| CVE | CVSS | EPSS | Posts | Repos | Nuclei | Updated | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-18768 | 7.8 | 0.00% | 2 | 0 | 2026-11-11T09:17:15.313000 | A local low privileged attacker can access arbitrary physical memory or define i | |
| CVE-2026-18767 | 7.8 | 0.00% | 2 | 0 | 2026-11-11T09:17:15.133000 | A local low privileged attacker or process can access I/O ports via TcRouter.sys | |
| CVE-2026-96414 | 0 | 0.00% | 2 | 0 | 2026-11-11T08:17:19.357000 | In affected versions of Octopus Server, insufficient integrity protection of aut | |
| CVE-2026-76981 | 8.8 | 0.00% | 2 | 0 | 2026-11-11T08:17:18.760000 | Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to | |
| CVE-2026-12062 | 8.8 | 0.00% | 2 | 0 | 2026-11-11T08:17:17.960000 | Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to | |
| CVE-2026-111190 | 8.1 | 0.00% | 2 | 0 | 2026-11-11T08:17:17.037000 | The ARForms plugin for WordPress is vulnerable to arbitrary file upload in all v | |
| CVE-2026-89103 | 10.0 | 0.32% | 1 | 1 | 2026-11-11T05:19:54.833000 | SAP Gateway activates the default Access Control List with high privileges allow | |
| CVE-2026-64670 | 9.3 | 0.00% | 2 | 0 | 2026-11-11T05:19:51.527000 | Waline is a comment system with backend support. In versions 3.15.2 and prior, @ | |
| CVE-2026-125350 | 8.8 | 0.00% | 1 | 3 | 2026-11-11T05:19:38.220000 | Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote a | |
| CVE-2026-124194 | 6.5 | 0.00% | 1 | 1 | 2026-11-11T05:19:35.990000 | Product ui does not warn user of unsafe actions in Microsoft Office Outlook allo | |
| CVE-2026-126187 | None | 0.00% | 2 | 1 | 2026-11-10T22:44:13 | ### Impact Crafted payloads targeting frameworks supporting React Server Compon | |
| CVE-2026-83563 | 7.8 | 0.00% | 2 | 0 | 2026-11-10T21:34:03 | Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate | |
| CVE-2026-111793 | 4.3 | 0.27% | 1 | 0 | 2026-11-10T21:32:45 | Openwave Webtop Media Transcoder does not enforce administrator-defined file typ | |
| CVE-2026-20320 | 7.5 | 0.39% | 1 | 0 | 2026-11-10T21:32:40 | A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWork | |
| CVE-2026-105437 | 7.5 | 0.00% | 2 | 1 | 2026-11-10T19:17:46.200000 | Affected versions of Git have a heap buffer overflow in the three-way merge code | |
| CVE-2026-114432 | 9.8 | 0.46% | 2 | 0 | 2026-11-10T16:28:46.510000 | The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or e | |
| CVE-2026-91147 | 5.9 | 0.64% | 1 | 0 | 2026-11-09T17:17:33.833000 | A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenti | |
| CVE-2026-98432 | 9.8 | 0.76% | 2 | 89 | 2026-11-06T19:28:12.867000 | In the Linux kernel, the following vulnerability has been resolved: ipv4: free | |
| CVE-2026-83844 | 8.1 | 0.38% | 2 | 7 | 2026-10-13T21:35:04 | Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute c | |
| CVE-2026-84034 | 8.8 | 0.42% | 1 | 0 | 2026-09-18T21:32:37 | IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulne | |
| CVE-2026-11725 | 8.8 | 0.59% | 1 | 0 | 2026-09-18T21:32:28 | IBM MQ could allow an authenticated attacker to cause a denial of service or pot | |
| CVE-2026-77607 | 6.1 | 0.28% | 1 | 0 | 2026-09-18T16:50:02 | #### Failure mode `sep` was inserted verbatim into the HTML that joins a table | |
| CVE-2026-18769 | 0 | 0.00% | 2 | 0 | N/A | ||
| CVE-2026-111760 | 0 | 0.00% | 2 | 1 | N/A | ||
| CVE-2026-113408 | 0 | 0.00% | 2 | 0 | N/A | ||
| CVE-2026-64678 | 0 | 0.00% | 4 | 0 | N/A | ||
| CVE-2026-64682 | 0 | 0.00% | 4 | 0 | N/A | ||
| CVE-2026-109091 | 0 | 0.00% | 1 | 0 | N/A |
updated 2026-11-11T09:17:15.313000
2 posts
🔒 New CSAF advisory published
VDE-2026-087
Beckhoff: Exposed IOCTLs with insufficient access control in TcRouter.sys
CVE-2026-18767, CVE-2026-18768, CVE-2026-18769
The vulnerabilities allow local low privileged users or processes to gain full system access on the affected devices through exposed IOCTL function call…
HTML: https://certvde.com/en/advisories/VDE-2026-087
CSAF JSON: https://beckhoff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-087.json
🔒 New CSAF advisory published
VDE-2026-087
Beckhoff: Exposed IOCTLs with insufficient access control in TcRouter.sys
CVE-2026-18767, CVE-2026-18768, CVE-2026-18769
The vulnerabilities allow local low privileged users or processes to gain full system access on the affected devices through exposed IOCTL function call…
HTML: https://certvde.com/en/advisories/VDE-2026-087
CSAF JSON: https://beckhoff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-087.json
updated 2026-11-11T09:17:15.133000
2 posts
🔒 New CSAF advisory published
VDE-2026-087
Beckhoff: Exposed IOCTLs with insufficient access control in TcRouter.sys
CVE-2026-18767, CVE-2026-18768, CVE-2026-18769
The vulnerabilities allow local low privileged users or processes to gain full system access on the affected devices through exposed IOCTL function call…
HTML: https://certvde.com/en/advisories/VDE-2026-087
CSAF JSON: https://beckhoff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-087.json
🔒 New CSAF advisory published
VDE-2026-087
Beckhoff: Exposed IOCTLs with insufficient access control in TcRouter.sys
CVE-2026-18767, CVE-2026-18768, CVE-2026-18769
The vulnerabilities allow local low privileged users or processes to gain full system access on the affected devices through exposed IOCTL function call…
HTML: https://certvde.com/en/advisories/VDE-2026-087
CSAF JSON: https://beckhoff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-087.json
updated 2026-11-11T08:17:19.357000
2 posts
CVE-2026-96414 | HIGH severity in Octopus Server: improper integrity checks on authentication cookies may let limited users escalate to Admin. Affected: 2022.1.3143 – 2026.2.13487, 2026.3.0 – 2026.3.15875. Update ASAP. https://radar.offseq.com/threat/cve-2026-96414-cwe-649-reliance-on-obfuscation-or-encryption-of-security-relevant-inputs-without-e1c08a0b47dff5d8 #OffSeq #OctopusDeploy #Vuln #PrivilegeEscalation
##CVE-2026-96414 | HIGH severity in Octopus Server: improper integrity checks on authentication cookies may let limited users escalate to Admin. Affected: 2022.1.3143 – 2026.2.13487, 2026.3.0 – 2026.3.15875. Update ASAP. https://radar.offseq.com/threat/cve-2026-96414-cwe-649-reliance-on-obfuscation-or-encryption-of-security-relevant-inputs-without-e1c08a0b47dff5d8 #OffSeq #OctopusDeploy #Vuln #PrivilegeEscalation
##updated 2026-11-11T08:17:18.760000
2 posts
🟠 CVE-2026-76981 - High (8.8)
Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76981/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##🟠 CVE-2026-76981 - High (8.8)
Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76981/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##updated 2026-11-11T08:17:17.960000
2 posts
🟠 CVE-2026-12062 - High (8.8)
Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnerability in ADAudit Plus Reports API.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12062/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##🟠 CVE-2026-12062 - High (8.8)
Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnerability in ADAudit Plus Reports API.
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12062/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##updated 2026-11-11T08:17:17.037000
2 posts
🟠 CVE-2026-111190 - High (8.1)
The ARForms plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 7.2.4 via its form file-upload handler. The name of the stored file is taken from an attacker-controlled request header and is not adequa...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-111190/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##🟠 CVE-2026-111190 - High (8.1)
The ARForms plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 7.2.4 via its form file-upload handler. The name of the stored file is taken from an attacker-controlled request header and is not adequa...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-111190/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##updated 2026-11-11T05:19:54.833000
1 posts
1 repos
PROXYGATE (CVE-2026-89103): Sicherheitslücke im SAP Gateway ermöglicht Codeausführung ohne Anmeldung
SAP hat mit dem Sicherheitshinweis Nr. 3798345 eine Schwachstelle im SAP Gateway geschlossen, die Angreifern ohne Anmeldedaten die Ausführung von Betriebssystembefehlen erlaubt. Ob ein System betroffen ist, hängt nicht allein von der Kernel-Version ab, sondern von der Proxy-Zugriffskontrollliste prxyinfo und dem Parameter gw/acl_mode_proxy.
##updated 2026-11-11T05:19:51.527000
2 posts
🔴 CVE-2026-64670 - Critical (9.3)
Waline is a comment system with backend support. In versions 3.15.2 and prior, @Waline/client renders the comment editor's live preview with marked and no sanitizer (utils/markdown.ts), and the preview is injected with v-html. When a comment is ed...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64670/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##🔴 CVE-2026-64670 - Critical (9.3)
Waline is a comment system with backend support. In versions 3.15.2 and prior, @Waline/client renders the comment editor's live preview with marked and no sanitizer (utils/markdown.ts), and the preview is injected with v-html. When a comment is ed...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64670/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##updated 2026-11-11T05:19:38.220000
1 posts
3 repos
https://github.com/TJT001/CVE-2026-125350-PoC
Chrome, zero-day sfruttata in the wild: CVE-2026-125350, use-after-free nel componente XML. Google conferma che esiste un exploit, senza dettagli su attori o modalità. CISA l'ha aggiunta alla KEV il 10/11 (scadenza FCEB 24/11).
Fix: 157.0.8103.50/.51 su Windows e macOS, 157.0.8103.50 su Linux; serve il riavvio del browser. Edge, Brave, Opera e Vivaldi: aggiornare appena il fix è disponibile. Ottava zero-day di Chrome sfruttata nel 2026.
https://thehackernews.com/2026/11/google-issues-chrome-security-update.html
##updated 2026-11-11T05:19:35.990000
1 posts
1 repos
Microsoft released patches for 1,259 vulnerabilities across its software portfolio on November 11, 2026, marking the second consecutive month exceeding 1,000 flaws.
The total covers 726 Windows issues, 174 Office flaws, and several other components, bringing 2026 patches past 5,100 CVEs.
Notably, a moderate Outlook flaw (CVE-2026-124194) is actively exploited, allowing an attacker to trigger an unauthorized network connection…
##updated 2026-11-10T22:44:13
2 posts
1 repos
Update React Server Components to version 19.3.1 now to fix CVE-2026-126187, a critical 9.5 CVSS unauthenticated remote code execution vulnerability.
#React #ReactServerComponents #WebSecurity #Cybersecurity #InfoSec
##Update React Server Components to version 19.3.1 now to fix CVE-2026-126187, a critical 9.5 CVSS unauthenticated remote code execution vulnerability.
#React #ReactServerComponents #WebSecurity #Cybersecurity #InfoSec
##updated 2026-11-10T21:34:03
2 posts
updated 2026-11-10T21:32:45
1 posts
The U.S.
CISA has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-20320 in Cisco BroadWorks and CVE-2026-111793 in Openwave Messaging.
The Cisco issue allows unauthorized reading of sensitive settings, while the Openwave flaw permits document processing manipulation.
FCEB agencies are required to apply patches by November 24, 2026.
While the patches for these issues were rele…
https://en.hacks.gr/i-cisa-proeidopoiei-gia-kena-asfaleias-se-systimata-cisco-kai-openwave/
##updated 2026-11-10T21:32:40
1 posts
The U.S.
CISA has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-20320 in Cisco BroadWorks and CVE-2026-111793 in Openwave Messaging.
The Cisco issue allows unauthorized reading of sensitive settings, while the Openwave flaw permits document processing manipulation.
FCEB agencies are required to apply patches by November 24, 2026.
While the patches for these issues were rele…
https://en.hacks.gr/i-cisa-proeidopoiei-gia-kena-asfaleias-se-systimata-cisco-kai-openwave/
##updated 2026-11-10T19:17:46.200000
2 posts
1 repos
black background, red text, scroll to reveal merge2shell website in 3, 2, 1 ... https://nvd.nist.gov/vuln/detail/cve-2026-105437
##black background, red text, scroll to reveal merge2shell website in 3, 2, 1 ... https://nvd.nist.gov/vuln/detail/cve-2026-105437
##updated 2026-11-10T16:28:46.510000
2 posts
Contact Form 7 has a critical RCE vulnerability affecting versions 6.2 to 6.2.3 — CVE-2026-114432 — allowing unauthenticated attackers to run arbitrary code on your server. With five million active installs, the exposure is significant. Update to 6.2.4 now.
#WordPress #Security #ContactForm7 #WordPressSecurity #WebSecurity
https://wpguy.uk/blog/critical-contact-form-7-flaw-update-to-624-now/
##Contact Form 7 has a critical RCE vulnerability affecting versions 6.2 to 6.2.3 — CVE-2026-114432 — allowing unauthenticated attackers to run arbitrary code on your server. With five million active installs, the exposure is significant. Update to 6.2.4 now.
#WordPress #Security #ContactForm7 #WordPressSecurity #WebSecurity
https://wpguy.uk/blog/critical-contact-form-7-flaw-update-to-624-now/
##updated 2026-11-09T17:17:33.833000
1 posts
CVE-2026-91147: unauthenticated DoS in Cockpit's cockpit-ws. A crafted request to the UrlRoot prefix (no trailing slash) crashes the web service. CVSS 5.9, patch status unknown. Restrict exposure and watch for updates. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-91147/
##updated 2026-11-06T19:28:12.867000
2 posts
89 repos
https://github.com/lowerpower/cve-2026-98432-mitigation
https://github.com/xxhjkl/cve-2026-98432-check
https://github.com/dolistblesson/CVE-2026-98432-update
https://github.com/muhammedemintombak/pardus21-cve-2026-98432
https://github.com/ZombiePm/cve-2026-98432-mitigation
https://github.com/makslanies/cve-2026-98432-mitigation
https://github.com/jackykeung/CVE-2026-98432-Verified-Attack
https://github.com/knneth/cve-2026-98432-dkms
https://github.com/valkenindustries/cve-2026-98432-mitigation
https://github.com/medandevsec/cve-2026-98432-ubuntu-analisis
https://github.com/zake1god/CVE-2026-98432
https://github.com/axisops/CVE-2026-98432
https://github.com/raahilmw/synipopt
https://github.com/Omniversetr/omnicheck_CVE-2026-98432
https://github.com/IgrekLg/cve-2026-98432-mitigation
https://github.com/rootagi/CVE-2026-98432
https://github.com/Certbn/CVE-2026-98432-Linux-IPv4-TCP-IP-Use-After-Free
https://github.com/mc493/kshield
https://github.com/nnssh/CVE-2026-98432_poc
https://github.com/Ghost-Bx1/cve-2026-98432-linux-tcp-uaf
https://github.com/mrjoshuap/ansible-ezcve
https://github.com/luxagen/tester-linux-cve-2026-98432
https://github.com/zhao-xiaogang/cve_2026_98432_livepatch
https://github.com/sv3t0sl4v/CVE-2026-98432-Ubuntu-Temporary-Mitigation
https://github.com/sam00/CVE-2026-98432-POC-Exploit
https://github.com/adeptum-labs/cve-emergency-monitor
https://github.com/brett6320/fix_CVE-2026-98432
https://github.com/AronWang001/linux-cve-2026-98432-fix
https://github.com/GarphenGate/cve-2026-98432-defender-toolkit
https://github.com/johnhsb/linux-tcp-uaf-cve-2026-98432
https://github.com/matthew-hollick/mitigate-cve-2026-98432
https://github.com/antonyantony/cve-2026-98432-nft
https://github.com/s97472091-pixel/verification-gap-cve-2026-98432
https://github.com/thiscitze/cve-2026-98432-root-shell
https://github.com/jamilbk/drop-ipv4-opt
https://github.com/MikkoAbudo/CVE-2026-98432-POC
https://github.com/pob220/ubuntu-noble-tcp-rcu-backport
https://github.com/soroushneshati/cve-2026-98432-ubuntu-mitigation
https://github.com/maxigentr/netviser-linux-security-auditor
https://github.com/INFOKOM-KI/CVE-2026-98432-Wazuh-
https://github.com/upeul/cve-2026-98432-linux
https://github.com/one-loner/cve_2026_98432_fix
https://github.com/Mervent/cve-2026-98432
https://github.com/tiendungdev/cve-2026-98432-guard
https://github.com/offline-ant/tcp2kaslr
https://github.com/fetus-hina/cve-2026-98432-mitigation-rpm
https://github.com/hdp1972be-svg/cve_2026_98432_guard
https://github.com/mafudge/cve-2026-98432
https://github.com/scriptzteam/Paranoid-CVE-2026-98432
https://github.com/moatome/CVE-2026-98432-pen-test-main
https://github.com/Pr0fEs0r-X/CVE-2026-98432-Checker-v-1.0-
https://github.com/fbuff-tools/cve-2026-98432-checker
https://github.com/mahdi-salmanzade/CVE-2026-98432
https://github.com/maxottovon/CVE-2026-98432-scan
https://github.com/googlesky/CVE-2026-98432
https://github.com/polikhronidi/cve-2026-98432-ubuntu-backport
https://github.com/ylh440104/cve-2026-98432-chain
https://github.com/ndeet/cve-2026-98432
https://github.com/Quaerendir/cve-2026-98432-audit
https://github.com/H1z3-br0/CVE-2026-98432
https://github.com/techtaek77/ubuntu-tcp-guide
https://github.com/illuscapital/CVE-2026-98432
https://github.com/bitwire-it/Probe-CVE-2026-98432
https://github.com/al4n4n/CVE-2026-98432
https://github.com/datacenter-metrotel/Mitigating-CVE-2026-98432
https://github.com/carlosbustillordguez/cve-2026-98432-mitigation
https://github.com/typhoon1217/cve-2026-98432-mitigation
https://github.com/nfodor/cve-2026-98432-nft-mitigation
https://github.com/ashrafzaryouh/CVE-2026-98432
https://github.com/braginvalentin/cve_2026_98432
https://github.com/keithel/ubuntu-26.04-kernel-cve-2026-98432-patch-build-docker
https://github.com/BigBIueWhale/cve-2026-98432-kernel-upgrade
https://github.com/schnied/cve-2026-98432-mitigation-iptables
https://github.com/t0ge-kun/CVE-2026-98432-check
https://github.com/akamai/cve-2026-98432-validation-mitigation
https://github.com/cybervenom01/Mitigation_CVE-2026-98432
https://github.com/davetha/cve-2026-98432
https://github.com/alvaroguzmancode/cve-2026-98432
https://github.com/xen0bit/netprobe-cve-2026-98432
https://github.com/marcelofmatos/cve-2026-98432-check
https://github.com/akaihigurashi/kernel98scan
https://github.com/zenjabba/cve-2026-98432-mitigation
https://github.com/paulwouters/block_cve_2026_98432
https://github.com/sevaepsteyn/cve-2026-98432-ebpf
https://github.com/tc4dy/CVE-2026-98432-PoC-Exploit
https://github.com/suominen/CVE-2026-98432
https://github.com/uvian/xboard-core
Apparently, #Ubuntu has finally issued fixes for CVE-2026-98432 on (most of) its supported versions. Most notably, resolute, noble, and jammy LTS.
##Apparently, #Ubuntu has finally issued fixes for CVE-2026-98432 on (most of) its supported versions. Most notably, resolute, noble, and jammy LTS.
##updated 2026-10-13T21:35:04
2 posts
7 repos
https://github.com/mokshshah18/CVE-2026-83844-PoC-MS-paint-v-11.2609.401.0
https://github.com/HackingLZ/CVE-2026-83844-public
https://github.com/blkph0x/CVE-2026-83844_POC
https://github.com/LACHHAB-Anas/CVE-2026-83844
https://github.com/ashrafzaryouh/CVE-2026-83844
The Microsoft Paint vulnerability CVE-2026-83844 is fixed only in Paint 11.2609.401.0. Learn how to check your version and update from the Store.
#MicrosoftPaint #CVE202683844 #Windows11 #MicrosoftStore #PatchNow
##The Microsoft Paint vulnerability CVE-2026-83844 is fixed only in Paint 11.2609.401.0. Learn how to check your version and update from the Store.
#MicrosoftPaint #CVE202683844 #Windows11 #MicrosoftStore #PatchNow
##updated 2026-09-18T21:32:37
1 posts
CVE-2026-84034: IBM Guardium Data Protection 12.2 ships hardcoded credentials in hardware_assess/obstore, letting low-priv users recover master secrets and reach the internal database. CVSS 8.8, no patch yet - restrict access and monitor. https://www.valtersit.com/cve/CVE-2026-84034/
##updated 2026-09-18T21:32:28
1 posts
CVE-2026-11725: integer overflow in IBM MQ's MQINQ request handling lets an authenticated attacker cause DoS or possibly RCE. CVSS 8.8, patch status unknown. Check your MQ exposure and update now. #CVE #infosec #IBM https://www.valtersit.com/cve/CVE-2026-11725/
##updated 2026-09-18T16:50:02
1 posts
CVE-2026-77607: Semantic MediaWiki before 7.2.0 inserts the sep value verbatim into HTML cell joins, allowing HTML injection. CVSS 6.1. Patch under review - plan your upgrade to 7.2.0 now. #CVE #infosec #MediaWiki https://www.valtersit.com/cve/CVE-2026-77607/
##🔒 New CSAF advisory published
VDE-2026-087
Beckhoff: Exposed IOCTLs with insufficient access control in TcRouter.sys
CVE-2026-18767, CVE-2026-18768, CVE-2026-18769
The vulnerabilities allow local low privileged users or processes to gain full system access on the affected devices through exposed IOCTL function call…
HTML: https://certvde.com/en/advisories/VDE-2026-087
CSAF JSON: https://beckhoff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-087.json
🔒 New CSAF advisory published
VDE-2026-087
Beckhoff: Exposed IOCTLs with insufficient access control in TcRouter.sys
CVE-2026-18767, CVE-2026-18768, CVE-2026-18769
The vulnerabilities allow local low privileged users or processes to gain full system access on the affected devices through exposed IOCTL function call…
HTML: https://certvde.com/en/advisories/VDE-2026-087
CSAF JSON: https://beckhoff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-087.json
Update Git! Version 2.56.1 patches several security vulnerabilities, including CVE-2026-111760: Code execution during recursive clones and CVE-2026-113408: Path traversal through a server’s advertised HEAD
https://github.blog/open-source/git/git-security-vulnerabilities-announced-7/
#Git #ITSec #DevOps
Update Git! Version 2.56.1 patches several security vulnerabilities, including CVE-2026-111760: Code execution during recursive clones and CVE-2026-113408: Path traversal through a server’s advertised HEAD
https://github.blog/open-source/git/git-security-vulnerabilities-announced-7/
#Git #ITSec #DevOps
Update Git! Version 2.56.1 patches several security vulnerabilities, including CVE-2026-111760: Code execution during recursive clones and CVE-2026-113408: Path traversal through a server’s advertised HEAD
https://github.blog/open-source/git/git-security-vulnerabilities-announced-7/
#Git #ITSec #DevOps
Update Git! Version 2.56.1 patches several security vulnerabilities, including CVE-2026-111760: Code execution during recursive clones and CVE-2026-113408: Path traversal through a server’s advertised HEAD
https://github.blog/open-source/git/git-security-vulnerabilities-announced-7/
#Git #ITSec #DevOps
🔴 CVE-2026-64678 - Critical (9.8)
NOsql Object (NO2 a.k.a Nitrite) database is an open source nosql embedded document store. Prior to version 4.4.1, when Nitrite opens a database file, MVStoreUtils.openOrCreate() automatically checks for a legacy v1-format store and, on detecting ...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64678/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##CVE-2026-64678 (CRITICAL, CVSS 9.8): nitrite-java <4.4.1 is vulnerable to remote code execution via unsafe deserialization of legacy DB files. Upgrade to 4.4.1+ to patch. Details: https://radar.offseq.com/threat/cve-2026-64678-cwe-502-deserialization-of-untrusted-data-in-nitrite-nitrite-java-314aa67377fc3d2a #OffSeq #CVE202664678 #JavaSec #RCE
##🔴 CVE-2026-64678 - Critical (9.8)
NOsql Object (NO2 a.k.a Nitrite) database is an open source nosql embedded document store. Prior to version 4.4.1, when Nitrite opens a database file, MVStoreUtils.openOrCreate() automatically checks for a legacy v1-format store and, on detecting ...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64678/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##CVE-2026-64678 (CRITICAL, CVSS 9.8): nitrite-java <4.4.1 is vulnerable to remote code execution via unsafe deserialization of legacy DB files. Upgrade to 4.4.1+ to patch. Details: https://radar.offseq.com/threat/cve-2026-64678-cwe-502-deserialization-of-untrusted-data-in-nitrite-nitrite-java-314aa67377fc3d2a #OffSeq #CVE202664678 #JavaSec #RCE
##🔴 CVE-2026-64682 - Critical (9.8)
AstroBlocks is a block-first CMS for Astro projects. Prior to version 3.4.0, admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name. An attacker who knows the public fallback value (re...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64682/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##CVE-2026-64682 (CRITICAL, CVSS 9.8): NauelG AstroBlocks <3.4.0 uses a hard-coded JWT secret, letting attackers forge admin tokens and gain full CMS control. Upgrade to 3.4.0+ ASAP. https://radar.offseq.com/threat/cve-2026-64682-cwe-321-use-of-hard-coded-cryptographic-key-in-nauelg-astro-blocks-c37331b6c846012a #OffSeq #AstroBlocks #CVE202664682 #infosec
##🔴 CVE-2026-64682 - Critical (9.8)
AstroBlocks is a block-first CMS for Astro projects. Prior to version 3.4.0, admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name. An attacker who knows the public fallback value (re...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64682/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
##CVE-2026-64682 (CRITICAL, CVSS 9.8): NauelG AstroBlocks <3.4.0 uses a hard-coded JWT secret, letting attackers forge admin tokens and gain full CMS control. Upgrade to 3.4.0+ ASAP. https://radar.offseq.com/threat/cve-2026-64682-cwe-321-use-of-hard-coded-cryptographic-key-in-nauelg-astro-blocks-c37331b6c846012a #OffSeq #AstroBlocks #CVE202664682 #infosec
##CW: biztonsági frissítés, CVE-k
Megjelent az XOrg Server 21.1.26 és az Xwayland 24.1.15 — több sebezhetőséget javítanak, amelyek összeomláshoz és memóriakorrupcióhoz vezethettek. Érintett CVE-k: CVE-2026-109091, -109092, -109093, -109904, -109095, -109096, -109903. Telepítsd, ha megérkezik a disztródba. https://linuxmint.hu/hir/2026/11/megjelent-az-xorg-server-21126-es-az-xwayland-24115-ujabb-biztonsagi-hibajavitasokkal
##