🟠 CVE-2026-123607 - High (7.5)

Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. Upstream a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123607/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123607 - High (7.5)

Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. Upstream a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123607/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123608 - High (7.5)

Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder that allows remote attackers to exhaust CPU through quadratic-time name compression. Attackers can send malicious DNS messages with many re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123608/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123608 - High (7.5)

Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder that allows remote attackers to exhaust CPU through quadratic-time name compression. Attackers can send malicious DNS messages with many re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123608/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123606 - High (7.5)

The hickory-dns recursor in hickory-recursor 0.25.0-alpha.3 through 0.25.2 and hickory-resolver 0.26.0-alpha.1 before 0.26.2 iterates every out-of-bailiwick NS target lacking glue in a referral without any per-query work budget. Remote attackers c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123606/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123606 - High (7.5)

The hickory-dns recursor in hickory-recursor 0.25.0-alpha.3 through 0.25.2 and hickory-resolver 0.26.0-alpha.1 before 0.26.2 iterates every out-of-bailiwick NS target lacking glue in a referral without any per-query work budget. Remote attackers c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123606/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123605 - High (8.8)

Hickory DNS hickory-proto 0.1 through 0.25.0-alpha.3 and hickory-net before 0.26.2 contain a DNSSEC validation bypass because the validator verifies an RRSIG against the DNSKEY of whatever name appears in its Signer's Name field without checking t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123605/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123605 - High (8.8)

Hickory DNS hickory-proto 0.1 through 0.25.0-alpha.3 and hickory-net before 0.26.2 contain a DNSSEC validation bypass because the validator verifies an RRSIG against the DNSKEY of whatever name appears in its Signer's Name field without checking t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123605/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123604 - High (7.5)

Hickory DNS hickory-resolver 0.26.0-beta.1 before 0.26.2 contains an unbounded retry loop in NameServerPool::try_send, which re-queues truncated (TC) responses without checking the answering transport or counting iterations. A malicious authoritat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123604/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123604 - High (7.5)

Hickory DNS hickory-resolver 0.26.0-beta.1 before 0.26.2 contains an unbounded retry loop in NameServerPool::try_send, which re-queues truncated (TC) responses without checking the answering transport or counting iterations. A malicious authoritat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123604/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123616 - High (7.5)

imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that fails to validate the data_size field. Attackers can supply a crafted 23-byte ICO file declaring a ~4GB data_size to trigger memory exha...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123616/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123616 - High (7.5)

imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that fails to validate the data_size field. Attackers can supply a crafted 23-byte ICO file declaring a ~4GB data_size to trigger memory exha...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123616/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123615 - High (7.5)

imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader's BMP header reconstruction (vips_foreign_load_ico_header in vips/icoload.c) when an ICO entry declares a tiny data size, causing unvalidated header field...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123615/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123615 - High (7.5)

imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader's BMP header reconstruction (vips_foreign_load_ico_header in vips/icoload.c) when an ICO entry declares a tiny data size, causing unvalidated header field...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123615/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-114713 - High (8.6)

The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114713/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-114713 - High (8.6)

The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user on a network with two or more linked servers to inject server-to-server commands that ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114713/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123596 - High (8.8)

Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw in the validating recursor's NSEC handler that accepts parent-side ancestor-delegation NSEC records as proof of nonexiste...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123596/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123596 - High (8.8)

Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw in the validating recursor's NSEC handler that accepts parent-side ancestor-delegation NSEC records as proof of nonexiste...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123596/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

2026-W45 — Weekly Threat Roundup

🔓 OpenSSH 'SSHole' (CVE-2026-123158) was exploited within hours of disclosure, granting root access on Alpine Linux and other musl-based systems — patch immediately.
🤖 The ARTEX AI hacking framework is now a full threat ecosystem: exposed on 1,465 public servers, used to breach South Korean banks…

https://threatnoir.com/weekly/2026-w45

#infosec #cybersecurity #threatintel

🤖 AI generated summary

🐧 SIGINT // Linux Watch — 2026-11-08

An OpenSSH auth bypass on musl-based systems like Alpine and OpenWrt lets an attacker in with an absurdly long fake password when an account has a star in its password field. Glibc distros are reportedly spared. Patch your containers and routers before the weekend.

🔗 https://www.stepsecurity.io/blog/cve-2026-123158-sshhole-openssh-musl-password-bypass

#Linux #OpenSource #FOSS

2026-W45 — Weekly Threat Roundup

🔓 OpenSSH 'SSHole' (CVE-2026-123158) was exploited within hours of disclosure, granting root access on Alpine Linux and other musl-based systems — patch immediately.
🤖 The ARTEX AI hacking framework is now a full threat ecosystem: exposed on 1,465 public servers, used to breach South Korean banks…

https://threatnoir.com/weekly/2026-w45

#infosec #cybersecurity #threatintel

🤖 AI generated summary

imgproxy 4.0.0 – 4.0.15 hit by CRITICAL CVE-2026-123614: Integer overflow in ICO loader allows RCE or crashes via crafted images. Upgrade to 4.0.16+ ASAP! Severity: 9.8. Details: https://radar.offseq.com/threat/imgproxy-from-400-before-4016-contains-an-integer-overflow-in-the-ico-loader-that-allows-remote-ec5a1c3ac295b711 #OffSeq #imgproxy #CVE2026123614 #infosec

🔴 CVE-2026-123614 - Critical (9.8)

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. Attackers can submit a crafted ICO image whose data_size wraps the alloc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123614/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

imgproxy versions 4.0.0 – <4.0.16 impacted by CVE-2026-123614 (CRITICAL): Heap-based buffer overflow in ICO loader may allow remote code execution or DoS. Patch to 4.0.16+ now. 🔒 https://radar.offseq.com/threat/cve-2026-123614-heap-based-buffer-overflow-in-imgproxy-9b2b08ca2df50385 #OffSeq #imgproxy #Vuln #RCE

imgproxy 4.0.0 – 4.0.15 hit by CRITICAL CVE-2026-123614: Integer overflow in ICO loader allows RCE or crashes via crafted images. Upgrade to 4.0.16+ ASAP! Severity: 9.8. Details: https://radar.offseq.com/threat/imgproxy-from-400-before-4016-contains-an-integer-overflow-in-the-ico-loader-that-allows-remote-ec5a1c3ac295b711 #OffSeq #imgproxy #CVE2026123614 #infosec

🔴 CVE-2026-123614 - Critical (9.8)

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. Attackers can submit a crafted ICO image whose data_size wraps the alloc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123614/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

imgproxy versions 4.0.0 – <4.0.16 impacted by CVE-2026-123614 (CRITICAL): Heap-based buffer overflow in ICO loader may allow remote code execution or DoS. Patch to 4.0.16+ now. 🔒 https://radar.offseq.com/threat/cve-2026-123614-heap-based-buffer-overflow-in-imgproxy-9b2b08ca2df50385 #OffSeq #imgproxy #Vuln #RCE

🟠 CVE-2026-123595 - High (8.8)

Hickory DNS hickory-proto 0.25 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw in the validating recursor's NSEC3 handler, which matches the closest encloser by hash alone without checking the ty...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123595/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123595 - High (8.8)

Hickory DNS hickory-proto 0.25 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw in the validating recursor's NSEC3 handler, which matches the closest encloser by hash alone without checking the ty...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123595/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123588 - High (7.5)

The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2) caches an empty connection pool when it follows a referral with no glue records and all queries for the name servers' IP ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123588/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123588 - High (7.5)

The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2) caches an empty connection pool when it follows a referral with no glue records and all queries for the name servers' IP ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123588/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123586 - High (7.5)

Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. Attackers controlling two zones whose name servers refe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123586/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123586 - High (7.5)

Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. Attackers controlling two zones whose name servers refe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123586/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123580 - High (7.5)

Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 perform insufficient checks on NSEC3 record names during DNSSEC verification, comparing only the hashed label without confirming the record belongs to the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123580/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123580 - High (7.5)

Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 perform insufficient checks on NSEC3 record names during DNSSEC verification, comparing only the hashed label without confirming the record belongs to the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123580/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123577 - High (7.5)

Hickory DNS from 0.24.0 before 0.26.2 contains a resource exhaustion vulnerability that allows remote attackers to consume server memory via unbounded DoH request bodies. Attackers can send large request bodies over HTTP/2 or HTTP/3 to a DNS over ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123577/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123577 - High (7.5)

Hickory DNS from 0.24.0 before 0.26.2 contains a resource exhaustion vulnerability that allows remote attackers to consume server memory via unbounded DoH request bodies. Attackers can send large request bodies over HTTP/2 or HTTP/3 to a DNS over ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123577/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-123551: CRITICAL info disclosure in OpenAM (14.0.0 – <16.1.4). Unauth attackers can hijack user/admin sessions by stealing tokens via notification WebSocket. Upgrade to 16.1.4 ASAP. https://radar.offseq.com/threat/cve-2026-123551-insertion-of-sensitive-information-into-sent-data-in-openidentityplatform-openam-7f145d6caaffd75b #OffSeq #OpenAM #CVE2026123551 #infosec

CVE-2026-123551: CRITICAL info disclosure in OpenAM (14.0.0 – <16.1.4). Unauth attackers can hijack user/admin sessions by stealing tokens via notification WebSocket. Upgrade to 16.1.4 ASAP. https://radar.offseq.com/threat/cve-2026-123551-insertion-of-sensitive-information-into-sent-data-in-openidentityplatform-openam-7f145d6caaffd75b #OffSeq #OpenAM #CVE2026123551 #infosec

CRITICAL: CVE-2026-123550 in OpenIdentityPlatform OpenAM (<16.1.4) allows remote auth bypass via forged SAML assertions. Admin accounts & SSO at risk! Upgrade to 16.1.4+ ASAP. https://radar.offseq.com/threat/cve-2026-123550-authentication-bypass-by-spoofing-in-openidentityplatform-openam-94189135e339f134 #OffSeq #Infosec #SSO #IAM #CVE2026123550

CRITICAL: CVE-2026-123550 in OpenIdentityPlatform OpenAM (<16.1.4) allows remote auth bypass via forged SAML assertions. Admin accounts & SSO at risk! Upgrade to 16.1.4+ ASAP. https://radar.offseq.com/threat/cve-2026-123550-authentication-bypass-by-spoofing-in-openidentityplatform-openam-94189135e339f134 #OffSeq #Infosec #SSO #IAM #CVE2026123550

🟠 CVE-2026-104768 - High (7.5)

The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.0.4. This is due to missing privilege-ceiling validation...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104768/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104768 - High (7.5)

The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.0.4. This is due to missing privilege-ceiling validation...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104768/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-121379 - Critical (9.6)

The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile or team image before deleting it when a new image is uploaded, allowing users with a role as low as Subscriber to delete arbitrary ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121379/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-121379 - Critical (9.6)

The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile or team image before deleting it when a new image is uploaded, allowing users with a role as low as Subscriber to delete arbitrary ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121379/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-124060: CRITICAL buffer overflow in TOTOLINK CA300-PoE 6.2c.884 (CVSS 9.1) via UploadCustomModule in /cgi-bin/cstecgi.cgi. Public exploit code available — remote code execution risk. Restrict access, monitor. https://radar.offseq.com/threat/a-vulnerability-was-detected-in-totolink-ca300-poe-62c884-cve-2026-124060-3677ea413c6d382a #OffSeq #CVE2026124060 #IoTSecurity

🔴 CVE-2026-124060 - Critical (9.1)

A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124060/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-124060: CRITICAL buffer overflow in TOTOLINK CA300-PoE 6.2c.884 (CVSS 9.1) via UploadCustomModule in /cgi-bin/cstecgi.cgi. Public exploit code available — remote code execution risk. Restrict access, monitor. https://radar.offseq.com/threat/a-vulnerability-was-detected-in-totolink-ca300-poe-62c884-cve-2026-124060-3677ea413c6d382a #OffSeq #CVE2026124060 #IoTSecurity

🔴 CVE-2026-124060 - Critical (9.1)

A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124060/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-124058 - Critical (9.1)

A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ApCliKeyStr can lead to buffer overflow. The attack can be lau...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124058/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-124058 - Critical (9.1)

A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ApCliKeyStr can lead to buffer overflow. The attack can be lau...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124058/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-122001 - High (8.8)

The Komfortkasse for WooCommerce WordPress plugin before 1.4.9 does not properly validate the authenticity of REST API requests, overriding WordPress's own nonce verification so that a request forged in a logged-in administrator's browser is accep...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122001/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-122001 - High (8.8)

The Komfortkasse for WooCommerce WordPress plugin before 1.4.9 does not properly validate the authenticity of REST API requests, overriding WordPress's own nonce verification so that a request forged in a logged-in administrator's browser is accep...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122001/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-124059 - Critical (9.1)

A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124059/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-124059 - Critical (9.1)

A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124059/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-124057 - Critical (9.1)

A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument Key1Str1 results in buffer overflow. The attack can be ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124057/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-124057 - Critical (9.1)

A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument Key1Str1 results in buffer overflow. The attack can be ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124057/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-123966 - Critical (10)

A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. This manipulation of the argument deviceId causes heap-based buffer overflow. The att...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120984 - Critical (9.1)

A flaw was found in the Keycloak server's client management component. When a client is created or imported with authorization services enabled, the system fails to properly clear an internal session attribute used during the setup process. This a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120984/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-123961 - Critical (9.9)

A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123961/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-123961 - Critical (9.9)

A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123961/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118267 - High (8.1)

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Incorrect Authorization leading to Privilege Escalation in all versions up to, and including, 5.5.89 This is due to the plugin's ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118267/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104746 - High (8.1)

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the stm_listings_ajax_save_user_data function in all versions up to, and including...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104746/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104746 - High (8.1)

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the stm_listings_ajax_save_user_data function in all versions up to, and including...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104746/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-104014 - Critical (9.8)

The Naimur Email OTP Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.0. This is due to the plugin's password-reset finalization endpoint (the wp_ajax_nopriv_ceovw_updat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104014/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-104014 - Critical (9.8)

The Naimur Email OTP Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.0. This is due to the plugin's password-reset finalization endpoint (the wp_ajax_nopriv_ceovw_updat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104014/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-109991 - High (7.5)

The FunnelKit Payment Gateway for Stripe WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.15.0.2 via the 'order-pay (WP query var from /checkout/order-pay//)' parameter due ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109991/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103900 - High (8.1)

The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 7.1 This is due to the WPJAM_User_Signup::signup() function unpacking attacker-supplied `data[args]` from the AJAX POST body and merging i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103900/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103900 - High (8.1)

The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 7.1 This is due to the WPJAM_User_Signup::signup() function unpacking attacker-supplied `data[args]` from the AJAX POST body and merging i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103900/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107616 - High (7.5)

The Amelia plugin for WordPress is vulnerable to unauthorized access of attendee data due to a missing authorization check on the GetEventAttendeesCommandHandler::handle() function in versions up to, and including, 9.9.1. The handler only enforces...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107616/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107616 - High (7.5)

The Amelia plugin for WordPress is vulnerable to unauthorized access of attendee data due to a missing authorization check on the GetEventAttendeesCommandHandler::handle() function in versions up to, and including, 9.9.1. The handler only enforces...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107616/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104738 - High (8.1)

The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.10.2 via deserialization of untrusted input . This makes it possible for unauthenticate...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104738/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104738 - High (8.1)

The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.10.2 via deserialization of untrusted input . This makes it possible for unauthenticate...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104738/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-123957 - Critical (9.9)

A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotel...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123957/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-123957 - Critical (9.9)

A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotel...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123957/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66669 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in Suplugins Superb Addons: Blocks, Patterns &amp; Theme Designer superb-blocks allows Cross Site Request Forgery.This issue affects Superb Addons: Blocks, Patterns &amp; Theme Designer: from n/a thr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66669/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66669 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in Suplugins Superb Addons: Blocks, Patterns &amp; Theme Designer superb-blocks allows Cross Site Request Forgery.This issue affects Superb Addons: Blocks, Patterns &amp; Theme Designer: from n/a thr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66669/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-123958 - Critical (9.9)

A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer overflow. It is possible...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123958/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-123958 - Critical (9.9)

A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer overflow. It is possible...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123958/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔐 CVE-2026-109469

📊 CVSS: 10.0 · Critical
📅 11/07/2026, 12:17 AM
🛡️ CWE: CWE-639
📦 Affected: Microsoft Entra Device Registration
📚 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109469

🔗 https://hecate.pw/vulnerability/CVE-2026-109469

#cve #vulnerability #hecate

🔐 CVE-2026-109469

📊 CVSS: 10.0 · Critical
📅 11/07/2026, 12:17 AM
🛡️ CWE: CWE-639
📦 Affected: Microsoft Entra Device Registration
📚 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109469

🔗 https://hecate.pw/vulnerability/CVE-2026-109469

#cve #vulnerability #hecate

🐧 SIGINT // Ubuntu Watch — 2026-11-08

CVE-2026-109518 lets a MitM who controls HTTP traffic swap verified packages during download retries and get root. Every apt-driven homelab box and mirror is exposed. Patch APT now, prefer HTTPS mirrors, and stop trusting plain HTTP on untrusted networks.

🔗 https://thehackernews.com/2026/11/debian-and-ubuntu-apt-flaw-lets-mitm.html

#Ubuntu #Linux #infosec

The appliance sat at the edge, trusted by all, inspecting everything, and apparently trusted everyone back.

The court sentences all affected operators to immediately apply Barracuda's released patches for both CVE-2026-116606 and CVE-2026-111560, with no time off for good behavior. Proof-of-concept capability exists. Bailiff, clear the room.

Reward: You've received the Scales of Misfortune — a decorative item. It is not balanced. (2/3)

🏆 New Achievement! The Court Finds Your Perimeter Gateway Guilty!

Order in the court. The defendant, Barracuda Email Security Gateway, stands charged on two counts: CVE-2026-116606, an authentication weakness permitting unauthenticated modification of global configuration, and CVE-2026-111560, a co-conspirator of equal menace. Together they deliver pre-authentication remote root code execution. The evidence, presented by watchTowr Labs, is damning. (1/3)

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

The appliance sat at the edge, trusted by all, inspecting everything, and apparently trusted everyone back.

The court sentences all affected operators to immediately apply Barracuda's released patches for both CVE-2026-116606 and CVE-2026-111560, with no time off for good behavior. Proof-of-concept capability exists. Bailiff, clear the room.

Reward: You've received the Scales of Misfortune — a decorative item. It is not balanced. (2/3)

🏆 New Achievement! The Court Finds Your Perimeter Gateway Guilty!

Order in the court. The defendant, Barracuda Email Security Gateway, stands charged on two counts: CVE-2026-116606, an authentication weakness permitting unauthenticated modification of global configuration, and CVE-2026-111560, a co-conspirator of equal menace. Together they deliver pre-authentication remote root code execution. The evidence, presented by watchTowr Labs, is damning. (1/3)

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

The appliance sat at the edge, trusted by all, inspecting everything, and apparently trusted everyone back.

The court sentences all affected operators to immediately apply Barracuda's released patches for both CVE-2026-116606 and CVE-2026-111560, with no time off for good behavior. Proof-of-concept capability exists. Bailiff, clear the room.

Reward: You've received the Scales of Misfortune — a decorative item. It is not balanced. (2/3)

🏆 New Achievement! The Court Finds Your Perimeter Gateway Guilty!

Order in the court. The defendant, Barracuda Email Security Gateway, stands charged on two counts: CVE-2026-116606, an authentication weakness permitting unauthenticated modification of global configuration, and CVE-2026-111560, a co-conspirator of equal menace. Together they deliver pre-authentication remote root code execution. The evidence, presented by watchTowr Labs, is damning. (1/3)

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

The appliance sat at the edge, trusted by all, inspecting everything, and apparently trusted everyone back.

The court sentences all affected operators to immediately apply Barracuda's released patches for both CVE-2026-116606 and CVE-2026-111560, with no time off for good behavior. Proof-of-concept capability exists. Bailiff, clear the room.

Reward: You've received the Scales of Misfortune — a decorative item. It is not balanced. (2/3)

🏆 New Achievement! The Court Finds Your Perimeter Gateway Guilty!

Order in the court. The defendant, Barracuda Email Security Gateway, stands charged on two counts: CVE-2026-116606, an authentication weakness permitting unauthenticated modification of global configuration, and CVE-2026-111560, a co-conspirator of equal menace. Together they deliver pre-authentication remote root code execution. The evidence, presented by watchTowr Labs, is damning. (1/3)

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

IBM has further entered into evidence 29 additional CVEs, including CVE-2026-104339 — another unauthenticated remote code execution, again 9.8. Thirty-three counts total. A Metasploit module already names CVE-2026-93680, establishing prior art.

The defense rests. The server did not. Update Langflow to version 1.12.4, 1.12.5, or 1.13.0 immediately, or the court considers this a plea of no contest.

Reward: You've received a Subpoena of Suggested Patches — admissible in all jurisdictions. (2/3)

🏆 New Achievement! Exhibit A: Your Langflow Server Did This To Itself!

My client, the unauthorized attacker, submits the following: Langflow's authentication mechanism, as documented under CVE-2026-93680 (9.8, Critical), voluntarily failed to authenticate. The server's code generation controls, per CVE-2026-110186 (also 9.8), voluntarily executed arbitrary code. (1/3)

IBM has further entered into evidence 29 additional CVEs, including CVE-2026-104339 — another unauthenticated remote code execution, again 9.8. Thirty-three counts total. A Metasploit module already names CVE-2026-93680, establishing prior art.

The defense rests. The server did not. Update Langflow to version 1.12.4, 1.12.5, or 1.13.0 immediately, or the court considers this a plea of no contest.

Reward: You've received a Subpoena of Suggested Patches — admissible in all jurisdictions. (2/3)

🏆 New Achievement! Exhibit A: Your Langflow Server Did This To Itself!

My client, the unauthorized attacker, submits the following: Langflow's authentication mechanism, as documented under CVE-2026-93680 (9.8, Critical), voluntarily failed to authenticate. The server's code generation controls, per CVE-2026-110186 (also 9.8), voluntarily executed arbitrary code. (1/3)

🏆 New Achievement! Exhibit A: Your Langflow Server Did This To Itself!

My client, the unauthorized attacker, submits the following: Langflow's authentication mechanism, as documented under CVE-2026-93680 (9.8, Critical), voluntarily failed to authenticate. The server's code generation controls, per CVE-2026-110186 (also 9.8), voluntarily executed arbitrary code. (1/3)

🏆 New Achievement! Exhibit A: Your Langflow Server Did This To Itself!

My client, the unauthorized attacker, submits the following: Langflow's authentication mechanism, as documented under CVE-2026-93680 (9.8, Critical), voluntarily failed to authenticate. The server's code generation controls, per CVE-2026-110186 (also 9.8), voluntarily executed arbitrary code. (1/3)

IBM has further entered into evidence 29 additional CVEs, including CVE-2026-104339 — another unauthenticated remote code execution, again 9.8. Thirty-three counts total. A Metasploit module already names CVE-2026-93680, establishing prior art.

The defense rests. The server did not. Update Langflow to version 1.12.4, 1.12.5, or 1.13.0 immediately, or the court considers this a plea of no contest.

Reward: You've received a Subpoena of Suggested Patches — admissible in all jurisdictions. (2/3)

IBM has further entered into evidence 29 additional CVEs, including CVE-2026-104339 — another unauthenticated remote code execution, again 9.8. Thirty-three counts total. A Metasploit module already names CVE-2026-93680, establishing prior art.

The defense rests. The server did not. Update Langflow to version 1.12.4, 1.12.5, or 1.13.0 immediately, or the court considers this a plea of no contest.

Reward: You've received a Subpoena of Suggested Patches — admissible in all jurisdictions. (2/3)

MS Paint Remote Code Execution Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83844

CVE-2026-5410: Stored XSS in Redux Framework WordPress plugin (spinner field, user_meta_save bypass) up to 4.5.13. CVSS 6.4. Patch still under review - restrict plugin access and sanitize user meta now. #CVE #infosec #WordPress https://www.valtersit.com/cve/CVE-2026-5410/

CVE-2026-9289: WordLift WordPress plugin up to 3.54.10 leaks sensitive info via unauthenticated JSON-LD REST routes. CVSS 5.3, no patch yet - restrict API access until fixed. #CVE #infosec #WordPress https://www.valtersit.com/cve/CVE-2026-9289/

CVE-2026-15946: Search Atlas WordPress plugin (up to 2.6.23) allows subscriber-level users to hijack whitelabel settings via authorization bypass. CVSS 4.3. Patch still under review, so restrict subscriber accounts until a fix ships. https://www.valtersit.com/cve/CVE-2026-15946/

CVE-2026-11899: WooCommerce PDF Builder plugin authorization bypass (CVSS 4.3) lets subscriber-level users pull invoice data from arbitrary orders. Patch still under review, so limit access until fixed. #CVE #infosec #WordPress https://www.valtersit.com/cve/CVE-2026-11899/

CVE-2026-12402: Stored XSS in OTP Login & Register WooCommerce plugin up to 2.7.3 via fb-config setting. CVSS 4.4, unpatched. Update immediately. #CVE #WordPress #infosec https://www.valtersit.com/cve/CVE-2026-12402/

CVE-2026-1256: Stored XSS in YS LeadGen WordPress plugin via missing capability checks. Subscriber-level users can inject JS through popups. CVSS 6.4. Patch under review, so limit plugin access for now. #CVE #infosec #WordPress https://www.valtersit.com/cve/CVE-2026-1256/

CVE-2026-18346 TikTok WordPress plugin authorization bypass, CVSS 5.3. Unauthenticated attackers can overwrite merchant OAuth tokens and hijack the site's TikTok Business integration. No patch confirmed yet, so review or disable the plugin now. https://www.valtersit.com/cve/CVE-2026-18346/

CVE-2026-15947 (CVSS 4.3): missing capability check in Metasync WordPress plugin up to 2.6.23 lets low-priv users tamper with site-wide instant indexing settings via admin_init. Patch still under review, so limit admin access and watch for updates. https://www.valtersit.com/cve/CVE-2026-15947/

CVE-2026-1242 BlockSpare WordPress plugin authorization bypass (CVSS 4.3): an && vs || logic flaw lets Subscriber-level users create arbitrary posts. Unpatched. Restrict plugin access now. #CVE #infosec #WordPress https://www.valtersit.com/cve/CVE-2026-1242/

CVE-2026-1242 BlockSpare WordPress plugin authorization bypass (CVSS 4.3): an && vs || logic flaw lets Subscriber-level users create arbitrary posts. Unpatched. Restrict plugin access now. #CVE #infosec #WordPress https://www.valtersit.com/cve/CVE-2026-1242/