🟠 CVE-2026-75140 - High (7.5)

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75140/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75140 - High (7.5)

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75140/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-76956 - DoS in libexpat 2.8.2/2.8.3. Insufficient entropy from getentropy handling enables hash flooding via crafted XML. CVSS 7.5. No patch yet, upgrade to 2.8.4. #CVE #libexpat #infosec

https://www.valtersit.com/cve/CVE-2026-76956/

[1/9]

Most Impactful Security Incidents ( 2026‑08‑18 → 2026‑08‑19 )

---

PRIORITY 1 – Critical / High‑Severity Flaws (CVSS 7‑10):

CVE‑2026‑60392
• 7.8 (HIGH)
• Oracle Outside In Technology – PDF Export SDK (Fusion Middleware)
• Local‑privilege escalation; requires attacker to have a logon on the host where the SDK runs. Successful exploitation can lead to full takeover of the component.
• 8.5.8
• Easily exploitable (local) – requires user interaction.
• https://cveawg.mitre.org/api/cve/CVE-2026-60392

CVE‑2026‑60782
• 9.8 (CRITICAL)
• Oracle Payments (E‑Business Suite) – File Transmission
• Remote unauthenticated attacker can compromise the Payments module via HTTP. Leads to full takeover of the Payments service.
• 12.2.3‑12.2.15
• Network‑accessible, no authentication required.
• https://cveawg.mitre.org/api/cve/CVE-2026-60782

CVE‑2026‑60730
• 9.9 (CRITICAL)
• Oracle WebCenter Portal – Composer component
• Remote unauthenticated attacker can compromise the portal via HTTP. Full takeover of the portal.
• 12.2.1.4.0, 14.1.2.0.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60730

CVE‑2026‑60728
• 9.1 (CRITICAL)
• Oracle WebCenter Portal – Portlet Services
• Remote unauthenticated attacker can cause denial‑of‑service and full compromise of portal data.
• 12.2.1.4.0, 14.1.2.0.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60728

CVE‑2026‑60727
• 9.8 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Remote unauthenticated attacker can take over the IAM system via HTTP.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60727

CVE‑2026‑60721
• 9.8 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Same vector as above; full takeover possible.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60721

CVE‑2026‑60720
• 9.9 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Remote unauthenticated attacker can compromise the IAM system.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60720

#infosecnews

CVE ID: CVE-2026-72530
Vendor: TrueConf
Product: Server
Date Added: 2026-08-20
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-72530

🔴 CVE-2026-72530 - Critical (9)

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and exec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72530/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE ID: CVE-2026-72530
Vendor: TrueConf
Product: Server
Date Added: 2026-08-20
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-72530

🔴 CVE-2026-72530 - Critical (9)

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and exec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72530/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE ID: CVE-2026-72529
Vendor: TrueConf
Product: Server
Date Added: 2026-08-20
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-72529

CVE ID: CVE-2026-72529
Vendor: TrueConf
Product: Server
Date Added: 2026-08-20
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-72529

🟠 CVE-2026-77176 - High (8.1)

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77176/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77176 - High (8.1)

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77176/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-77022 - Critical (9.9)

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid of the component SSID Configuration. The manipulation of the argument ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77022/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-77022 - Critical (9.9)

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid of the component SSID Configuration. The manipulation of the argument ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77022/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71428 - Critical (9.3)

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. From 0.4.7 until 0.24.0, the url argument of partition, partition_html, and partitio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71428/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71428 - Critical (9.3)

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. From 0.4.7 until 0.24.0, the url argument of partition, partition_html, and partitio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71428/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Three critical Red Hat ACM/MCE flaws, led by CVE-2026-66792 (CVSS 9.9), allow full compromise of the managed cluster.

#CVE202666792 #RedHat #Kubernetes #PrivilegeEscalation #ACM #ClusterAdmin

https://securityonline.info/red-hat-acm-cluster-privilege-escalation/?utm_source=mastodon&utm_medium=jetpack_social

Three critical Red Hat ACM/MCE flaws, led by CVE-2026-66792 (CVSS 9.9), allow full compromise of the managed cluster.

#CVE202666792 #RedHat #Kubernetes #PrivilegeEscalation #ACM #ClusterAdmin

https://securityonline.info/red-hat-acm-cluster-privilege-escalation/?utm_source=mastodon&utm_medium=jetpack_social

An Apache InLong SQL injection flaw, CVE-2026-63038, lets attackers inject SQL via multiple parameters. Two more bugs join it. Upgrade to 2.4.0.

#ApacheInLong #SQLInjection #CVE #SSRF #InfoSec #OpenSource

https://securityonline.info/apache-inlong-sql-injection-cve-2026-63038/?utm_source=mastodon&utm_medium=jetpack_social

An Apache InLong SQL injection flaw, CVE-2026-63038, lets attackers inject SQL via multiple parameters. Two more bugs join it. Upgrade to 2.4.0.

#ApacheInLong #SQLInjection #CVE #SSRF #InfoSec #OpenSource

https://securityonline.info/apache-inlong-sql-injection-cve-2026-63038/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-76879 - High (7.5)

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76879/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76879 - High (7.5)

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76879/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76832 - High (8.8)

Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the file_name argument passed to rea...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76832/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76832 - High (8.8)

Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying parent-directory traversal sequences in the file_name argument passed to rea...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76832/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76234 - High (7.5)

libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation (and had a broken clamping check for im...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76234/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76234 - High (7.5)

libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation (and had a broken clamping check for im...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76234/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75144 - High (7.8)

FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75144/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75144 - High (7.8)

FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75144/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75141 - High (7.8)

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap bu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75141/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75141 - High (7.8)

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap bu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75141/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-61518 - High (8.8)

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primary_id parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query bind...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61518/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-61518 - High (8.8)

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primary_id parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query bind...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61518/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

Stack-based buffer overflow (CVE-2026-16885) in IBM AIX 7.2, 7.3 & PowerVM VIOS 4.1 (CRITICAL, CVSS 9.8). Remote, unauthenticated code execution possible. No patch yet — monitor IBM advisories. https://radar.offseq.com/threat/cve-2026-16885-cwe-121-stack-based-buffer-overflow-in-ibm-aix-4d84d05fa38f4cbc #OffSeq #IBM #AIX #Vuln

Stack-based buffer overflow (CVE-2026-16885) in IBM AIX 7.2, 7.3 & PowerVM VIOS 4.1 (CRITICAL, CVSS 9.8). Remote, unauthenticated code execution possible. No patch yet — monitor IBM advisories. https://radar.offseq.com/threat/cve-2026-16885-cwe-121-stack-based-buffer-overflow-in-ibm-aix-4d84d05fa38f4cbc #OffSeq #IBM #AIX #Vuln

🟠 CVE-2026-76633 - High (8.1)

WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authenticated user to change their account password without providing existing credentials by exploiting the unconditional exclusion of t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76633/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76633 - High (8.1)

WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authenticated user to change their account password without providing existing credentials by exploiting the unconditional exclusion of t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76633/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76833 - High (7.8)

@cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary JavaScript by embedding a custom !js YAML tag whose construct callback unconditionally calls eval() on attacker-supplied string ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76833/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76833 - High (7.8)

@cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary JavaScript by embedding a custom !js YAML tag whose construct callback unconditionally calls eval() on attacker-supplied string ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76833/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-61897 - High (7.8)

An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 (root). A shell spawned ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61897/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-61897 - High (7.8)

An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 (root). A shell spawned ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61897/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-28164: CRITICAL CSRF in HashThemes Easy Elementor Addons ≤2.3.7. Remote attackers can exploit this for full user compromise. No patch yet — track vendor advisories. CVSS 9.6. https://radar.offseq.com/threat/cve-2026-28164-cwe-352-cross-site-request-forgery-csrf-in-hashthemes-easy-elementor-addons-7bfb9b1be22a1e31 #OffSeq #WordPress #CSRF #CVE2026_28164

CVE-2026-28164: CRITICAL CSRF in HashThemes Easy Elementor Addons ≤2.3.7. Remote attackers can exploit this for full user compromise. No patch yet — track vendor advisories. CVSS 9.6. https://radar.offseq.com/threat/cve-2026-28164-cwe-352-cross-site-request-forgery-csrf-in-hashthemes-easy-elementor-addons-7bfb9b1be22a1e31 #OffSeq #WordPress #CSRF #CVE2026_28164

🟠 CVE-2026-76886 - High (8.1)

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76886/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76886 - High (8.1)

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76886/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

[1/9]

Most Impactful Security Incidents ( 2026‑08‑18 → 2026‑08‑19 )

---

PRIORITY 1 – Critical / High‑Severity Flaws (CVSS 7‑10):

CVE‑2026‑60392
• 7.8 (HIGH)
• Oracle Outside In Technology – PDF Export SDK (Fusion Middleware)
• Local‑privilege escalation; requires attacker to have a logon on the host where the SDK runs. Successful exploitation can lead to full takeover of the component.
• 8.5.8
• Easily exploitable (local) – requires user interaction.
• https://cveawg.mitre.org/api/cve/CVE-2026-60392

CVE‑2026‑60782
• 9.8 (CRITICAL)
• Oracle Payments (E‑Business Suite) – File Transmission
• Remote unauthenticated attacker can compromise the Payments module via HTTP. Leads to full takeover of the Payments service.
• 12.2.3‑12.2.15
• Network‑accessible, no authentication required.
• https://cveawg.mitre.org/api/cve/CVE-2026-60782

CVE‑2026‑60730
• 9.9 (CRITICAL)
• Oracle WebCenter Portal – Composer component
• Remote unauthenticated attacker can compromise the portal via HTTP. Full takeover of the portal.
• 12.2.1.4.0, 14.1.2.0.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60730

CVE‑2026‑60728
• 9.1 (CRITICAL)
• Oracle WebCenter Portal – Portlet Services
• Remote unauthenticated attacker can cause denial‑of‑service and full compromise of portal data.
• 12.2.1.4.0, 14.1.2.0.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60728

CVE‑2026‑60727
• 9.8 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Remote unauthenticated attacker can take over the IAM system via HTTP.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60727

CVE‑2026‑60721
• 9.8 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Same vector as above; full takeover possible.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60721

CVE‑2026‑60720
• 9.9 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Remote unauthenticated attacker can compromise the IAM system.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60720

#infosecnews

[1/9]

Most Impactful Security Incidents ( 2026‑08‑18 → 2026‑08‑19 )

---

PRIORITY 1 – Critical / High‑Severity Flaws (CVSS 7‑10):

CVE‑2026‑60392
• 7.8 (HIGH)
• Oracle Outside In Technology – PDF Export SDK (Fusion Middleware)
• Local‑privilege escalation; requires attacker to have a logon on the host where the SDK runs. Successful exploitation can lead to full takeover of the component.
• 8.5.8
• Easily exploitable (local) – requires user interaction.
• https://cveawg.mitre.org/api/cve/CVE-2026-60392

CVE‑2026‑60782
• 9.8 (CRITICAL)
• Oracle Payments (E‑Business Suite) – File Transmission
• Remote unauthenticated attacker can compromise the Payments module via HTTP. Leads to full takeover of the Payments service.
• 12.2.3‑12.2.15
• Network‑accessible, no authentication required.
• https://cveawg.mitre.org/api/cve/CVE-2026-60782

CVE‑2026‑60730
• 9.9 (CRITICAL)
• Oracle WebCenter Portal – Composer component
• Remote unauthenticated attacker can compromise the portal via HTTP. Full takeover of the portal.
• 12.2.1.4.0, 14.1.2.0.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60730

CVE‑2026‑60728
• 9.1 (CRITICAL)
• Oracle WebCenter Portal – Portlet Services
• Remote unauthenticated attacker can cause denial‑of‑service and full compromise of portal data.
• 12.2.1.4.0, 14.1.2.0.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60728

CVE‑2026‑60727
• 9.8 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Remote unauthenticated attacker can take over the IAM system via HTTP.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60727

CVE‑2026‑60721
• 9.8 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Same vector as above; full takeover possible.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60721

CVE‑2026‑60720
• 9.9 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Remote unauthenticated attacker can compromise the IAM system.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60720

#infosecnews

CVE-2026-76251 - Splunk Enterprise priv-esc. Non-admins can leak Observability Cloud tokens. CVSS 7.1. Patch now. #CVE #Splunk #infosec

https://www.valtersit.com/cve/CVE-2026-76251/

Citrix Flaw Exposes Authentication on NetScaler Servers

Citrix has warned of a critical authentication bypass vulnerability, CVE-2026-19490, affecting NetScaler servers, urging customers to review their configurations and prioritize patching based on exposure and deployment role.

https://osintsights.com/citrix-flaw-exposes-authentication-on-netscaler-servers?utm_source=mastodon&utm_medium=social

#Cve202619490 #Citrix #AuthenticationBypass #Netscaler #Gateway

Citrix has released patches for CVE-2026-19490, a CVSS 9.3 authentication bypass in NetScaler ADC and Gateway. An unauthenticated remote attacker can exploit the flaw via an alternative path to bypass authentication on appliances configured as SSL VPN, ICA Proxy, CVPN, RDP Proxy, or AAA servers.

#CitrixBleb #NetScalerVuln #CVSS9 #RemoteAccessSecurity

https://cyberworldops.eu/en/netscaler-critical-authentication-bypass-citrix-urges-immediate

🚨 #NetScaler bypass exposed

CVE-2026-19490 grants remote unauthenticated access to Gateway and AAA deployments.
🔗 read more: www.securityweek.com...

#ransomNews #cyberthreats #Citrix


Exploitation Expected for Crit...

CVE-2026-19490 (CVSS 9.3) is a critical NetScaler authentication bypass in NetScaler Gateway and ADC. Patch now to block unauthenticated access.

#NetScaler #Citrix #CVE202619490 #AuthBypass #InfoSec

https://securityonline.info/netscaler-authentication-bypass-cve-2026-19490/?utm_source=mastodon&utm_medium=jetpack_social

Citrix has released patches for CVE-2026-19490, a CVSS 9.3 authentication bypass in NetScaler ADC and Gateway. An unauthenticated remote attacker can exploit the flaw via an alternative path to bypass authentication on appliances configured as SSL VPN, ICA Proxy, CVPN, RDP Proxy, or AAA servers.

#CitrixBleb #NetScalerVuln #CVSS9 #RemoteAccessSecurity

https://cyberworldops.eu/en/netscaler-critical-authentication-bypass-citrix-urges-immediate

CVE-2026-19490 (CVSS 9.3) is a critical NetScaler authentication bypass in NetScaler Gateway and ADC. Patch now to block unauthenticated access.

#NetScaler #Citrix #CVE202619490 #AuthBypass #InfoSec

https://securityonline.info/netscaler-authentication-bypass-cve-2026-19490/?utm_source=mastodon&utm_medium=jetpack_social

Red Hat Kubernetes SSRF Vulnerability CVE-2026-66794: A Hidden Proxy Route Could Open the Door to Isolated Cluster Services + Video

A High-Severity Warning Behind the Kubernetes Control Plane Kubernetes environments are built around layers of isolation. Namespaces separate workloads, network policies restrict traffic, firewalls protect management interfaces, and authentication systems determine who can reach sensitive services. But what happens when the infrastructure…

https://undercodenews.com/red-hat-kubernetes-ssrf-vulnerability-cve-2026-66794-a-hidden-proxy-route-could-open-the-door-to-isolated-cluster-services-video/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-66794 - Critical (9.3)

A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kubernetes. This vulnerability allows an unauthenticated attacker, who can access the user-facing route, to bypass authentication and authorization checks. By manip...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66794/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66794 - Critical (9.3)

A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kubernetes. This vulnerability allows an unauthenticated attacker, who can access the user-facing route, to bypass authentication and authorization checks. By manip...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66794/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73197 - High (7.5)

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73197 - High (7.5)

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Red Hat ACM privilege escalation flaws (CVE-2026-70496, CVSS 9.9) let attackers seize full cluster control. See the three Kubernetes bugs.

#RedHat #Kubernetes #PrivilegeEscalation #CVE #ACM #CloudSecurity #InfoSec

https://securityonline.info/red-hat-acm-cve-2026-70496/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-70496 - Critical (9.9)

A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator, allowing it to impersonate other entities, write Role-Based Access Control (RBAC) configurations, approve Certificate Signing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70496/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Red Hat ACM privilege escalation flaws (CVE-2026-70496, CVSS 9.9) let attackers seize full cluster control. See the three Kubernetes bugs.

#RedHat #Kubernetes #PrivilegeEscalation #CVE #ACM #CloudSecurity #InfoSec

https://securityonline.info/red-hat-acm-cve-2026-70496/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-70496 - Critical (9.9)

A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator, allowing it to impersonate other entities, write Role-Based Access Control (RBAC) configurations, approve Certificate Signing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70496/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73925 - High (8.2)

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 1.4.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73925/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73925 - High (8.2)

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 1.4.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73925/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Nvidia has new advisories addressing two vulnerabilities:

- NVIDIA Cumulus Linux and NVOS - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5817

- CRITICAL, affecting the following: CVE-2026-47627, CVE-2026-47628, CVE-2026-47629, CVE-2026-47606, CVE-2026-47630

NVIDIA Triton Inference Server - August 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5865 #Nvidia #infosec #vulnerability #Linux

A critical Dell PowerStore vulnerability, CVE-2026-67271 (CVSS 9.8), allows unauthenticated remote code execution via SMB. Two more flaws patched.

#DellPowerStore #CVE202667271 #RCE #SMB #Storage #InfoSec

http://securityonline.info/dell-powerstore-vulnerability-cve-2026-67271/?utm_source=mastodon&utm_medium=jetpack_social

A critical Dell PowerStore vulnerability, CVE-2026-67271 (CVSS 9.8), allows unauthenticated remote code execution via SMB. Two more flaws patched.

#DellPowerStore #CVE202667271 #RCE #SMB #Storage #InfoSec

http://securityonline.info/dell-powerstore-vulnerability-cve-2026-67271/?utm_source=mastodon&utm_medium=jetpack_social

Cisco patches a Crosswork SQL injection flaw, CVE-2026-20030, rated CVSS 10.0. A BroadWorks XXE bug (CVE-2026-20320) also gets a fix.

#Cisco #CVE #SQLInjection #Crosswork #BroadWorks #XXE #Vulnerability #InfoSec

https://securityonline.info/cisco-crosswork-cve-2026-20030/?utm_source=mastodon&utm_medium=jetpack_social

Cisco patches a Crosswork SQL injection flaw, CVE-2026-20030, rated CVSS 10.0. A BroadWorks XXE bug (CVE-2026-20320) also gets a fix.

#Cisco #CVE #SQLInjection #Crosswork #BroadWorks #XXE #Vulnerability #InfoSec

https://securityonline.info/cisco-crosswork-cve-2026-20030/?utm_source=mastodon&utm_medium=jetpack_social

Cisco patches Secure Workload flaws CVE-2026-20315 and CVE-2026-20317, an authentication bypass and privilege escalation pair scoring CVSS 10. Upgrade now.

#Cisco #CVE #AuthenticationBypass #PrivilegeEscalation #Vulnerability #InfoSec #PatchNow

https://securityonline.info/cisco-secure-workload-cve-2026-20315/?utm_source=mastodon&utm_medium=jetpack_social

Cisco patches Secure Workload flaws CVE-2026-20315 and CVE-2026-20317, an authentication bypass and privilege escalation pair scoring CVSS 10. Upgrade now.

#Cisco #CVE #AuthenticationBypass #PrivilegeEscalation #Vulnerability #InfoSec #PatchNow

https://securityonline.info/cisco-secure-workload-cve-2026-20315/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-66602 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery.

This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66602/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66602 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery.

This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66602/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

UTT HiPER 1250GW v3.2.7-210907-180535 hit by CRITICAL stack-based buffer overflow (CVE-2026-76004) in HTTP handler. Exploitable via 'pvid' arg. No patch yet — restrict remote access & monitor traffic. https://radar.offseq.com/threat/cve-2026-76004-stack-based-buffer-overflow-in-utt-hiper-1250gw-976b1783bc5dbe2e #OffSeq #CVE202676004 #Vuln #Infosec

🔴 CVE-2026-76004 - Critical (9.9)

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argumen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76004/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

UTT HiPER 1250GW v3.2.7-210907-180535 hit by CRITICAL stack-based buffer overflow (CVE-2026-76004) in HTTP handler. Exploitable via 'pvid' arg. No patch yet — restrict remote access & monitor traffic. https://radar.offseq.com/threat/cve-2026-76004-stack-based-buffer-overflow-in-utt-hiper-1250gw-976b1783bc5dbe2e #OffSeq #CVE202676004 #Vuln #Infosec

🔴 CVE-2026-76004 - Critical (9.9)

A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/aspApBasicConfigUrcp of the component HTTP Handler. The manipulation of the argumen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76004/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-75976 - Critical (9.9)

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. The attac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75976/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Stack-based buffer overflow (CVE-2026-75976, CVSS 9.4) in TRENDnet TEW-823DRU 1.1.02b01: remote exploitation possible via /cgi-bin/wan.cgi. Public exploit exists. Assess exposure & monitor for patches: https://radar.offseq.com/threat/cve-2026-75976-stack-based-buffer-overflow-in-trendnet-tew-823dru-3e76dd1e5f15fcab #OffSeq #Vulnerability #Infosec #IoTSecurity

🔴 CVE-2026-75976 - Critical (9.9)

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. The attac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75976/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Stack-based buffer overflow (CVE-2026-75976, CVSS 9.4) in TRENDnet TEW-823DRU 1.1.02b01: remote exploitation possible via /cgi-bin/wan.cgi. Public exploit exists. Assess exposure & monitor for patches: https://radar.offseq.com/threat/cve-2026-75976-stack-based-buffer-overflow-in-trendnet-tew-823dru-3e76dd1e5f15fcab #OffSeq #Vulnerability #Infosec #IoTSecurity

🔴 CVE-2026-75877 - Critical (9.9)

A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheckRealm/FUN_00432574/FUN_0043372C of the component alphapd. Executing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75877/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-75877 - Critical (9.9)

A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheckRealm/FUN_00432574/FUN_0043372C of the component alphapd. Executing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75877/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📢 CVE-2026-15748 : Faille critique dans Forminator Forms expose 300 000 sites WordPress

L'information provient de la firme de sécurité WordPress Defiant. 🔍 Contexte Une vulnérabilité critique a été identifiée dans le plugin Forminator Forms pour WordPress, l'un des constructeurs de formulaires les plus populaires avec plus de 600 000 installations…

📖 cyberveille : https://cyberveille.ch/posts/2026-08-20-cve-2026-15748-faille-critique-dans-forminator-forms-expose-300-000-sites-wordpress/
🌐 source : https://www.securityweek.com/300000-wordpress-sites-potentially-exposed-to-hacking-due-to-form-plugin-flaw/?utm_campaign=31203373-SecurityWeek%20Daily%20Briefing
🟢 vérification factuelle haute
#ForminatorForms #WordPress #Cyberveille

Unauthenticated RCE Vulnerability Patched in Forminator Forms Plugin

WPMU DEV patched a critical vulnerability (CVE-2026-15748) in the Forminator Forms plugin that allowed unauthenticated attackers to upload and execute PHP files. The flaw can lead to full remote code execution and site compromise.

**If you use the Forminator Forms plugin on your WordPress site, update it to version 1.56.2 or later ASAP away: attackers can take over the whole site without logging in. After updating, check your upload folders for any unfamiliar PHP files. If you can't update yet, delete any forms that use both File Upload and Select fields.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/unauthenticated-rce-vulnerability-patched-in-forminator-forms-plugin-q-r-9-h-5/gD2P6Ple2L

📢 [VULN] 600 000 sites WordPress menacés par une faille critique dans Forminator Forms CVE-2026-15748

Une faille critique touche Forminator Forms, une extension WordPress utilisée sur plus de 600 000 sites. Référencée CVE-2026-15748, la vulnérabilité obtient un score de 9,8/10 et peut permettre à un attaquant non authentifié d’exécuter du code sur un serveur vulnérable.

🔗 https://www.cyberattaque.org/600-000-sites-wordpress-menaces-par-une-faille-critique-dans-forminator-forms/
💬 discussion : https://infosec.pub/post/51136301
#Vulnérabilité #CVE #Cyberveille

Critical WordPress Alert: Dissecting CVE-2026-15748 (Forminator RCE) & CVE-2026-15826 (UPB Auth Bypass)

https://thecybersecguru.com/news/cve-2026-15748-forminator-rce-cve-2026-15826-user-profile-builder/

CVE-2026-15748, scored 9.8 out of 10, allows unauthenticated attackers to manipulate Select field configurations and bypass the plugin's blocklist entirely, uploading executable files through handle_file_upload. Defiant confirms this is several weaknesses working together in a kind of tragic team-building exercise.

Remote code execution is not a learning objective we endorse. Please update Forminator Forms to version 1.56.2 or later immediately. (2/3)

Unauthenticated RCE Vulnerability Patched in Forminator Forms Plugin

WPMU DEV patched a critical vulnerability (CVE-2026-15748) in the Forminator Forms plugin that allowed unauthenticated attackers to upload and execute PHP files. The flaw can lead to full remote code execution and site compromise.

**If you use the Forminator Forms plugin on your WordPress site, update it to version 1.56.2 or later ASAP away: attackers can take over the whole site without logging in. After updating, check your upload folders for any unfamiliar PHP files. If you can't update yet, delete any forms that use both File Upload and Select fields.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/unauthenticated-rce-vulnerability-patched-in-forminator-forms-plugin-q-r-9-h-5/gD2P6Ple2L

CVE-2026-15748, scored 9.8 out of 10, allows unauthenticated attackers to manipulate Select field configurations and bypass the plugin's blocklist entirely, uploading executable files through handle_file_upload. Defiant confirms this is several weaknesses working together in a kind of tragic team-building exercise.

Remote code execution is not a learning objective we endorse. Please update Forminator Forms to version 1.56.2 or later immediately. (2/3)

CVE-2026-15748 (CRITICAL, CVSS 9.8): wpmudev Forminator Forms for WordPress up to 1.56.1 lets unauthenticated attackers upload dangerous files via handle_file_upload, risking remote code execution. Patch urgently: https://radar.offseq.com/threat/cve-2026-15748-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-wpmudev-forminator-forms-087a3235e4aa61cd #OffSeq #WordPress #Vuln

「Forminator WordPressの脆弱性により、悪意のあるPHPファイルのアップロードを介して認証なしのリモートコード実行が可能になる 」： #TheHackerNews

「0万件以上のインストール実績を持つWordPressプラグイン「Forminator Forms」に、重大なセキュリティ上の欠陥が発見された。この欠陥を悪用すれば、脆弱性のあるサイトで任意のコードを実行できる可能性がある。

CVE-2026-15748 として追跡されているこの脆弱性は 、CVSSスコアリングシステムで10点満点中9.8点と評価されている。この脆弱性は、「daroo」というオンライン上のニックネームを持つセキュリティ研究者によって発見され、報告された。

https://thehackernews.com/2026/08/forminator-wordpress-flaw-can-enable.html

#prattohome

CVE-2026-15748 (CVSS 9.8): Forminator Flaw Enables Pre-Auth RCE

https://securityonline.info/cve-2026-15748-forminator-rce/?utm_source=mastodon&utm_medium=jetpack_social

TRENDnet TEW-755AP is affected by CVE-2026-76589 (CRITICAL, CVSS 9.4): stack-based buffer overflow in /sbin/mycli, exploitable remotely. Public exploit; no patch yet. Restrict device access and monitor. https://radar.offseq.com/threat/cve-2026-76589-stack-based-buffer-overflow-in-trendnet-tew-755ap-b22775c9ba4ec937 #OffSeq #CVE202676589 #IoTSecurity

🔴 CVE-2026-76589 - Critical (9.9)

A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76589/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

TRENDnet TEW-755AP is affected by CVE-2026-76589 (CRITICAL, CVSS 9.4): stack-based buffer overflow in /sbin/mycli, exploitable remotely. Public exploit; no patch yet. Restrict device access and monitor. https://radar.offseq.com/threat/cve-2026-76589-stack-based-buffer-overflow-in-trendnet-tew-755ap-b22775c9ba4ec937 #OffSeq #CVE202676589 #IoTSecurity

🔴 CVE-2026-76589 - Critical (9.9)

A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76589/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-76590: CRITICAL stack buffer overflow in TRENDnet TEW-755AP (/cgi-bin/wan.cgi, CVSS 9.4). Remote code execution possible. No patch — restrict access, monitor endpoints. Exploit code public, no active attacks yet. https://radar.offseq.com/threat/cve-2026-76590-stack-based-buffer-overflow-in-trendnet-tew-755ap-37978d53e46251c0 #OffSeq #Vuln #IoTSec #CVE2026

🔴 CVE-2026-76590 - Critical (9.9)

A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wan_pppoe_password_00 leads to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76590/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-76590: CRITICAL stack buffer overflow in TRENDnet TEW-755AP (/cgi-bin/wan.cgi, CVSS 9.4). Remote code execution possible. No patch — restrict access, monitor endpoints. Exploit code public, no active attacks yet. https://radar.offseq.com/threat/cve-2026-76590-stack-based-buffer-overflow-in-trendnet-tew-755ap-37978d53e46251c0 #OffSeq #Vuln #IoTSec #CVE2026

🔴 CVE-2026-76590 - Critical (9.9)

A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wan_pppoe_password_00 leads to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76590/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical WordPress Alert: Dissecting CVE-2026-15748 (Forminator RCE) & CVE-2026-15826 (UPB Auth Bypass)

https://thecybersecguru.com/news/cve-2026-15748-forminator-rce-cve-2026-15826-user-profile-builder/

Critical Authentication Bypass Reported in User Profile Builder

Cozmoslabs patched a critical authentication bypass vulnerability (CVE-2026-15826) in the User Profile Builder WordPress plugin that allowed unauthenticated attackers to gain full administrative control.

**If you run the User Profile Builder plugin on WordPress, update it to version 3.16.5 or later ASAP. If you can't update immediately, turn off the "Automatically Log In after Registration" setting in the plugin options, and check whether your admin account is user ID 1 and if possible switch to a different admin account.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-authentication-bypass-reported-in-user-profile-builder-p-k-x-p-g/gD2P6Ple2L

🟠 CVE-2026-73198 - High (7.5)

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73198 - High (7.5)

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-13097 - Critical (9.1)

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-13097/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-13097 - Critical (9.1)

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-13097/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-75860: CRITICAL privilege escalation in JSON Options ≤0.0.4. Unauthenticated attackers can update WordPress options & gain admin access. Remove or disable plugin until fix is available. Full site takeover risk. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b89b1 #OffSeq #WordPress #CVE202675860

CVE-2026-75860: CRITICAL privilege escalation in JSON Options ≤0.0.4. Unauthenticated attackers can update WordPress options & gain admin access. Remove or disable plugin until fix is available. Full site takeover risk. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b89b1 #OffSeq #WordPress #CVE202675860

Frauscher FDS102 vulnerabilities include CVE-2026-14950 (CVSS 9.8), a session flaw enabling unauthorized continued access. Update to v2.14.0.

#Frauscher #FDS102 #ICS #RailwaySecurity #CVE #OTSecurity

https://securityonline.info/frauscher-fds102-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Frauscher FDS 102 v2.1.0 hit by CRITICAL vuln (CVE-2026-14950): insufficient session expiration lets remote attackers keep using stolen session tokens. No patch yet — monitor sessions, restrict access. https://radar.offseq.com/threat/cve-2026-14950-cwe-613-insufficient-session-expiration-in-frauscher-sensortechnik-fds-102-0a0f578bbcdd7c33 #OffSeq #ICS #CVE202614950 #Security

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

Frauscher FDS102 vulnerabilities include CVE-2026-14950 (CVSS 9.8), a session flaw enabling unauthorized continued access. Update to v2.14.0.

#Frauscher #FDS102 #ICS #RailwaySecurity #CVE #OTSecurity

https://securityonline.info/frauscher-fds102-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Frauscher FDS 102 v2.1.0 hit by CRITICAL vuln (CVE-2026-14950): insufficient session expiration lets remote attackers keep using stolen session tokens. No patch yet — monitor sessions, restrict access. https://radar.offseq.com/threat/cve-2026-14950-cwe-613-insufficient-session-expiration-in-frauscher-sensortechnik-fds-102-0a0f578bbcdd7c33 #OffSeq #ICS #CVE202614950 #Security

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

#OT #Advisory VDE-2026-078
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
#CVE CVE-2026-14950, CVE-2026-14948, CVE-2026-14951, CVE-2026-14952, CVE-2026-14947, CVE-2026-14946, CVE-2026-14949, CVE-2026-14953

https://certvde.com/en/advisories/vde-2026-078/

#CSAF https://frauscher.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-078.json

CVE-2026-64849 exposes unauthenticated MLflow tracking servers to critical server-side request forgery (SSRF) threats via redirect bypasses. Discover immediate mitigation strategies, CISA KEV compliance guidelines, and SOC detection playbooks to secure your AI infrastructure. https://thecybermind.co/jily

CISA has detected active exploitation of CVE-2026-64849, a critical SSRF in MLflow. Exposed tracking servers without authentication can be abused to query cloud metadata, internal services, and loopback addresses, leading to credential theft and internal reconnaissance.

#CloudSecurity #SSRF #Vulnerability #ThreatIntel

https://cyberworldops.eu/en/mlflow-under-attack-critical-ssrf-exposes-cloud-credentials-and

🔴 New security advisory:

CVE-2026-64849 affects Lfprojects Mlflow.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-64849-mlflow-ssrf-leaks-cloud-metadata

by Yazoul AI

#CVE #VulnerabilityManagement #CyberSec

🚨 [CISA-2026:0819] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-64849 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-64849)
- Name: MLflow Server-Side Request Forgery Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: MLflow
- Product: MLflow
- Notes: https://github.com/mlflow/mlflow/pull/24258 ; https://github.com/mlflow/mlflow/issues/24179 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-64849

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260819 #cisa20260819 #cve_2026_64849 #cve202664849

CVE ID: CVE-2026-64849
Vendor: MLflow
Product: MLflow
Date Added: 2026-08-19
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-64849

Attackers Exploit a Critical MLflow Vulnerability

Attackers are actively exploiting a critical flaw in MLflow (CVE-2026-64849) to steal cloud credentials and gain remote code execution.

**If you run MLflow, update it to version 3.15.0 or later ASAP, and make sure the server is not reachable from the internet. Then check your audit logs for any odd requests to cloud metadata services. If you see any (or aren't sure), rotate your cloud credentials and keys as a precaution.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/attackers-exploit-a-critical-mlflow-vulnerability-3-u-3-k-6/gD2P6Ple2L

CVE-2026-64849 exposes unauthenticated MLflow tracking servers to critical server-side request forgery (SSRF) threats via redirect bypasses. Discover immediate mitigation strategies, CISA KEV compliance guidelines, and SOC detection playbooks to secure your AI infrastructure. https://thecybermind.co/jily

CISA has detected active exploitation of CVE-2026-64849, a critical SSRF in MLflow. Exposed tracking servers without authentication can be abused to query cloud metadata, internal services, and loopback addresses, leading to credential theft and internal reconnaissance.

#CloudSecurity #SSRF #Vulnerability #ThreatIntel

https://cyberworldops.eu/en/mlflow-under-attack-critical-ssrf-exposes-cloud-credentials-and

🚨 [CISA-2026:0819] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0819)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-64849 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-64849)
- Name: MLflow Server-Side Request Forgery Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: MLflow
- Product: MLflow
- Notes: https://github.com/mlflow/mlflow/pull/24258 ; https://github.com/mlflow/mlflow/issues/24179 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-64849

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260819 #cisa20260819 #cve_2026_64849 #cve202664849

CVE ID: CVE-2026-64849
Vendor: MLflow
Product: MLflow
Date Added: 2026-08-19
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-64849

Attackers Exploit a Critical MLflow Vulnerability

Attackers are actively exploiting a critical flaw in MLflow (CVE-2026-64849) to steal cloud credentials and gain remote code execution.

**If you run MLflow, update it to version 3.15.0 or later ASAP, and make sure the server is not reachable from the internet. Then check your audit logs for any odd requests to cloud metadata services. If you see any (or aren't sure), rotate your cloud credentials and keys as a precaution.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/attackers-exploit-a-critical-mlflow-vulnerability-3-u-3-k-6/gD2P6Ple2L

Active exploitation of CVE-2026-64849 in MLflow enables unauthenticated SSRF to internal endpoints including cloud metadata services. FUXA, a SCADA/HMI platform for industrial automation, faces parallel exposure. Both flaws were confirmed independently by watchTowr and VulnCheck.

#MLflowVulnerability #FUXACVE #IndustrialOT #AISecurity

https://cyberworldops.eu/en/mlflow-and-fuxa-under-attack-critical-ai-and-industrial-automation

A public PoC for CVE-2026-64849, an unauthenticated MLflow SSRF (CVSS 9.3), is now live. watchTowr reports exploitation attempts. Patch to 3.15.0.

#MLflow #CVE202664849 #SSRF #watchTowr #AISecurity #InfoSec

https://securityonline.info/mlflow-ssrf-cve-2026-64849/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-76928 - High (7.5)

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76928 - High (7.5)

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-76760 - Code injection in chenhg5 cc-connect <=1.4.1 via Authenticate (core/webhook.go). Remote exploit public, CVSS 7.3, no patch yet. Limit access and monitor logs. #CVE #infosec #codeinjection

https://www.valtersit.com/cve/CVE-2026-76760/

CVE-2026-76850 (CRITICAL): InternLM lmdeploy <0.16.0 vulnerable to remote code execution via untrusted pickle deserialization on ZeroMQ endpoints. Enable API keys or disable disaggregated serving to mitigate. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fdd1d6177df51 #OffSeq #Infosec #Vuln #CVE202676850

🔴 CVE-2026-76850 - Critical (9.8)

LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmdeploy/pytorch/disagg/conn/engine_conn.py reads peer-to-peer cache-free requests with recv_pyobj(), which deserializes the received bytes wit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76850/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-76850 (CRITICAL): InternLM lmdeploy <0.16.0 vulnerable to remote code execution via untrusted pickle deserialization on ZeroMQ endpoints. Enable API keys or disable disaggregated serving to mitigate. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fdd1d6177df51 #OffSeq #Infosec #Vuln #CVE202676850

🔴 CVE-2026-76850 - Critical (9.8)

LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmdeploy/pytorch/disagg/conn/engine_conn.py reads peer-to-peer cache-free requests with recv_pyobj(), which deserializes the received bytes wit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76850/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76880 - High (7.5)

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76880/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76880 - High (7.5)

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76880/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Splunk patches 9.1 CVSS RCE in MCP Server and 9 flaws in AI Toolkit

Splunk이 MCP Server, AI Toolkit, Splunk Connect for Kafka 등에서 발견된 17개 취약점의 보안 업데이트를 배포했다. 가장 심각한 CVE-2026-76404(CVSS 9.1)는 Splunk MCP Server 1.2.1 미만에서 관리자 권한 사용자가 자격 증명 관리 기능의 안전하지 않은 역직렬화를 악용해 호스트 OS 명령을 실행할 수 있는 RCE다. AI Toolkit에도 악성 sparse matrix/pickle 데이터를 포함한 모델 로딩으로 코드 실행이 가능한 CVE-2026-76395(CVSS 8.8)를 포함해...

https://cyberupdates365.com/splunk-mcp-server-rce-patch/

🟠 CVE-2026-76395 - High (8.8)

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is possible ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76395/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76395 - High (8.8)

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. The deserialization of untrusted data is possible ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76395/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76399 - High (8.1)

In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language (SPL) using the permissions of the search owner, which could allow access ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76399/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76399 - High (8.1)

In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Language (SPL) using the permissions of the search owner, which could allow access ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76399/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76397 - High (8.1)

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including data associated with other users. The vulnerability is possible because Splunk AI Toolki...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76397/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76397 - High (8.1)

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including data associated with other users. The vulnerability is possible because Splunk AI Toolki...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76397/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76396 - High (7.5)

In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76396/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76396 - High (7.5)

In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76396/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Splunk patches 9.1 CVSS RCE in MCP Server and 9 flaws in AI Toolkit

Splunk이 MCP Server, AI Toolkit, Splunk Connect for Kafka 등에서 발견된 17개 취약점의 보안 업데이트를 배포했다. 가장 심각한 CVE-2026-76404(CVSS 9.1)는 Splunk MCP Server 1.2.1 미만에서 관리자 권한 사용자가 자격 증명 관리 기능의 안전하지 않은 역직렬화를 악용해 호스트 OS 명령을 실행할 수 있는 RCE다. AI Toolkit에도 악성 sparse matrix/pickle 데이터를 포함한 모델 로딩으로 코드 실행이 가능한 CVE-2026-76395(CVSS 8.8)를 포함해...

https://cyberupdates365.com/splunk-mcp-server-rce-patch/

Splunk patches CVE-2026-76404, a critical remote code execution flaw in the MCP Server app, plus 16 more bugs across its apps and add-ons.

#Splunk #CVE #RemoteCodeExecution #RCE #MCPServer #Deserialization #InfoSec #PatchNow

https://securityonline.info/splunk-apps-cve-2026-76404/?utm_source=mastodon&utm_medium=jetpack_social

Splunk MCP Server app v1.2 is impacted by CVE-2026-76404 (CRITICAL, CVSS 9.1) — insecure deserialization lets admin users run arbitrary OS commands. Limit admin access & monitor for misuse until a patch is released. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-sufficiently-verifying-that-the-a0d42d963a9e6a80 #OffSeq #Splunk #Infosec #CVE202676404

🔴 CVE-2026-76404 - Critical (9.1)

In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76404/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Splunk patches CVE-2026-76404, a critical remote code execution flaw in the MCP Server app, plus 16 more bugs across its apps and add-ons.

#Splunk #CVE #RemoteCodeExecution #RCE #MCPServer #Deserialization #InfoSec #PatchNow

https://securityonline.info/splunk-apps-cve-2026-76404/?utm_source=mastodon&utm_medium=jetpack_social

Splunk MCP Server app v1.2 is impacted by CVE-2026-76404 (CRITICAL, CVSS 9.1) — insecure deserialization lets admin users run arbitrary OS commands. Limit admin access & monitor for misuse until a patch is released. https://radar.offseq.com/threat/cve-2026-76404-the-application-deserializes-untrusted-data-without-sufficiently-verifying-that-the-a0d42d963a9e6a80 #OffSeq #Splunk #Infosec #CVE202676404

🔴 CVE-2026-76404 - Critical (9.1)

In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76404/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-76325 - Stored XSS in Splunk Enterprise. Power role can share malicious ui-tour object, executing JS in authenticated users' browsers. CVSS 7.3. Update to fixed versions immediately. #CVE #Splunk #infosec

https://www.valtersit.com/cve/CVE-2026-76325/

CVE-2026-76333 - Stored XSS in Splunk Enterprise Dashboard Studio. Crafted URL triggers attacker JS in user's browser, exposing data. CVSS 7.1. No official patch - mitigate now. #CVE #Splunk #infosec

https://www.valtersit.com/cve/CVE-2026-76333/

CVE-2026-76262 - Info disclosure in Splunk Enterprise <10.4.2. Unauthenticated access to Prometheus metrics via Edge Processor SPL2 Preview sidecar. CVSS 7.5. Update to 10.4.2. #CVE #Splunk #infosec

https://www.valtersit.com/cve/CVE-2026-76262/

Splunk patches three critical embedded report flaws (CVE-2026-76310, CVSS 9.4) that let unauthenticated users affect system integrity.

#Splunk #CVE #AccessControl #SplunkEnterprise #Vulnerability #InfoSec #PatchNow

https://securityonline.info/splunk-enterprise-cve-2026-76310/?utm_source=mastodon&utm_medium=jetpack_social

Splunk patches three critical embedded report flaws (CVE-2026-76310, CVSS 9.4) that let unauthenticated users affect system integrity.

#Splunk #CVE #AccessControl #SplunkEnterprise #Vulnerability #InfoSec #PatchNow

https://securityonline.info/splunk-enterprise-cve-2026-76310/?utm_source=mastodon&utm_medium=jetpack_social

Cisco patches a Crosswork SQL injection flaw, CVE-2026-20030, rated CVSS 10.0. A BroadWorks XXE bug (CVE-2026-20320) also gets a fix.

#Cisco #CVE #SQLInjection #Crosswork #BroadWorks #XXE #Vulnerability #InfoSec

https://securityonline.info/cisco-crosswork-cve-2026-20030/?utm_source=mastodon&utm_medium=jetpack_social

Cisco patches a Crosswork SQL injection flaw, CVE-2026-20030, rated CVSS 10.0. A BroadWorks XXE bug (CVE-2026-20320) also gets a fix.

#Cisco #CVE #SQLInjection #Crosswork #BroadWorks #XXE #Vulnerability #InfoSec

https://securityonline.info/cisco-crosswork-cve-2026-20030/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-76583 - Command injection in TRENDnet TV-IP751WIC via set_time.cgi. CVSS 7.4. Exploit public, no patch. Disable remote access now. #CVE #TRENDnet #infosec

https://www.valtersit.com/cve/CVE-2026-76583/

🟠 CVE-2026-75569 - High (7.7)

A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75569/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75569 - High (7.7)

A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75569/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76139 - High (8)

A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub acces...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76139/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76139 - High (8)

A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub acces...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76139/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-76584 - Critical (9.9)

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in st...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76584/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-76584 - Critical (9.9)

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in st...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76584/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18848 - High (8.3)

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An attacker who can lure a logged-in ASMI administrator to visi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18848/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18848 - High (8.3)

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An attacker who can lure a logged-in ASMI administrator to visi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18848/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco patches Secure Workload flaws CVE-2026-20315 and CVE-2026-20317, an authentication bypass and privilege escalation pair scoring CVSS 10. Upgrade now.

#Cisco #CVE #AuthenticationBypass #PrivilegeEscalation #Vulnerability #InfoSec #PatchNow

https://securityonline.info/cisco-secure-workload-cve-2026-20315/?utm_source=mastodon&utm_medium=jetpack_social

Cisco patches Secure Workload flaws CVE-2026-20315 and CVE-2026-20317, an authentication bypass and privilege escalation pair scoring CVSS 10. Upgrade now.

#Cisco #CVE #AuthenticationBypass #PrivilegeEscalation #Vulnerability #InfoSec #PatchNow

https://securityonline.info/cisco-secure-workload-cve-2026-20315/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-68900 - High (7.6)

Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip() in client/lib/exportHTML.js read a card title and body through textContent, which decoded entity-encoded markup, and then interpolated titleText and allText ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68900/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-68900 - High (7.6)

Wekan is open source kanban built with Meteor. From 8.72 until 10.23, addBoardHTMLToZip() in client/lib/exportHTML.js read a card title and body through textContent, which decoded entity-encoded markup, and then interpolated titleText and allText ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68900/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52877 - High (8.3)

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-external IPC handler in src/ipc/downloads.js passes a renderer-supplied url directly to Electron's shell.openExternal withou...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52877/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52877 - High (8.3)

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-external IPC handler in src/ipc/downloads.js passes a renderer-supplied url directly to Electron's shell.openExternal withou...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52877/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-50191 - High (8.8)

4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled, and ssoRegistrationEnabled are enabled and Google, GitHub, Microsoft,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50191/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-50191 - High (8.8)

4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled, and ssoRegistrationEnabled are enabled and Google, GitHub, Microsoft,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50191/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75149 - High (8.8)

marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75149/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75149 - High (8.8)

marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75149/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

A critical flaw in Elementor Pro (CVE-2026-32475) enables unauthenticated remote code execution via the File Upload module. Two desynchronized processing loops mishandle empty filenames, bypassing validation entirely. All versions below 4.2.2 are affected. Patch immediately and audit server logs for indicators of exploitation.

#ElementorPro #WordPress #RemoteCodeExecution #CVE202632475

https://cyberworldops.eu/en/elementor-pro-critical-vulnerability-in-forms-file-upload-could-lead

Elementor Pro Security Crisis: Critical WordPress Flaw Could Turn File Uploads Into Remote Code Execution

A Dangerous WordPress Vulnerability Hiding Behind a Familiar Feature A seemingly ordinary file-upload feature in Elementor Pro has become the center of a serious WordPress security warning. A newly disclosed vulnerability, tracked as CVE-2026-32475, could allow an attacker to upload a malicious PHP file to a vulnerable website and ultimately execute arbitrary…

https://undercodenews.com/elementor-pro-security-crisis-critical-wordpress-flaw-could-turn-file-uploads-into-remote-code-execution/?utm_source=mastodon&utm_medium=jetpack_social

Elementor Pro Flaw Enables RCE Attacks on WordPress Sites

A critical vulnerability in Elementor Pro, tracked as CVE-2026-32475, allows attackers to launch remote code execution (RCE) attacks on WordPress sites by exploiting a discrepancy in the plugin's File Upload module. This flaw affects Elementor Pro versions before 4.2.2 and can be triggered by a specially crafted multipart upload.

https://osintsights.com/elementor-pro-flaw-enables-rce-attacks-on-wordpress-sites?utm_source=mastodon&utm_medium=social

#Wordpress #ElementorPro #RemoteCodeExecution #Cve202632475 #PluginVulnerability

Critical Elementor Pro WordPress Flaw Opens the Door to Remote Code Execution — Millions of Sites Face a Dangerous Upload Risk + Video

A Serious WordPress Security Warning A newly disclosed vulnerability in Elementor Pro has turned an ordinary website feature into a potential gateway for attackers. The critical flaw, tracked as CVE-2026-32475, can allow an unauthenticated attacker to upload a malicious PHP file and execute code remotely on a vulnerable WordPress…

https://undercodenews.com/critical-elementor-pro-wordpress-flaw-opens-the-door-to-remote-code-execution-millions-of-sites-face-a-dangerous-upload-risk-video/?utm_source=mastodon&utm_medium=jetpack_social

Critical Elementor Pro Flaw Puts WordPress Sites at Risk of Unauthenticated PHP Code Execution + Video

A Dangerous Weakness in a Popular WordPress Ecosystem A newly reported critical security vulnerability in Elementor Pro is raising serious concerns for WordPress website owners, administrators, hosting providers, and security teams. Tracked as CVE-2026-32475, the flaw reportedly affects Elementor Pro installations up to version 4.2.1 and could allow an unauthenticated…

https://undercodenews.com/critical-elementor-pro-flaw-puts-wordpress-sites-at-risk-of-unauthenticated-php-code-execution-video/?utm_source=mastodon&utm_medium=jetpack_social

WordPress admins running Elementor Pro:

CVSS 9.8 - CVE-2026-32475

WordPress Elementor Pro Plugin <= 4.2.1 is vulnerable to a high priority Arbitrary File Upload

https://patchstack.com/articles/critical-unauthenticated-file-upload-to-rce-in-elementor-pro-plugin/

#wordpresss

A critical flaw in Elementor Pro (CVE-2026-32475) enables unauthenticated remote code execution via the File Upload module. Two desynchronized processing loops mishandle empty filenames, bypassing validation entirely. All versions below 4.2.2 are affected. Patch immediately and audit server logs for indicators of exploitation.

#ElementorPro #WordPress #RemoteCodeExecution #CVE202632475

https://cyberworldops.eu/en/elementor-pro-critical-vulnerability-in-forms-file-upload-could-lead

WordPress admins running Elementor Pro:

CVSS 9.8 - CVE-2026-32475

WordPress Elementor Pro Plugin <= 4.2.1 is vulnerable to a high priority Arbitrary File Upload

https://patchstack.com/articles/critical-unauthenticated-file-upload-to-rce-in-elementor-pro-plugin/

#wordpresss

🔴 CVE-2026-75143 - Critical (9.8)

FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, ove...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75143/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-75143 - Critical (9.8)

FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, ove...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75143/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75142 - High (7.8)

FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75142/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75142 - High (7.8)

FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75142/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75146 - High (8.1)

FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negativ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75146/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75146 - High (8.1)

FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negativ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75146/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

[1/9]

Most Impactful Security Incidents ( 2026‑08‑18 → 2026‑08‑19 )

---

PRIORITY 1 – Critical / High‑Severity Flaws (CVSS 7‑10):

CVE‑2026‑60392
• 7.8 (HIGH)
• Oracle Outside In Technology – PDF Export SDK (Fusion Middleware)
• Local‑privilege escalation; requires attacker to have a logon on the host where the SDK runs. Successful exploitation can lead to full takeover of the component.
• 8.5.8
• Easily exploitable (local) – requires user interaction.
• https://cveawg.mitre.org/api/cve/CVE-2026-60392

CVE‑2026‑60782
• 9.8 (CRITICAL)
• Oracle Payments (E‑Business Suite) – File Transmission
• Remote unauthenticated attacker can compromise the Payments module via HTTP. Leads to full takeover of the Payments service.
• 12.2.3‑12.2.15
• Network‑accessible, no authentication required.
• https://cveawg.mitre.org/api/cve/CVE-2026-60782

CVE‑2026‑60730
• 9.9 (CRITICAL)
• Oracle WebCenter Portal – Composer component
• Remote unauthenticated attacker can compromise the portal via HTTP. Full takeover of the portal.
• 12.2.1.4.0, 14.1.2.0.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60730

CVE‑2026‑60728
• 9.1 (CRITICAL)
• Oracle WebCenter Portal – Portlet Services
• Remote unauthenticated attacker can cause denial‑of‑service and full compromise of portal data.
• 12.2.1.4.0, 14.1.2.0.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60728

CVE‑2026‑60727
• 9.8 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Remote unauthenticated attacker can take over the IAM system via HTTP.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60727

CVE‑2026‑60721
• 9.8 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Same vector as above; full takeover possible.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60721

CVE‑2026‑60720
• 9.9 (CRITICAL)
• Oracle Identity Manager – OIM Legacy UI
• Remote unauthenticated attacker can compromise the IAM system.
• 12.2.1.4.0, 14.1.2.1.0
• Network‑accessible, no auth.
• https://cveawg.mitre.org/api/cve/CVE-2026-60720

#infosecnews

An Oracle WebLogic vulnerability, CVE-2026-60702 (CVSS 9.9), allows full server takeover. Oracle patched nine flaws, five rated critical. Update now.

#OracleWebLogic #CVE202660702 #RCE #FusionMiddleware #ServerTakeover #InfoSec

https://securityonline.info/oracle-weblogic-vulnerability-cve-2026-60702/?utm_source=mastodon&utm_medium=jetpack_social

An Oracle WebLogic vulnerability, CVE-2026-60702 (CVSS 9.9), allows full server takeover. Oracle patched nine flaws, five rated critical. Update now.

#OracleWebLogic #CVE202660702 #RCE #FusionMiddleware #ServerTakeover #InfoSec