🔴 CVE-2026-71992 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71992/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71992 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71992/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71990 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can expl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71990/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71990 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for SSH configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can expl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71990/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71983 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parame...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71983 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parame...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71991 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71991/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MSI Radix AXE6600 routers (v781521) affected by CRITICAL CVE-2026-71991 🛡️. OS command injection via TelnetSSH enables remote root access. Restrict Telnet, segment devices, monitor for vendor fixes. https://radar.offseq.com/threat/cve-2026-71991-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-73b9d5ae919f36d2 #OffSeq #CVE202671991 #RouterSecurity

🔴 CVE-2026-71991 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows remote attackers to execute arbitrary commands on the affected device. Attackers can e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71991/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MSI Radix AXE6600 routers (v781521) affected by CRITICAL CVE-2026-71991 🛡️. OS command injection via TelnetSSH enables remote root access. Restrict Telnet, segment devices, monitor for vendor fixes. https://radar.offseq.com/threat/cve-2026-71991-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-73b9d5ae919f36d2 #OffSeq #CVE202671991 #RouterSecurity

MSI Radix AXE6600 v781521 suffers CRITICAL CVE-2026-71993 (CVSS 9.3): OS Command Injection via macfilter allows remote root access. Restrict remote access & monitor openvpn/macfilter activity. Details: https://radar.offseq.com/threat/cve-2026-71993-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-d8e25db330470f39 #OffSeq #CVE #RouterSecurity #Infosec

🔴 CVE-2026-71993 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71993/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MSI Radix AXE6600 v781521 suffers CRITICAL CVE-2026-71993 (CVSS 9.3): OS Command Injection via macfilter allows remote root access. Restrict remote access & monitor openvpn/macfilter activity. Details: https://radar.offseq.com/threat/cve-2026-71993-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-d8e25db330470f39 #OffSeq #CVE #RouterSecurity #Infosec

🔴 CVE-2026-71993 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71993/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71989 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability thr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71989/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71989 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability thr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71989/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71988 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71988/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71988 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71988/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71987 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71987/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71987 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the alg function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71987/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71986 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71986/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71986 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71986/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71985 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71985/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71985 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the accesscontrol function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71985/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71984 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71984/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71984 - Critical (9.8)

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71984/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical Vulnerability in Network Device Firmware

📰 Original title: CVE-2026-11612

🤖 IA: It's not clickbait ✅
👥 Users: It's not clickbait ✅

View full AI summary https://en.killbait.com/critical-vulnerability-in-network-device-firmware.html?utm_source=mastodon_social&utm_medium=social&utm_campaign=killbait.mastodon_social

#technology #cve #security #vulnerability

🔴 CVE-2026-71955 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote attacker can inject arbitrary malicious commands into the localPin, ta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71955/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71955 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the /boafrm/formWsc interface. A remote attacker can inject arbitrary malicious commands into the localPin, ta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71955/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71958 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71958/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71958 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71958/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71954 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71954/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71954 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71954/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71948 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71948/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71948 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71948/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71957 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71957/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71957 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71957/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71956 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst fiel...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71956/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71956 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst fiel...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71956/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67620 - High (7.7)

Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud meta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67620/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67620 - High (7.7)

Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud meta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67620/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42170 - High (7.8)

A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel (bpp) value in the header, the loader allocates an undersized ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42170/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42170 - High (7.8)

A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel (bpp) value in the header, the loader allocates an undersized ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42170/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71950 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker can inject arbitrary malicious commands into the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71950/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71950 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formSmsManage interface. A remote attacker can inject arbitrary malicious commands into the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71950/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71949 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. A remote attacker can inject arbitrary malicious commands into the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71949/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71949 - Critical (9.8)

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command injection vulnerability in the /boafrm/formUSSDSetup interface. A remote attacker can inject arbitrary malicious commands into the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71949/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

[1/7]

Most impactful security incidents / vulnerabilities reported between the start‑date you gave (`{date_limit}`) and today (2026‑08‑08)

The list is ordered by the three priority tiers you asked for. Only the most serious findings are shown – routine AV updates, generic router patches or niche‑product fixes have been omitted.

---

🎯 PRIORITY 1 – Critical / High‑impact flaws (CVSS 7‑10):

CVE‑2026‑64561
• Linux kernel (all flavours – RHEL, Ubuntu, SLES, OpenSUSE, AlmaLinux, Rocky Linux, Oracle UEK, Amazon Linux)
• 6.12.0‑211.39.1.el10_2 and earlier kernels listed in the CVE entry (≈ 300+ package builds)
• 9.8 / 9.0 (critical)
• Remote code execution / privilege escalation via a kernel‑level memory‑corruption bug that is exploitable without authentication. Affects the core OS of virtually every modern server and cloud image.
• https://vulnerability.circl.lu/vuln/CVE-2026-64561

CVE‑2026‑64564
• Linux kernel (same families as above)
• 6.12.0‑211.39.1.el10_2 and earlier kernels (see CVE entry)
• 9.8 / 9.0
• Same class of flaw as 64561 – a separate but equally critical kernel memory bug.
• https://vulnerability.circl.lu/vuln/CVE-2026-64564

CVE‑2026‑66315
• Microsoft Edge (Chromium‑based) – rendering engine
• All Edge 115.x releases prior to the 2026‑08‑04 security update
• 7.5 (High) – “Use‑after‑free” that leads to remote code execution; actively exploited in the wild.
• A browser used by > 1 billion users; a successful exploit gives full system compromise.
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-52527

CVE‑2026‑71852
• Tenable Nessus plugin 333383 – unpatched_CVE_2026_71852.nasl (affects multiple Linux distributions)
• All Linux distros that ship the vulnerable library version listed in the plugin (e.g., Ubuntu 22.04, Debian 12, RHEL 9)
• 9.8 / 8.5 (Critical) – Remote code execution via crafted network traffic.
• The plugin shows a CVSS‑3.0 vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; the bug is present in core system libraries used by containers and cloud VMs.
• https://www.tenable.com/plugins/nessus/333383

#infosecnews

「18年前のLinux SCTPの脆弱性により、ローカルユーザーがroot権限を取得し、コンテナから脱出できる可能性 」： #TheHackerNews

「LinuxのSCTPネットワークコードに存在する解放済みメモリ使用のバグを悪用すると、ホスト上で完全なroot権限を取得できる可能性がある。Tencentの研究者らは、このバグを利用してコンテナから脱出し、その下にあるマシンにアクセスしたと述べている。

この脆弱性は2008年から存在していました。修正版は既にリリースされており、8月3日にリリースされた安定版カーネル7.1.6、6.18.42、6.12.101、6.6.148で修正されています。SCTP接続可能な古いカーネルを使用しているユーザーはアップデートしてください。

CVE-2026-64564 として追跡され 、 発見者によってSCTPhantom と名付けられたこの脆弱性は、カーネルCVEチームが割り当てた2日後の8月6日に公表された。 」

https://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.html

#prattohome

SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free · Tencent Zhuque Lab https://matrix.tencent.com/en/2026/08/06/sctphantom-CVE-2026-64564

「18年前のLinux SCTPの脆弱性により、ローカルユーザーがroot権限を取得し、コンテナから脱出できる可能性 」： #TheHackerNews

「LinuxのSCTPネットワークコードに存在する解放済みメモリ使用のバグを悪用すると、ホスト上で完全なroot権限を取得できる可能性がある。Tencentの研究者らは、このバグを利用してコンテナから脱出し、その下にあるマシンにアクセスしたと述べている。

この脆弱性は2008年から存在していました。修正版は既にリリースされており、8月3日にリリースされた安定版カーネル7.1.6、6.18.42、6.12.101、6.6.148で修正されています。SCTP接続可能な古いカーネルを使用しているユーザーはアップデートしてください。

CVE-2026-64564 として追跡され 、 発見者によってSCTPhantom と名付けられたこの脆弱性は、カーネルCVEチームが割り当てた2日後の8月6日に公表された。 」

https://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.html

#prattohome

SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free · Tencent Zhuque Lab https://matrix.tencent.com/en/2026/08/06/sctphantom-CVE-2026-64564

SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free https://lobste.rs/s/wdnet3 #linux #security #vibecoding
https://matrix.tencent.com/en/2026/08/06/sctphantom-CVE-2026-64564

#Debian stable has a fix now: linux-image-6.12.101+deb13-amd64

- sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)

#CVE_2026_64564

Yet another linux LPE to root. "CVE-2026-64564: Linux SCTP ASCONF transport UAF leading to local privilege escalation and container escape"

https://www.openwall.com/lists/oss-security/2026/08/06/3

#CVE_2026_64564 #infosec #cybersecurity

[1/7]

Most impactful security incidents / vulnerabilities reported between the start‑date you gave (`{date_limit}`) and today (2026‑08‑08)

The list is ordered by the three priority tiers you asked for. Only the most serious findings are shown – routine AV updates, generic router patches or niche‑product fixes have been omitted.

---

🎯 PRIORITY 1 – Critical / High‑impact flaws (CVSS 7‑10):

CVE‑2026‑64561
• Linux kernel (all flavours – RHEL, Ubuntu, SLES, OpenSUSE, AlmaLinux, Rocky Linux, Oracle UEK, Amazon Linux)
• 6.12.0‑211.39.1.el10_2 and earlier kernels listed in the CVE entry (≈ 300+ package builds)
• 9.8 / 9.0 (critical)
• Remote code execution / privilege escalation via a kernel‑level memory‑corruption bug that is exploitable without authentication. Affects the core OS of virtually every modern server and cloud image.
• https://vulnerability.circl.lu/vuln/CVE-2026-64561

CVE‑2026‑64564
• Linux kernel (same families as above)
• 6.12.0‑211.39.1.el10_2 and earlier kernels (see CVE entry)
• 9.8 / 9.0
• Same class of flaw as 64561 – a separate but equally critical kernel memory bug.
• https://vulnerability.circl.lu/vuln/CVE-2026-64564

CVE‑2026‑66315
• Microsoft Edge (Chromium‑based) – rendering engine
• All Edge 115.x releases prior to the 2026‑08‑04 security update
• 7.5 (High) – “Use‑after‑free” that leads to remote code execution; actively exploited in the wild.
• A browser used by > 1 billion users; a successful exploit gives full system compromise.
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-52527

CVE‑2026‑71852
• Tenable Nessus plugin 333383 – unpatched_CVE_2026_71852.nasl (affects multiple Linux distributions)
• All Linux distros that ship the vulnerable library version listed in the plugin (e.g., Ubuntu 22.04, Debian 12, RHEL 9)
• 9.8 / 8.5 (Critical) – Remote code execution via crafted network traffic.
• The plugin shows a CVSS‑3.0 vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; the bug is present in core system libraries used by containers and cloud VMs.
• https://www.tenable.com/plugins/nessus/333383

#infosecnews

Instale já a correção para vulnerabilidade em máquinas virtuais

Se você usa Proxmox ou apenas tem um VPS, atualize já seu sistema. O problema permite o escape de máquinas virtuais e acesso à máquina física.

Se usa Debian, saiu o kernel 6.12.101-1 que corrige o problema. O Proxmox também já lançou atualização mesmo para quem não é assinante com o kernel 7.0.14-9.

:debian: https://security-tracker.debian.org/tracker/CVE-2026-64561
:xp_secure_server: https://forum.proxmox.com/threads/proxmox-and-cve-2026-64561.185571/
:xp_sys_info: https://www.cve.org/CVERecord?id=CVE-2026-64561
:github: https://github.com/V4bel/Zapscape

@fediadminbr

#FediAdminBR #MastoAdmin

A new Linux Kernel KVM vulnerability threatens cloud servers with virtual machine escape risks. Learn about CVE-2026-64561 and secure your host machine now.

#LinuxKernel #KVMVulnerability #CVE202664561 #CloudSecurity #VMescape

https://securityexpress.info/linux-kernel-kvm-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

「Zapscape KVMの新たな脆弱性により、特権を持つL1ゲストコードがLinuxホストに漏洩する可能性 」： #TheHackerNews

「Linuxカーネルの新たな脆弱性「Zapscape」 により、L1ゲスト仮想マシン（VM）内でカーネル権限を持つ攻撃者がKVM分離を回避し、ホスト上でコードを実行できる可能性があります。このリスクは、ネストされた仮想化が信頼できないゲストに公開されている場合に発生します。

この脆弱性は CVE-2026-64561 として追跡されており、ネストされたゲストメモリ変換に使用されるシャドウページテーブルを管理するKVM/x86のシャドウメモリ管理ユニット（MMU）に影響を与えます。

このバグを明らかにしたセキュリティ研究者の キム・ヒョヌ氏 は、実証されたエクスプロイト経路によって、カーネル権限、つまりroot権限でホスト上でコマンドを実行できると述べた。 」

https://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html

#prattohome

CVE-2026-64561: Zapscape KVM Escape Runs Commands With Kernel Root Privilege, PoC Exploit Code Publicly Disclosed

https://securityonline.info/kvm-escape-vulnerability-zapscape/?utm_source=mastodon&utm_medium=jetpack_social

Not sure if I'm late to that party on this one or not. Guest to host escape in Linux KVM.

Zapscape (CVE-2026-64561)
Zapscape is a use-after-free vulnerability in the shadow MMU emulation of KVM/x86, specifically in the recursive zap path that runs when shadow pages are reclaimed. It can trigger the bug with guest-side actions alone to corrupt the host kernel's shadow page, and it can threaten the guest-host isolation of KVM/x86 hosts that accept untrusted guests and expose nested virtualization, particularly multi-tenant x86 public clouds.

https://github.com/V4bel/Zapscape

#Security #Linux #VIrtualization

Zapscape (CVE-2026-64561): Guest-to-Host Escape in KVM/x86

Link: https://github.com/V4bel/Zapscape
Discussion: https://news.ycombinator.com/item?id=49198843

🎉 Ah, yet another CVE! The thrilling tale of "Zapscape" is as exciting as watching paint dry, with #GitHub promising to stop leaks before they start 🔒. With a catchy name like CVE-2026-64561, it’s sure to stay in our nightmares forever. 🙄
https://github.com/V4bel/Zapscape #CVE2026 #Zapscape #cybersecurity #vulnerabilities #technews #HackerNews #ngated

Zapscape (CVE-2026-64561)

https://github.com/V4bel/Zapscape

Comments: https://news.ycombinator.com/item?id=49198843

#HackerNews #Zapscape #CVE-2026-64561 #cybersecurity #vulnerability #hackernews #open_source #software_security

Zapscape (CVE-2026-64561): Guest-to-Host Escape in KVM/x86

https://github.com/V4bel/Zapscape

#github

CVE-2026-14526: AI Copilot – Content Generator <=1.5.6 has a CRITICAL auth bypass. Unauth attackers can create WordPress admin users via an exposed nonce, leading to site takeover. Disable [aiwu-form]/chatbot & check for vendor patch. https://radar.offseq.com/threat/cve-2026-14526-cwe-269-improper-privilege-management-in-wupsales-ai-copilot-content-generator-735a53bb0d60cd45 #OffSeq #CVE202614526 #WordPress

🔴 CVE-2026-14526 - Critical (9.8)

The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This make...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14526/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-14526: AI Copilot – Content Generator <=1.5.6 has a CRITICAL auth bypass. Unauth attackers can create WordPress admin users via an exposed nonce, leading to site takeover. Disable [aiwu-form]/chatbot & check for vendor patch. https://radar.offseq.com/threat/cve-2026-14526-cwe-269-improper-privilege-management-in-wupsales-ai-copilot-content-generator-735a53bb0d60cd45 #OffSeq #CVE202614526 #WordPress

🔴 CVE-2026-14526 - Critical (9.8)

The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This make...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14526/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-16594: WP Directory Kit <1.5.5 has a HIGH severity info exposure flaw. Any authenticated user (even Subscribers) can access API keys/secrets due to missing authorization on AJAX action. Restrict user roles & monitor logs. https://radar.offseq.com/threat/cve-2026-16594-cwe-200-information-exposure-in-wp-directory-kit-3d8a39f4c5fd7c8a #OffSeq #WordPress #CVE

CVE-2026-16594: WP Directory Kit <1.5.5 has a HIGH severity info exposure flaw. Any authenticated user (even Subscribers) can access API keys/secrets due to missing authorization on AJAX action. Restrict user roles & monitor logs. https://radar.offseq.com/threat/cve-2026-16594-cwe-200-information-exposure-in-wp-directory-kit-3d8a39f4c5fd7c8a #OffSeq #WordPress #CVE

CVE-2026-16955: HIGH severity path traversal in AI Engine WP plugin <3.6.6. Subscribers can read arbitrary files if public API is enabled. Restrict API & admin privileges. Await patch. https://radar.offseq.com/threat/cve-2026-16955-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-ai-72905be644e71053 #OffSeq #WordPress #CVE2026_16955 #Security

CVE-2026-16955: HIGH severity path traversal in AI Engine WP plugin <3.6.6. Subscribers can read arbitrary files if public API is enabled. Restrict API & admin privileges. Await patch. https://radar.offseq.com/threat/cve-2026-16955-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-ai-72905be644e71053 #OffSeq #WordPress #CVE2026_16955 #Security

CVE-2026-16948 | HIGH severity in Solace Extra WP plugin <1.6.1: Missing capability checks on AJAX actions lets Subscribers change site settings & delete imported content. Patch status unknown — tighten role permissions. https://radar.offseq.com/threat/cve-2026-16948-cwe-284-improper-access-control-in-solace-extra-5877e08458999aac #OffSeq #WordPress #CVE2026_16948

CVE-2026-16948 | HIGH severity in Solace Extra WP plugin <1.6.1: Missing capability checks on AJAX actions lets Subscribers change site settings & delete imported content. Patch status unknown — tighten role permissions. https://radar.offseq.com/threat/cve-2026-16948-cwe-284-improper-access-control-in-solace-extra-5877e08458999aac #OffSeq #WordPress #CVE2026_16948

🟠 CVE-2026-8325 - High (7.8)

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8325/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔵 THREAT INTELLIGENCE

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

Vulnerability | CRITICAL
CVEs: CVE-2026-8037

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress Kemp LoadMaster...

Full analysis:
https://www.yazoul.net/news/article/progress-kemp-loadmaster-flaw-hits-cisa-kev-after-792-reported-exploit-attempts

by Yazoul AI

#ThreatIntel #SecurityNews #IncidentResponse

CISA Sounds the Alarm on Progress LoadMaster: Critical CVE-2026-8037 Is Now Under Active Exploitation + Video

A New Warning for Internet-Facing Infrastructure A dangerous vulnerability in Progress Kemp LoadMaster appliances has moved from a serious security concern to an urgent exploitation threat. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-8037 to its Known Exploited Vulnerabilities (KEV) catalog, signaling that attackers are…

https://undercodenews.com/cisa-sounds-the-alarm-on-progress-loadmaster-critical-cve-2026-8037-is-now-under-active-exploitation-video/?utm_source=mastodon&utm_medium=jetpack_social

Critical Progress Kemp LoadMaster Flaw Under Active Attack: CVE-2026-8037 Puts Enterprise Infrastructure at Risk + Video

Introduction: The Infrastructure Behind the Network Is Now in the Crosshairs Some of the most dangerous vulnerabilities are not found in the applications employees use every day. They are buried inside the infrastructure that quietly keeps those applications available. Load balancers are a perfect example. They sit between users and backend servers,…

https://undercodenews.com/critical-progress-kemp-loadmaster-flaw-under-active-attack-cve-2026-8037-puts-enterprise-infrastructure-at-risk-video/?utm_source=mastodon&utm_medium=jetpack_social

CRITICAL THREAT ALERT: Active exploitation of CVE-2026-8037 in Progress LoadMaster allows unauthenticated RCE via command injection. Securing your perimeter requires immediate SIEM detection updates and access restrictions. Review our full TSUITE analysis: https://thecybermind.co/5yde

CRITICAL THREAT ALERT: Active exploitation of CVE-2026-8037 in Progress LoadMaster allows unauthenticated RCE via command injection. Securing your perimeter requires immediate SIEM detection updates and access restrictions. Review our full TSUITE analysis: https://thecybermind.co/5yde

🚨 [CISA-2026:0807] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-8037 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8037)
- Name: Progress LoadMaster Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Progress
- Product: LoadMaster
- Notes: https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-8037

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260807 #cisa20260807 #cve_2026_8037 #cve20268037

CVE ID: CVE-2026-8037
Vendor: Progress
Product: LoadMaster
Date Added: 2026-08-07
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-8037

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

If you missed these yesterday.

"Three of the issues, CVE-2026-63508, CVE-2026-56162, and CVE-2026-65667, have a maximum severity rating of 10/10."

Security Week: Microsoft, Apple Release Fresh Security Updates https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/ #Microsoft #Apple #infosec #vylnerability #Apple

🔴 CVE-2026-71560 - Critical (9.1)

Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.

This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71560/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71560 - Critical (9.1)

Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.

This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71560/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71559 - High (7.5)

Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic.

This issue aff...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71559/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71559 - High (7.5)

Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic.

This issue aff...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71559/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71558 - Critical (9.8)

Heap type confusion vulnerability in Apache Fory C++ deserialization.

This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass type compatibility checks during polymorphic smart-pointer deserializat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71558/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71558 - Critical (9.8)

Heap type confusion vulnerability in Apache Fory C++ deserialization.

This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass type compatibility checks during polymorphic smart-pointer deserializat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71558/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52880 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are vulnerable to a remotely triggerable denial of service. Both REST APIs are started with the Gin Engine.Run convenience method, which serv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52880/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52880 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are vulnerable to a remotely triggerable denial of service. Both REST APIs are started with the Gin Engine.Run convenience method, which serv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52880/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52878 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawD...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52878/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52878 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawD...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52878/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20347 - High (7.5)

A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerabili...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20347/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20347 - High (7.5)

A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerabili...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20347/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-16258 - Critical (9.8)

The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing unauthenticated attackers to perform PHP Object Injection. When a suitable POP chain is present via another installed Ajax Searc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16258/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-16258 - Critical (9.8)

The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing unauthenticated attackers to perform PHP Object Injection. When a suitable POP chain is present via another installed Ajax Searc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16258/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15361 - High (8.1)

The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query, allowing any authenticated user, including Subscrib...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15361/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15361 - High (8.1)

The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query, allowing any authenticated user, including Subscrib...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15361/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-63235 - High (7.5)

In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients send invalid CONNECT packets - either due to repeated attempts or failed authentication - the server...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-63235/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-63235 - High (7.5)

In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients send invalid CONNECT packets - either due to repeated attempts or failed authentication - the server...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-63235/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15215 - High (8.8)

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify the user's capability before installing and activating a Subscriptions for WooCommerce WordPress plugin before 2.0.1 from a user-supplied slug through a nonce-protecte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15215/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15215 - High (8.8)

The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify the user's capability before installing and activating a Subscriptions for WooCommerce WordPress plugin before 2.0.1 from a user-supplied slug through a nonce-protecte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15215/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-43622 - High (7.8)

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() deallocates it using the C++ delete operator, causing heap metadata co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-50540 - Critical (9.6)

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated config...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50540/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-50540 - Critical (9.6)

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated config...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50540/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48169 - High (8.8)

PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two authorization failures that together break workspace isolation. The service layer for issues and projects performs global primary-key lookups w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48169/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62296 - High (7.5)

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, so a deeply nested text.div narrative triggers unbounded recursion...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62296/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62296 - High (7.5)

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, so a deeply nested text.div narrative triggers unbounded recursion...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62296/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15972 - High (7.5)

Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of service through unbounded connection acceptance on the external gRPC listeners. A remote attacker may exhaust agent file descriptors...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15972/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15972 - High (7.5)

Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of service through unbounded connection acceptance on the external gRPC listeners. A remote attacker may exhaust agent file descriptors...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15972/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

pipeboard-co meta-ads-mcp (<1.0.109) affected by CRITICAL auth bypass (CVE-2026-48039). Unauthenticated requests can access tools & leak access tokens via error responses. Patch to 1.0.109+ ASAP. https://radar.offseq.com/threat/cve-2026-48039-cwe-287-improper-authentication-in-pipeboard-co-meta-ads-mcp-cda3b9551f498ab7 #OffSeq #CVE202648039 #infosec #vuln

🔴 CVE-2026-48039 - Critical (9.1)

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integration.py:272` unconditionally forwards unauthenticated Streamable HTTP r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48039/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

pipeboard-co meta-ads-mcp (<1.0.109) affected by CRITICAL auth bypass (CVE-2026-48039). Unauthenticated requests can access tools & leak access tokens via error responses. Patch to 1.0.109+ ASAP. https://radar.offseq.com/threat/cve-2026-48039-cwe-287-improper-authentication-in-pipeboard-co-meta-ads-mcp-cda3b9551f498ab7 #OffSeq #CVE202648039 #infosec #vuln

🔴 CVE-2026-48039 - Critical (9.1)

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dispatch()` at `http_auth_integration.py:272` unconditionally forwards unauthenticated Streamable HTTP r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48039/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70638 - High (7.8)

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multiplies sizeof(llama_seq_id) by an attacker-controlled n_seq_max parameter without overflow validati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70638/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-64637 - Critical (9.9)

Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64637/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-64637 (CRITICAL, CVSS 9.9): WebPros Plesk <18.0.80 allows authenticated resellers to escalate privileges to root via XML-RPC API. Patch not confirmed — restrict access, monitor API use. https://radar.offseq.com/threat/cve-2026-64637-cwe-269-improper-privilege-management-in-webpros-plesk-ea44a21d820141d3 #OffSeq #Plesk #Vuln #PrivilegeEscalation

🔴 CVE-2026-64637 - Critical (9.9)

Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64637/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-64637 (CRITICAL, CVSS 9.9): WebPros Plesk <18.0.80 allows authenticated resellers to escalate privileges to root via XML-RPC API. Patch not confirmed — restrict access, monitor API use. https://radar.offseq.com/threat/cve-2026-64637-cwe-269-improper-privilege-management-in-webpros-plesk-ea44a21d820141d3 #OffSeq #Plesk #Vuln #PrivilegeEscalation

🟠 CVE-2026-64636 - High (7.7)

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-64636 - High (7.7)

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-20346 - ClamAV PDF parser memory corruption. Remote DoS via crafted PDFs. CVSS 7.5. Unpatched—monitor updates. #CVE #Cisco #infosec

https://www.valtersit.com/cve/CVE-2026-20346/

🟠 CVE-2026-20346 - High (7.5)

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20346/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20346 - High (7.5)

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20346/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16263 - High (8.8)

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Subscriber account to includ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16263/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16263 - High (8.8)

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Subscriber account to includ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16263/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16262 - High (7.5)

The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not bind its OAuth social login flow to the initiating user session, allowing an unauthenticated attacker to log a victim into an attacker-controlled account (login CSRF), so that t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16262/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16262 - High (7.5)

The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not bind its OAuth social login flow to the initiating user session, allowing an unauthenticated attacker to log a victim into an attacker-controlled account (login CSRF), so that t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16262/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16041 - High (7.5)

The MStore API WordPress plugin before 4.21.0 does not perform authorization or purchase-ownership checks on its REST product-review creation route, allowing an unauthenticated attacker to create WooCommerce product reviews with an attacker-chose...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16041/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16041 - High (7.5)

The MStore API WordPress plugin before 4.21.0 does not perform authorization or purchase-ownership checks on its REST product-review creation route, allowing an unauthenticated attacker to create WooCommerce product reviews with an attacker-chose...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16041/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-16038 - Critical (9.1)

The MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gateway before marking an order as paid on several of its payment-completion endpoints, allowing an unauthenticated attacker to mark an arbitrary order ful...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16038/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-16038 - Critical (9.1)

The MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gateway before marking an order as paid on several of its payment-completion endpoints, allowing an unauthenticated attacker to mark an arbitrary order ful...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16038/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62918 - High (7.5)

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62918/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65668 - High (8.8)

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65668/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71851 - Critical RCE in crypto-js <4.0.0. Weak PRNG seeded from Math.random() breaks entropy, enabling key recovery. CVSS 9.0. Patch now. #CVE #infosec #crypto

https://www.valtersit.com/cve/CVE-2026-71851/

CVE-2026-71851 (CRITICAL, CVSS 9): brix crypto-js <4.0.0 uses weak RNG in WordArray.random(), risking private key recovery in wallet apps using BIP39. Upgrade to 4.0.0+ now. https://radar.offseq.com/threat/cve-2026-71851-cwe-331-insufficient-entropy-in-brix-crypto-js-e5283f6c465bd95e #OffSeq #CryptoJS #InfoSec #Vulnerability

🔴 CVE-2026-71851 - Critical (9)

crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random() using a custom variation of the Multiply-With-Carry pseudorandom number generator, seeded from Math....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71851/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71851 (CRITICAL, CVSS 9): brix crypto-js <4.0.0 uses weak RNG in WordArray.random(), risking private key recovery in wallet apps using BIP39. Upgrade to 4.0.0+ now. https://radar.offseq.com/threat/cve-2026-71851-cwe-331-insufficient-entropy-in-brix-crypto-js-e5283f6c465bd95e #OffSeq #CryptoJS #InfoSec #Vulnerability

🔴 CVE-2026-71851 - Critical (9)

crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random() using a custom variation of the Multiply-With-Carry pseudorandom number generator, seeded from Math....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71851/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16030 - High (8.1)

The MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signature of the token used to authenticate its phone-based login, allowing unauthenticated attackers who know a registered user's phone number to forge a t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16030/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16030 - High (8.1)

The MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signature of the token used to authenticate its phone-based login, allowing unauthenticated attackers who know a registered user's phone number to forge a t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16030/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MStore API WordPress plugin (<4.21.0) hit by CRITICAL vuln (CVE-2026-16030): improper phone token checks enable account takeover, incl. admins. Restrict endpoints & monitor logins until patched. https://radar.offseq.com/threat/cve-2026-16030-cwe-287-improper-authentication-in-mstore-api-799def1fc3890a44 #OffSeq #WordPress #CVE2026_16030 #Vuln

🟠 CVE-2026-14943 - High (7.5)

The Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content WordPress plugin before 2.8.4 does not restrict REST API access to authenticated users when a specific option is enabled, allowing unauthenticated visitors ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14943/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14943 - High (7.5)

The Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content WordPress plugin before 2.8.4 does not restrict REST API access to authenticated users when a specific option is enabled, allowing unauthenticated visitors ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14943/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-14205 - Critical (9.8)

The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid event and computes the price from the attacker-controlled quantity, allowing any authenticated user to create a completed book...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14205/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-14205 - Critical (9.8)

The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid event and computes the price from the attacker-controlled quantity, allowing any authenticated user to create a completed book...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14205/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70636 - High (7.5)

Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentication middleware defined in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-20339 - ClamAV PESpin integer overflow, memory corruption DoS. CVSS 7.5. Unpatched. Update/limit scanning exposure. #CVE #Cisco #infosec

https://www.valtersit.com/cve/CVE-2026-20339/

🟠 CVE-2026-20339 - High (7.5)

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerabili...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20339/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20339 - High (7.5)

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerabili...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20339/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

🟠 CVE-2026-20348 - High (7.5)

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20348/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20348 - High (7.5)

A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20348/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20345 - High (7.5)

A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20345/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20345 - High (7.5)

A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device.

This vulnerability ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20345/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20338 - High (7.5)

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

This vulnerability is due to improper memory handling when processing content in zip files durin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20338/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20338 - High (7.5)

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

This vulnerability is due to improper memory handling when processing content in zip files durin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20338/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

🟠 CVE-2026-68772 - High (8)

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68772/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-68772 - High (8)

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68772/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-20337 - Memory corruption in ClamAV ZIP parsing, out-of-bounds write DoS. CVSS 7.5. Unpatched. Update or mitigate immediately. #CVE #Cisco #infosec

https://www.valtersit.com/cve/CVE-2026-20337/

🟠 CVE-2026-20337 - High (7.5)

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

This vulnerability is due to improper boundary checks for content in zip files during scanning, ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20337/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-20337 - Memory corruption in ClamAV ZIP parsing, out-of-bounds write DoS. CVSS 7.5. Unpatched. Update or mitigate immediately. #CVE #Cisco #infosec

https://www.valtersit.com/cve/CVE-2026-20337/

🟠 CVE-2026-20337 - High (7.5)

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

This vulnerability is due to improper boundary checks for content in zip files during scanning, ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20337/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

🟠 CVE-2026-19191 - High (7.8)

A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\Program Files\StableBit\DrivePool\DrivePool.Service.exe of the component DrivePoolService. Such manipulation lead...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19191/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19191 - High (7.8)

A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\Program Files\StableBit\DrivePool\DrivePool.Service.exe of the component DrivePoolService. Such manipulation lead...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19191/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15816 - High (7.5)

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH opt...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15816/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical SSRF (CVE-2026-70332) in Microsoft SharePoint Online (CVSS 9.6) lets attackers send unauthorized network requests. Patch ASAP with the official fix: https://radar.offseq.com/threat/cve-2026-70332-cwe-918-server-side-request-forgery-ssrf-in-microsoft-microsoft-sharepoint-online-34600d2dd5541b7c #OffSeq #InfoSec #Microsoft #SSRF #CloudSecurity

🔴 CVE-2026-70332 - Critical (9.6)

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70332/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19264 - Critical (9.8)

Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19264/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-56793 - High (7.7)

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56793/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🏆 New Achievement! Patch Notes From Hell!

Version 2026.08 changelog: ADDED — Chinese-speaking threat actor manually planting reverse shells on Apache Tomcat servers via CVE-2026-34486, itself an incomplete fix for the 9.8-rated CVE-2026-29146. ADDED — unauthenticated admin account hijacking on N-able's N-central via CVE-2026-18576. ADDED — critical 9.8-rated remote code execution at root on IBM Langflow via CVE-2026-9198. (1/2)

CISA Reports Active Exploitation of Apache Tomcat RCE Vulnerability

CISA reports active exploitation of an Apache Tomcat vulnerability (CVE-2026-34486) to its KEV catalog after Chinese threat actors exploited a fail-open logic error in the EncryptInterceptor to achieve remote code execution.

**If you run Apache Tomcat with clustering enabled, upgrade ASAP to 9.0.117, 10.1.54, or 11.0.21 This flaw is being actively exploited and can give attackers full remote code execution on every node in the cluster. If you can't patch, make sure your cluster traffic ports are not reachable from the internet, check `server.xml` and `context.xml` to confirm EncryptInterceptor is active with no custom interceptors overriding it, and turn off plain HTTP in favour of HTTPS only.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-reports-active-exploitation-of-apache-tomcat-rce-vulnerability-t-a-b-r-8/gD2P6Ple2L

CVE-2026-54212: CRITICAL buffer overflow in Tobit TeamDavid Webbox API (≤ Rollout 524). Crafted JSON lets unauthenticated attackers crash servers; RCE possible if combined with other flaws. Restrict API, monitor activity. https://radar.offseq.com/threat/cve-2026-54212-cwe-787-out-of-bounds-write-in-tobit-laboratories-ag-teamdavid-2e946f5b4b7b0ab5 #OffSeq #CVE #bufferOverflow #infosec

CVE-2026-54213: CRITICAL improper access control in Tobit TeamDavid Webbox — public /internalRestart endpoint lets remote attackers trigger persistent DoS by shutting down servers. No patch yet. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-54213-cwe-284-improper-access-control-in-tobit-laboratories-ag-teamdavid-7d00f2efd17d315b #OffSeq #Cybersecurity #Vuln

Tobit TeamDavid (Webbox ≤ Rollout 524) hit by CRITICAL buffer overflow (CVE-2026-54211). Authenticated attackers can crash servers; possible RCE if stack canary is disclosed. Restrict access & monitor. No patch yet. https://radar.offseq.com/threat/cve-2026-54211-cwe-787-out-of-bounds-write-in-tobit-laboratories-ag-teamdavid-dd683c887b0f0b7a #OffSeq #Vulnerability #InfoSec

🟠 CVE-2026-49007 - High (7.5)

By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49007/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49007 - High (7.5)

By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49007/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9169 - High (8.8)

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH en...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9169/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-19195 - Local privilege escalation in V-Secure Jingyun Antivirus via ZyArk.sys improper access controls. CVSS 7.8. Exploit public, no patch. Update or isolate now. #CVE #infosec #cybersecurity

https://www.valtersit.com/cve/CVE-2026-19195/

🟠 CVE-2026-19192 - High (7.8)

A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file C:\DeepCool\resources\service\x64\DeepCoolDisplayService.exe. Performing a manipulation results in improper access controls. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19192/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19192 - High (7.8)

A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file C:\DeepCool\resources\service\x64\DeepCoolDisplayService.exe. Performing a manipulation results in improper access controls. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19192/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Whoa, macOS Sequoia 15.7.9 changes:

> An attacker on the network may be able to authenticate to Screen Sharing without valid credentials

https://xcancel.com/calif_io/status/2086022794840793454

> If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password.

Good thing it requires screen sharing to be enabled though.

CVE-2026-65400

macOS vulnerability: authenticate Screen Sharing without valid credentials

Calif 연구자가 macOS Screen Sharing이 활성화된 시스템에서 네트워크 공격자가 유효한 자격 증명 없이 임의 계정으로 로그인할 수 있다는 CVE-2026-65400 PoC를 공개했습니다. 설명대로라면 원격 데스크톱 접근 경로의 인증 우회로 이어지는 치명적 취약점이며, 개발용 macOS 워크스테이션·빌드 머신·원격 관리 호스트가 직접적인 영향권입니다. Apple은 macOS 26.6.1에서 이를 수정한 것으로 언급됐으며, 기술적 원인과 익스플로잇 상세 분석은 후속 공개 예정입니다. Screen Sharing을 사용 중인 조직은 즉시...

https://twitter.com/calif_io/status/2086022794840793454

CVE-2026-65400: macOS Screen Sharing Authentication Bypass Can Lead to Root-Level Remote Access

https://thecybersecguru.com/news/cve-2026-65400-macos-screen-sharing-authentication-bypass/

Whoa, macOS Sequoia 15.7.9 changes:

> An attacker on the network may be able to authenticate to Screen Sharing without valid credentials

https://xcancel.com/calif_io/status/2086022794840793454

> If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password.

Good thing it requires screen sharing to be enabled though.

CVE-2026-65400

If you missed these yesterday.

"Three of the issues, CVE-2026-63508, CVE-2026-56162, and CVE-2026-65667, have a maximum severity rating of 10/10."

Security Week: Microsoft, Apple Release Fresh Security Updates https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/ #Microsoft #Apple #infosec #vylnerability #Apple

🔴 CVE-2026-65667 - Critical (10)

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65667/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

If you missed these yesterday.

"Three of the issues, CVE-2026-63508, CVE-2026-56162, and CVE-2026-65667, have a maximum severity rating of 10/10."

Security Week: Microsoft, Apple Release Fresh Security Updates https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/ #Microsoft #Apple #infosec #vylnerability #Apple

CVE-2026-63508 (CRITICAL, CVSS 10): Microsoft Planetary Computer Pro (GeoCatalog) suffers from missing authentication, enabling remote privilege escalation. Immediate patching recommended. Details: https://radar.offseq.com/threat/cve-2026-63508-cwe-306-missing-authentication-for-critical-function-in-microsoft-microsoft-planetary-431bf04580187f39 #OffSeq #Vuln #Microsoft #Infosec

🔴 CVE-2026-63508 - Critical (10)

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63508/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-62873 (CRITICAL, CVSS 9.8) affects Microsoft 365 Admin Center: Improper cryptographic signature checks allow privilege escalation over the network. Microsoft has issued a fix — confirm your environment is patched. https://radar.offseq.com/threat/cve-2026-62873-cwe-347-improper-verification-of-cryptographic-signature-in-microsoft-microsoft-365-5fad3518811d36c2 #OffSeq #Microsoft365 #Vuln

🔴 CVE-2026-62873 - Critical (9.8)

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62873/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62896 - Critical (9.6)

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62896/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-68823 - Critical (9.1)

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68823/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59115 - Critical (9.9)

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59115/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-7406 - High (7.8)

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7406/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-62836 - Privilege escalation in Azure SQL Managed Instance via improper endpoint restriction. CVSS 8.7. Unpatched. Restrict network access and monitor. #CVE #Azure #infosec

https://www.valtersit.com/cve/CVE-2026-62836/

🟠 CVE-2026-62836 - High (8.7)

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62836/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59118 - Critical (9.3)

Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59118/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62830 - Critical (9.9)

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62830/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66709 - Critical (9.1)

Shop manager Remote Code Execution (RCE) in CTX Feed &lt;= 6.6.42 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66709/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-65575 - Critical (9.8)

Unauthenticated PHP Object Injection in Accalia &lt;= 1.5.3 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65575/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-3430 - High (8.6)

The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when the abandoned cart email is managed by creative mail.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3430/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18258 - High (8.8)

Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via prim...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18258/