🟠 CVE-2026-0538 - High (7.8)

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0538/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-70073 - Critical (9.8)

An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70073/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-70073 - Critical (9.8)

An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70073/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

"CISA warns of SmarterMail RCE flaw used in ransomware attacks"

"[...] has issued a warning about CVE-2026-24423, an unauthenticated remote code execution (RCE) flaw in SmarterMail that is used in ransomware attacks. The Cybersecurity & Infrastructure Security Agency (CISA) in the U.S."

https://www.bleepingcomputer.com/news/security/cisa-warns-of-smartermail-rce-flaw-used-in-ransomware-attacks/

#Cybersecurity

CISA warns of SmarterMail RCE flaw used in ransomware attacks

The Cybersecurity & Infrastructure Security Agency (CISA) in the U.S. has issued a warning about CVE-2026-24423, an unauthenticated remote code...

🔗️ [Bleepingcomputer] https://link.is.it/Kkych1

📰 CISA: Critical SmarterMail RCE Flaw Actively Exploited in Ransomware Attacks

⚠️ CISA KEV ALERT: A critical RCE flaw in SmarterMail (CVE-2026-24423) is actively exploited in ransomware attacks. Unauthenticated attackers can take over mail servers. Patch to build 9511+ immediately! #CVE #Ransomware #PatchNow

🔗 https://cyber.netsecops.io/articles/cisa-warns-of-actively-exploited-smartermail-rce-flaw-in-ransomware-attacks/?utm_source=mastodon&utm_medium=social&utm_campaign=twitter_auto

🚨 [CISA-2026:0205] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0205)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-11953 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-11953)
- Name: React Native Community CLI OS Command Injection Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: React Native Community
- Product: CLI
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/react-native-community/cli/commit/15089907d1f1301b22c72d7f68846a2ef20df547;https://github.com/react-native-community/cli/pull/2735 ; https://nvd.nist.gov/vuln/detail/CVE-2025-11953

⚠️ CVE-2026-24423 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-24423)
- Name: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: SmarterTools
- Product: SmarterMail
- Notes: https://www.smartertools.com/smartermail/release-notes/current ; https://www.cve.org/CVERecord?id=CVE-2026-24423 ; https://nvd.nist.gov/vuln/detail/CVE-2026-24423

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260205 #cisa20260205 #cve_2025_11953 #cve_2026_24423 #cve202511953 #cve202624423

CVE-2026-24423 - Changed to Known Ransomware Status

SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityVendor: SmarterToolsProduct: SmarterMailSmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead https://nvd.nist.gov/vuln/detail/CVE-2026-24423

CVE ID: CVE-2026-24423
Vendor: SmarterTools
Product: SmarterMail
Date Added: 2026-02-05
Notes: https://www.smartertools.com/smartermail/release-notes/current ; https://www.cve.org/CVERecord?id=CVE-2026-24423 ; https://nvd.nist.gov/vuln/detail/CVE-2026-24423
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-24423

New:

CISA Orders Federal Agencies to Strengthen Edge Device Security Amid Rising Cyber Threats https://www.cisa.gov/news-events/news/cisa-orders-federal-agencies-strengthen-edge-device-security-amid-rising-cyber-threats

CISA has also updated the KEV catalogue.

- CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-24423

- CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-11953

Five industrial vulnerabilities have also been added: https://www.cisa.gov/ #CISA #infosec #vulnerabilities

‼️ CISA has added two vulnerabilities to the KEV Catalog

https://darkwebinformer.com/cisa-kev-catalog/

CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability:

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.

CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability:

React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute arbitrary shell commands with fully controlled arguments.

"CISA warns of SmarterMail RCE flaw used in ransomware attacks"

"[...] has issued a warning about CVE-2026-24423, an unauthenticated remote code execution (RCE) flaw in SmarterMail that is used in ransomware attacks. The Cybersecurity & Infrastructure Security Agency (CISA) in the U.S."

https://www.bleepingcomputer.com/news/security/cisa-warns-of-smartermail-rce-flaw-used-in-ransomware-attacks/

#Cybersecurity

CISA warns of SmarterMail RCE flaw used in ransomware attacks

The Cybersecurity & Infrastructure Security Agency (CISA) in the U.S. has issued a warning about CVE-2026-24423, an unauthenticated remote code...

🔗️ [Bleepingcomputer] https://link.is.it/Kkych1

CVE-2026-24423 - Changed to Known Ransomware Status

SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityVendor: SmarterToolsProduct: SmarterMailSmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead https://nvd.nist.gov/vuln/detail/CVE-2026-24423

CVE ID: CVE-2026-24423
Vendor: SmarterTools
Product: SmarterMail
Date Added: 2026-02-05
Notes: https://www.smartertools.com/smartermail/release-notes/current ; https://www.cve.org/CVERecord?id=CVE-2026-24423 ; https://nvd.nist.gov/vuln/detail/CVE-2026-24423
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-24423

New:

CISA Orders Federal Agencies to Strengthen Edge Device Security Amid Rising Cyber Threats https://www.cisa.gov/news-events/news/cisa-orders-federal-agencies-strengthen-edge-device-security-amid-rising-cyber-threats

CISA has also updated the KEV catalogue.

- CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-24423

- CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-11953

Five industrial vulnerabilities have also been added: https://www.cisa.gov/ #CISA #infosec #vulnerabilities

‼️ CISA has added two vulnerabilities to the KEV Catalog

https://darkwebinformer.com/cisa-kev-catalog/

CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability:

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.

CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability:

React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute arbitrary shell commands with fully controlled arguments.

🟠 CVE-2026-0661 - High (7.8)

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0661/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-69906 - High (8.8)

Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploaded files directly in a web-accessible directory. Under typical ser...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69906/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-69906 - High (8.8)

Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploaded files directly in a web-accessible directory. Under typical ser...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69906/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-69619 - High (7.5)

A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service (DoS) via writing files to the internal storage.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69619/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-69619 - High (7.5)

A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service (DoS) via writing files to the internal storage.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69619/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13523 - High (7.7)

Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rendering which allows authenticated Confluence users with malicious display names to execute arbitrary JavaScript in victim bro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13523/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13523 - High (7.7)

Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rendering which allows authenticated Confluence users with malicious display names to execute arbitrary JavaScript in victim bro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13523/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

ahhh… la bonne vuln critique du vendredi qui sent le café ☕️

🕵️‍♂️ CVE-2026-21643

D’après la fiche : SQL Injection (improper neutralization of special elements used in an SQL command) dans Fortinet FortiClientEMS 7.4.4

➡️ pourrait permettre à un attaquant non authentifié d’exécuter du code/commandes via des requêtes HTTP spécialement forgées.

RCE “unauth” sur un produit exposé, quelle surprise… 🙃

il me manque un traversal path dans l'histoire pour être définitivement comblé

may or may not, qui sait…
attendons l’advisory officiel avant de sortir les fourches (ou les patchs).
👇
https://cve.circl.lu/vuln/CVE-2026-21643 👀

#CyberVeille #Fortinet #FortiClientEMS

🔴 CVE-2026-21643 - Critical (9.8)

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP req...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21643/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

ahhh… la bonne vuln critique du vendredi qui sent le café ☕️

🕵️‍♂️ CVE-2026-21643

D’après la fiche : SQL Injection (improper neutralization of special elements used in an SQL command) dans Fortinet FortiClientEMS 7.4.4

➡️ pourrait permettre à un attaquant non authentifié d’exécuter du code/commandes via des requêtes HTTP spécialement forgées.

RCE “unauth” sur un produit exposé, quelle surprise… 🙃

il me manque un traversal path dans l'histoire pour être définitivement comblé

may or may not, qui sait…
attendons l’advisory officiel avant de sortir les fourches (ou les patchs).
👇
https://cve.circl.lu/vuln/CVE-2026-21643 👀

#CyberVeille #Fortinet #FortiClientEMS

🔴 CVE-2026-21643 - Critical (9.8)

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP req...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21643/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2025-15566 #devopsish #kubernetes #cve https://github.com/kubernetes/kubernetes/issues/136789

🟠 CVE-2025-15566 - High (8.8)

A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15566/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2025-15566 #devopsish #kubernetes #cve https://github.com/kubernetes/kubernetes/issues/136789

🟠 CVE-2025-15566 - High (8.8)

A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15566/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24302 - High (8.6)

Azure Arc Elevation of Privilege Vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24302/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24302 - High (8.6)

Azure Arc Elevation of Privilege Vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24302/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-2017 - Critical (9.8)

A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurityHandler of the file /goform/wx3auth of the component POST Request Handler. The manipulation of the argument data results in sta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2017/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-2017 - Critical (9.8)

A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurityHandler of the file /goform/wx3auth of the component POST Request Handler. The manipulation of the argument data results in sta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2017/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-1499 - Critical (9.8)

The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8. This is due to a missing capability check on the `process_add_site()` AJAX action combined wit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1499/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-1499 - Critical (9.8)

The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8. This is due to a missing capability check on the `process_add_site()` AJAX action combined wit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1499/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24930 - High (8.4)

UAF concurrency vulnerability in the graphics module.
Impact: Successful exploitation of this vulnerability may affect availability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24930/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24930 - High (8.4)

UAF concurrency vulnerability in the graphics module.
Impact: Successful exploitation of this vulnerability may affect availability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24930/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24926 - High (8.4)

Out-of-bounds write vulnerability in the camera module.
Impact: Successful exploitation of this vulnerability may affect availability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24926/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24926 - High (8.4)

Out-of-bounds write vulnerability in the camera module.
Impact: Successful exploitation of this vulnerability may affect availability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24926/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Mitsubishi Electric Patches Critical Remote Takeover Flaw in MELSEC iQ-R Series PLCs

Mitsubishi Electric patched a critical vulnerability (CVE-2025-15080) in MELSEC iQ-R Series PLCs that allows unauthenticated remote attackers to read or tamper with control data and cause system outages.

**Make sure all MELSEC iQ-R Series PLCs are isolated from the public internet and accessible only from trusted networks. Then plan an update to firmware version 49.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/mitsubishi-electric-patches-critical-remote-takeover-flaw-in-melsec-iq-r-series-plcs-y-b-o-n-n/gD2P6Ple2L

Mitsubishi Electric Patches Critical Remote Takeover Flaw in MELSEC iQ-R Series PLCs

Mitsubishi Electric patched a critical vulnerability (CVE-2025-15080) in MELSEC iQ-R Series PLCs that allows unauthenticated remote attackers to read or tamper with control data and cause system outages.

**Make sure all MELSEC iQ-R Series PLCs are isolated from the public internet and accessible only from trusted networks. Then plan an update to firmware version 49.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/mitsubishi-electric-patches-critical-remote-takeover-flaw-in-melsec-iq-r-series-plcs-y-b-o-n-n/gD2P6Ple2L

🔴 CVE-2026-0106 - Critical (9.3)

In vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0106/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-0106 - Critical (9.3)

In vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0106/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

https://winbuzzer.com/2026/02/06/cve-2026-0391-microsoft-edge-android-ui-spoofing-xcxwbn/

CVE-2026-0391: Edge Android Flaw Enables Spoofing Attacks

#MicrosoftEdge #Security #Cybersecurity #Microsoft #Android #WebBrowsers #Phishing #CredentialTheft #ZeroDayVulnerabilities #Chromium

https://winbuzzer.com/2026/02/06/cve-2026-0391-microsoft-edge-android-ui-spoofing-xcxwbn/

CVE-2026-0391: Edge Android Flaw Enables Spoofing Attacks

#MicrosoftEdge #Security #Cybersecurity #Microsoft #Android #WebBrowsers #Phishing #CredentialTheft #ZeroDayVulnerabilities #Chromium

🔴 CVE-2026-24300 - Critical (9.8)

Azure Front Door Elevation of Privilege Vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24300/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-24300 - Critical (9.8)

Azure Front Door Elevation of Privilege Vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24300/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21532 - High (8.2)

Azure Function Information Disclosure Vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21532/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-21532 - High (8.2)

Azure Function Information Disclosure Vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21532/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical React Native CLI Vulnerability Puts Development Environments at Risk, CISA Warns

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert following the discovery of a critical vulnerability in the React Native Community Command-Line Interface (CLI). Tracked as CVE-2025-11953, this flaw allows attackers to execute arbitrary system commands on vulnerable development machines. The vulnerability has already been actively…

https://undercodenews.com/critical-react-native-cli-vulnerability-puts-development-environments-at-risk-cisa-warns/

🚨 [CISA-2026:0205] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0205)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-11953 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-11953)
- Name: React Native Community CLI OS Command Injection Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: React Native Community
- Product: CLI
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/react-native-community/cli/commit/15089907d1f1301b22c72d7f68846a2ef20df547;https://github.com/react-native-community/cli/pull/2735 ; https://nvd.nist.gov/vuln/detail/CVE-2025-11953

⚠️ CVE-2026-24423 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-24423)
- Name: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: SmarterTools
- Product: SmarterMail
- Notes: https://www.smartertools.com/smartermail/release-notes/current ; https://www.cve.org/CVERecord?id=CVE-2026-24423 ; https://nvd.nist.gov/vuln/detail/CVE-2026-24423

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260205 #cisa20260205 #cve_2025_11953 #cve_2026_24423 #cve202511953 #cve202624423

CVE ID: CVE-2025-11953
Vendor: React Native Community
Product: CLI
Date Added: 2026-02-05
Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/react-native-community/cli/commit/15089907d1f1301b22c72d7f68846a2ef20df547;https://github.com/react-native-community/cli/pull/2735 ; https://nvd.nist.gov/vuln/detail/CVE-2025-11953
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-11953

New:

CISA Orders Federal Agencies to Strengthen Edge Device Security Amid Rising Cyber Threats https://www.cisa.gov/news-events/news/cisa-orders-federal-agencies-strengthen-edge-device-security-amid-rising-cyber-threats

CISA has also updated the KEV catalogue.

- CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-24423

- CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-11953

Five industrial vulnerabilities have also been added: https://www.cisa.gov/ #CISA #infosec #vulnerabilities

‼️ CISA has added two vulnerabilities to the KEV Catalog

https://darkwebinformer.com/cisa-kev-catalog/

CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability:

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.

CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability:

React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute arbitrary shell commands with fully controlled arguments.

CVE ID: CVE-2025-11953
Vendor: React Native Community
Product: CLI
Date Added: 2026-02-05
Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/react-native-community/cli/commit/15089907d1f1301b22c72d7f68846a2ef20df547;https://github.com/react-native-community/cli/pull/2735 ; https://nvd.nist.gov/vuln/detail/CVE-2025-11953
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-11953

New:

CISA Orders Federal Agencies to Strengthen Edge Device Security Amid Rising Cyber Threats https://www.cisa.gov/news-events/news/cisa-orders-federal-agencies-strengthen-edge-device-security-amid-rising-cyber-threats

CISA has also updated the KEV catalogue.

- CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-24423

- CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-11953

Five industrial vulnerabilities have also been added: https://www.cisa.gov/ #CISA #infosec #vulnerabilities

‼️ CISA has added two vulnerabilities to the KEV Catalog

https://darkwebinformer.com/cisa-kev-catalog/

CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability:

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.

CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability:

React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute arbitrary shell commands with fully controlled arguments.

Critical React Native Metro Server Bug Under Active Exploitation

Attackers are actively exploiting a critical command injection vulnerability (CVE-2025-11953) in the React Native Metro development server to deploy malware on Windows and Linux systems.

**This is now urgent and important. If you're a React Native developer, update @react-native-community/cli-server-api to version 20.0.0 or higher. Your tools are being actively exploited. If you can't update right away, start your Metro server with the --host 127.0.0.1 flag (like `npx react-native start --host 127.0.0.1`). Make sure to patch all projects on your computer and the globally installed version.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/critical-react-native-metro-server-bug-under-active-exploitation-m-3-d-o-k/gD2P6Ple2L

Our team wrote about in-the-wild exploitation of React Metro Server CVE-2025-11953, which VulnCheck's Canary Intelligence network detected for the first time in December 2025.

https://www.vulncheck.com/blog/metro4shell_eitw

Hackers exploit critical React Native Metro bug to breach dev systems

Hackers are targeting developers by exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native to deliver malicious...

🔗️ [Bleepingcomputer] https://link.is.it/9a1Dng

Hackers exploit critical React Native Metro bug to breach dev systems

Hackers are targeting developers by exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native to deliver malicious...

🔗️ [Bleepingcomputer] https://link.is.it/w9Y7HI

🟠 CVE-2026-20979 - High (7.8)

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20979/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20979 - High (7.8)

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20979/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15330 - High (8.8)

Tanium addressed an improper input validation vulnerability in Deploy.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15330/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15330 - High (8.8)

Tanium addressed an improper input validation vulnerability in Deploy.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15330/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-68721 - Critical (9.1)

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68721/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-68721 - Critical (9.1)

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68721/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-68721 - Critical (9.1)

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68721/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-68721 - Critical (9.1)

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68721/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20983 - High (7.8)

Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privilege.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20983 - High (7.8)

Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privilege.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-68722 - High (8.8)

Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin interface through improper handling of the _s (breadcrumb) parameter. The application accepts state-changing req...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68722/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-68722 - High (8.8)

Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin interface through improper handling of the _s (breadcrumb) parameter. The application accepts state-changing req...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68722/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15311 - High (7.8)

Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15311/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15311 - High (7.8)

Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15311/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25055 - High (8.1)

n8n is an open source workflow automation platform. Prior to versions 1.123.12 and 2.4.0, when workflows process uploaded files and transfer them to remote servers via the SSH node without validating their metadata the vulnerability can lead to fi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25055/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25055 - High (8.1)

n8n is an open source workflow automation platform. Prior to versions 1.123.12 and 2.4.0, when workflows process uploaded files and transfer them to remote servers via the SSH node without validating their metadata the vulnerability can lead to fi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25055/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📰 Critical RCE Flaw in n8n Automation Platform Allows Full Server Takeover

🔥 CRITICAL RCE: A sandbox escape flaw (CVE-2026-25049, CVSS 9.4) in the n8n automation platform allows full server takeover and credential theft. Update to versions 1.123.17 or 2.5.2 immediately! #CVE #RCE #DevSecOps

🔗 https://cyber.netsecops.io/articles/critical-rce-vulnerability-in-n8n-automation-platform-allows-server-compromise/?utm_source=mastodon&utm_medium=social&utm_campaign=twitter_auto

🔴 CVE-2026-25049 - Critical (9.9)

n8n is an open source workflow automation platform. Prior to versions 1.123.17 and 2.5.2, an authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system comma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25049/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 THE NI8MARE IS REAL. 🚨

Survived a critical RCE breach attempt (CVE-2026-25049) on my n8n setup. I didn’t just patch; I surgically hardened to v2.7.1.

🛑 No "latest" tags. 🛑 No ghost credentials. 🛠️ Sequential pinning only.

Get the forensic playbook FIX IT: https://thecybermind.co/n8n-update

https://thecybermind.co/2026/02/05/cve-2026-25049-rce/?utm_source=mastodon&utm_medium=jetpack_social

Collectively tracked as CVE-2026-25049, the issues can be exploited by any authenticated user who can create or edit workflows on the platform to perform unrestricted remote code execution on the n8n server. https://www.bleepingcomputer.com/news/security/critical-n8n-flaws-disclosed-along-with-public-exploits/

Critical n8n Flaw Exposes Automation Platforms to Remote Code Execution

Introduction: Why This n8n Vulnerability Matters Workflow automation tools like n8n sit at the heart of modern DevOps, data pipelines, and business automation. They connect APIs, move sensitive data, and execute logic with elevated trust inside organizations. A newly disclosed critical vulnerability in n8n, tracked as CVE-2026-25049, shows how dangerous even “authenticated-only” flaws can be when…

https://undercodenews.com/critical-n8n-flaw-exposes-automation-platforms-to-remote-code-execution/

CVE-2026-25049 highlights weaknesses in sandboxing user-defined JavaScript expressions within n8n workflows.

Multiple research teams demonstrated authenticated sandbox escape leading to unrestricted RCE, credential exposure, filesystem access, cloud pivoting, and AI workflow manipulation. The issue stems from incomplete AST-based sandboxing and runtime enforcement gaps.

Fixes have been released, and mitigation guidance includes updating, rotating secrets, and restricting workflow permissions.

Source: https://www.bleepingcomputer.com/news/security/critical-n8n-flaws-disclosed-along-with-public-exploits/

💬 What lessons does this case offer for securing automation platforms?

➕ Follow TechNadu for accurate, vendor-neutral infosec reporting.

#Infosec #CVE #n8n #SandboxEscape #RCE #CloudSecurity #DevSecOps

n8n : la faille critique CVE-2026-25049 réactive une précédente vulnérabilité https://www.it-connect.fr/n8n-cve-2026-25049-execution-code-a-distance/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

It seems that the recent #n8n CVE-2026-25049 is (EDIT: or was? My e-mail got answered with a generic response by an AI assistant) not only exploitable on self-hosted instances, but also in the n8n cloud. At least this is what the URL briefly visible in this video indicates. https://www.youtube.com/watch?v=QLrm7jx8kew (skip to 0:15 for a clear shot).

Critical Sandbox Escapes in n8n AI Platform Enable Full Server Takeover

n8n patched another critical sandbox escape vulnerabilities (CVE-2026-25049) that allow authenticated users to execute arbitrary code and steal sensitive AI and cloud credentials.

**This is another important and urgent flaw in n8n. Update your n8n instances to the latest version ASAP and rotate all stored API keys and encryption secrets. Since these flaws allow full server takeover, you must assume any credentials stored in an unpatched instance are already compromised.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-sandbox-escapes-in-n8n-ai-platform-enable-full-server-takeover-h-k-y-o-v/gD2P6Ple2L

Yet another critical vulnerability in n8n - CVE-2026-25049 (CVSS 9.4).

Vulnerability detection script here:
https://github.com/rxerium/rxerium-templates/blob/main/2026/CVE-2026-25049.yaml

Patched versions are 1.123.17 / 2.5.2 as per:
https://github.com/n8n-io/n8n/security/advisories/GHSA-6cqr-8cfr-67f8

Critical RCE Alert: n8n Workflow Automation Hit by Severe Vulnerability Allowing System Takeover

The popular workflow automation platform n8n has been rocked by a critical security flaw that could let attackers execute arbitrary system commands on affected servers. Tracked as CVE-2026-25049 with a high CVSS score of 9.4, the vulnerability stems from insufficient input sanitization—despite previous fixes for CVE-2025-68613, a similar high-severity flaw patched in…

https://undercodenews.com/critical-rce-alert-n8n-workflow-automation-hit-by-severe-vulnerability-allowing-system-takeover/

🔴 CVE-2026-25049 - Critical (9.9)

n8n is an open source workflow automation platform. Prior to versions 1.123.17 and 2.5.2, an authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system comma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25049/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Collectively tracked as CVE-2026-25049, the issues can be exploited by any authenticated user who can create or edit workflows on the platform to perform unrestricted remote code execution on the n8n server. https://www.bleepingcomputer.com/news/security/critical-n8n-flaws-disclosed-along-with-public-exploits/

CVE-2026-25049 highlights weaknesses in sandboxing user-defined JavaScript expressions within n8n workflows.

Multiple research teams demonstrated authenticated sandbox escape leading to unrestricted RCE, credential exposure, filesystem access, cloud pivoting, and AI workflow manipulation. The issue stems from incomplete AST-based sandboxing and runtime enforcement gaps.

Fixes have been released, and mitigation guidance includes updating, rotating secrets, and restricting workflow permissions.

Source: https://www.bleepingcomputer.com/news/security/critical-n8n-flaws-disclosed-along-with-public-exploits/

💬 What lessons does this case offer for securing automation platforms?

➕ Follow TechNadu for accurate, vendor-neutral infosec reporting.

#Infosec #CVE #n8n #SandboxEscape #RCE #CloudSecurity #DevSecOps

n8n : la faille critique CVE-2026-25049 réactive une précédente vulnérabilité https://www.it-connect.fr/n8n-cve-2026-25049-execution-code-a-distance/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

It seems that the recent #n8n CVE-2026-25049 is (EDIT: or was? My e-mail got answered with a generic response by an AI assistant) not only exploitable on self-hosted instances, but also in the n8n cloud. At least this is what the URL briefly visible in this video indicates. https://www.youtube.com/watch?v=QLrm7jx8kew (skip to 0:15 for a clear shot).

Critical Sandbox Escapes in n8n AI Platform Enable Full Server Takeover

n8n patched another critical sandbox escape vulnerabilities (CVE-2026-25049) that allow authenticated users to execute arbitrary code and steal sensitive AI and cloud credentials.

**This is another important and urgent flaw in n8n. Update your n8n instances to the latest version ASAP and rotate all stored API keys and encryption secrets. Since these flaws allow full server takeover, you must assume any credentials stored in an unpatched instance are already compromised.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-sandbox-escapes-in-n8n-ai-platform-enable-full-server-takeover-h-k-y-o-v/gD2P6Ple2L

2026: New N8N RCE Deep Dive into CVE-2026-25049 https://blog.securelayer7.net/cve-2026-25049/

‼️CVE-2026-25049: N8n AI Workflow Remote Code Execution

"This vulnerability allows an attacker to execute arbitrary system commands through misconfigured or insecure AI workflow execution paths. When chained correctly, it can lead to full server compromise depending on deployment configuration."

Video Credit: youtube.com/@SecureLayer7

🔴 CVE-2026-25539 - Critical (9.1)

SiYuan is a personal knowledge management system. Prior to version 3.5.5, the /api/file/copyFile endpoint does not validate the dest parameter, allowing authenticated users to write files to arbitrary locations on the filesystem. This can lead to ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25539/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25237 - Critical (9.8)

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches the eval...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25237/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25237 - Critical (9.8)

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches the eval...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25237/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25240 - Critical (9.8)

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability can occur in user::maintains() when role filters are provided as an array and interpolated into an IN (...) clause. Thi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25240/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25240 - Critical (9.8)

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability can occur in user::maintains() when role filters are provided as an array and interpolated into an IN (...) clause. Thi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25240/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-46651 - Critical (9.1)

Tiny File Manager through 2.6 contains a server-side request forgery (SSRF) vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-46651/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25546 - High (7.8)

Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlle...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25546/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25546 - High (7.8)

Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlle...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25546/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71031 - High (7.5)

Water-Melon Melon commit 9df9292 and below is vulnerable to Denial of Service. The HTTP component doesn't have any maximum length. As a result, an excessive request header could cause a denial of service by consuming RAM memory.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71031/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71031 - High (7.5)

Water-Melon Melon commit 9df9292 and below is vulnerable to Denial of Service. The HTTP component doesn't have any maximum length. As a result, an excessive request header could cause a denial of service by consuming RAM memory.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71031/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-67188 - Critical (9.8)

A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the /lib/cste_modules/ipv6.so module. The function fails to properly validate the length of the user-controlled ra...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67188/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-67188 - Critical (9.8)

A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the /lib/cste_modules/ipv6.so module. The function fails to properly validate the length of the user-controlled ra...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67188/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-67189 - Critical (9.8)

A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The urlKeyword parameter is not properly validated, and the function concatenates multiple user-controlled fields into a fixed-siz...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67189/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-67189 - Critical (9.8)

A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The urlKeyword parameter is not properly validated, and the function concatenates multiple user-controlled fields into a fixed-siz...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67189/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13379 - High (8.6)

IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13379/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13379 - High (8.6)

IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13379/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-61732 - High (8.6)

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-61732/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-61732 - High (8.6)

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-61732/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-61732 - High (8.6)

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-61732/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-61732 - High (8.6)

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-61732/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22038 - High (8.1)

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autogpt-platform-beta-v0.6.46, the AutoGPT platform's Stagehand integration blocks log API ke...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22038/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25582 - High (7.8)

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow (read) vulnerability in CIccIO::WriteUInt16Float...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25582/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-13375 - Critical (9.8)

IBM Common Cryptographic Architecture (CCA) 7.5.52 and 8.4.82 could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13375/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24844 - High (7.9)

melange allows users to build apk packages using declarative pipelines. From version 0.3.0 to before 0.40.3, an attacker who can provide build input values, but not modify pipeline definitions, could execute arbitrary shell commands if the pipelin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24844/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25161 - High (8.8)

Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application contains path traversal vulnerability in multiple file operation handlers. An authenticated attacker can bypass dire...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25161/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25140 - High (7.5)

apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, an attacker who controls or compromises an APK repository used by apko could cause resource exhaustion on the build host. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25140/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20119 - High (7.5)

A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20119/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20119 - High (7.5)

A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20119/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25614 - High (7.5)

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25614/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

nginx-1.28.2 stable and nginx-1.29.5 mainline versions have been released, with a fix for the SSL upstream injection vulnerability (CVE-2026-1642).
http://nginx.org/#2026-02-04
#nginx #security

I’ve published a technical analysis of CVE-2025-11730, a Remote Code Execution vulnerability affecting ZYXEL ATP/USG Series devices running firmware 5.41.

The issue is caused by improper input sanitization in the DDNS profile configuration.
A crafted public-ip-url value allows arbitrary command execution as root during DDNS updates.

Technical details and PoC:
https://rainpwn.blog/blog/cve-2025-11730/

Affected: ZYXEL ATP/USG Series (fw 5.41)

#zyxel #vulnerability #exploit #rce

CVE-2025-11730: Remote Code Execution via DDNS configuration in ZYXEL ATP/USG Series (V5.41) https://rainpwn.blog/blog/cve-2025-11730/

CVE-2025-11730: Remote Code Execution via DDNS configuration in ZYXEL ATP/USG Series (V5.41) https://rainpwn.blog/blog/cve-2025-11730/

🟠 CVE-2025-10314 - High (8.8)

Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation FREQSHIP-mini for Windows versions 8.0.0 to 8.0.2 allows a local attacker to execute arbitrary code with system privileges by replacing service executable files (EXE) o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-10314/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25526 - Critical (9.8)

JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.3, JinJava is vulnerable to arbitrary Java execution via bypass through ForTag. This allows arbitrary Java ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25526/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13192 - High (8.2)

The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to generic SQL Injection via the multiple REST API endpoints in all versions up to, and including, 2.2.0 due ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13192/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24735 - High (7.5)

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer.

This issue affects Apache Answer: through 1.7.1.

An unauthenticated API endpoint incorrectly exposes full revision history for deleted content. Thi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24735/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25160 - Critical (9.1)

Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables TLS certificate verification by default for all outgoing storage driver communications, making the system v...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25160/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25160 - Critical (9.1)

Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. Prior to version 3.57.0, the application disables TLS certificate verification by default for all outgoing storage driver communications, making the system v...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25160/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25505 - Critical (9.8)

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Prior to version 0.1.7, a hardcoded secret key used for signing JWTs is checked into source code and ManyAPI routes do not check authentication. This issue ha...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25505/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Blip blop, I'm a #mastobot.
Here is a summary (in beta) of the latest posts in #technologyAtKukei https://masto.kukei.eu/browse/technology category:
- Agentic AI and multi-agent systems: OpenClaw, Moltbook, and Claude enabling autonomous planning and action.
- Moltbook security breach: exposure of 1.5M API keys and related risk.
- European AI sovereignty: Germany’s Munich KI Factory and the move toward sovereign, EU-led AI infrastructure.
- AI security and CVEs: OpenClaw CVE-2026-25157; [1/2]

🟠 CVE-2026-25157 - High (7.7)

OpenClaw is a personal AI assistant. Prior to version 2026.1.29, there is an OS command injection vulnerability via the Project Root Path in sshNodeCommand. The sshNodeCommand function constructed a shell script without properly escaping the user-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25157/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25157 - High (7.7)

OpenClaw is a personal AI assistant. Prior to version 2026.1.29, there is an OS command injection vulnerability via the Project Root Path in sshNodeCommand. The sshNodeCommand function constructed a shell script without properly escaping the user-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25157/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Melange CVE-2026-25143 and related patch/defense concerns.
- Google Gemini growth: Gemini app surpassing 750M monthly active users; Pixel 10a launch teased.
- Artemis II launch update: NASA targets March for Artemis II lunar mission, with new windows. [2/2]

🟠 CVE-2026-25143 - High (7.8)

melange allows users to build apk packages using declarative pipelines. From version 0.10.0 to before 0.40.3, an attacker who can influence inputs to the patch pipeline could execute arbitrary shell commands on the build host. The patch pipeline i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25143/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25143 - High (7.8)

melange allows users to build apk packages using declarative pipelines. From version 0.10.0 to before 0.40.3, an attacker who can influence inputs to the patch pipeline could execute arbitrary shell commands on the build host. The patch pipeline i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25143/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25121 - High (7.5)

apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.1, a path traversal vulnerability was discovered in apko's dirFS filesystem abstraction. An attacker who can supply a malicious ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25121/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24884 - High (8.4)

Compressing is a compressing and uncompressing lib for node. In version 2.0.0 and 1.10.3 and prior, Compressing extracts TAR archives while restoring symbolic links without validating their targets. By embedding symlinks that resolve outside the i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24884/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24843 - High (8.2)

melange allows users to build apk packages using declarative pipelines. In version 0.11.3 to before 0.40.3, an attacker who can influence the tar stream from a QEMU guest VM could write files outside the intended workspace directory on the host. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24843/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23897 - High (7.5)

Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client. In versions from 2.0.0 to 3.13.0, 4.2.0 to before 4.13.0, and 5.0.0 to before 5.4.0, the default configuration of st...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23897/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0536 - High (7.8)

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0536/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-69620 - High (7.5)

A path traversal in Moo Chan Song v4.5.7 allows attackers to cause a Denial of Service (DoS) via writing files to the internal storage.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69620/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-59439 - High (7.5)

An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. Incorrect handling of NAS Registration messages leads to a Denial of Service because of Improper ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-59439/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-69875 - High (7.8)

A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privileged local user to restore quarantined files into p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69875/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-70841 - Critical (10)

Dokans Multi-Tenancy Based eCommerce Platform SaaS 3.9.2 allows unauthenticated remote attackers to obtain sensitive application configuration data via direct request to /script/.env file. The exposed file contains Laravel application encryption k...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70841/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25027 - High (7.5)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Unicamp unicamp allows PHP Local File Inclusion.This issue affects Unicamp: from n/a through <= 2.7.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25027/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-24514 #devopsish #kubernetes #cve https://github.com/kubernetes/kubernetes/issues/136680

CVE-2026-24513 #devopsish #kubernetes #cve https://github.com/kubernetes/kubernetes/issues/136679

💡 CVE-2026-24512: la vulnerabilità di ingress-NGINX che minaccia i cluster Kubernetes

https://gomoot.com/cve-2026-24512-la-vulnerabilita-di-ingress-nginx-che-minaccia-i-cluster-kubernetes/

#news #sicurezza #tech

🟠 CVE-2026-24512 - High (8.8)

A security issue was discovered in ingress-nginx cthe `rules.http.paths.path` Ingress field can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24512/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-24512 #devopsish #kubernetes #cve https://github.com/kubernetes/kubernetes/issues/136678

🔴 CVE-2026-25052 - Critical (9.9)

n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to create or modify workflows to read sensitive files from the n8n hos...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25052 - Critical (9.9)

n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authenticated users with permission to create or modify workflows to read sensitive files from the n8n hos...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-64712 - Critical (9.8)

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partition_msg functi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-64712/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-61917 - High (7.7)

n8n is an open source workflow automation platform. From version 1.65.0 to before 1.114.3, the use of Buffer.allocUnsafe() and Buffer.allocUnsafeSlow() in the task runner allowed untrusted code to allocate uninitialized memory. Such uninitialized ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-61917/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25115 - Critical (9.9)

n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25115/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25115 - Critical (9.9)

n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25115/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25056 - High (8.8)

n8n is an open source workflow automation platform. Prior to versions 1.118.0 and 2.4.0, a vulnerability in the Merge node's SQL Query mode allowed authenticated users with permission to create or modify workflows to write arbitrary files to the n...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25056/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25056 - High (8.8)

n8n is an open source workflow automation platform. Prior to versions 1.118.0 and 2.4.0, a vulnerability in the Merge node's SQL Query mode allowed authenticated users with permission to create or modify workflows to write arbitrary files to the n...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25056/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-69970 - Critical (9.3)

FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The 'secureEnabled' flag is commented out by default, causing the application to initialize with authentication disabled. This allows unauthenticat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69970/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-69970 - Critical (9.3)

FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The 'secureEnabled' flag is commented out by default, causing the application to initialize with authentication disabled. This allows unauthenticat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69970/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25053 - Critical (9.9)

n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or read arbitr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25053/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25053 - Critical (9.9)

n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or read arbitr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25053/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-67187 - Critical (9.8)

A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface of /lib/cste_modules/firewall.so where the comment parameter is not properly validated for length.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67187/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-60865 - High (7.8)

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-60865/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-57529 - Critical (9.8)

YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-57529/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-66374 - High (7.8)

CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through policy elevation of an Administration task.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-66374/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20098 - High (8.8)

A vulnerability in the Certificate Management feature of Cisco Meeting Management could allow an authenticated, remote attacker to upload arbitrary files, execute arbitrary commands, and elevate privileges to root on an affected system.

This vu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20098/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20098 - High (8.8)

A vulnerability in the Certificate Management feature of Cisco Meeting Management could allow an authenticated, remote attacker to upload arbitrary files, execute arbitrary commands, and elevate privileges to root on an affected system.

This vu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20098/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0660 - High (7.8)

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0660/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0659 - High (7.8)

A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the cur...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0659/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0662 - High (7.8)

A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0537 - High (7.8)

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0537/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0537 - High (7.8)

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0537/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-59818 - Critical (10)

This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-59818/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-61506 - Critical (9.8)

An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upload endpoint.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-61506/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-63624 - Critical (9.8)

SQL Injection vulnerability in Shandong Kede Electronics Co., Ltd IoT smart water meter monitoring platform v.1.0 allows a remote attacker to execute arbitrary code via the imei_list.aspx file.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-63624/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-63372 - High (7.5)

Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-63372/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-65875 - High (8.8)

An arbitrary file upload vulnerability in the AddFont() function of FPDF v1.86 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-65875/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

‼️ CISA has added 4 vulnerabilities to the KEV Catalog

https://darkwebinformer.com/cisa-kev-catalog/

CVE-2025-40551: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CVE-2019-19006: Sangoma FreePBX Improper Authentication Vulnerability

CVE-2025-64328: Sangoma FreePBX OS Command Injection Vulnerability

CVE-2021-39935: GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

CISA has updated the KEV catalogue.

- CVE-2019-19006: Sangoma FreePBX Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2019-19006

- CVE-2025-64328: Sangoma FreePBX OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-64328

- CVE-2021-39935: GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability https://www.cve.org/CVERecord?id=CVE-2021-39935 #CISA #infosec #GitLab #vulnerability

CVE ID: CVE-2025-64328
Vendor: Sangoma
Product: FreePBX
Date Added: 2026-02-03
Notes: https://github.com/FreePBX/security-reporting/security/advisories/GHSA-vm9p-46mv-5xvw ; https://nvd.nist.gov/vuln/detail/CVE-2025-64328
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-64328

🔴 CVE-2026-25510 - Critical (9.9)

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Exe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25510/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25510 - Critical (9.9)

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.28.5.0, an authenticated user with file editor permissions can achieve Remote Code Exe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25510/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25150 - Critical (9.3)

Qwik is a performance focused javascript framework. Prior to version 1.19.0, a prototype pollution vulnerability exists in the formToObj() function within @builder.io/qwik-city middleware. The function processes form field names with dot notation ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25150/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-67186 - Critical (9.8)

TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/firewall.so. The vulnerability occurs because the `url` parameter is not properly validated for length, allowi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67186/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-14550 - High (7.5)

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
`ASGIRequest` allows a remote attacker to cause a potential denial-of-service via a crafted request with multiple duplicate headers.
Earlier, unsupported Django...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-14550/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-70560 - High (8.4)

Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70560/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Blip blop, I'm a #mastobot.
Here is a summary (in beta) of the latest posts in #programmingAtKukei https://masto.kukei.eu/browse/programming category:
- Xcode 26.3 adds agentic coding with Claude/Codex via MCP in the IDE
- AI agents security: OpenClaw and Moltbot/MCP ecosystems risk; need guardrails
- GnuPG/Gpg4win vulnerabilities enabling code execution and DoS (WID-SEC-2026-0231)
- Ingress-Nginx auth-url bypass vulnerability CVE-2026-1580 (Kubernetes)
- ZetaSQL renamed to GoogleSQL for public [1/2]

🟠 CVE-2026-1580 - High (8.8)

A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1580/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-1580 #devopsish #kubernetes #cve https://github.com/kubernetes/kubernetes/issues/136677

CVE-2026-1633 Missing Authentication for Critical Function (CWE-306) https://feedly.com/cve/CVE-2026-1633

Critical Authentication Bypass in End-of-Life Synectix LAN 232 TRIO Adapters

Synectix LAN 232 TRIO adapters contain a critical vulnerability (CVE-2026-1633) that allows unauthenticated remote attackers to take full control of the device. Because the manufacturer is out of business, no patches will be released.

**If you use these Synectix adapters, isolate them from the internet immediately because they have no password protection and will never be patched. Since the company is out of business, plan a replacement of the devices.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-authentication-bypass-in-end-of-life-synectix-lan-232-trio-adapters-j-r-d-l-z/gD2P6Ple2L

🔴 CVE-2026-1633 - Critical (10)

The Synectix LAN 232 TRIO 3-Port serial to ethernet adapter exposes its web management interface without requiring authentication, allowing unauthenticated users to modify critical device settings or factory reset the device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1633/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15368 - High (8.8)

The SportsPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.7.26 via shortcodes 'template_name' attribute. This makes it possible for authenticated attackers, with contributor-level and above ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15368/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1756 - High (8.8)

The WP FOFT Loader plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'WP_FOFT_Loader_Mimes::file_and_ext' function in all versions up to, and including, 2.1.39. This makes it possible for aut...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1756/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1861 - High (8.8)

Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1861/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25223 - High (7.5)

Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.2, a validation bypass vulnerability exists in Fastify where request body validation schemas specified by Content-Type can be completely circumvented. By appending...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25223/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25223 - High (7.5)

Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.2, a validation bypass vulnerability exists in Fastify where request body validation schemas specified by Content-Type can be completely circumvented. By appending...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25223/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24149 - High (7.8)

NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privilege...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24149/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24669 - High (7.8)

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an insecure password reset mechanism allows local attackers to reuse a valid password reset token after it has already been use...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24669/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24669 - High (7.8)

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an insecure password reset mechanism allows local attackers to reuse a valid password reset token after it has already been use...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24669/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-5329 - Critical (9.8)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection.This issue affects Delta Course Automation: through 04022026.

NOTE: The vend...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-5329/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15285 - High (7.5)

The SEO Flow by LupsOnline plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the checkBlogAuthentication() and checkCategoryAuthentication() functions in all versions up to, and including,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15285/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack