CVE-2026-120197 (CRITICAL, CVSS 9.4): WAVLINK WL-WN530HG4B routers have an OS command injection flaw in port_forward (/cgi-bin/wapi.cgi). Public exploit code exists. Restrict access, monitor devices, and check for updates. https://radar.offseq.com/threat/cve-2026-120197-os-command-injection-in-wavlink-wl-wn530hg4b-b13519810fe65740 #OffSeq #Vulnerability #IoTSecurity

CVE-2026-120197 (CRITICAL, CVSS 9.4): WAVLINK WL-WN530HG4B routers have an OS command injection flaw in port_forward (/cgi-bin/wapi.cgi). Public exploit code exists. Restrict access, monitor devices, and check for updates. https://radar.offseq.com/threat/cve-2026-120197-os-command-injection-in-wavlink-wl-wn530hg4b-b13519810fe65740 #OffSeq #Vulnerability #IoTSecurity

🔴 CVE-2026-120189 - Critical (10)

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120189/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120189: CRITICAL buffer overflow in D-Link DIR-505 v1.10B02 (TFTP handler). Remote, unauthenticated code execution possible. Exploit code public; patch unknown. Disable/restrict TFTP access ASAP. https://radar.offseq.com/threat/cve-2026-120189-stack-based-buffer-overflow-in-d-link-dir-505-3cde01417e371d27 #OffSeq #CVE #IoTSecurity

🔴 CVE-2026-120189 - Critical (10)

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120189/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120189: CRITICAL buffer overflow in D-Link DIR-505 v1.10B02 (TFTP handler). Remote, unauthenticated code execution possible. Exploit code public; patch unknown. Disable/restrict TFTP access ASAP. https://radar.offseq.com/threat/cve-2026-120189-stack-based-buffer-overflow-in-d-link-dir-505-3cde01417e371d27 #OffSeq #CVE #IoTSecurity

CVE-2026-120192: MEDIUM severity info disclosure in Presenton ≤0.9.11-beta. Remote, unauthenticated exploitation via /app_data — public exploit code exists. Patch: upgrade to 0.9.12-beta. https://radar.offseq.com/threat/cve-2026-120192-information-disclosure-in-presenton-7ee6bdee4c432f8b #OffSeq #Vulnerability #Infosec #CVE2026_120192

CVE-2026-120192: MEDIUM severity info disclosure in Presenton ≤0.9.11-beta. Remote, unauthenticated exploitation via /app_data — public exploit code exists. Patch: upgrade to 0.9.12-beta. https://radar.offseq.com/threat/cve-2026-120192-information-disclosure-in-presenton-7ee6bdee4c432f8b #OffSeq #Vulnerability #Infosec #CVE2026_120192

CVE-2026-118636: CRITICAL RCE in Apache MINA 3.0.0 codec via unsafe deserialization in JavaNativeMessageDecoder. No fix – 3.0.0 is unsupported. Immediate migration to 2.2.x recommended. Details: https://radar.offseq.com/threat/unsupported-when-assigned-javanativemessagedecoder-in-the-mina-30-codec-module-calls-6e22dafb201ce016 #OffSeq #ApacheMINA #RCE #JavaSecurity

🔴 CVE-2026-118636 - Critical (9.8)

**UNSUPPORTED WHEN ASSIGNED** 

JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class filter, so an
application that puts it in front of an untrusted peer is open to gadget-chain R...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118636: CRITICAL RCE in Apache MINA 3.0.0 codec via unsafe deserialization in JavaNativeMessageDecoder. No fix – 3.0.0 is unsupported. Immediate migration to 2.2.x recommended. Details: https://radar.offseq.com/threat/unsupported-when-assigned-javanativemessagedecoder-in-the-mina-30-codec-module-calls-6e22dafb201ce016 #OffSeq #ApacheMINA #RCE #JavaSecurity

🔴 CVE-2026-118636 - Critical (9.8)

**UNSUPPORTED WHEN ASSIGNED** 

JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class filter, so an
application that puts it in front of an untrusted peer is open to gadget-chain R...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

這年頭架服務真是有夠苦

https://blog.gslin.org/archives/2026/11/01/13313/linux-%E9%80%99%E6%AC%A1-mptcp-%E7%9A%84-use-after-free-%E6%BC%8F%E6%B4%9E-cve-2026-98432/

Did Canonical meanwhile communicate why their kernel fixes are still missing? https://ubuntu.com/security/CVE-2026-98432?utm_source=eckes

🏆 New Achievement! Cursed Kernel (Soulbound, No Refund)!

Item: Linux Kernel — IPv4 TCP Networking Code. Rarity: Ubiquitous. Hidden Stat: CVE-2026-98432, a use-after-free flaw scoring 9.8 out of 10. Effect: Unauthenticated remote attackers may execute commands as root on any server running an MPTCP listener. Side Effects: Also degrades ordinary TCP connections. Lore Text: Researchers at Anthropic have already crafted a working exploit. Distributions affected include Ubuntu and Red Hat. (1/2)

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

🐧 SIGINT // Ubuntu Watch — 2026-11-01

A 9.8 remote TCP use-after-free fixed upstream Oct 15, with Ubuntu and RHEL still lagging. This one covers per-distro fix status (Ubuntu, RHEL, Debian, SUSE, Amazon) and how to verify patching, which is what you need before rebooting anything exposed.

🔗 https://patchmon.net/blog/cve-2026-98432-linux-kernel-tcp-use-after-free-patch

#Ubuntu #Linux #infosec

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

🚨🐛 SIGINT // Cybersecurity Watch — 2026-11-01
Critical 9.8 CVSS Linux TCP use-after-free (CVE-2026-98432) enables remote root on MPTCP servers; Anthropic built an exploit and Ubuntu/RHEL have no fix yet.
https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html
#CVE #Linux #InfoSec #Vulnerability

@thilo CVE-2026-98432 requires close monitoring because it is a remotely trigger-able Linux kernel use-after-free vulnerability with demonstrated root-level exploitation.

Although kernel fixes exist upstream, they are not yet available or deployed across all distributions and supported kernel versions.

The demonstrated exploit currently requires MPTCP, but the underlying vulnerability affects ordinary TCP as well.

A use-after-free has already been demonstrated without MPTCP, although a complete exploit chain has not.

Disabling MPTCP is therefore not a reliable security boundary. It is a bandage.

A working exploit (which is not impossible) against ordinary TCP listeners could suddenly and dramatically expand the attack surface, potentially exposing virtually any unpatched Linux server running a reachable TCP service.

The key uncertainty is not whether ordinary TCP is vulnerable, but how far an attacker can exploit it. That makes continued attention essential.

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
https://news.ycombinator.com/item?id=50319143

#hackernews #tech

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Comments: https://news.ycombinator.com/item?id=50319143

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

📜 Latest Top Story on #HackerNews: TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
🔍 Original Story: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
👤 Author: oger
⭐ Score: 63
💬 Number of Comments: 16
🕒 Posted At: 2026-10-31 19:16:30 UTC
🔗 URL: https://news.ycombinator.com/item?id=50319143
#hackernewsbot #bot #news #hackernews

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

#linux

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 - https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

#hackernews

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

Comments: https://news.ycombinator.com/item?id=50319143

#HackerNews

je f5 comme si j'attendais un colis https://ubuntu.com/security/CVE-2026-98432

Blip blop, I'm a #mastobot.
Here is a summary (in beta) of the latest posts in #programmingAtKukei https://masto.kukei.eu/browse/programming category:
- AI/LLM coding agents (Claude Code, Codex, Qwen) with security backdoors found in extensions, Torvalds LLM patch controversy, and corporate AI mandates (Proton, Cisco legacy rewrite)
- Critical vulnerabilities: PHP2Shell (CVE-2026-109618) exploiting Palo Alto firewalls, Linux kernel CVE-2026-98432, Binance $6.3B signer compromise
- Fedora 45 [1/2]

kernel TCP vulnerability CVE-2026-98432 (CVSS 9.8) with public exploit affecting MPTCP servers
- Anthropic IPO preparation with reduced $20B funding target amid predicted junk-grade credit rating
- Fedora 45 release, KDE Plasma 6.8 dropping X11 for Wayland, and Volkswagen ending Home Assistant support [2/2]

Linux CVE-2026-98432 is a TCP use-after-free. Anthropic demonstrated remote root against an MPTCP listener in a lab, not known in-the-wild exploitation. The underlying flaw is not limited to MPTCP.

Go 1.24+ enables MPTCP on Linux listeners by default. Inventory exposed services, check distro advisories and deploy fixed kernels.

https://www.anthropic.com/research/discovering-vulnerabilities-with-claude

#Cybersecurity #Infosec #Linux #PatchManagement

CVE-2026-98432: Linux IPv4 UAF https://nvd.nist.gov/vuln/detail/cve-2026-98432

CVE-2026-98432: Linux IPv4 UAF

Linux 커널의 IPv4 TCP 연결 처리에서 SYN 재전송과 소켓 해제가 동시에 발생하면 use-after-free가 발생할 수 있는 CVE-2026-98432가 공개됐다. kernel.org는 CVSS 3.1 기준 9.8점으로 평가했으며, NVD 자체 평가는 아직 제공되지 않았다. 패치는 옵션 메모리 해제에 kfree_rcu()를 적용해 RCU 유예 기간을 보장한다. AI 인프라 운영자는 사용 중인 커널과 배포판의 수정 여부를 확인하고 업데이트해야 한다. 유사한 IPv6 요청 소켓 마이그레이션 문제는 별도 패치로 처리될 예정이다.

https://nvd.nist.gov/vuln/detail/cve-2026-98432

#linux #kernel #security #ipv4 #useafterfree

Um modelo do assistente Claude desenvolveu uma ferramenta de ataque a servidores Linux sem autenticação. A falha crítica CVE-2026-98432 foi identificada com uma pontuação de 9,8 em 10 pela equipa de segurança do kernel Linux." 🤖

🔗 https://tugatech.com.pt/t93788-anthropic-usa-modelo-claude-para-explorar-falha-critica-de-98-no-kernel-linux

#anthropic #claude #falha #kernel #linux 

這年頭架服務真是有夠苦

https://blog.gslin.org/archives/2026/11/01/13313/linux-%E9%80%99%E6%AC%A1-mptcp-%E7%9A%84-use-after-free-%E6%BC%8F%E6%B4%9E-cve-2026-98432/

Did Canonical meanwhile communicate why their kernel fixes are still missing? https://ubuntu.com/security/CVE-2026-98432?utm_source=eckes

🏆 New Achievement! Cursed Kernel (Soulbound, No Refund)!

Item: Linux Kernel — IPv4 TCP Networking Code. Rarity: Ubiquitous. Hidden Stat: CVE-2026-98432, a use-after-free flaw scoring 9.8 out of 10. Effect: Unauthenticated remote attackers may execute commands as root on any server running an MPTCP listener. Side Effects: Also degrades ordinary TCP connections. Lore Text: Researchers at Anthropic have already crafted a working exploit. Distributions affected include Ubuntu and Red Hat. (1/2)

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

@thilo CVE-2026-98432 requires close monitoring because it is a remotely trigger-able Linux kernel use-after-free vulnerability with demonstrated root-level exploitation.

Although kernel fixes exist upstream, they are not yet available or deployed across all distributions and supported kernel versions.

The demonstrated exploit currently requires MPTCP, but the underlying vulnerability affects ordinary TCP as well.

A use-after-free has already been demonstrated without MPTCP, although a complete exploit chain has not.

Disabling MPTCP is therefore not a reliable security boundary. It is a bandage.

A working exploit (which is not impossible) against ordinary TCP listeners could suddenly and dramatically expand the attack surface, potentially exposing virtually any unpatched Linux server running a reachable TCP service.

The key uncertainty is not whether ordinary TCP is vulnerable, but how far an attacker can exploit it. That makes continued attention essential.

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
https://news.ycombinator.com/item?id=50319143

#hackernews #tech

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Comments: https://news.ycombinator.com/item?id=50319143

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

#linux

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

Comments: https://news.ycombinator.com/item?id=50319143

#HackerNews

Linux CVE-2026-98432 is a TCP use-after-free. Anthropic demonstrated remote root against an MPTCP listener in a lab, not known in-the-wild exploitation. The underlying flaw is not limited to MPTCP.

Go 1.24+ enables MPTCP on Linux listeners by default. Inventory exposed services, check distro advisories and deploy fixed kernels.

https://www.anthropic.com/research/discovering-vulnerabilities-with-claude

#Cybersecurity #Infosec #Linux #PatchManagement

CVE-2026-98432: Linux IPv4 UAF https://nvd.nist.gov/vuln/detail/cve-2026-98432

Um modelo do assistente Claude desenvolveu uma ferramenta de ataque a servidores Linux sem autenticação. A falha crítica CVE-2026-98432 foi identificada com uma pontuação de 9,8 em 10 pela equipa de segurança do kernel Linux." 🤖

🔗 https://tugatech.com.pt/t93788-anthropic-usa-modelo-claude-para-explorar-falha-critica-de-98-no-kernel-linux

#anthropic #claude #falha #kernel #linux 

Go programs are vulnerable to CVE-2026-98432 (Linux RCE) https://groups.google.com/g/golang-announce/c/PCoQcdxoScw?pli=1

Patching is taking some time on this potentially serious Linux kernel vulnerability. While we wait, we have a rundown of the partial mitigations for the known attack path.

https://ifin.network/t/cve-2026-98432-unexpected-ipv4-options-lead-to-use-after-free-code-execution-in-linux/946

#ThreatIntel #ThreatIntelligence

@da_667 this one is fun too - https://nvd.nist.gov/vuln/detail/cve-2026-98432

🐧 SIGINT // Linux Watch — 2026-10-31

CVE-2026-98432 is a 9.8 TCP use-after-free reaching back to kernel 4.4, with an AI-built exploit giving remote root on MPTCP listeners. Ubuntu and RHEL reportedly lack fixes, so check whether MPTCP is enabled and disable it where you can.

🔗 https://www.bleepingcomputer.com/news/security/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers/

#Linux #OpenSource #FOSS

LINODE Customer Security Advisory: CVE-2026-98432 https://status.linode.com/incidents/nt58zhx3pmgm

"Akamai is aware of the recently published remote code execution CVE-2026-98432. We are actively investigating and taking the appropriate mitigation actions, while we continue to monitor our platform in parallel.”

Worst. Month. Ever.

⚠️ Linode Status - Customer Security Advisory: CVE-2026-98432

https://status.linode.com/incidents/nt58zhx3pmgm

#linode #cybersecurity

Linode's status page says Akamai is investigating Linux kernel flaw CVE-2026-98432 and has not yet posted mitigation status. Anthropic demonstrated a remote root exploit with no credentials against servers with a Multipath TCP listener, which Go 1.24+ programs open by default. The Go team says the bug is not MPTCP-specific. Upstream kernels are fixed, but Ubuntu's tracker still lists its main kernels as work in progress.

https://status.linode.com/incidents/nt58zhx3pmgm

#LinuxKernel #InfoSec

CW: CVE-2026-98432 — Linux kernel TCP use-after-free (IPv4 IP-opciók), kernel csapata: CVSS 9.8. Anthropic szerint egy AI által írt exploit távolról, hitelesítés nélkül rootot érhet el MPTCP-figyelőn futó szervereken. Debian/Oracle/SUSE/Amazon javított; Ubuntu és RHEL még nem adott ki minden javítást. #Linux #kernel #CVE #infosec #OpenSource
https://linuxmint.hu/hir/2026/10/sulyos-tcp-hiba-a-linux-kernelben-98-as-cvss-pontszam-erintett-az-ubuntu-a-red-hat-es

Just set up DKIM, SPF and DMARC. Hope I did it right.

Also, I updated linux stuff on some servers to try protect them against the security vulnerability announced this week in the Linux kernel (CVE-2026-98432).

So many tech things.

(this is a technical and kinda niche post, sorry about that).

https://www.cve.org/CVERecord?id=CVE-2026-98432

oh ffs

Protecting against CVE-2026-98432 https://lobste.rs/s/mp8yqt #go #security
https://groups.google.com/g/golang-announce/c/PCoQcdxoScw

Ope. I guess there are patches to be had today. MPTCP vulnerability with a CVSS rating of 9.8. #Linux #Cybersecurity #Debian #Ubuntu

https://www.cve.org/CVERecord?id=CVE-2026-98432
https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html

Linux Kernel TCP Flaw Allows Remote Root Access

A critical race condition in the Linux kernel TCP stack (CVE-2026-98432) allows remote attackers to gain root access.

**If you run Linux servers (Ubuntu, RHEL, SUSE, Amazon Linux 2 and others), install your vendor's fixed kernel as soon as it's out and reboot. Updating containers alone won't help, because they run on the host's kernel. Until the patch arrives, block incoming IPv4 TCP packets that carry IP options at the firewall, and turn off Multipath TCP (MPTCP) wherever you don't need it, starting with your internet-facing servers.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/linux-kernel-tcp-flaw-allows-remote-root-access-c-x-8-e-a/gD2P6Ple2L

@maik
bei Suse sind Patches seit gestern herausgegangen ( viele ältere und Micro-Distros). Auch OpenSuse16 ( Patchnr 1673, Rel kernel branch 16000.40) . Sles15Sp6 wurde geliefert ( kernel 15xxx-55) Sles15-SP7 ( kernel 15xxx-40) ist heute in progress, wird bis morgen geliefert.
https://www.suse.com/security/cve/CVE-2026-98432.html

Actually I need to read this better - I'm not sure if the options here are from the wire (headers) or from the application layer setting up the socket (setsockopt).

If the latter, they can all be blocked with seccomp filters. Which is not a solution for devices you don't have root/control-over-boot on. But... I guess you can use CVE-2026-98432 and now you do have root. 🤷 😈

#ubuntu 14days with no fix, what does HIGH/Critical even mean at that Point https://ubuntu.com/security/CVE-2026-98432

Eine gravierende Sicherheitslücke im #Linux Kernel erlaubt entfernte Root Exploits. Die KI Claude von #Anthropic hat einen funktionierenden Exploit für CVE-2026-98432 geschrieben. Einige Distributoren wie #Ubuntu und #RHEL sind noch ohne Patches. https://www.golem.de/news/linux-luecke-claude-schreibt-root-exploit-ubuntu-und-rhel-ohne-patch-2610-214664.html

Kernel CVE Critical 9.8 sofort patchen!

Ubuntu: Welcher Patch lol
https://ubuntu.com/security/CVE-2026-98432

@Catwoman69y2k linux + go cve: https://nvd.nist.gov/vuln/detail/cve-2026-98432

Current state: shift-reloading https://ubuntu.com/security/CVE-2026-98432#status until 26.04 and 24.04 are green...

For all my self-hosting friends using netbird:
There's a Linux kernel bug being tracked as CVE-2026-98432 that can lead to unauthenticated remote code execution when malicious traffic hits a vulnerable TCP socket.

This affects netbird in its standard configuration when Traefik is used, because Go automatically enables MPTCP by default.

Go Security team warns that disabling MPTCP is not a complete fix. Linux kernel update + system restart is necessary.

If you're using Ubuntu there is currently no kernel update available¹.
All Debian Security Releases report that there's a fix version available².

https://www.cve.org/CVERecord?id=CVE-2026-98432

¹ as of 30.10.26 12:24 (https://ubuntu.com/security/CVE-2026-98432)

² https://security-tracker.debian.org/tracker/CVE-2026-98432

#cve #netbird #linux #selfhosting #ubuntu

@bitsundso Jetzt hab’ ich grad die “endlich kein PHP mehr, nur noch go”-Feierrede gehört, und jetzt CVE-2026-98432, und go macht per default multipath. Schon gemein, diese neue Welt 🤪

Es finden heute Reboots statt wegen der Kernel Lücke CVE-2026-98432. Also nicht wundern das Dienste kurzzeitig offline sind.

🤘🐧 Si vous cherchez une bonne bande-son pour rester concentrés pendant que vous passez toutes vos box Linux en revue à cause de https://vulnerability.circl.lu/vuln/CVE-2026-98432 … tout en méditant sur le sens de la vie et

sudo apt update && sudo apt upgrade

( sudo sysctl -w net.mptcp.enabled=0 Moins de MPTCP, mais toujours besoin de patcher )

🔥 Le nouvel album d’Inekt – Valýre est parfait !

Du bon (#black) #folk / #ambient/ #experimental / #noise pour accompagner vos journée de triage.
👇
https://inekt.bandcamp.com/album/val-re

#Linux #MPTCP #Infosec #Metalheads #KernelPanic #HeadbangAndPatch #bandcamp

Security Bug du jour: CVE-2026-98432

We head towards non-stop patching.

CVE-2026-98432 (9.8/10) hätte man auch aussitzen können!

Quellen:
https://ubuntu.com/security/CVE-2026-98432
https://www.golem.de/news/linux-luecke-claude-schreibt-root-exploit-ubuntu-und-rhel-ohne-patch-2610-214664.html

Zdalne wykonanie kodu w Linuksie. Krytyczna podatność w kernelu w obsłudze sieciowej (niedomyślne ustawienia).

Anthropic opracował działającego exploita, który przez sieć uzyskuje uprawnienia root na nowoczesnych Linuksach. Ałć. Exploit potrzebuje około godziny na skuteczne uzyskanie roota. Dlaczego tak długo? Sporo zajmuje przełamanie przez sieć KASLR (Kernel Address Space Layout Randomization). Dobra informacja jest taka, że podatność CVE-2026-98432 wymaga używania przez aplikację (usługę sieciową) tzw....

#WBiegu #Ai #Kernel #Linux #Rce

https://sekurak.pl/zdalne-wykonanie-kodu-w-linuksie-krytyczna-podatnosc-w-kernelu-w-obsludze-sieciowej-niedomyslne-ustawienia/

Could someone explain https://ubuntu.com/security/CVE-2026-98432#impact-score to me?

In the CVSS 3 it's a 9.8, in CVSS 4 only 8.3. In CVSS 4 there is no impact on confidentiality or integrity...

So what is going on with #CVE202698432?

Karen IT Security Response Center (KSRC) Advisory

Advisory ID: KSRC-2026-10301

A #critical use-after-free #vulnerability has been identified in the Linux kernel’s IPv4 #TCP implementation. The flaw, tracked as CVE-2026-98432, has been assigned a CVSS v3.1 score of 9.8 (Critical) by the #Linux #kernel CNA.

An unauthenticated remote attacker can trigger a race condition during TCP connection establishment by sending crafted SYN packets containing IPv4 options. Successful exploitation may lead to kernel memory corruption, information disclosure, denial of service, or in certain configurations, remote code execution with root privileges.

https://ksrc.karenit.net/blog/security-alert/linux-kernel-tcp-flaw-with-98-cvss-score-affects-ubuntu-red-hat-and-other-distributions

#cve #cyberSecurity #staysafe #StayInformed #StayProtected

A critical Linux kernel CVE-2026-98432 flaw enables remote root execution via MPTCP race conditions, impacting multiple distributions including Ubuntu.

#Linux #Cybersecurity #CVE202698432 #Kernel #InfoSec #MPTCP

https://securityonline.info/linux-kernel-cve-2026-98432/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation

Link: https://www.penligent.ai/hackinglabs/cve-2026-98432/
Discussion: https://news.ycombinator.com/item?id=50299182

🟠 CVE-2026-120208 - High (7.5)

libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::processTile() that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craf...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120208/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120208 - High (7.5)

libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::processTile() that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craf...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120208/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120203 - High (8.8)

ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parenth...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120203/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120203 - High (8.8)

ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parenth...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120203/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

VulnCheck: Jpom 2.10.0–2.11.12 (CVE-2026-120201) mishandles JPOM-USER-TOKEN, allowing unauthenticated admin access and command execution via scripts.

No confirmed in-the-wild exploitation or fixed release in checked sources. Admins: inventory deployments, restrict management access and monitor vendor updates.

https://www.vulncheck.com/advisories/jpom-2.10.0-through-2.11.12-authentication-bypass-via-jpom-user-token-header

#Cybersecurity #Infosec #SysAdmin #VulnerabilityManagement

🔴 CVE-2026-120201 - Critical (9.8)

Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. Attackers can send a value like 'is...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120201/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

VulnCheck: Jpom 2.10.0–2.11.12 (CVE-2026-120201) mishandles JPOM-USER-TOKEN, allowing unauthenticated admin access and command execution via scripts.

No confirmed in-the-wild exploitation or fixed release in checked sources. Admins: inventory deployments, restrict management access and monitor vendor updates.

https://www.vulncheck.com/advisories/jpom-2.10.0-through-2.11.12-authentication-bypass-via-jpom-user-token-header

#Cybersecurity #Infosec #SysAdmin #VulnerabilityManagement

🔴 CVE-2026-120201 - Critical (9.8)

Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. Attackers can send a value like 'is...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120201/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

VulnCheck reports CVE-2026-120209 in AJ-Report ≤1.7.1. A hard-coded JWT signing secret can enable forged share tokens and unauthenticated remote code execution.

No in-the-wild exploitation or fixed release was confirmed in the sources checked. Admins: inventory installations, restrict exposure and track vendor guidance.

https://www.vulncheck.com/advisories/aj-report-through-1.7.1-authentication-bypass-leading-to-rce-via-share-token

#Cybersecurity #Infosec #VulnerabilityManagement #SysAdmin

🔴 CVE-2026-120209 - Critical (9.8)

AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which passes scripts to Gro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120209/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

VulnCheck reports CVE-2026-120209 in AJ-Report ≤1.7.1. A hard-coded JWT signing secret can enable forged share tokens and unauthenticated remote code execution.

No in-the-wild exploitation or fixed release was confirmed in the sources checked. Admins: inventory installations, restrict exposure and track vendor guidance.

https://www.vulncheck.com/advisories/aj-report-through-1.7.1-authentication-bypass-leading-to-rce-via-share-token

#Cybersecurity #Infosec #VulnerabilityManagement #SysAdmin

🔴 CVE-2026-120209 - Critical (9.8)

AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which passes scripts to Gro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120209/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120205 - High (8)

Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows unauthenticated attackers to inject scripts via unescaped customer names. Attackers can register with a script payload as their ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120205/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120205 - High (8)

Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows unauthenticated attackers to inject scripts via unescaped customer names. Attackers can register with a script payload as their ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120205/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-109197 - High (7.5)

The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all versions up to, and including, 1.6.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-109197 - High (7.5)

The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all versions up to, and including, 1.6.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120194 - High (7.5)

A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120194/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120194 - High (7.5)

A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120194/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76010 - High (8.8)

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the render_image function. This is due to unrestricted mass assignment ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76010/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76010 - High (8.8)

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the render_image function. This is due to unrestricted mass assignment ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76010/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120070 - High (8.8)

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.3.13 via the `...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120070/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120070 - High (8.8)

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.3.13 via the `...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120070/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103898 - High (8.1)

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.2.2. This is due to the social login REST callback registered at `/wp-json/wslu-social-login/type/{...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103898 - High (8.1)

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.2.2. This is due to the social login REST callback registered at `/wp-json/wslu-social-login/type/{...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-116512 - Critical (9.8)

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116512/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-116512 - Critical (9.8)

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116512/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-119096 | CRITICAL auth bypass in Uncanny Toolkit for LearnDash <=3.8.2. Attackers with creds for unverified/suspended accounts can log in via a parser-differential flaw. No patch yet — monitor logins & restrict access. https://radar.offseq.com/threat/the-uncanny-toolkit-for-learndash-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-in-4518772708010c6f #OffSeq #WordPress #Infosec

🔴 CVE-2026-119096 - Critical (9.8)

The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the `email` parameter of the `uo_login_action()` function. This is due to a parser-differential flaw in which...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119096/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-119096 | CRITICAL auth bypass in Uncanny Toolkit for LearnDash <=3.8.2. Attackers with creds for unverified/suspended accounts can log in via a parser-differential flaw. No patch yet — monitor logins & restrict access. https://radar.offseq.com/threat/the-uncanny-toolkit-for-learndash-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-in-4518772708010c6f #OffSeq #WordPress #Infosec

🔴 CVE-2026-119096 - Critical (9.8)

The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the `email` parameter of the `uo_login_action()` function. This is due to a parser-differential flaw in which...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119096/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Acadlix LMS WordPress plugin ≤1.1.9 is affected by CRITICAL CVE-2026-103882: arbitrary file deletion due to weak path validation & nonce checks. Leads to potential RCE. No patch — restrict access/disable plugin. https://radar.offseq.com/threat/the-acadlix-lms-ai-quiz-maker-online-exam-course-plugin-for-wordpress-plugin-for-wordpress-is-ed3b7965b634be4e #OffSeq #WordPress #CVE2026103882 #Infosec

🔴 CVE-2026-103882 - Critical (9.1)

The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the post_delete_assessment_file_by_id function in all versions u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103882/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-103882: Acadlix LMS plugin for WordPress (≤1.1.9) has a CRITICAL path traversal flaw — attackers can delete any file, risking RCE. No patch yet; disable/remove plugin. More info: https://radar.offseq.com/threat/cve-2026-103882-cwe-22-path-traversal-in-acadlix-acadlix-lms-ai-quiz-maker-online-exam-course-plugin-50f69a0020b49e4a #OffSeq #WordPress #Vuln #infosec

Acadlix LMS WordPress plugin ≤1.1.9 is affected by CRITICAL CVE-2026-103882: arbitrary file deletion due to weak path validation & nonce checks. Leads to potential RCE. No patch — restrict access/disable plugin. https://radar.offseq.com/threat/the-acadlix-lms-ai-quiz-maker-online-exam-course-plugin-for-wordpress-plugin-for-wordpress-is-ed3b7965b634be4e #OffSeq #WordPress #CVE2026103882 #Infosec

🔴 CVE-2026-103882 - Critical (9.1)

The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the post_delete_assessment_file_by_id function in all versions u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103882/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-103882: Acadlix LMS plugin for WordPress (≤1.1.9) has a CRITICAL path traversal flaw — attackers can delete any file, risking RCE. No patch yet; disable/remove plugin. More info: https://radar.offseq.com/threat/cve-2026-103882-cwe-22-path-traversal-in-acadlix-acadlix-lms-ai-quiz-maker-online-exam-course-plugin-50f69a0020b49e4a #OffSeq #WordPress #Vuln #infosec

🟠 CVE-2026-117681 - High (8)

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security (TLS) certificate verification for connections to internal backend services in environment...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117681/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-117681 - High (8)

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security (TLS) certificate verification for connections to internal backend services in environment...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117681/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116086 - High (8.8)

A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information disclosure by providing crafted issue titles to workflow scripts. The affected script incorporates user-provided titles directl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116086 - High (8.8)

A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information disclosure by providing crafted issue titles to workflow scripts. The affected script incorporates user-provided titles directl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-114217 - High (8.6)

A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in plaintext on the runner without cleaning them up after execution. A local attacker with access to the CI environment can read th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114217/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-114217 - High (8.6)

A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in plaintext on the runner without cleaning them up after execution. A local attacker with access to the CI environment can read th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114217/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-89270 - Critical (9.1)

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.5 This is due to the plugin not properly verifying that a user i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89270/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120040 - High (7.5)

The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.0 via the 'message' parameter. This makes it possible for authenticated attackers, with subscriber-level acce...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120040/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-109220 - Critical (9.8)

The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.1.1 via the 'customer_note' parameter parameter. This is due to insufficient saniti...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118235: SimpleForm WP plugin ≤3.10.2 suffers CRITICAL file upload vuln (CVSS 9.8). Unauthenticated RCE possible due to weak validation and exposed nonce. Remove/disable plugin or restrict shortcode pages. https://radar.offseq.com/threat/the-simpleform-form-maker-to-chat-apps-with-quiz-poll-and-multi-lead-notifications-plugin-for-ca822acaff1ee58b #OffSeq #WordPress #CVE2026118235 #infosec

🔴 CVE-2026-118235 - Critical (9.8)

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handle_upload function. This is due to missing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118235/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118235: SimpleForm WP plugin ≤3.10.2 suffers CRITICAL file upload vuln (CVSS 9.8). Unauthenticated RCE possible due to weak validation and exposed nonce. Remove/disable plugin or restrict shortcode pages. https://radar.offseq.com/threat/the-simpleform-form-maker-to-chat-apps-with-quiz-poll-and-multi-lead-notifications-plugin-for-ca822acaff1ee58b #OffSeq #WordPress #CVE2026118235 #infosec

🔴 CVE-2026-118235 - Critical (9.8)

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handle_upload function. This is due to missing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118235/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116964 - High (8.4)

A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the Continuous Integration and Continuous Delivery (CI/CD) workflow environment. By injecting shell commands into environment expo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116964/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116964 - High (8.4)

A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the Continuous Integration and Continuous Delivery (CI/CD) workflow environment. By injecting shell commands into environment expo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116964/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104012 - High (8.8)

The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for WordPress is vulnerable to Privilege Escalation via Mass Assignment in all versions up to, and including, 1.3.1 This is due to the public `/rox-appointment-booking/...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104012/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104012 - High (8.8)

The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for WordPress is vulnerable to Privilege Escalation via Mass Assignment in all versions up to, and including, 1.3.1 This is due to the public `/rox-appointment-booking/...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104012/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119163 - High (7.5)

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfan_cart_id' parameter in all versions up to, and including, 3.8.5.2 due to insu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119163/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-116557 (CRITICAL, CVSS 9.1) in WP Booking System – Booking Calendar (<=2.1.0.5): Subscriber+ users can delete any calendar note due to missing authorization. Limit low-level access & monitor events. https://radar.offseq.com/threat/cve-2026-116557-cwe-862-missing-authorization-in-murgroland-wp-booking-system-booking-calendar-624e8257b57395b6 #OffSeq #WordPress #CVE2026

🔴 CVE-2026-116557 - Critical (9.1)

The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpbs_action_ajax_calendar_remove_note() function in versions up to, and including, 2.1.0.5 Th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116557/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119977 - High (8.1)

WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119977/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-94361 – HIGH severity in Payable Payment Gateway for WooCommerce <1.3.1: missing authorization lets unauthenticated users change any order's payment status. Patch to 1.3.1+ ASAP. Details: https://radar.offseq.com/threat/cve-2026-94361-cwe-862-missing-authorization-in-payable-payment-gateway-for-woocommerce-b6e3b17dee967e2d #OffSeq #WooCommerce #Infosec #WordPress

🟠 CVE-2026-91913 - High (8.8)

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91913/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

『Ubuntu LXD 爆出满分 10.0 高危漏洞，无需密码即可接管虚拟机｜CVE-2026-112816』
10 月 30 日，Canonical（Ubuntu 背后的公司）披露了一项严重安全漏洞 CVE-2026-112816，CVSS 4.0 评分高达 10.0 分，达到最高危险等级。 该漏洞影响 Ca
……
阅读全文： :sys_link: https://www.appinn.com/cve-2026-112816/

#小众软件

Canonical's LXD and MicroCloud had a critical authentication bypass (CVE-2026-112816, CVSS 10.0). An attacker who can reach the HTTPS API and has a trusted client's public certificate can authenticate as that client by placing it in the certificate chain. Canonical says the result can be root on the host, depending on the victim's privileges. Fixed in LXD 6.10.1, 5.21.9, 5.0.11 and 4.0.15, and MicroCloud 3.4.1 and 2.1.5.

https://www.cve.org/CVERecord?id=CVE-2026-112816

#LXD #Cybersecurity

🔵 THREAT INTELLIGENCE

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

Vulnerability | CRITICAL
CVEs: CVE-2026-111357

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its...

Full analysis:
https://www.yazoul.net/news/article/attackers-chain-three-ivanti-connect-secure-flaws-to-gain-unauthenticated-root-a/?utm_source=mastodon&utm_medium=social

by Yazoul AI

#ThreatIntel #SecurityNews #IncidentResponse

CISA Flags Two Exploited Ivanti Connect Secure Flaws That Give Attackers Root Access

CISA has added Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527, and CVE-2026-104935) to its KEV catalog following reports of active exploitation. These flaws allow attackers to chain exploits to gain root access, upload malicious files, and compromise entire enterprise networks.

**If you run Ivanti Connect Secure VPN, upgrade right away to version 25.1.1.3 or 22.8R2. Attackers are chaining three flaws to take full control of the appliance, and older builds are still exposed even if you patched earlier in October. Treat any internet-facing appliance as possibly already compromised: after upgrading, change all passwords, API tokens and certificates stored on or reachable from the VPN, and check your Active Directory for suspicious accounts.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-flags-two-exploited-ivanti-connect-secure-flaws-that-give-attackers-root-access-k-d-m-s-l/gD2P6Ple2L

🚨 Attackers chain three Ivanti Connect Secure flaws for unauthenticated root access

A previously unknown threat actor tracked as UTA0576 exploited three vulnerabilities to compromise fully patched Ivanti Connect Secure VPN appliances and execute commands as root without authentication.
⠀
• CVE-2026-104935: Authentication bypass and RCE - CVSS 8.6
• CVE-2026-111357: Privilege escalation - CVSS 8.8
• CVE-2026-118527: Predictable identifier allowing controlled file uploads - CVSS 4.3
• Affected: ICS 25.1.1.2 and earlier, and 22.8R2.5 and earlier
• Fixed: ICS 25.1.1.3 and 22.8R2.6
⠀
The actor extracted VPN and Active Directory credentials, searched for LAPS passwords and BitLocker recovery keys, conducted password spraying and deleted evidence from system logs.

CISA has added all three vulnerabilities to its Known Exploited Vulnerabilities catalog.

Source: https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/

The U.S.

CISA added two security flaws impacting Ivanti Connect Secure to its Known Exploited Vulnerabilities catalog.

The additions cover CVE-2026-111357 and CVE-2026-118527, which were weaponized alongside authentication bypass flaw CVE-2026-104935 in an exploit chain by threat actor UTA0576 to achieve root-level execution and extract credentials.

Ivanti released patches in version 25.1.1.3 and version 22.8R2.6.

https://en.hacks.gr/nea-provlimata-asfaleias-stin-ypiresia-ivanti-connect-secure-mpikan-se-episimi-lista-epitheseon/

#Ivanti #CISA #Vulnerability #Patch

CISA Flags Two Exploited Ivanti Connect Secure Flaws That Give Attackers Root Access

CISA has added Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527, and CVE-2026-104935) to its KEV catalog following reports of active exploitation. These flaws allow attackers to chain exploits to gain root access, upload malicious files, and compromise entire enterprise networks.

**If you run Ivanti Connect Secure VPN, upgrade right away to version 25.1.1.3 or 22.8R2. Attackers are chaining three flaws to take full control of the appliance, and older builds are still exposed even if you patched earlier in October. Treat any internet-facing appliance as possibly already compromised: after upgrading, change all passwords, API tokens and certificates stored on or reachable from the VPN, and check your Active Directory for suspicious accounts.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-flags-two-exploited-ivanti-connect-secure-flaws-that-give-attackers-root-access-k-d-m-s-l/gD2P6Ple2L

🚨 Attackers chain three Ivanti Connect Secure flaws for unauthenticated root access

A previously unknown threat actor tracked as UTA0576 exploited three vulnerabilities to compromise fully patched Ivanti Connect Secure VPN appliances and execute commands as root without authentication.
⠀
• CVE-2026-104935: Authentication bypass and RCE - CVSS 8.6
• CVE-2026-111357: Privilege escalation - CVSS 8.8
• CVE-2026-118527: Predictable identifier allowing controlled file uploads - CVSS 4.3
• Affected: ICS 25.1.1.2 and earlier, and 22.8R2.5 and earlier
• Fixed: ICS 25.1.1.3 and 22.8R2.6
⠀
The actor extracted VPN and Active Directory credentials, searched for LAPS passwords and BitLocker recovery keys, conducted password spraying and deleted evidence from system logs.

CISA has added all three vulnerabilities to its Known Exploited Vulnerabilities catalog.

Source: https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/

🚨 [CISA-2026:1030] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-111357 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111357)
- Name: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ivanti
- Product: Connect Secure
- Notes: https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US ; https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111357

⚠️ CVE-2026-118527 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-118527)
- Name: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ivanti
- Product: Connect Secure
- Notes: https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-118527

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261030 #cisa20261030 #cve_2026_111357 #cve_2026_118527 #cve2026111357 #cve2026118527

CVE ID: CVE-2026-111357
Vendor: Ivanti
Product: Connect Secure
Date Added: 2026-10-30
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-111357

For the last weekday of Cybersecurity Awareness Month, CISA added more CVEs to the KEV Catalog on a Friday :)

• CVE-2026-111357 (8.8 high) Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
• CVE-2026-118527 (4.3 medium) Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

https://www.cisa.gov/news-events/alerts/2026/10/30/cisa-adds-two-known-exploited-vulnerabilities-catalog

#CISA #KEV #Ivanti #zeroday

Ivanti oh no bb what is u doin?

At the time of discovery of exploitation, Ivanti had a fix developed for CVE-2026-104935 which was already in QA for supported versions, and we made the decision to not delay getting a fix to customers that resolved the primary exploitation path when the LPE was discovered. Because of this, our focus was initially centered on the disclosure of CVE-2026-104935 and providing protection for our customers as quickly as possible. Additionally, Ivanti collaborated with Volexity on their blog post which provided information to arm defenders on known threat actor behavior, including chaining the local privilege escalation vulnerability. These additional CVE disclosures have now been added to this Security Advisory and a fix is available now.

New Ivanti zero-days: CVE-2026-111357 (missing authentication) and CVE-2026-118527 (predictable filenames)

We are aware of exploitation in the wild affecting a limited number of customers at the time of disclosure when CVE-2026-104935, CVE-2026-111357 and CVE-2026-118527 are chained.

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US

#ivanti #cve #zeroday #eitw

🟠 CVE-2026-111578 - High (7.5)

The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16.5 does not properly escape several customer-supplied order fields — including the billing and shipping address values and the customer order note — befor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-111578/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

CISA KEVs:
- CISA-2026:1001 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)
- CISA-2026:1002 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1002)
- CISA-2026:1004 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)
- CISA-2026:1008 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008)
- CISA-2026:1013 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1013)
- CISA-2026:1014 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1014)
- CISA-2026:1015 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1015)
- CISA-2026:1016 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1016)
- CISA-2026:1020 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1020)
- CISA-2026:1023 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

Top EPSS Score:
- CVE-2026-109618 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- CVE-2026-109619 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- CVE-2026-21589 - 99.48 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-21589)
- CVE-2026-104935 - 86.77 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-104935)
- CVE-2026-111497 - 82.64 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- CVE-2026-105134 - 81.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105134)
- CVE-2026-105133 - 79.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105133)
- CVE-2026-110447 - 73.31 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-110447)
- CVE-2026-59774 - 28.31 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-59774)
- CVE-2026-97229 - 26.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-97229)

#ZEN #SecDB #InfoSec

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-97229 – GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

An exhaustive technical breakdown of CVE-2026-97229 targeting GitLab CI/CD pipelines, complete with multi-vendor SIEM detection logic, behavior tracking, and pipeline hardening controls....

https://thecybermind.co/vrrh

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-97229 – GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

An executive-level strategic brief analyzing CVE-2026-97229 for CEOs and Boards, focusing on DevOps governance, asset inventory integrity, and software supply chain risk mitigation....

https://thecybermind.co/1x6z

GitLab CE/EE, CVE-2026-97229 (CVSS 10.0): integer overflow nel compilatore di regex CI/CD, RCE non autenticata con una regex costruita ad hoc nella configurazione. CISA l'ha aggiunta alla KEV il 29/10 (deadline FCEB 01/11). Alpine Linux ha visto tentativi il 20-21/10 su istanza non patchata: nessuna prova di successo ma non esclusa, istanza ricostruita. Fix: 19.2.8, 19.3.4, 19.4.2.

https://thehackernews.com/2026/10/cisa-adds-actively-exploited-gitlab-rce.html

#cybersecurity #infosec #GitLab

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

CISA KEVs:
- CISA-2026:1001 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)
- CISA-2026:1002 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1002)
- CISA-2026:1004 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)
- CISA-2026:1008 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008)
- CISA-2026:1013 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1013)
- CISA-2026:1014 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1014)
- CISA-2026:1015 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1015)
- CISA-2026:1016 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1016)
- CISA-2026:1020 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1020)
- CISA-2026:1023 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

Top EPSS Score:
- CVE-2026-109618 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- CVE-2026-109619 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- CVE-2026-21589 - 99.48 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-21589)
- CVE-2026-104935 - 86.77 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-104935)
- CVE-2026-111497 - 82.64 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- CVE-2026-105134 - 81.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105134)
- CVE-2026-105133 - 79.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105133)
- CVE-2026-110447 - 73.31 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-110447)
- CVE-2026-59774 - 28.31 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-59774)
- CVE-2026-97229 - 26.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-97229)

#ZEN #SecDB #InfoSec

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-97229 – GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

An exhaustive technical breakdown of CVE-2026-97229 targeting GitLab CI/CD pipelines, complete with multi-vendor SIEM detection logic, behavior tracking, and pipeline hardening controls....

https://thecybermind.co/vrrh

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-97229 – GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

An executive-level strategic brief analyzing CVE-2026-97229 for CEOs and Boards, focusing on DevOps governance, asset inventory integrity, and software supply chain risk mitigation....

https://thecybermind.co/1x6z

🟠 CVE-2026-118938 - High (8.8)

In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname__ (for example "Values.read_file") is resolved by pickle's find_class through _getattribute to an arbitrary attribute path rather than to a module...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118938/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-63378 - High (8.8)

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid `fctr_session` cookie can submit arbitrary Python source in the `scr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63378/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62847 - High (8.2)

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and embedded he...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62847/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62847 - High (8.2)

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and embedded he...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62847/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119188 - High (7.5)

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection(), fragmented handshake message, interleaved record to process the rel...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119188/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16760 - High (8.8)

In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported name to the likely_safe_imports set whenever the source module is present in sys.stdlib_module_names and the name is absent from the UNSAFE_IMPORT...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16760/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL: Multiple vulns in Red Hat IdM (FreeIPA) incl. DoS, privilege escalation, XSS, LDAP & credential theft (CVE-2026-11861). Impacts RHEL 7 ELS. Apply patches ASAP. Details: https://radar.offseq.com/threat/red-hat-security-advisory-ipa-security-update-3b3e10aafe14e014 #OffSeq #RedHat #Vuln #LinuxSec

🟠 CVE-2026-73186 - High (8.8)

Subscriber PHP Object Injection in Enable Media Replace &lt;= 4.2.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73186/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-78403 - Critical (9.8)

Stack-based buffer overflow and missing
authorization vulnerability in Thales Sentinel Keys Server on Windows allows
Overflow Buffers. Sentinel Keys Server does not check the length of the first
field in the HTTP request. An attacker may craft an ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78403/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116245 - High (8.2)

libpq looks a connection service up in the service file of the operating-system account running pgAdmin 4, and an entry there can hold a password or name a password file or client certificate. In server mode any user could set a server's Service, ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116245/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116245 - High (8.2)

libpq looks a connection service up in the service file of the operating-system account running pgAdmin 4, and an entry there can hold a password or name a password file or client certificate. In server mode any user could set a server's Service, ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116245/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-78527 - High (8.8)

Contributor PHP Object Injection in GS Testimonial Slider &lt;= 3.3.10 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78527/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

"Drupal warns that threat actors are exploiting a highly critical security flaw, tracked as CVE-2026-118539, in its Commerce Core module. The vulnerability is caused by missing authorization checks" securityaffairs.com/202162/secur... #cybersec #infosec finance data security policy

🏆 New Achievement! Add to Cart, Subtract Your Security!

This achievement is brought to you by Deferred Patch Fridays — "Why update today when you can audit your orders in a cold sweat next quarter?" Drupal's Commerce Core module, the thing powering your shopping cart and checkout, is sitting on a highly critical access bypass flaw, CVE-2026-118539, scored 21 out of 25 on the risk scale. (1/3)

CVE-2026-118539 Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing.

This vulnerability is being actively exploited in the wild.

https://www.drupal.org/sa-contrib-2026-254

#drupal #CVE #eitw

🟠 CVE-2026-62297 - High (7.5)

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, `readPsd()` commits image and layer buffers from attacker-declared PSD geometry before validating t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62297/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62297 - High (7.5)

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, `readPsd()` commits image and layer buffers from attacker-declared PSD geometry before validating t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62297/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-78402 - High (7.8)

Stack-based buffer overflow and out-of-bounds
write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow
Buffers. 

Sentinel Keys Server does not check the length of the first field in
the input message. A local attacker may ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78402/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119335 - High (7.8)

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, advanced/Scripts/utils.sh getFTLPID() attempts to validate the pihole-owned /run/pihole-FTL.pid file with expr "${FTL_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119335/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116249 - High (8.4)

In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relative to the user's storage directory, but get_complete_file_path() only stripped leading slashes before joining the two. A path ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116249/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116249 - High (8.4)

In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relative to the user's storage directory, but get_complete_file_path() only stripped leading slashes before joining the two. A path ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116249/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116244 - High (8.2)

When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME from its environment, so the Kerberos library fell back to the default credential cache, or a client keytab, of the operating-syst...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116244/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116244 - High (8.2)

When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME from its environment, so the Kerberos library fell back to the default credential cache, or a client keytab, of the operating-syst...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116244/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116243 - High (7.5)

pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server mode the binary path was refused only when it lay under the per-user storage directory (STORAGE_DIR), not under a SHARED_STORA...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116243/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116243 - High (7.5)

pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server mode the binary path was refused only when it lay under the per-user storage directory (STORAGE_DIR), not under a SHARED_STORA...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116243/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-61826 - Critical (10)

Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/api/plex/oauth.py` omits `@authenticate` on its Resource handlers, while normal APIs require an API key and no global authentica...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61826/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119716 - High (8.1)

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_https://compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in help...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119716/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-90888 - Critical (9.8)

Unauthenticated PHP Object Injection in LeadSnap &lt;= 1.25 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90888/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-115642 - High (8.3)

In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restrictions resulting in elevation of privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-115642/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

Install the latest JetBrains security update to fix critical JetBrains IDE vulnerabilities CVE-2026-118697 and CVE-2026-118696 affecting trusted certificates.

#JetBrains #IntelliJIDEA #Cybersecurity #Vulnerability #eMudhra #InfoSec #AppSec

https://securityonline.info/jetbrains-ide-vulnerabilities-emudhra-certificates-patched/?utm_source=mastodon&utm_medium=jetpack_social

Install the latest JetBrains security update to fix critical JetBrains IDE vulnerabilities CVE-2026-118697 and CVE-2026-118696 affecting trusted certificates.

#JetBrains #IntelliJIDEA #Cybersecurity #Vulnerability #eMudhra #InfoSec #AppSec

https://securityonline.info/jetbrains-ide-vulnerabilities-emudhra-certificates-patched/?utm_source=mastodon&utm_medium=jetpack_social

Install the latest JetBrains security update to fix critical JetBrains IDE vulnerabilities CVE-2026-118697 and CVE-2026-118696 affecting trusted certificates.

#JetBrains #IntelliJIDEA #Cybersecurity #Vulnerability #eMudhra #InfoSec #AppSec

https://securityonline.info/jetbrains-ide-vulnerabilities-emudhra-certificates-patched/?utm_source=mastodon&utm_medium=jetpack_social

Install the latest JetBrains security update to fix critical JetBrains IDE vulnerabilities CVE-2026-118697 and CVE-2026-118696 affecting trusted certificates.

#JetBrains #IntelliJIDEA #Cybersecurity #Vulnerability #eMudhra #InfoSec #AppSec

https://securityonline.info/jetbrains-ide-vulnerabilities-emudhra-certificates-patched/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-65566 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This issue affects AI Engine: from n/a through 3.8.8.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65566/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119718 - High (7.8)

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc() when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119718/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119717 - High (8.1)

pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_https://compiler.py that allows attackers to execute Python code via unescaped bracketed path segments in Handlebars templates. Attackers can supply a template with a crafted segmen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119717/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8822 - High (7.5)

A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A specially crafted USGS DEM can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8822/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-82104: Teltonika RUTOS (7.22 – 7.24.2) & TSWOS (1.9 – 1.10) have a CRITICAL flaw — unauthenticated users can execute OS commands via LUA API bypass. Restrict access & monitor devices. Patch status TBC. https://radar.offseq.com/threat/in-teltonika-networks-rutos-devices-running-versions-from-722-through-7242-and-tswos-devices-running-754a7a56d55cfce7 #OffSeq #Vuln #IoT #CVE202682104

Teltonika RUT devices (RUTOS 7.22 – 7.24.2, TSWOS 1.9 – 1.10) face CRITICAL vuln: CVE-2026-82104. Unauthenticated attackers can execute OS commands via incorrect LUA authorization. Restrict access, monitor systems. Patch unconfirmed. https://radar.offseq.com/threat/cve-2026-82104-cwe863-incorrect-authorization-in-teltonika-networks-rut-fa6ae78ef5328d8c #OffSeq #Infosec #CVE #IoT

CallBackery <0.62.0 (Perl) is vulnerable (CVE-2026-118990, HIGH). Temp config dumps in /tmp are world-readable & not deleted, exposing password hashes. Local users can also exploit predictable filenames via symlink. Upgrade to 0.62.0+. https://radar.offseq.com/threat/cve-2026-118990-cwe-379-creation-of-temporary-file-in-directory-with-insecure-permissions-in-1f67aa1816eadbc4 #OffSeq #infosec #CVE2026118990

WP Visitor Statistics (Real Time Traffic) < 8.8 exposes a HIGH severity SQL injection (CVE-2026-117572). Admins can execute unauthorized DB actions. Patch to 8.8+ to secure your site. https://radar.offseq.com/threat/the-wp-visitor-statistics-real-time-traffic-wordpress-plugin-before-88-does-not-sanitize-and-escape-a-d7fdfbc7c7613095 #OffSeq #WordPress #SQLi #Infosec

lol. lmao.

https://nvd.nist.gov/vuln/detail/cve-2026-119660

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default session_key 'muse_bot_session_key'. Attackers can sign a MuseBot-session cookie carrying a user_id to gain full administrative access, reading password hashes, chat records, and bot configuration, and stopping bots.

🔴 CVE-2026-119597 - Critical (9.8)

OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json. Attackers can mint HS256 bearer tokens w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119597/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119578 - High (7.8)

MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attackers to run Python code via a crafted work directory's algo_object.json. Attackers can ship a malicious algorithm_templates...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119578/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

Yesterday was WS_FTP. Today is vsftpd. What fucking years is this?

https://abraxaslabs.tech/research/vsftpd-ssl-data-any-ticket

https://nvd.nist.gov/vuln/detail/cve-2026-119568

vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a ticket via AUTH TLS, then connect to the victim's PASV port to steal downloads or inject upload data.

CVE-2026-119568: CRITICAL auth bypass in vsftpd ≤3.0.5. Attackers sharing a victim's IP can hijack FTPS data connections via resumed TLS session ticket. Restrict FTPS to trusted IPs & monitor AUTH TLS. Patch unconfirmed. https://radar.offseq.com/threat/cve-2026-119568-improper-verification-of-source-of-a-communication-channel-in-vsftpd-63d53552c699c224 #OffSeq #vsftpd #CVE2026119568

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

🔴 CVE-2025-31704 - Critical (9.8)

A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-31704/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco Patches Actively Exploited Firewall Zero-Day

Cisco patched a high-severity zero-day vulnerability (CVE-2026-76418) in ASA and FTD software that allows unauthenticated attackers to remotely crash SSL VPN devices. The flaw is part of a series of targeted attacks against Cisco infrastructure.

**If you run Cisco ASA or FTD firewalls with SSL VPN and secondary authentication turned on, upgrade to a fixed software ASAP. Attackers are already using this flaw to crash firewalls and cut off remote users. If you can't patch, disable secondary authentication on your VPN tunnel groups with the `no secondary-authentication-server-group` command until the upgrade is done.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisco-patches-actively-exploited-firewall-zero-day-6-l-5-m-3/gD2P6Ple2L

🚨 Rapid Response: A critical Gravity Forms vulnerability (CVE-2026-103039, CVSS 9.8) could lead to remote code execution under specific conditions.

Censys identified 83,800 web properties running Gravity Forms.

Read the full advisory for additional details and queries: https://censys.com/advisory/cve-2026-103039/

#CensysARC #WordPress #GravityForms #VulnerabilityManagement

🟠 CVE-2026-9536 - High (7.5)

A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9536/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119168 - High (8.8)

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership of host directories. This could allow unauthorized access...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119168/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8824 - High (7.5)

A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to trigger this...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8824/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9535 - High (8.2)

A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9535/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 Rapid Response: Seven vulnerabilities in Progress WS_FTP Server, including a critical authentication bypass (CVE-2026-84295, CVSS 10.0), could expose administrative credentials and allow further server compromise.

Censys ARC identified ~2,500 Internet-exposed WS_FTP Server hosts.
Read the full advisory for additional details and queries: https://censys.com/advisory/cve-2026-84295-and-others/

#CensysARC #Cybersecurity #VulnerabilityManagement #WSFTP #InfoSec

CERT/CC warns of a critical Xerj authentication bypass tracked as CVE-2026-97406 that lets attackers mint persistent tokens without passkeys.

#Xerj #CVE202697406 #CERTCC #AuthenticationBypass #Cybersecurity #APISecurity #InfoSec

http://securityonline.info/xerj-authentication-bypass-cve-2026-97406/?utm_source=mastodon&utm_medium=jetpack_social

Karen IT Security Response Center (@ksrc) Advisory

Advisory ID: KSRC-2026-10302

A #critical #SQL Injection #vulnerability has been identified in the Radius Xenia M2M Platform developed by Radius Synergies. The vulnerability, tracked as CVE-2026-114358, has been assigned a CVSS v4.0 score of 9.3 (Critical).

An unauthenticated remote attacker can #exploit this flaw through the password recovery functionality in the web management interface by supplying crafted SQL queries. Successful exploitation may allow the attacker to access sensitive information, enumerate the #database structure, or modify database records.

https://ksrc.karenit.net/blog/security-alert/critical-sql-injection-vulnerability-in-radius-xenia-m2m-platform

#cve #cyberSecurity #staysafe #StayInformed #StayProtected

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

CISA KEVs:
- CISA-2026:1001 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)
- CISA-2026:1002 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1002)
- CISA-2026:1004 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)
- CISA-2026:1008 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008)
- CISA-2026:1013 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1013)
- CISA-2026:1014 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1014)
- CISA-2026:1015 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1015)
- CISA-2026:1016 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1016)
- CISA-2026:1020 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1020)
- CISA-2026:1023 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

Top EPSS Score:
- CVE-2026-109618 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- CVE-2026-109619 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- CVE-2026-21589 - 99.48 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-21589)
- CVE-2026-104935 - 86.77 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-104935)
- CVE-2026-111497 - 82.64 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- CVE-2026-105134 - 81.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105134)
- CVE-2026-105133 - 79.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105133)
- CVE-2026-110447 - 73.31 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-110447)
- CVE-2026-59774 - 28.31 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-59774)
- CVE-2026-97229 - 26.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-97229)