE-2026-12569 (PTC Windchill/FlexPLM) are actively exploited. The Cisco flaw is unauthenticated SSRF enabling arbitrary file writes; PTC involves unsafe deserialization leading to RCE....

https://captechgroup.com/threat-intelligence-center/cisco-flaw-cve-2026-12569-exploited-in-active-atta-32c052?utm_source=mastodon&utm_medium=social&utm_campaign=threat_intel&utm_content=cisco-flaw-cve-2026-12569-exploited-in-active-attacks-cisa-sets-patch-deadline

CISA confirms active zero-day exploitation of Cisco Unified CM (CVE-2026-20230), introducing a critical SSRF vector that allows threat actors to bypass internal security boundaries. Access our complete executive risk mitigation framework and boardroom governance strategy: https://thecybermind.co/ptus

🛡️ The patch window has collapsed. This week's Cyber Mind Brief breaks down CISA's emergency Cisco SSRF (CVE-2026-20230) mandate, the 2026 Verizon DBIR shift to machine-speed exploits, and tactical moves to harden your Zero Trust perimeter. Read the full operational intel: https://thecybermind.co/5ee6

CISA confirms active zero-day exploitation of Cisco Unified CM (CVE-2026-20230), introducing a critical SSRF vector that allows threat actors to bypass internal security boundaries. Access our complete executive risk mitigation framework and boardroom governance strategy: https://thecybermind.co/ptus

🚨 [CISA-2026:0625] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0625)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-12569 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12569)
- Name: PTC Windchill and FlexPLM Improper Input Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: PTC
- Product: Windchill and FlexPLM
- Notes: https://www.ptc.com/en/support/article/CS473270 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-12569

⚠️ CVE-2026-20230 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20230)
- Name: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Unified Communications Manager
- Notes: https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20230

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260625 #cisa20260625 #cve_2026_12569 #cve_2026_20230 #cve202612569 #cve202620230

CVE ID: CVE-2026-20230
Vendor: Cisco
Product: Unified Communications Manager
Date Added: 2026-06-25
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20230

Cisco unter Beschuss

Es ist alles nicht so schlimm wie es aussieht, es ist alles viel viel schlimmer. Nicht nur werden in schöner (?) Regelmäßigkeit gefährliche Sicherheitslücken in Cisco-Produkten gefunden, sondern sie werden auch sofort für Angriffe ausgenutzt - manche schon vor der Veröffentlichung (Zero-Day). Eine kleine Historie füge ich unten an. Beginnen wir mit CVE-2026-20230 (8,6 von 10), über die ich noch nicht explizit berichtet hatte. Am Anfang Juni hatte Cisco Flicken gegen diese Sicherheitslücke veröffentlicht. Damals vermeldete die Firma, dass ein PoC Exploit vorläge. Anscheinend haben unbekannte Hacker den PoC gleich in einen

https://www.pc-fluesterer.info/wordpress/2026/06/25/cisco-unter-beschuss/

#0day #backdoor #cybercrime #exploits #hersteller #politik #privacy #sicherheit #spionage #UnplugTrump #wissen #zeroday

Critical zero-day alert: Cisco CUCM WebDialer SSRF (CVE-2026-20230) allows unauthenticated remote root file-writes. We map out the Tomcat log baselines, JSP shell indicators, and edge isolation steps in our latest TSUITE Runbook. Protect your voice network: mike@thecybermind.co. #Infosec

Active Exploitation of Cisco Unified Communications Manager Vulnerabilities Grants Root Access

Cisco Unified Communications Manager is facing active exploitation of two vulnerabilities, CVE-2026-20230 and CVE-2026-20045, which allow unauthenticated attackers to gain root access and deploy webshells.

**Apply the latest software updates, including Unified CM 14SU6 and 15SU5, immediately. If patching is not possible, disable the Cisco WebDialer Web Service to sever the attack path, and aggressively audit your /platform-services/ directory for unusual .jsp files or unauthorized webshells.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/active-exploitation-of-cisco-unified-communications-manager-vulnerabilities-grants-root-access-w-x-c-7-n/gD2P6Ple2L

#Cisco #UnifiedCM flaw CVE-2026-20230 now exploited in attacks

https://www.bleepingcomputer.com/news/security/cisco-unified-cm-sme-flaw-cve-2026-20230-now-exploited-in-attacks/

#cybersecurity

Falha crítica em servidores da Cisco está a ser ativamente explorada. A vulnerabilidade CVE-2026-20230 afeta o Unified Communications Manager e a Session Management Edition, exigindo ação imediata dos administradores de sistemas em Portugal. ⚠️

🔗 https://tugatech.com.pt/t86118-falha-critica-em-servidores-da-cisco-ja-esta-a-ser-ativamente-explorada

#falha 

Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks

A high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploited in attacks.

🔗️ [Bleepingcomputer] https://link.is.it/Y4BXYl

CVE-2026-20230 (Cisco UCM) and CVE-2026-12569 (PTC Windchill/FlexPLM) are actively exploited. The Cisco flaw is unauthenticated SSRF enabling arbitrary file writes; PTC involves unsafe deserialization leading to RCE....

https://captechgroup.com/threat-intelligence-center/cisco-flaw-cve-2026-12569-exploited-in-active-atta-32c052?utm_source=mastodon&utm_medium=social&utm_campaign=threat_intel&utm_content=cisco-flaw-cve-2026-12569-exploited-in-active-attacks-cisa-sets-patch-deadline

PTC Windchill and FlexPLM Under Active Exploitation via Critical RCE Flaw

PTC issued emergency patches for a critical RCE vulnerability in Windchill and FlexPLM that attackers are actively exploiting to deploy web shells and steal intellectual property. The flaw, tracked as CVE-2026-12569, allows unauthenticated remote code execution and has prompted emergency warnings from international security agencies.

**Consider this as urgent advisory. If possible, make sure all Windchill and FlexPLM servers are isolated from the internet and reachable only from trusted internal networks. Immediately apply PTC's latest patches for your affected version, block IP 5.180.41.35 at your perimeter, and check for compromise by scanning for suspicious 16-character hex-named .jsp files in the codebase/login directory and a flst.txt file in /tmp.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/ptc-windchill-and-flexplm-under-active-exploitation-via-critical-rce-flaw-4-m-b-f-6/gD2P6Ple2L

PTC Windchill and FlexPLM Under Active Exploitation via Critical RCE Flaw

PTC issued emergency patches for a critical RCE vulnerability in Windchill and FlexPLM that attackers are actively exploiting to deploy web shells and steal intellectual property. The flaw, tracked as CVE-2026-12569, allows unauthenticated remote code execution and has prompted emergency warnings from international security agencies.

**Consider this as urgent advisory. If possible, make sure all Windchill and FlexPLM servers are isolated from the internet and reachable only from trusted internal networks. Immediately apply PTC's latest patches for your affected version, block IP 5.180.41.35 at your perimeter, and check for compromise by scanning for suspicious 16-character hex-named .jsp files in the codebase/login directory and a flst.txt file in /tmp.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/ptc-windchill-and-flexplm-under-active-exploitation-via-critical-rce-flaw-4-m-b-f-6/gD2P6Ple2L

CISA adds CVE-2026-12569 to the KEV catalog as adversaries actively exploit PTC Windchill & FlexPLM platforms. This is an immediate threat to supply chain integrity and intellectual property. Access our complete executive risk mitigation framework for corporate leadership: https://thecybermind.co/lacm

CISA adds CVE-2026-12569 to the KEV catalog as adversaries actively exploit PTC Windchill & FlexPLM input validation vulnerabilities. Lock down your supply chain assets. Full forensic indicators, lateral movement tracking, and active endpoint hardening protocols are live: https://thecybermind.co/y7tn

🚨 [CISA-2026:0625] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0625)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-12569 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12569)
- Name: PTC Windchill and FlexPLM Improper Input Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: PTC
- Product: Windchill and FlexPLM
- Notes: https://www.ptc.com/en/support/article/CS473270 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-12569

⚠️ CVE-2026-20230 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20230)
- Name: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Unified Communications Manager
- Notes: https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20230

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260625 #cisa20260625 #cve_2026_12569 #cve_2026_20230 #cve202612569 #cve202620230

CVE ID: CVE-2026-12569
Vendor: PTC
Product: Windchill and FlexPLM
Date Added: 2026-06-25
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-12569

CVE-2026-54158: CRITICAL XSS in SiYuan (<3.7.0) allows persistent JS injection; on Electron clients, can escalate to RCE. Upgrade to 3.7.0+ ASAP. No active exploits reported. https://radar.offseq.com/threat/cve-2026-54158-cwe-79-improper-neutralization-of-i-cee0850f8d1e1264 #OffSeq #XSS #CVE202654158 #SiYuan

CVE-2026-23879 - Critical RCE in Py7zr. Arbitrary file write via symbolic link chains allows escape from destination directory. CVSS 8.0. No patch available. Update or avoid extraction of untrusted 7z archives. #CVE #infosec #Python

https://www.valtersit.com/cve/CVE-2026-23879/

immich-app suffers CRITICAL reflected XSS (CVE-2026-53662) in /auth/login (commits 4ffa26c9 – 4eb1003). Exploitation = persistent account takeover via API key minting. Update to commit 4eb1003 or later. https://radar.offseq.com/threat/cve-2026-53662-cwe-79-improper-neutralization-of-i-088d09407e2bf58b #OffSeq #CVE202653662 #XSS #infosec

CVE-2026-10735 (CRITICAL): smart-post-show-pro 4.0.1 for WordPress shipped with malicious code via compromised update server. Unauth attackers can exfiltrate creds & control sites. Remove/disable affected plugin & monitor for IOCs. https://radar.offseq.com/threat/cve-2026-10735-cwe-912-hidden-functionality-in-sma-322a51684018935f #OffSeq #WordPress #SupplyChain

CVE-2026-33612 (HIGH, CVSS 7.5) impacts PowerDNS Recursor ≤5.4.3. Crafted zones from malicious servers can trigger cache poisoning via ZoneToCache. Review deployments, monitor for patches: https://radar.offseq.com/threat/cve-2026-33612-acceptance-of-extraneous-untrusted--38801b1c47b57c99 #OffSeq #PowerDNS #vuln #dns

...
* glx: fix reversed length check in ChangeDrawableAttributes (CVE-2026-50262) (Closes: #1138680)
* saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow (CVE-2026-50263) (Closes: #1138680)
* dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN (CVE-2026-50256) (Closes: #1138680)
* dri2: Use booleans for (fake) front buffer tracking in do_get_buffers (CVE-2026-50264) (Closes: #1138680)
...

CVE-2026-55570: CRITICAL XSS in SiYuan (<3.7.0) enables arbitrary HTML injection. On the desktop client, attackers can escalate to OS command execution due to nodeIntegration. Upgrade to 3.7.0+ now! https://radar.offseq.com/threat/cve-2026-55570-cwe-79-improper-neutralization-of-i-34ddb800ffc94efb #OffSeq #XSS #Vuln #SiYuan

CVE-2026-50551: SiYuan (<3.7.0) suffers CRITICAL stored XSS in Attribute View, enabling RCE via Electron client. Upgrade to v3.7.0+ to mitigate. No workaround available. Details: https://radar.offseq.com/threat/cve-2026-50551-cwe-79-improper-neutralization-of-i-e91ef5b4d83fcdb8 #OffSeq #XSS #SiYuan #Cybersecurity

...
* dri2: Deduplicate attachments in do_get_buffer (CVE-2026-50264) (Closes: #1138680)

...
* glx: fix reversed length check in ChangeDrawableAttributes (CVE-2026-50262) (Closes: #1138680)
* saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow (CVE-2026-50263) (Closes: #1138680)
* dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN (CVE-2026-50256) (Closes: #1138680)
* dri2: Use booleans for (fake) front buffer tracking in do_get_buffers (CVE-2026-50264) (Closes: #1138680)
...

...
* glx: fix reversed length check in ChangeDrawableAttributes (CVE-2026-50262) (Closes: #1138680)
* saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow (CVE-2026-50263) (Closes: #1138680)
* dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN (CVE-2026-50256) (Closes: #1138680)
* dri2: Use booleans for (fake) front buffer tracking in do_get_buffers (CVE-2026-50264) (Closes: #1138680)
...

...
* glx: fix reversed length check in ChangeDrawableAttributes (CVE-2026-50262) (Closes: #1138680)
* saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow (CVE-2026-50263) (Closes: #1138680)
* dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN (CVE-2026-50256) (Closes: #1138680)
* dri2: Use booleans for (fake) front buffer tracking in do_get_buffers (CVE-2026-50264) (Closes: #1138680)
...

Ten CVEs fixed in patched xorg-xserver now available for Debian stable (trixie):

* sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260) (Closes: #1138680)
* sync: restart trigger list iteration in SyncChangeCounter after TriggerFired (CVE-2026-50261) (Closes: #1138680)
* xkb: reject key types with num_levels exceeding XkbMaxShiftLevel (CVE-2026-50258) (Closes: #1138680)
* xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259) (Closes: #1138680)
...

Ten CVEs fixed in patched xorg-xserver now available for Debian stable (trixie):

* sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260) (Closes: #1138680)
* sync: restart trigger list iteration in SyncChangeCounter after TriggerFired (CVE-2026-50261) (Closes: #1138680)
* xkb: reject key types with num_levels exceeding XkbMaxShiftLevel (CVE-2026-50258) (Closes: #1138680)
* xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259) (Closes: #1138680)
...

Ten CVEs fixed in patched xorg-xserver now available for Debian stable (trixie):

* sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260) (Closes: #1138680)
* sync: restart trigger list iteration in SyncChangeCounter after TriggerFired (CVE-2026-50261) (Closes: #1138680)
* xkb: reject key types with num_levels exceeding XkbMaxShiftLevel (CVE-2026-50258) (Closes: #1138680)
* xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259) (Closes: #1138680)
...

Ten CVEs fixed in patched xorg-xserver now available for Debian stable (trixie):

* sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260) (Closes: #1138680)
* sync: restart trigger list iteration in SyncChangeCounter after TriggerFired (CVE-2026-50261) (Closes: #1138680)
* xkb: reject key types with num_levels exceeding XkbMaxShiftLevel (CVE-2026-50258) (Closes: #1138680)
* xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259) (Closes: #1138680)
...

Ten CVEs fixed in patched xorg-xserver now available for Debian stable (trixie):

* sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260) (Closes: #1138680)
* sync: restart trigger list iteration in SyncChangeCounter after TriggerFired (CVE-2026-50261) (Closes: #1138680)
* xkb: reject key types with num_levels exceeding XkbMaxShiftLevel (CVE-2026-50258) (Closes: #1138680)
* xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259) (Closes: #1138680)
...

CRITICAL (CVSS 9.8): CVE-2026-12416 impacts pravel Invoice Generator ≤1.0.0. Weak password reset lets unauthenticated attackers reset any user’s password, including admins. Restrict access or disable plugin. https://radar.offseq.com/threat/cve-2026-12416-cwe-640-weak-password-recovery-mech-e09858a3967d35a9 #OffSeq #WordPress #CVE #infosec

CVE-2026-12850: CRITICAL OS command injection in GeoVision GV-I/O Box 4E v2.09 via libNetSetObj.so allows remote code execution. No patch — restrict access to DVRSearch & Network.cgi. Details: https://radar.offseq.com/threat/cve-2026-12850-cwe-78-improper-neutralization-of-s-4e66118ac7829bb3 #OffSeq #ICS #infosec #vulnerability

CVE-2026-12851: CRITICAL OS command injection in GeoVision GV-I/O Box 4E v2.09 via DVRSearch/Network.cgi allows remote code execution. Patch status pending — restrict access & monitor endpoints. https://radar.offseq.com/threat/cve-2026-12851-cwe-78-improper-neutralization-of-s-3964552d83f5f479 #OffSeq #Vulnerability #IoTSecurity #CVE #Security

HIGH severity: CVE-2026-9702 in InPost PL WordPress plugin (<1.9.1) lets unauthenticated attackers redirect WooCommerce order shipping. No patch yet — restrict access, monitor for changes. Details: https://radar.offseq.com/threat/cve-2026-9702-cwe-284-improper-access-control-in-i-050e346ad7520813 #OffSeq #WordPress #Vulnerability #Ecommerce

CVE-2026-46752: CRITICAL heap-based buffer overflow in Apache Kvrocks (2.0.4 – 2.15.0) via Redis Lua cjson. RCE & DoS possible. Upgrade to 2.16.0 ASAP. https://radar.offseq.com/threat/cve-2026-46752-cwe-122-heap-based-buffer-overflow--87a83247c4a43c17 #OffSeq #Kvrocks #CVE202646752 #infosec

CVE-2026-41566 (CRITICAL, CVSS 9.4) in Apache Kvrocks 2.8.0 allows privilege escalation via improper permission handling. Upgrade to 2.16.0 is required — no other mitigation. Details: https://radar.offseq.com/threat/cve-2026-41566-cwe-280-improper-handling-of-insuff-5835abc74e4991d0 #OffSeq #CVE202641566 #Kvrocks #Security

pravel SignUp & SignIn (<=1.0.0) has a CRITICAL flaw (CVE-2026-12417): unauthenticated attackers can reset any WordPress user password, including admins. Remove or disable plugin until patch. https://radar.offseq.com/threat/cve-2026-12417-cwe-640-weak-password-recovery-mech-5dce018195eb2855 #OffSeq #WordPress #Vuln #CVE202612417

Webmin 2.641 Patches Root Takeover and 2FA Bypass Vulnerabilities

Webmin version 2.641 addresses multiple critical vulnerabilities, including a root-level stored XSS (CVE-2026-22678), a path traversal file overwrite (CVE-2026-49103), and a 2FA bypass (CVE-2026-56022). These flaws allow low-privileged users to compromise root accounts and bypass multi-factor authentication in multi-tenant hosting environments.

**Update your Webmin instances to version 2.641 immediately to prevent low-privileged users from taking over your root account. If you cannot patch today, restrict access to the mail and notification modules to only your most trusted administrators.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/webmin-2-641-patches-root-takeover-and-2fa-bypass-vulnerabilities-m-y-r-7-t/gD2P6Ple2L

CISA Issues Alert on Actively Exploited Vulnerability in Ubiquiti UniFi OS #internet #cybersecurity

CISA warns of actively exploited vulnerabilities in Ubiquiti UniFi OS. The alert highlights CVE-2026-34908 (critical access control flaw) and related CVEs 34909 and 34910, with remediation guidance and BOD 26-04 deadlines. Read the full analysis and required mitigations here: https://ift.tt/6eMqVP4

Source: https://ift.tt/6eMqVP4 | Image: https://ift.tt/0lLnI6S

CRITICAL UniFi OS vulnerabilities (CVE-2026-34908/09/10) allow remote, unauthenticated attackers to bypass auth and execute commands (pre-5.0.8). Exploited in the wild. Patch ASAP: https://radar.offseq.com/threat/critical-ubiquiti-vulnerabilities-in-attackers-cro-da638630474e46d7 #OffSeq #infosec #Ubiquiti #vulnerability

CISA Repoers Active Exploitation of Three Critical Ubiquiti UniFi OS Vulnerabilities

CISA added three critical Ubiquiti UniFi OS vulnerabilities (CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910) to its Known Exploited Vulnerabilities Catalog due to active exploitation. These flaws allow unauthenticated attackers to gain full control over network gateways and consoles through command injection and improper access controls.

**Now this advisory is urgent, since the flaws are actively exploited. Make sure all your UniFi devices (UDM, UNVR, UCG gateways, Cloud Keys, etc.) are isolated from the internet and accessible only from trusted networks. Immediately update UniFi OS to the latest patched version for your model (5.1.12+ for most hardware, 5.0.8 for UniFi OS Server, 4.0.14 for Express).**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-adds-three-critical-ubiquiti-unifi-os-vulnerabilities-to-kev-catalog-w-v-n-9-t/gD2P6Ple2L

CISA has updated the KEV catalogue:

- CVE-2026-34908: Ubiquiti UniFi OS Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34908

- CVE-2026-34909: Ubiquiti UniFi OS Path Traversal Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34909

- CVE-2026-34910: Ubiquiti UniFi OS Improper Input Validation Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34910

- CVE-2025-67038:
Lantronix EDS5000 Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-67038 #CISA #infosec #vulnerability

🚨 [CISA-2026:0623] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0623)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-67038 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-67038)
- Name: Lantronix EDS5000 Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Lantronix
- Product: EDS5000
- Notes: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-67038

⚠️ CVE-2026-34908 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34908)
- Name: Ubiquiti UniFi OS Improper Access Control Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34908

⚠️ CVE-2026-34909 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34909)
- Name: Ubiquiti UniFi OS Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34909

⚠️ CVE-2026-34910 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34910)
- Name: Ubiquiti UniFi OS Improper Input Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34910

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260623 #cisa20260623 #cve_2025_67038 #cve_2026_34908 #cve_2026_34909 #cve_2026_34910 #cve202567038 #cve202634908 #cve202634909 #cve202634910

CVE ID: CVE-2026-34908
Vendor: Ubiquiti
Product: UniFi OS
Date Added: 2026-06-23
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34908

CISA Repoers Active Exploitation of Three Critical Ubiquiti UniFi OS Vulnerabilities

CISA added three critical Ubiquiti UniFi OS vulnerabilities (CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910) to its Known Exploited Vulnerabilities Catalog due to active exploitation. These flaws allow unauthenticated attackers to gain full control over network gateways and consoles through command injection and improper access controls.

**Now this advisory is urgent, since the flaws are actively exploited. Make sure all your UniFi devices (UDM, UNVR, UCG gateways, Cloud Keys, etc.) are isolated from the internet and accessible only from trusted networks. Immediately update UniFi OS to the latest patched version for your model (5.1.12+ for most hardware, 5.0.8 for UniFi OS Server, 4.0.14 for Express).**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-adds-three-critical-ubiquiti-unifi-os-vulnerabilities-to-kev-catalog-w-v-n-9-t/gD2P6Ple2L

CISA has updated the KEV catalogue:

- CVE-2026-34908: Ubiquiti UniFi OS Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34908

- CVE-2026-34909: Ubiquiti UniFi OS Path Traversal Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34909

- CVE-2026-34910: Ubiquiti UniFi OS Improper Input Validation Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34910

- CVE-2025-67038:
Lantronix EDS5000 Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-67038 #CISA #infosec #vulnerability

🚨 [CISA-2026:0623] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0623)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-67038 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-67038)
- Name: Lantronix EDS5000 Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Lantronix
- Product: EDS5000
- Notes: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-67038

⚠️ CVE-2026-34908 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34908)
- Name: Ubiquiti UniFi OS Improper Access Control Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34908

⚠️ CVE-2026-34909 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34909)
- Name: Ubiquiti UniFi OS Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34909

⚠️ CVE-2026-34910 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34910)
- Name: Ubiquiti UniFi OS Improper Input Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34910

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260623 #cisa20260623 #cve_2025_67038 #cve_2026_34908 #cve_2026_34909 #cve_2026_34910 #cve202567038 #cve202634908 #cve202634909 #cve202634910

CVE ID: CVE-2026-34909
Vendor: Ubiquiti
Product: UniFi OS
Date Added: 2026-06-23
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34909

CISA Repoers Active Exploitation of Three Critical Ubiquiti UniFi OS Vulnerabilities

CISA added three critical Ubiquiti UniFi OS vulnerabilities (CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910) to its Known Exploited Vulnerabilities Catalog due to active exploitation. These flaws allow unauthenticated attackers to gain full control over network gateways and consoles through command injection and improper access controls.

**Now this advisory is urgent, since the flaws are actively exploited. Make sure all your UniFi devices (UDM, UNVR, UCG gateways, Cloud Keys, etc.) are isolated from the internet and accessible only from trusted networks. Immediately update UniFi OS to the latest patched version for your model (5.1.12+ for most hardware, 5.0.8 for UniFi OS Server, 4.0.14 for Express).**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-adds-three-critical-ubiquiti-unifi-os-vulnerabilities-to-kev-catalog-w-v-n-9-t/gD2P6Ple2L

CISA has updated the KEV catalogue:

- CVE-2026-34908: Ubiquiti UniFi OS Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34908

- CVE-2026-34909: Ubiquiti UniFi OS Path Traversal Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34909

- CVE-2026-34910: Ubiquiti UniFi OS Improper Input Validation Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34910

- CVE-2025-67038:
Lantronix EDS5000 Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-67038 #CISA #infosec #vulnerability

🚨 [CISA-2026:0623] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0623)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-67038 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-67038)
- Name: Lantronix EDS5000 Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Lantronix
- Product: EDS5000
- Notes: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-67038

⚠️ CVE-2026-34908 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34908)
- Name: Ubiquiti UniFi OS Improper Access Control Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34908

⚠️ CVE-2026-34909 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34909)
- Name: Ubiquiti UniFi OS Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34909

⚠️ CVE-2026-34910 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34910)
- Name: Ubiquiti UniFi OS Improper Input Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34910

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260623 #cisa20260623 #cve_2025_67038 #cve_2026_34908 #cve_2026_34909 #cve_2026_34910 #cve202567038 #cve202634908 #cve202634909 #cve202634910

CVE ID: CVE-2026-34910
Vendor: Ubiquiti
Product: UniFi OS
Date Added: 2026-06-23
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34910

If you have any LuCI-based #Lantronix Serial-to-Ethernet device exposed on the internet, then you may want to kickoff your incident response plan.

My suspicion is that the unauthenticated Remote Code Execution vulnerability CVE-2025-67038 affects a lot more device types than just the EDS5000 that is mentioned in the advisory.

The vulnerable code path is in a modified OpenWRT LuCI RPC module that puts a user-controlled variable inside a Lua `os.execute` call. This vulnerable code is contained in a lot of device firmware versions released in or after 2023. Unfortunately, I do not have the devices to actually test exploitability. My analysis is based purely on patch diffing and grepping publicly released firmware versions. The incomplete list of device types that contain the vulnerable code: EDS5000, G520, G526, G526RP, G527, G528, X300, X300-WiFi, X303, X304. I also suspect E210 is on the incomplete list of vulnerable devices.

Back in April this vulnerability was published by Forescout as part of their BRIDGE:BREAK report on Serial-to-Ethernet adapters. Two days ago this vulnerability was added to the CISA KEV Catalog. Yesterday Forescout published a blogpost they first observed exploitation attempts on the 5th of April 2026. Attacks are attributed to a new cluster Chaya_006. It is unclear if Lantronix took the effort to check if any of their other devices are vulnerable given that they contain the same RPC module.

You want to look for POST requests to `/cgi-bin/luci/rpc/auth` in your logs. Forescout has a number 3 octet IP addresses as Indicator of Compromise here: https://www.forescout.com/blog/analyzing-active-exploitation-of-lantronix-and-openwrt-luci/ . The running theory is that these are supposed to be /24 CIDR ranges.

@Secure_ICS_OT
@cisacyber

#vulnerability #cybersecurity #ics #CVE202567038

CISA Reports Active Exploitation of Lantronix Flaws

CISA flagged an actively exploited critical flaw (CVE-2025-67038) in Lantronix EDS5000 v2.1.0.0R3 devices: an unauthenticated OS command injection in the HTTP RPC module that lets attackers gain root access and fully compromise the equipment.

**Make sure all Lantronix EDS5000 devices are isolated from the internet and accessible only from trusted networks, since this flaw lets attackers gain full root control without any login. Check your inventory for version 2.1.0.0R3, apply the latest firmware update from Lantronix, and because attackers can survive patches by creating rogue admin accounts, audit for unknown accounts and rotate any stored secrets after patching.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-adds-critical-ubiquiti-and-lantronix-flaws-to-kev-catalog-following-active-exploitation-o-d-j-f-r/gD2P6Ple2L

For the Boardroom: A critical unauthenticated code injection flaw (CVE-2025-67038) in Lantronix EDS5000 servers is under active exploitation. Read the full C-SUITE threat advisory on mitigating this operational risk. Ping the word 'ok' mike@thecybermind.co to upgrade your intel. https://thecybermind.co/jpul
#CyberSec #RiskManagement

CISA has updated the KEV catalogue:

- CVE-2026-34908: Ubiquiti UniFi OS Improper Access Control Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34908

- CVE-2026-34909: Ubiquiti UniFi OS Path Traversal Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34909

- CVE-2026-34910: Ubiquiti UniFi OS Improper Input Validation Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-34910

- CVE-2025-67038:
Lantronix EDS5000 Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-67038 #CISA #infosec #vulnerability

🚨 [CISA-2026:0623] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0623)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-67038 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-67038)
- Name: Lantronix EDS5000 Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Lantronix
- Product: EDS5000
- Notes: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-67038

⚠️ CVE-2026-34908 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34908)
- Name: Ubiquiti UniFi OS Improper Access Control Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34908

⚠️ CVE-2026-34909 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34909)
- Name: Ubiquiti UniFi OS Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34909

⚠️ CVE-2026-34910 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34910)
- Name: Ubiquiti UniFi OS Improper Input Validation Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ubiquiti
- Product: UniFi OS
- Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34910

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260623 #cisa20260623 #cve_2025_67038 #cve_2026_34908 #cve_2026_34909 #cve_2026_34910 #cve202567038 #cve202634908 #cve202634909 #cve202634910

CVE ID: CVE-2025-67038
Vendor: Lantronix
Product: EDS5000
Date Added: 2026-06-23
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-67038

CVE-2025-52465 geoserver arbitrary file write vulnerability https://www.partywave.site/show/research/cve-2025-52465-geolocate-geoserver

CVE-2026-53753: CRITICAL code injection in unclecode crawl4ai (<0.8.7). Unauthenticated RCE via /crawl POST request due to insufficient AST validation. Patch to 0.8.7 ASAP. https://radar.offseq.com/threat/cve-2026-53753-cwe-94-improper-control-of-generati-9d9fc678b9a0404e #OffSeq #CVE202653753 #infosec #vuln

🚨 AWS Language Server Flaw!

CVE-2026-12957 allows zero-click command injection and cloud credential theft simply by opening a poisoned repository inside your IDE (affecting Amazon Q Developer).

https://denizhalil.com/2026/06/27/cve-2026-12957-aws-language-server-command-injection/

#CVE202612957 #aws #Cybersecurity #infosec #CloudSecurity

CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins

Bulletin ID: 2026-047-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/23/2026 09:30 AM PDT
Description:
Language Servers for AWS provide the underlying language-server runtime that powers Amazon ...

https://aws.amazon.com/security/security-bulletins/rss/2026-047-aws/

#aws #security

CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins

Bulletin ID: 2026-047-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/23/2026 09:30 AM PDT
Description:
Language Servers for AWS provide the underlying language-server runtime that powers Amazon ...

https://aws.amazon.com/security/security-bulletins/rss/2026-047-aws/

#aws #security

A new CPython tarfile vulnerability (CVE-2026-11940) allows directory escape attacks. Learn how this extraction filter bypass exposes systems.

https://securityonline.info/cpython-tarfile-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

A new CPython tarfile vulnerability (CVE-2026-11940) allows directory escape attacks. Learn how this extraction filter bypass exposes systems.

https://securityonline.info/cpython-tarfile-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

New.

"Today VulnCheck is disclosing CVE-2026-28496, an unauthenticated remote code execution chain in FOSSBilling, the open-source billing and client-management platform."

VulnCheck: CVE-2026-28496 - FOSSBilling Auth Bypass and Twig SSTI to Unauthenticated RCE https://www.vulncheck.com/blog/fossbilling-auth-bypass-ssti-rce @vulncheck #infosec #opensource #vulnerability

I think it’s hilarious that I now have my first CVE because I got annoyed with an unresponsive vendor and just posted the zero day exploit I was trying to report to them on my GitHub 😆

https://nvd.nist.gov/vuln/detail/CVE-2026-49494

Pixelsmash: Eine 50‑KB‑Videodatei reicht, um per FFmpeg-Decoder (MagicYUV/libavcodec) zahlreiche Anwendungen zum Absturz zu bringen – teils sogar mit Codeausführung. Schwere Lücke: CVE-2026-8461 (CVSS 8,8). Patch: FFmpeg 8.1.2. https://www.golem.de/news/pixelsmash-luecke-in-ffmpeg-decoder-gefaehrdet-unzaehlige-systeme-2606-210068.html 🎥🛡️💥 #FFmpeg #Cybersecurity #CVE #Patch #Exploit

🚨 FFmpeg’s MagicYUV decoder bug “PixelSmash” (CVE-2026-8461) can be triggered by a crafted AVI/MKV/MOV to achieve remote code execution on media open—per JFrog researchers. Affected apps include Jellyfin & Nextcloud. Fix: FFmpeg 8.1.2. https://cyberinsider.com/ffmpeg-pixelsmash-bug-triggers-code-execution-on-media-file-open/ #FFmpeg #CyberSecurity #RCE #CVE #Infosec

Pixelsmash: Eine 50‑KB‑Videodatei reicht, um per FFmpeg-Decoder (MagicYUV/libavcodec) zahlreiche Anwendungen zum Absturz zu bringen – teils sogar mit Codeausführung. Schwere Lücke: CVE-2026-8461 (CVSS 8,8). Patch: FFmpeg 8.1.2. https://www.golem.de/news/pixelsmash-luecke-in-ffmpeg-decoder-gefaehrdet-unzaehlige-systeme-2606-210068.html 🎥🛡️💥 #FFmpeg #Cybersecurity #CVE #Patch #Exploit

🚨 FFmpeg’s MagicYUV decoder bug “PixelSmash” (CVE-2026-8461) can be triggered by a crafted AVI/MKV/MOV to achieve remote code execution on media open—per JFrog researchers. Affected apps include Jellyfin & Nextcloud. Fix: FFmpeg 8.1.2. https://cyberinsider.com/ffmpeg-pixelsmash-bug-triggers-code-execution-on-media-file-open/ #FFmpeg #CyberSecurity #RCE #CVE #Infosec

#Mastodon v4.6.2 へ #update した。

CVE-2026-8461へのセキュリティ対応。

git fetch && git checkout v4.6.2
だけで完了。

#prattohome #更新

"No way to prevent this" say users of only language where this regularly happens

https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-8461/

"No way to prevent this" say u...

"No way to prevent this" say users of only language where this regularly happens

https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-8461/?utm_campaign=mi_irl&utm_medium=social&utm_source=mastodon

I built FFmpeg 7.1.5 from source since Ubuntu is moving slowly on CVE-2026-8461, and leaving a Mastodon server that processes untrusted media all day long unpatched seems like a bad idea. So anyway, testing with a #Goose post.

Looks like #ffmpeg leaks (CVE-2026-8461), #mastodon Docker images have all been updated with a fixed version.

#infosec #vulnerability

#Sysadmin #Infosec #MastoAdmin am I reading correctly that Ubuntu is still triaging the lastest FFMPEG vulnerability and hasn't released a fix?

Running 24.04 LTS and I don't wanna get pwned

https://ubuntu.com/security/CVE-2026-8461

#ffmpeg

RE: https://social.coop/@cwebber/116810673204863384

Every once in a while, we observe flaws in media players that allow exploits to be delivered by video files. These files often get free passes in security gateways.

Fortunately, it doesn't work by default. BleepingComputer wrote:

the RCE exploit requires ASLR (Address Space Layout Randomization) to be disabled, and that CVE-2026-8461 alone does not bypass this memory protection.

In theory, a separate information-disclosure bug in FFmpeg's FlashSV decoder could be chained with PixelSmash to bypass ASLR.

@cwebber Ubuntu doesn't either: https://ubuntu.com/security/CVE-2026-8461#status

Does the ubuntu security team need to be briefed on how concerning this issue is?

v4.6.2

This release is made solely to update FFmpeg in our docker container images to fix CVE-2026-8461 (critical severity). It is critical to update if you use our docker container images. If you are not using our docker container images, please make...

https://github.com/glitch-soc/mastodon/releases/tag/v4.6.2

#glitchsoc #glitch #mastodon #mastoadmin

v4.5.13

This release is made solely to update FFmpeg in our docker container images to fix CVE-2026-8461 (critical severity). It is critical to update if you use our docker container images. If you are not using our docker container images, please make...

https://github.com/glitch-soc/mastodon/releases/tag/v4.5.13

#glitchsoc #glitch #mastodon #mastoadmin

v4.5.13

This release is made solely to update FFmpeg in our docker container images to fix CVE-2026-8461 (critical severity). It is critical to update if you use our docker container images. If you are not using our docker container images, please make...

https://github.com/mastodon/mastodon/releases/tag/v4.5.13

#mastodon #mastoadmin

v4.6.2

This release is made solely to update FFmpeg in our docker container images to fix CVE-2026-8461 (critical severity). It is critical to update if you use our docker container images. If you are not using our docker container images, please make...

https://github.com/mastodon/mastodon/releases/tag/v4.6.2

#mastodon #mastoadmin

🌿 站点更新完成：Mastodon 4.6.2

服务器花园完成了一轮快速修整！Somincola Social 已从 Mastodon 4.6.0 更新至 4.6.2，目前运行正常。🐘

本次更新包括：
• 修复 Emoji、下拉菜单、高级界面、个人资料字段及 LDAP 登录等问题
• 更新 Docker 镜像中的 FFmpeg，修复严重安全漏洞 CVE-2026-8461
• 本站的 5000 字符上限继续保留
大家无需进行额外操作。Tangerine UI 目前宣布停更，暂时移出了服务器花园。希望它在花园外能继续茁壮成长

感谢大家的等待！辛勤的园艺师傅已经扫完落叶，联邦小路继续开放啦。🌿

#SomincolaSocial #Mastodon #站点更新

@mastodon_releases
Mastodon v4.6.2 has been released, fixing critical FFmpeg vulnerability CVE-2026-8461.

Attackers can upload malicious videos to crash the service or execute arbitrary code. High risk.

Please update Mastodon/FFmpeg ASAP. Ensure your FFmpeg version is:
• 8.1.2
• 7.1.5
• 6.1.6
• 5.1.10

https://nvd.nist.gov/vuln/detail/CVE-2026-8461

Mastodon 4.6.2
(manchmal kommen sie schnell hintereinander, diesmal wegen CVE-2026-8461)

#Mastoadmin

⚠️ CRITICAL: Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps

Four critical vulnerabilities in Dify AI platform (CVE-2026-41947, CVE-2026-41948, CVE-2026-41950) enable unauthorized access to private chats, cross-tenant document theft, and lateral API calls across multi-tenant environments. The platform powers 1 million applications, making this a widespread s…

https://threatnoir.com/focus

#infosec #cybersecurity

⚠️ CRITICAL: Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps

Four critical vulnerabilities in Dify AI platform (CVE-2026-41947, CVE-2026-41948, CVE-2026-41950) enable unauthorized access to private chats, cross-tenant document theft, and lateral API calls across multi-tenant environments. The platform powers 1 million applications, making this a widespread s…

https://threatnoir.com/focus

#infosec #cybersecurity

⚠️ CRITICAL: Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps

Four critical vulnerabilities in Dify AI platform (CVE-2026-41947, CVE-2026-41948, CVE-2026-41950) enable unauthorized access to private chats, cross-tenant document theft, and lateral API calls across multi-tenant environments. The platform powers 1 million applications, making this a widespread s…

https://threatnoir.com/focus

#infosec #cybersecurity

AdvancedCLI, and multiple sensor/toolkit updates.
- **PostgreSQL updates**: Security patches (CVE-2026-6637), pg_qualstats 2.1.4, pg_stat_kcache 2.3.2, and PGDay.UK 2026 schedule.
- **Rust & Zig**: Dr.Jit 1.4, Mitsuba 3.9, and Mach Nominated Zig versions for gamedev.
- **Security vulnerabilities**: Squidbleed (CVE-2026-47729), NetBSD/pkgsrc CVEs, and TXE firmware flaws. [2/2]

Webmin 2.641 Patches Root Takeover and 2FA Bypass Vulnerabilities

Webmin version 2.641 addresses multiple critical vulnerabilities, including a root-level stored XSS (CVE-2026-22678), a path traversal file overwrite (CVE-2026-49103), and a 2FA bypass (CVE-2026-56022). These flaws allow low-privileged users to compromise root accounts and bypass multi-factor authentication in multi-tenant hosting environments.

**Update your Webmin instances to version 2.641 immediately to prevent low-privileged users from taking over your root account. If you cannot patch today, restrict access to the mail and notification modules to only your most trusted administrators.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/webmin-2-641-patches-root-takeover-and-2fa-bypass-vulnerabilities-m-y-r-7-t/gD2P6Ple2L

📰 19-Year-Old 'CIFSwitch' Linux Flaw (CVE-2026-46243) Gives Instant Root

🚨 CRITICAL FLAW: 'CIFSwitch' (CVE-2026-46243), a 19-year-old Linux kernel bug, allows instant root access on Ubuntu & RHEL with a single command. Patch immediately! This is the 5th Linux LPE this year. #Linux #infosec #CyberSecurity #CVE

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/cifswitch-linux-kernel-flaw-cve-2026-46243-gives-instant-root-access/?utm_source=mastodon&utm_m…

CVE-2026-45504 Microsoft Exchange SSRF via File Read https://hawktrace.com/blog/CVE-2026-45504/

Podman 5.8.4 closes CVE-2026-57231. A malicious image could ship malformed Env entries that, when the container started, leaked the host's environment variables into it, including through glob operators that grab multiple variables without knowing their names. The release also updates golang.org/x/crypto to v0.53.0 for CVE-2026-39830 and CVE-2026-42508. When you pull a public image, do you think about what its metadata can read from your host?
#containers #security

Podman 5.8.4 closes CVE-2026-57231. A malicious image could ship malformed Env entries that, when the container started, leaked the host's environment variables into it, including through glob operators that grab multiple variables without knowing their names. The release also updates golang.org/x/crypto to v0.53.0 for CVE-2026-39830 and CVE-2026-42508. When you pull a public image, do you think about what its metadata can read from your host?
#containers #security

CVE-2026-35373 introduces a critical operational divergence in modern Linux system utilities, causing strict encoding enforcement to break automated backup and data migration pipelines. Access our strategic CSUITE briefing to audit system integrity: https://thecybermind.co/393z

CVE-2026-35373 introduces a critical operational divergence in modern Linux system utilities, causing strict encoding enforcement to break automated backup and data migration pipelines. Access our strategic CSUITE briefing to audit system integrity: https://thecybermind.co/393z

CISA confirms active zero-day exploitation of Trend Micro Apex One (CVE-2026-34926), introducing critical directory traversal and code injection risks across the endpoint control plane. Access our full executive advisory on asset mitigation and strategic governance alignment: https://thecybermind.co/22mw

CISA confirms active zero-day exploitation of Trend Micro Apex One (CVE-2026-34926), introducing critical directory traversal and code injection risks across the endpoint control plane. Access our full executive advisory on asset mitigation and strategic governance alignment: https://thecybermind.co/22mw

Langflow Cryptominer Malware Exploits CVE-2026-33017

At least 39 rival malware families appear on a kill list used by a new Langflow cryptominer malware campaign. Threat actors now target exposed artificial intelligence application endpoints to breach enterprise networks. They exploit CVE-2026-33017, which is a critical remote code execution vulnerability. Consequently, attackers hijack servers to mine cryptocurrency. At a glance Malware Family: Modified KORKERDS/MALXMR variant Threat Actor:

https://securityonline.info/langflow-cryptominer-malware/?utm_source=mastodon&utm_medium=jetpack_social

Langflow Cryptominer Malware Exploits CVE-2026-33017

At least 39 rival malware families appear on a kill list used by a new Langflow cryptominer malware campaign. Threat actors now target exposed artificial intelligence application endpoints to breach enterprise networks. They exploit CVE-2026-33017, which is a critical remote code execution vulnerability. Consequently, attackers hijack servers to mine cryptocurrency. At a glance Malware Family: Modified KORKERDS/MALXMR variant Threat Actor:

https://securityonline.info/langflow-cryptominer-malware/?utm_source=mastodon&utm_medium=jetpack_social

@0 Oh, I stopped dragging and dropping things in the Terminal since we published this:

https://mysk.blog/2026/05/19/cve-2026-28910/

Webmin 2.641 Patches Root Takeover and 2FA Bypass Vulnerabilities

Webmin version 2.641 addresses multiple critical vulnerabilities, including a root-level stored XSS (CVE-2026-22678), a path traversal file overwrite (CVE-2026-49103), and a 2FA bypass (CVE-2026-56022). These flaws allow low-privileged users to compromise root accounts and bypass multi-factor authentication in multi-tenant hosting environments.

**Update your Webmin instances to version 2.641 immediately to prevent low-privileged users from taking over your root account. If you cannot patch today, restrict access to the mail and notification modules to only your most trusted administrators.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/webmin-2-641-patches-root-takeover-and-2fa-bypass-vulnerabilities-m-y-r-7-t/gD2P6Ple2L

🔒 Sicherheitslücke im Android-Kernel: Forscher von Lucid Bit Labs melden einen Use-after-free-Bug (CVE-2026-20971, CVSS 7,8) in Samsung-Proca/Knox. Betroffen: Galaxy S9–S25 u. a. Angriff möglich via bösartige App & Race-Condition. Patch: Januar 2026. https://www.golem.de/news/sicherheitsluecke-acht-jahre-alter-kernel-bug-gefaehrdet-samsung-smartphones-2606-210117.html #CyberSecurity #Samsung #Android #Vulnerability #Patch

🔒 Sicherheitslücke im Android-Kernel: Forscher von Lucid Bit Labs melden einen Use-after-free-Bug (CVE-2026-20971, CVSS 7,8) in Samsung-Proca/Knox. Betroffen: Galaxy S9–S25 u. a. Angriff möglich via bösartige App & Race-Condition. Patch: Januar 2026. https://www.golem.de/news/sicherheitsluecke-acht-jahre-alter-kernel-bug-gefaehrdet-samsung-smartphones-2606-210117.html #CyberSecurity #Samsung #Android #Vulnerability #Patch

CVE-2026-20971: Samsung Android kernel UAF affecting Galaxy S9-S25 https://lucidbitlabs.com/blog/when-defenses-become-attack-surface/

La vulnerabilità UAF del kernel KNOX di Samsung espone milioni di dispositivi Galaxy.

La vulnerabilità KNOX di Samsung (CVE-2026-20971) è una UAF del kernel in PROCA/FIVE che può consentire la corruzione [della memoria] tramite una race condition; Samsung l'ha corretta nel gennaio 2026.

https://securityaffairs.com/194090/security/samsung-knox-kernel-uaf-exposes-millions-of-galaxy-devices.html

@informatica

https://infosec.exchange/@securityaffairs/116801915008086780

Cisco SD-WAN zero-day CVE-2026-20245 exploited for two months before disclosure. Mandiant found the traces. Attacker had netadmin access, escalated to root, cleaned up config files. Inside for months.

https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-zero-day-cve-2026.html

Cisco SD-WAN Zero-Day Exploited in Attacks

At a glance Actor: Unknown threat actor Activity Type: Privilege escalation and zero-day exploitation Targets: Service provider infrastructure Scale: Unknown victim count Jurisdiction: Active investigation; no arrests reported Source: Mandiant TL;DR Attackers breached a service provider using a Cisco SD-WAN zero-day flaw. They exploited CVE-2026-20245 to gain root-level control over network systems. Therefore, administrators must upgrade their software immediately to block further intrusions.

https://securityonline.info/cisco-sd-wan-zero-day/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-20245 Zero-Day Exploited in Cisco Catalyst SD-WAN Manager to Gain Root Access

A newly disclosed zero-day vulnerability, CVE-2026-20245, has been exploited by a threat actor targeting Cisco Catalyst SD-WAN Manager. By exploiting

🔗️ [Thecyberexpress] https://link.is.it/YtDctR

Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access

New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to...

🔗️ [Bleepingcomputer] https://link.is.it/gbIA4V

New.

Mandiant: Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager https://cloud.google.com/blog/topics/threat-intelligence/zero-day-exploitation-cisco-catalyst-sd-wan-manager #Google

Microsoft:

StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them https://www.microsoft.com/en-us/security/blog/2026/06/24/stealc-and-amadey-breaking-down-infostealers-and-the-cybercrime-services-that-deliver-them/

Kaspersky:

StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader https://securelist.com/strikeshark-campaign/120326/ @Kaspersky

Symantec: Backdoor.Mistic: New Backdoor May be Linked to Ransomware Access Broker https://www.security.com/threat-intelligence/new-mistic-backdoor-modelorat

Picus:

The ShinyHunters Domino Effect: One Breach, Hundreds of Victims https://www.picussecurity.com/resource/blog/the-shinyhunters-domino-effect-one-breach-hundreds-of-victims

Proofpoint:

StealC You Later: Proofpoint and IBM X-Force Support Operation Endgame Disruptions https://www.proofpoint.com/us/blog/threat-insight/stealc-you-later-proofpoint-and-ibm-x-force-support-operation-endgame #threatresearch #cybercrime #Microsoft #infosec #threatintelligence #Cisco #vulnerability #zeroday #ransomware

New advisory.

CVE-2026-20175, medium severity: Cisco Finesse Remote File Inclusion Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-rfi-gwpkdc89

From yesterday:

Cisco Advance Notification for Publication of July 1, 2026, Security Advisories https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7 @TalosSecurity #Cisco #infosec #vulnerability

Active Exploitation of Cisco Unified Communications Manager Vulnerabilities Grants Root Access

Cisco Unified Communications Manager is facing active exploitation of two vulnerabilities, CVE-2026-20230 and CVE-2026-20045, which allow unauthenticated attackers to gain root access and deploy webshells.

**Apply the latest software updates, including Unified CM 14SU6 and 15SU5, immediately. If patching is not possible, disable the Cisco WebDialer Web Service to sever the attack path, and aggressively audit your /platform-services/ directory for unusual .jsp files or unauthorized webshells.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/active-exploitation-of-cisco-unified-communications-manager-vulnerabilities-grants-root-access-w-x-c-7-n/gD2P6Ple2L

New and part promo.

Kaspersky:Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk https://securelist.com/tr/schneider-electric-cve-2024-2658-vulnerability/120436/ @Kaspersky #infosec #vulnerability

RE: https://mastodon.social/@hrbrmstr/116821870776629693

Ok, getting sidetracked...

https://nvd.nist.gov/vuln/detail/CVE-2018-13818

ref: https://mobile.twitter.com/jameel_nabbo/status/1032593354704515072?s=20

lol, mobile. & included tracking query :neobot_giggle:

RE: https://mastodon.social/@hrbrmstr/116821870776629693

Ok, getting sidetracked...

https://nvd.nist.gov/vuln/detail/CVE-2018-13818

ref: https://mobile.twitter.com/jameel_nabbo/status/1032593354704515072?s=20

lol, mobile. & included tracking query :neobot_giggle:

Exploit Heartbleed (CVE-2014-0160) with OpenSSL s_client: send a malformed heartbeat request with oversized payload length to extract up to 64KB of heap memory. Use -no_ssl3 -no_tls1 for TLS 1.0/1.1, -msg to capture leaked data. #cve #snippet #heartbleed #cve-2014-0160 #ValtersIT

https://www.valtersit.com/vault/heartbleed-memory-extraction-via-openssl-sclient-80ed4a/

Zephyr 4.0.0 – 4.4.0 is affected by CVE-2026-10646 (HIGH, CVSS 7.4): use-after-free in getaddrinfo() can cause memory corruption via spoofed DNS responses. Patch pending — limit untrusted network access. https://radar.offseq.com/threat/cve-2026-10646-use-after-free-in-zephyrproject-zep-22335ff5e2d4e43d #OffSeq #Zephyr #CVE #Security

Zephyr 4.0.0 – 4.4.0 is affected by CVE-2026-10646 (HIGH, CVSS 7.4): use-after-free in getaddrinfo() can cause memory corruption via spoofed DNS responses. Patch pending — limit untrusted network access. https://radar.offseq.com/threat/cve-2026-10646-use-after-free-in-zephyrproject-zep-22335ff5e2d4e43d #OffSeq #Zephyr #CVE #Security

CVE-2026-45408 - Critical Command Injection in Dokku. CVSS 9.0. No patch available. Mitigations required. Limit git push access and review app name validation. #CVE #Dokku #infosec

https://www.valtersit.com/cve/CVE-2026-45408/

CVE-2026-45408 - Critical Command Injection in Dokku. CVSS 9.0. No patch available. Mitigations required. Limit git push access and review app name validation. #CVE #Dokku #infosec

https://www.valtersit.com/cve/CVE-2026-45408/

AdvancedCLI, and multiple sensor/toolkit updates.
- **PostgreSQL updates**: Security patches (CVE-2026-6637), pg_qualstats 2.1.4, pg_stat_kcache 2.3.2, and PGDay.UK 2026 schedule.
- **Rust & Zig**: Dr.Jit 1.4, Mitsuba 3.9, and Mach Nominated Zig versions for gamedev.
- **Security vulnerabilities**: Squidbleed (CVE-2026-47729), NetBSD/pkgsrc CVEs, and TXE firmware flaws. [2/2]

🛡️ Squidbleed: Eine seit 1997 in Squid klaffende Lücke (CVE-2026-47729) ermöglicht laut Forschern das unbemerkt mögliche Leaken von HTTP-Daten über Heap-Buffer-Overread. Besonders riskant bei Klartext-Traffic (HTTP/FTP). Fix seit Squid 7.6. Details: https://www.golem.de/news/squidbleed-29-jahre-alte-luecke-in-populaerer-proxy-software-entdeckt-2606-210022.html #Security #CyberSecurity #Squid #CVE #Vulnerability

🛡️ Squidbleed: Eine seit 1997 in Squid klaffende Lücke (CVE-2026-47729) ermöglicht laut Forschern das unbemerkt mögliche Leaken von HTTP-Daten über Heap-Buffer-Overread. Besonders riskant bei Klartext-Traffic (HTTP/FTP). Fix seit Squid 7.6. Details: https://www.golem.de/news/squidbleed-29-jahre-alte-luecke-in-populaerer-proxy-software-entdeckt-2606-210022.html #Security #CyberSecurity #Squid #CVE #Vulnerability

Arista Patches Critical Telemetry and Authentication Flaws in EOS Network Operating System

Arista Networks has patched six vulnerabilities in its EOS operating system, including a critical flaw (CVE-2026-11705) in the telemetry agent that allows attackers to modify system data. The updates also fix policy-based authentication bypass and internal credential exposure risks in data center and cloud environments.

**First, make sure all Arista EOS management interfaces and streaming telemetry is isolated from the internet and reachable only from trusted management networks. Then update affected devices (EOS 4.31 through 4.36) to version 4.36.1F or apply Arista's telemetry agent hotfixes; As a mitigation, ensure the telemetry agent isn't running from the /usr/bin/TerminAttrRW path and remove the -cveapimode=queued flag.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/arista-patches-critical-telemetry-and-authentication-flaws-in-eos-network-operating-system-i-r-w-6-b/gD2P6Ple2L

Three Vulnerabilities, One Platform: Why Your Self-Hosted Gitea/Gogs Instance Is Probably Already Owned

https://thecybersecguru.com/news/cve-2026-20896-gitea-authentication-bypass-dom-xss-ssrf/

curl Patches 25-Year-Old Vulnerability and 17 Other Flaws

curl version 8.21.0 addresses 18 vulnerabilities, including a 25-year-old authentication bypass (CVE-2026-8932) and multiple memory safety issues. The flaws primarily affect libcurl, the library used by billions of devices for data transfer.

**Plan to update your curl and libcurl installations to version 8.21.0. Since libcurl is hidden inside many apps and devices, you should check your entire software stack for outdated versions.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/curl-patches-25-year-old-vulnerability-and-17-other-flaws-o-p-3-q-6/gD2P6Ple2L

CVE-2026-8932 is the oldest #curl vulnerability reported so far. 25.25 years old. Shipped in releases since curl version 7.7, released on March 22 2001

Still rather benign and it probably hurt about three users, at most.

https://curl.se/docs/CVE-2026-8932.html

RE: https://social.freedom.press/@securedrop/116805553545070289

The low priority issue we disclosed today managed to get assigned CVE-2026-50000.

Didn't include this in the writeup, but just for the purpose of keeping score, this would likely not have happened if it was written in #Rust because mutability is part of the type system, so you don't end up accidentally mutating what should be an immutable object!

https://github.com/freedomofpress/securedrop/security/advisories/GHSA-78xq-8jf3-gpfx

CVE-2026-50160: Four Independent Weaknesses Combine Into a CVSS 10.0 Full Compromise in Hoppscotch https://www.offgridsec.com/blog-hoppscotch-cve-2026-50160.html