FediSecfeeds

RE: https://infosec.exchange/@cR0w/117287817060203283

##

cR0w@infosec.exchange at 2026-09-18T14:21:03.000Z ##

But wait, there's more perfect 10s!
🥳
https://www.cve.org/CVERecord?id=CVE-2026-93603

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93597/

##

CVE-2026-93597
(7.7 HIGH)

EPSS: 0.00%

updated 2026-09-18T18:18:29.630000

2 posts

ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addresses in the SSRF guard used by IMPORT DATABASE and server commands. Authenticated attackers can supply URLs resolving to NAT64, 6to4, or Teredo addresses embedding RFC 1918 or loopback IPv4 payloads to reach internal services and cloud metadata endpoints.

thehackerwire@mastodon.social at 2026-09-18T15:05:34.000Z ##

🟠 CVE-2026-93597 - High (7.7)

ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addresses in the SSRF guard used by IMPORT DATABASE and server commands. Authenticated attackers can supply URLs resolving to NAT64, 6to4, or Teredo addresses embedding RFC 1918 or l...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T15:05:34.000Z ##

🟠 CVE-2026-93597 - High (7.7)

ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addresses in the SSRF guard used by IMPORT DATABASE and server commands. Authenticated attackers can supply URLs resolving to NAT64, 6to4, or Teredo addresses embedding RFC 1918 or l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93597/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-67100
(9.8 CRITICAL)

EPSS: 0.35%

updated 2026-09-18T18:17:11.110000

4 posts

HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extract sensitive system details, as well as manipulate request values to gain unauthorized access to full personal profile data and PII across different organizations.

DailyCyberSecurity at 2026-09-18T09:26:48.724Z ##

HCL Software patched critical HCL BigFix vulnerabilities, including CVE-2026-67100 and CVE-2026-18963. Patch now to prevent total account takeovers.

#HCLBigFix #Cybersecurity #CVE202667100 #Vulnerability #InfoSec

https://securityonline.info/hcl-bigfix-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

##

offseq at 2026-09-18T09:00:25.506Z ##

CVE-2026-67100: HCL BigFix Service Management v23 faces CRITICAL SQL injection & cross-tenant data exposure (CVSS 9.8). Authenticated attackers can access PII across orgs. No patch yet — restrict access & monitor logs. https://radar.offseq.com/threat/cve-2026-67100-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-dc5bf090924b31aa #OffSeq #Vuln #SQLi #Infosec

##

DailyCyberSecurity@infosec.exchange at 2026-09-18T09:26:48.000Z ##

HCL Software patched critical HCL BigFix vulnerabilities, including CVE-2026-67100 and CVE-2026-18963. Patch now to prevent total account takeovers.

#HCLBigFix #Cybersecurity #CVE202667100 #Vulnerability #InfoSec

https://securityonline.info/hcl-bigfix-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

##

offseq@infosec.exchange at 2026-09-18T09:00:25.000Z ##

CVE-2026-67100: HCL BigFix Service Management v23 faces CRITICAL SQL injection & cross-tenant data exposure (CVSS 9.8). Authenticated attackers can access PII across orgs. No patch yet — restrict access & monitor logs. https://radar.offseq.com/threat/cve-2026-67100-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-dc5bf090924b31aa #OffSeq #Vuln #SQLi #Infosec

##

CVE-2026-90999
(9.8 CRITICAL)

EPSS: 0.22%

updated 2026-09-18T17:49:08.457000

3 posts

Sentry Seer is vulnerable to a multi-stage trust-boundary violation that allows unauthenticated attacker-controlled telemetry to become code that is executed by an agent in a privileged automation environment. An external attacker can submit fabricated Sentry events without having access to the victim’s Sentry account, source repository, or infrastructure.

sayzard@mastodon.sayzard.org at 2026-09-18T14:44:00.000Z ##

PhantomFix: A fake bug to Sentry Seer gets a coding agent to run attacker code

CERT/CC는 Sentry Seer가 이슈를 코딩 에이전트에 자동으로 넘기도록 설정된 경우, 공개 DSN으로 제출한 조작된 오류 이벤트가 에이전트 프롬프트에 유입되는 취약점(CVE-2026-90999)을 공개했습니다. 공격자는 예외 메시지·스택 트레이스·breadcrumb 등 텔레메트리 필드를 이용해 가짜 버그 분석을 만들고, 코딩 에이전트가 공격자 제어 패키지를 내려받아 실행하도록 유도할 수 있습니다. 그 결과 PR 검토 이전에 연결된 저장소에 접근 가능한 에이전트 실행 환경에서 임의 코드 실행이 가능할 수 있습니다. 현재 공급업체 패치 정보는 없으므로 Seer의 자동 re...

https://kb.cert.org/vuls/id/212479

##

_r_netsec at 2026-09-17T14:13:04.850Z ##

CVE-2026-90999: A fabricated Sentry bug report can make Seer's coding agent run attacker code https://agyn.io/blog/sentry-seer-autofix-vulnerability

##

_r_netsec@infosec.exchange at 2026-09-17T14:13:04.000Z ##

CVE-2026-90999: A fabricated Sentry bug report can make Seer's coding agent run attacker code https://agyn.io/blog/sentry-seer-autofix-vulnerability

##

CVE-2026-92943
(8.1 HIGH)

EPSS: 0.27%

updated 2026-09-18T17:48:19.003000

2 posts

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject arbitrary MQTT messages that the device processes as authentic, via a certificate issued for an unrelated ho

thehackerwire@mastodon.social at 2026-09-17T21:00:31.000Z ##

🟠 CVE-2026-92943 - High (8.1)

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92943/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T21:00:31.000Z ##

🟠 CVE-2026-92943 - High (8.1)

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92943/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-61672
(7.1 HIGH)

EPSS: 0.00%

updated 2026-09-18T17:16:58.537000

1 posts

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in pkg/api/forbidden_list.go sorts denied metadata keys case-insensitively and then uses sort.SearchStrings, which assumes byte-order sorting. When an administrator's forbidden list mixes capitalized and lowercase keys or otherwise has different case-insensitive and byte ordering, th

hugovalters@mastodon.social at 2026-09-18T23:05:34.000Z ##

CVE-2026-61672 - Policy bypass vulnerability in Capsule for Kubernetes allows metadata restriction evasion. CVSS 7.1. Update to 0.13.7 now. #CVE #Kubernetes #infosec

https://www.valtersit.com/cve/CVE-2026-61672/

##

CVE-2026-93688
(7.5 HIGH)

EPSS: 0.00%

updated 2026-09-18T16:17:15.683000

2 posts

SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine's POST /generate endpoint and submit arbitrary bootstrap_room values to exhaust prefill process memory until out-of-memory termination.

thehackerwire@mastodon.social at 2026-09-18T17:05:18.000Z ##

🟠 CVE-2026-93688 - High (7.5)

SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine's POST /gene...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T17:05:18.000Z ##

🟠 CVE-2026-93688 - High (7.5)

SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine's POST /gene...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-93374
(9.6 CRITICAL)

EPSS: 0.27%

updated 2026-09-18T15:33:12

2 posts

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

DailyCyberSecurity at 2026-09-18T06:21:23.470Z ##

Google patched critical Google Chrome vulnerabilities. Update now to address multiple Google Chrome vulnerabilities like CVE-2026-93374 and stay secure.

#GoogleChrome #ChromeSecurity #CVE202693374 #BrowserSecurity #InfoSec

https://securityonline.info/google-chrome-vulnerabilities-fixed/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-09-18T06:21:23.000Z ##

Google patched critical Google Chrome vulnerabilities. Update now to address multiple Google Chrome vulnerabilities like CVE-2026-93374 and stay secure.

#GoogleChrome #ChromeSecurity #CVE202693374 #BrowserSecurity #InfoSec

https://securityonline.info/google-chrome-vulnerabilities-fixed/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-53266
(8.8 HIGH)

EPSS: 0.12%

updated 2026-09-18T15:32:49

4 posts

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skb_ensure_writable(skb, 0). This is intentional: at the bridge ebtables hooks the Ethernet header is addressed through skb_mac_header()/eth_hdr(), while skb->data points at the Ethernet payload. Aski

AAKL at 2026-09-18T15:47:33.739Z ##

New.

CISA Adds Two Known Exploited Vulnerabilities to Catalog.

CVE-2025-39964 Linux Kernel Race Condition Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-39964

CVE-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-53266 #CISA #Linux #infosec #vulnerability

##

secdb at 2026-09-18T15:00:11.403Z ##

🚨 [CISA-2026:0918] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-39964 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-39964)
- Name: Linux Kernel Race Condition Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce; https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9; https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8; https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84; https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d; https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042; https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-39964

⚠️ CVE-2026-53266 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-53266)
- Name: Linux Kernel Out-of-Bounds Write Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87; https://git.kernel.org/stable/c/76280b78cc9f23bdc6438e10ad6dff148ef8375b; https://git.kernel.org/stable/c/b7e91939ba9be805a62a257fa4e227dffbb88fa0; https://git.kernel.org/stable/c/afd64b59c3de9bbbdd3759e834fdc55cda716e0b; https://git.kernel.org/stable/c/153ea96c806aea395daba907a4f88480b6ad5093; https://git.kernel.org/stable/c/b18675263db1147c8e1cab625400c13a0d87bd2d; https://git.kernel.org/stable/c/c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5; https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53266

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260918 #cisa20260918 #cve_2025_39964 #cve_2026_53266 #cve202539964 #cve202653266

##

AAKL@infosec.exchange at 2026-09-18T15:47:33.000Z ##

New.

CISA Adds Two Known Exploited Vulnerabilities to Catalog.

CVE-2025-39964 Linux Kernel Race Condition Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-39964

CVE-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-53266 #CISA #Linux #infosec #vulnerability

##

secdb@infosec.exchange at 2026-09-18T15:00:11.000Z ##

🚨 [CISA-2026:0918] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-39964 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-39964)
- Name: Linux Kernel Race Condition Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce; https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9; https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8; https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84; https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d; https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042; https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-39964

⚠️ CVE-2026-53266 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-53266)
- Name: Linux Kernel Out-of-Bounds Write Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87; https://git.kernel.org/stable/c/76280b78cc9f23bdc6438e10ad6dff148ef8375b; https://git.kernel.org/stable/c/b7e91939ba9be805a62a257fa4e227dffbb88fa0; https://git.kernel.org/stable/c/afd64b59c3de9bbbdd3759e834fdc55cda716e0b; https://git.kernel.org/stable/c/153ea96c806aea395daba907a4f88480b6ad5093; https://git.kernel.org/stable/c/b18675263db1147c8e1cab625400c13a0d87bd2d; https://git.kernel.org/stable/c/c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5; https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53266

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260918 #cisa20260918 #cve_2025_39964 #cve_2026_53266 #cve202539964 #cve202653266

##

CVE-2026-93605
(10.0 CRITICAL)

EPSS: 0.00%

updated 2026-09-18T15:32:25

2 posts

vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denylist omits child_process despite blocking other host-spawning modules. Attackers can require child_process and execute arbitrary commands on the host system when NodeVM is configured with builtin:['*'] or explicit child_process allowance.

cR0w at 2026-09-18T14:21:03.614Z ##

RE: https://infosec.exchange/@cR0w/117287817060203283

But wait, there's more perfect 10s!
🥳
https://www.cve.org/CVERecord?id=CVE-2026-93603

RE: https://infosec.exchange/@cR0w/117287817060203283

##

cR0w@infosec.exchange at 2026-09-18T14:21:03.000Z ##

But wait, there's more perfect 10s!
🥳
https://www.cve.org/CVERecord?id=CVE-2026-93603

RE: https://infosec.exchange/@cR0w/117287817060203283

##

CVE-2026-93603
(10.0 CRITICAL)

EPSS: 0.00%

updated 2026-09-18T15:32:25

2 posts

vm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nullish `this` receiver in the apply trap of its bridge (lib/bridge.js): when sandboxed code calls a host-provided non-strict (sloppy-mode) function without a receiver — e.g. `fn()`, a detached method, `fn.call()`, `fn.apply(undefined)`, `Reflect.apply(fn, undefined, [])`, or `fn.bind()()` — the undefined receiver is passed straight

cR0w at 2026-09-18T14:21:03.614Z ##

But wait, there's more perfect 10s!
🥳
https://www.cve.org/CVERecord?id=CVE-2026-93603

RE: https://infosec.exchange/@cR0w/117287817060203283

##

cR0w@infosec.exchange at 2026-09-18T14:21:03.000Z ##

But wait, there's more perfect 10s!
🥳
https://www.cve.org/CVERecord?id=CVE-2026-93603

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93592/

##

CVE-2026-93592
(7.5 HIGH)

EPSS: 0.00%

updated 2026-09-18T15:32:24

2 posts

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that poisons the GPU context, causing all subsequent requests to fail until the process restarts.

thehackerwire@mastodon.social at 2026-09-18T15:05:58.000Z ##

🟠 CVE-2026-93592 - High (7.5)

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T15:05:58.000Z ##

🟠 CVE-2026-93592 - High (7.5)

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93592/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-93591
(7.6 HIGH)

EPSS: 0.00%

updated 2026-09-18T15:32:24

2 posts

SiYuan versions before 3.8.3 contain an SQL injection vulnerability in the graph.go query2Stmt function where tag values are concatenated raw into SQL string literals without escaping single quotes. A publish-mode reader or anonymous visitor can inject SQL via inline HTML span tags in the getGraph endpoint to execute arbitrary queries on the read-write database and exfiltrate private data across n

thehackerwire@mastodon.social at 2026-09-18T15:05:51.000Z ##

🟠 CVE-2026-93591 - High (7.6)

SiYuan versions before 3.8.3 contain an SQL injection vulnerability in the graph.go query2Stmt function where tag values are concatenated raw into SQL string literals without escaping single quotes. A publish-mode reader or anonymous visitor can i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93591/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T15:05:51.000Z ##

🟠 CVE-2026-93591 - High (7.6)

SiYuan versions before 3.8.3 contain an SQL injection vulnerability in the graph.go query2Stmt function where tag values are concatenated raw into SQL string literals without escaping single quotes. A publish-mode reader or anonymous visitor can i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93591/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-93491
(7.5 HIGH)

EPSS: 0.00%

updated 2026-09-18T15:32:17

2 posts

A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability by pipelining HTTP/1.1 requests on a single connection and withholding reads. This action causes the methodOverflowQueue to grow without limit, leading to unbounded heap memory consumption and a denial of service due to memory exhaustion.

thehackerwire@mastodon.social at 2026-09-18T14:03:37.000Z ##

🟠 CVE-2026-93491 - High (7.5)

A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability by pipelining HTTP/1.1 requests on a single connection and withholding reads. This action causes the methodOverflowQueue to grow without...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93491/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T14:03:37.000Z ##

🟠 CVE-2026-93491 - High (7.5)

A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability by pipelining HTTP/1.1 requests on a single connection and withholding reads. This action causes the methodOverflowQueue to grow without...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93491/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-87886
(7.8 HIGH)

EPSS: 0.28%

updated 2026-09-18T15:32:10

5 posts

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

Matchbook3469@mastodon.social at 2026-09-18T00:48:28.000Z ##

🟠 New security advisory:

CVE-2026-87886 affects multiple systems.

• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-87886-acronis-cpanel-plugin-root-escalation-exploited

by Yazoul AI

#CVE #ZeroDay #ThreatIntel

##

netsecio@mastodon.social at 2026-09-17T15:31:25.000Z ##

📰 CISA Adds Actively Exploited Cisco and Acronis Flaws to KEV Catalog

CISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow

🔗 https://cyber.netsecops.io/articles/cisa-adds-cisco-acronis-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

##

thecybermind@infosec.exchange at 2026-09-17T10:11:07.000Z ##

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-87886 – Acronis Backup Incorrect Default Permissions Vulnerability

A strategic executive briefing detailing permission hardening, risk deliberation, and incident response frameworks for CVE-2026-87886 in Acronis Backup environments....

https://thecybermind.co/enr6

##

beyondmachines1@infosec.exchange at 2026-09-17T10:01:14.000Z ##

Acronis Patches Actively Exploited Privilege Escalation Flaw in Hosting Plugins

Acronis patched a high-severity privilege escalation vulnerability (CVE-2026-87886) in its cPanel and Plesk backup plugins that attackers are actively exploiting in the wild. The flaw allows local users to gain root access by taking advantage of insecure file permissions.

**Check your Linux hosting servers for the Acronis backup plugin and update it to the latest version right now. Attackers are already using this flaw to gain root access, so do not wait for your next scheduled maintenance window.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/acronis-patches-actively-exploited-privilege-escalation-flaw-in-hosting-plugins-a-s-1-m-a/gD2P6Ple2L

##

cisakevtracker@mastodon.social at 2026-09-16T20:00:47.000Z ##

CVE ID: CVE-2026-87886
Vendor: Acronis
Product: Backup
Date Added: 2026-09-16
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-87886

##

CVE-2025-39964
(3.3 LOW)

EPSS: 0.32%

updated 2026-09-18T15:31:06

4 posts

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates

1 repos

https://github.com/n1k0oowang/CVE-2025-39964_EXP

AAKL at 2026-09-18T15:47:33.739Z ##

New.

CISA Adds Two Known Exploited Vulnerabilities to Catalog.

CVE-2025-39964 Linux Kernel Race Condition Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-39964

CVE-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-53266 #CISA #Linux #infosec #vulnerability

##

secdb at 2026-09-18T15:00:11.403Z ##

🚨 [CISA-2026:0918] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-39964 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-39964)
- Name: Linux Kernel Race Condition Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce; https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9; https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8; https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84; https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d; https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042; https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-39964

⚠️ CVE-2026-53266 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-53266)
- Name: Linux Kernel Out-of-Bounds Write Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87; https://git.kernel.org/stable/c/76280b78cc9f23bdc6438e10ad6dff148ef8375b; https://git.kernel.org/stable/c/b7e91939ba9be805a62a257fa4e227dffbb88fa0; https://git.kernel.org/stable/c/afd64b59c3de9bbbdd3759e834fdc55cda716e0b; https://git.kernel.org/stable/c/153ea96c806aea395daba907a4f88480b6ad5093; https://git.kernel.org/stable/c/b18675263db1147c8e1cab625400c13a0d87bd2d; https://git.kernel.org/stable/c/c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5; https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53266

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260918 #cisa20260918 #cve_2025_39964 #cve_2026_53266 #cve202539964 #cve202653266

##

AAKL@infosec.exchange at 2026-09-18T15:47:33.000Z ##

New.

CISA Adds Two Known Exploited Vulnerabilities to Catalog.

CVE-2025-39964 Linux Kernel Race Condition Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-39964

CVE-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-53266 #CISA #Linux #infosec #vulnerability

##

secdb@infosec.exchange at 2026-09-18T15:00:11.000Z ##

🚨 [CISA-2026:0918] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-39964 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-39964)
- Name: Linux Kernel Race Condition Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce; https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9; https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8; https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84; https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d; https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042; https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-39964

⚠️ CVE-2026-53266 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-53266)
- Name: Linux Kernel Out-of-Bounds Write Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87; https://git.kernel.org/stable/c/76280b78cc9f23bdc6438e10ad6dff148ef8375b; https://git.kernel.org/stable/c/b7e91939ba9be805a62a257fa4e227dffbb88fa0; https://git.kernel.org/stable/c/afd64b59c3de9bbbdd3759e834fdc55cda716e0b; https://git.kernel.org/stable/c/153ea96c806aea395daba907a4f88480b6ad5093; https://git.kernel.org/stable/c/b18675263db1147c8e1cab625400c13a0d87bd2d; https://git.kernel.org/stable/c/c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5; https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53266

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260918 #cisa20260918 #cve_2025_39964 #cve_2026_53266 #cve202539964 #cve202653266

##

CVE-2026-17086
(8.8 HIGH)

EPSS: 0.89%

updated 2026-09-18T15:17:06.153000

2 posts

The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.5.5 via deserialization of untrusted input . This makes it possible for authenticated attackers, with author-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this

thehackerwire@mastodon.social at 2026-09-18T07:04:42.000Z ##

🟠 CVE-2026-17086 - High (8.8)

The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.5.5 via deserialization of untrusted input . This makes it possible for auth...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T07:04:42.000Z ##

🟠 CVE-2026-17086 - High (8.8)

The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.5.5 via deserialization of untrusted input . This makes it possible for auth...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-85410
(8.1 HIGH)

EPSS: 0.31%

updated 2026-09-18T13:23:37.403000

2 posts

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-leve

thehackerwire@mastodon.social at 2026-09-18T14:05:34.000Z ##

🟠 CVE-2026-85410 - High (8.1)

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.2. This is due to ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85410/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T14:05:34.000Z ##

🟠 CVE-2026-85410 - High (8.1)

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.2. This is due to ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85410/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-93450
(7.5 HIGH)

EPSS: 0.66%

updated 2026-09-18T13:18:38.450000

2 posts

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing fatal stack overflow that terminates the process and all in-flight requests.

thehackerwire@mastodon.social at 2026-09-18T03:03:20.000Z ##

🟠 CVE-2026-93450 - High (7.5)

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93450/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T03:03:20.000Z ##

🟠 CVE-2026-93450 - High (7.5)

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93450/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-54671
(8.8 HIGH)

EPSS: 0.41%

updated 2026-09-18T13:18:33.920000

2 posts

WeGIA is a web manager for charitable institutions. Prior to 3.8.5, WeGIA maps InternoControle to an empty resource array in web/controle/control.php, and verificarPermissao in web/dao/MiddlewareDAO.php treats that empty array as unconditional access for every authenticated user. The methods in web/controle/InternoControle.php, including listarUm, alterar, and excluir, accept user-controlled id or

thehackerwire@mastodon.social at 2026-09-17T23:00:35.000Z ##

🟠 CVE-2026-54671 - High (8.8)

WeGIA is a web manager for charitable institutions. Prior to 3.8.5, WeGIA maps InternoControle to an empty resource array in web/controle/control.php, and verificarPermissao in web/dao/MiddlewareDAO.php treats that empty array as unconditional acc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54671/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T23:00:35.000Z ##

🟠 CVE-2026-54671 - High (8.8)

WeGIA is a web manager for charitable institutions. Prior to 3.8.5, WeGIA maps InternoControle to an empty resource array in web/controle/control.php, and verificarPermissao in web/dao/MiddlewareDAO.php treats that empty array as unconditional acc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54671/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-28198
(8.8 HIGH)

EPSS: 0.00%

updated 2026-09-18T12:31:28

2 posts

An authenticated, low-privileged user with access to the NetBackup Flex OS management shell could bypass the cryptographic signature verification step of a privileged support command by supplying a specially formed access credential. Successful exploitation grants the attacker an unrestricted root shell with full control over the Flex appliance host and all hosted containers, completely compr

thehackerwire@mastodon.social at 2026-09-18T14:03:56.000Z ##

🟠 CVE-2026-28198 - High (8.8)

An authenticated, low-privileged user with access to the NetBackup Flex
OS management shell could bypass the cryptographic signature
verification step of a privileged support command by supplying a
specially formed access credential. Successful...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T14:03:56.000Z ##

🟠 CVE-2026-28198 - High (8.8)

An authenticated, low-privileged user with access to the NetBackup Flex
OS management shell could bypass the cryptographic signature
verification step of a privileged support command by supplying a
specially formed access credential. Successful...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-6205
(8.1 HIGH)

EPSS: 0.32%

updated 2026-09-18T09:31:21

2 posts

An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks.

thehackerwire@mastodon.social at 2026-09-18T14:05:05.000Z ##

🟠 CVE-2026-6205 - High (8.1)

An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct den...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6205/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T14:05:05.000Z ##

🟠 CVE-2026-6205 - High (8.1)

An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct den...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6205/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-13684
(9.8 CRITICAL)

EPSS: 0.46%

updated 2026-09-18T09:31:20

4 posts

An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks.

thehackerwire@mastodon.social at 2026-09-18T14:05:33.000Z ##

🔴 CVE-2026-13684 - Critical (9.8)

An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-13684/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

DailyCyberSecurity at 2026-09-18T09:42:54.161Z ##

Synology fixed 8 DSM vulnerabilities, including two critical unauthenticated flaws (CVE-2026-13684, CVE-2026-13639) on DiskStation Manager. Update now.

#Synology #DSM #NAS #CVE #Vulnerability #DiskStation #InfoSec #PatchNow #NetworkSecurity #DataStorage

https://securityonline.info/synology-dsm-vulnerabilities-sa-26-13/?utm_source=mastodon&utm_medium=jetpack_social

##

thehackerwire@mastodon.social at 2026-09-18T14:05:33.000Z ##

🔴 CVE-2026-13684 - Critical (9.8)

An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-13684/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

DailyCyberSecurity@infosec.exchange at 2026-09-18T09:42:54.000Z ##

Synology fixed 8 DSM vulnerabilities, including two critical unauthenticated flaws (CVE-2026-13684, CVE-2026-13639) on DiskStation Manager. Update now.

#Synology #DSM #NAS #CVE #Vulnerability #DiskStation #InfoSec #PatchNow #NetworkSecurity #DataStorage

https://securityonline.info/synology-dsm-vulnerabilities-sa-26-13/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-67101
(9.3 CRITICAL)

EPSS: 0.27%

updated 2026-09-18T09:31:08

2 posts

HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to force the application server to send requests to internal systems that are not accessible from the internet.

offseq at 2026-09-18T12:00:28.024Z ##

CVE-2026-67101: CRITICAL SSRF in HCL BigFix Service Management v23 (CVSS 9.3). Unauthenticated attackers can access internal systems. No patch yet — restrict service and monitor requests. https://radar.offseq.com/threat/cve-2026-67101-cwe-918-server-side-request-forgery-ssrf-in-hcl-software-hcl-bigfix-service-management-ca42c9cfa875105e #OffSeq #SSRF #Vuln #Infosec

##

offseq@infosec.exchange at 2026-09-18T12:00:28.000Z ##

CVE-2026-67101: CRITICAL SSRF in HCL BigFix Service Management v23 (CVSS 9.3). Unauthenticated attackers can access internal systems. No patch yet — restrict service and monitor requests. https://radar.offseq.com/threat/cve-2026-67101-cwe-918-server-side-request-forgery-ssrf-in-hcl-software-hcl-bigfix-service-management-ca42c9cfa875105e #OffSeq #SSRF #Vuln #Infosec

##

CVE-2026-18911
(7.5 HIGH)

EPSS: 1.06%

updated 2026-09-18T06:32:11

2 posts

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication.

thehackerwire@mastodon.social at 2026-09-18T07:04:32.000Z ##

🟠 CVE-2026-18911 - High (7.5)

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18911/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T07:04:32.000Z ##

🟠 CVE-2026-18911 - High (7.5)

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18911/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-18912
(7.7 HIGH)

EPSS: 1.50%

updated 2026-09-18T06:32:11

2 posts

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to execute arbitrary SQL queries through the Reports module.

thehackerwire@mastodon.social at 2026-09-18T07:04:23.000Z ##

🟠 CVE-2026-18912 - High (7.7)

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to execute arbitrary SQL queries through the Reports module.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18912/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T07:04:23.000Z ##

🟠 CVE-2026-18912 - High (7.7)

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to execute arbitrary SQL queries through the Reports module.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18912/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-20324
(9.9 CRITICAL)

EPSS: 0.44%

updated 2026-09-18T04:17:37.867000

3 posts

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sftunnel peer has incorrect permissions to write an arbitrary file to any location on the device. An attacker could exploit this vulnerabil

guru@thecybersecguru.com at 2026-09-18T12:30:57.000Z ##

Cisco FMC CVE-2026-20324: critical sftunnel root RCE explained

Cisco FMC CVE-2026-20324 is a critical CVSS 9.9 sftunnel flaw enabling arbitrary file writes and root command execution. Learn the impact and fix

https://thecybersecguru.com/news/cisco-fmc-cve-2026-20324-sftunnel-root-rce/

##

undercodenews@mastodon.social at 2026-09-17T18:38:51.000Z ##

Cisco Secure Firewall Management Center Hit by Critical CVE-2026-20324 Root RCE Vulnerability + Video

A Critical Warning for Cisco Firewall Administrators A critical vulnerability in Cisco Secure Firewall Management Center (FMC) has raised concerns for organizations relying on Cisco infrastructure to manage and protect their networks. Tracked as CVE-2026-20324, the flaw carries a CVSS score of 9.9 and can allow an authenticated remote attacker to execute arbitrary…

https://undercodenews.com/cisco-secure-firewall-management-center-hit-by-critical-cve-2026-20324-root-rce-vulnerability-video/?utm_source=mastodon&utm_medium=jetpack_social

##

guru@thecybersecguru.com at 2026-09-18T12:30:57.000Z ##

Cisco FMC CVE-2026-20324: critical sftunnel root RCE explained

Cisco FMC CVE-2026-20324 is a critical CVSS 9.9 sftunnel flaw enabling arbitrary file writes and root command execution. Learn the impact and fix

https://thecybersecguru.com/news/cisco-fmc-cve-2026-20324-sftunnel-root-rce/

##

CVE-2026-93456
(8.2 HIGH)

EPSS: 0.15%

updated 2026-09-18T03:30:28

2 posts

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing unescaped content that renders to all visitors, enabling stored cross-site scripting attacks.

thehackerwire@mastodon.social at 2026-09-18T03:03:10.000Z ##

🟠 CVE-2026-93456 - High (8.2)

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93456/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T03:03:10.000Z ##

🟠 CVE-2026-93456 - High (8.2)

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page can be tricked into storing u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93456/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-93452
(7.5 HIGH)

EPSS: 0.49%

updated 2026-09-18T00:31:21

2 posts

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's remaining capacity, corrupting off-heap memory and causing JVM termination.

thehackerwire@mastodon.social at 2026-09-18T03:03:29.000Z ##

🟠 CVE-2026-93452 - High (7.5)

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's rem...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93452/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T03:03:29.000Z ##

🟠 CVE-2026-93452 - High (7.5)

snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's rem...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93452/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-70469
(7.5 HIGH)

EPSS: 0.37%

updated 2026-09-17T21:32:42

1 posts

Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding. The framework enforcement filter did not check multiple instances of the Content-Encoding header and did not reject non-standard identifiers for gzip encoding, allowing a malicious client to send crafted r

DailyCyberSecurity@infosec.exchange at 2026-09-17T03:08:21.000Z ##

Learn about recent Apache NiFi vulnerabilities (CVE-2026-87976, CVE-2026-70469) and Apache MyFaces flaws. Apply Apache security updates to prevent DoS attacks.

#ApacheNiFi #ApacheMyFaces #Vulnerability #CVE202687976 #Cybersecurity

https://securityonline.info/apache-nifi-vulnerabilities-security-updates/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-84858
(8.8 HIGH)

EPSS: 0.68%

updated 2026-09-17T21:32:41

1 posts

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via Scripting Sandbox Bypass The DWR "DataSourceEditDwr" class exposes the "validateScript" method that compiles and executes attacker-supplied JavaScript via the Rhino scripting engine. There are no authorization checks on this method and so it is possible for an attacker with access to a low privile

AAKL@infosec.exchange at 2026-09-16T17:17:37.000Z ##

New.

updated 2026-09-17T20:18:58.840000

2 posts

admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside the storage root on Windows deployments. Attackers can use dot-dot path segments in filenames to escape the configured storage directory and overwrite arbitrary files accessible to the server process.

thehackerwire@mastodon.social at 2026-09-17T14:02:33.000Z ##

🟠 CVE-2026-92919 - High (8.1)

admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside the storage root on Windows deployments. Attackers can use dot-dot path segments in filenames to escape the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92919/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T14:02:33.000Z ##

🟠 CVE-2026-92919 - High (8.1)

admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside the storage root on Windows deployments. Attackers can use dot-dot path segments in filenames to escape the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92919/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-89026
(9.8 CRITICAL)

EPSS: 0.52%

updated 2026-09-17T20:18:52.037000

2 posts

The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers can use the forged token to call the manager originate endpoint with the System application parameter, c

1 repos

https://github.com/cflowsec/CVE-2026-89026

571906@ap.podcastindex.org at 2026-09-18T02:00:02.000Z ##

New Episode: SANS Stormcast Friday, September 18th, 2026: LousivLaoder Analysis; Issabel Framework 0-Day; Cyber Decoys; CISA Vuln Bulletin; Unbound Vulnerability

Shownotes:

LausivLoader analysis, or how to pass data between malware stages
https://isc.sans.edu/diary/LausivLoader%20analysis%2C%20or%20how%20to%20pass%20data%20between%20malware%20stages/33348
Issabel Framework Hard-coded JWT Key RCE CVE-2026-89026

Transcript

Or Listen right here.

##

cyberworldops@infosec.exchange at 2026-09-17T04:30:00.000Z ##

Unauthenticated RCE in Issabel Framework (CVE-2026-89026) is being exploited in the wild. A hardcoded JWT secret in pbxapi/index.php allows token forgery and OS command execution as the Asterisk user, risking full PBX takeover. #Issabel #RemoteCodeExecution #InfoSec

https://cyberworldops.eu/en/one-shared-jwt-secret-exposes-issabel-pbx-servers-to-remote-command

##

CVE-2026-87976
(0 None)

EPSS: 0.39%

updated 2026-09-17T20:18:51.303000

1 posts

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected parent-directory names, and the path-containment check compared an unnormalized resolved path. An authenticat

DailyCyberSecurity@infosec.exchange at 2026-09-17T03:08:21.000Z ##

Learn about recent Apache NiFi vulnerabilities (CVE-2026-87976, CVE-2026-70469) and Apache MyFaces flaws. Apply Apache security updates to prevent DoS attacks.

#ApacheNiFi #ApacheMyFaces #Vulnerability #CVE202687976 #Cybersecurity

https://securityonline.info/apache-nifi-vulnerabilities-security-updates/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-54692
(7.8 HIGH)

EPSS: 0.14%

updated 2026-09-17T20:16:52.550000

2 posts

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sail_codec_load_frame_v8_xbm() in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-literal layout, but an X10 static short file causes the flat decode loop to write two file-controlled bytes per literal. When ceil(width/8) pro

thehackerwire@mastodon.social at 2026-09-17T21:01:19.000Z ##

🟠 CVE-2026-54692 - High (7.8)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sail_codec_load_frame_v8_xbm() in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54692/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T21:01:19.000Z ##

🟠 CVE-2026-54692 - High (7.8)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sail_codec_load_frame_v8_xbm() in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54692/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-73172
(0 None)

EPSS: 1.73%

updated 2026-09-17T19:16:55.587000

1 posts

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgserver management service of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to execute arbitrary OS commands as root via crafted requests to TCP port 5058.

offseq@infosec.exchange at 2026-09-16T13:30:26.000Z ##

Advantech EKI-1242IEIMS (fw ≤1.06.01) suffers CRITICAL CVE-2026-73172: unauthenticated OS command injection via TCP 5058 enables remote root access. No patch yet — restrict device exposure & monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-73172-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-273be6f3526b5b8e #OffSeq #ICS #CVE202673172 #infosec

##

CVE-2026-86863
(9.8 CRITICAL)

EPSS: 0.36%

updated 2026-09-17T18:32:03

2 posts

pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse proxy in front of pgAdmin, delivered through the WSGI/CGI environment. WebserverAuthentication.get_user() read config.WEBSERVER_REMOTE_USER from request.environ and, when that returned nothing, fell back to reading the same name directly from the inbound HTTP request headers via requ

DailyCyberSecurity at 2026-09-18T02:58:24.972Z ##

updated 2026-09-17T15:32:18

2 posts

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

thehackerwire@mastodon.social at 2026-09-17T14:02:43.000Z ##

🟠 CVE-2026-81481 - High (7.5)

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit th...

updated 2026-09-17T15:16:58.247000

1 posts

WWBN AVideo through 29.0 contains an authentication bypass vulnerability where the stored password hash is accepted as a valid login credential through two independent code paths in loginFromRequest() and encryptPasswordVerify(). Attackers who obtain the stored users.password hash value can authenticate as any user by submitting the hash directly to login endpoints, completely bypassing password v

offseq@infosec.exchange at 2026-09-17T00:00:35.000Z ##

CVE-2026-92578: CRITICAL auth bypass in WWBN AVideo (≤29.0) allows attackers with stolen password hashes to log in as any user — no password needed. Patch pending — restrict hash access, monitor for abuse. https://radar.offseq.com/threat/cve-2026-92578-improper-authentication-in-wwbn-avideo-d660bbe72d13e3dc #OffSeq #CVE202692578 #authentication #infosec

##

CVE-2026-92918
(8.8 HIGH)

EPSS: 0.35%

updated 2026-09-17T13:17:01.013000

2 posts

admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission can read the JSON response from the GET /logs endpoint to harvest session tokens and replay them as bearer credentials for full user access.

thehackerwire@mastodon.social at 2026-09-17T14:02:24.000Z ##

🟠 CVE-2026-92918 - High (8.8)

admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission can read the JSON response from the GET /logs endpoint to harvest session tokens and repla...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92918/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T14:02:24.000Z ##

🟠 CVE-2026-92918 - High (8.8)

admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission can read the JSON response from the GET /logs endpoint to harvest session tokens and repla...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92918/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-76460
(10.0 CRITICAL)

EPSS: 0.78%

updated 2026-09-17T12:46:31.670000

32 posts

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized ac

1 repos

https://github.com/S3v3n-JG/CVE-2026-76460

netsecio@mastodon.social at 2026-09-18T15:43:36.000Z ##

📰 Cisco ISE Zero-Day (CVSS 10.0) Under Active Attack, Bypasses Auth

Cisco warns of a critical (CVSS 10.0) zero-day in Identity Services Engine (ISE) actively exploited in the wild. The flaw, CVE-2026-76460, allows full authentication bypass. CISA added to KEV catalog. Patch immediately! #Cisco #ZeroDay #CyberSecurity

🔗 https://cyber.netsecops.io/articles/cisco-ise-zero-day-cve-2026-76460-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

##

cyclone at 2026-09-18T14:20:41.864Z ##

Cisco ISE zero-day CVE-2026-76460 is being actively exploited.

The CVSS 10.0 flaw allows remote, unauthenticated attackers to bypass authentication and potentially execute commands with root privileges.

Cisco says there is no complete workaround and recommends upgrading immediately.

Read more here:
https://forum.hashpwn.net/post/16740

#Cisco #CVE #CyberSecurity #InfoSec #hashpwn

##

PC_Fluesterer@social.tchncs.de at 2026-09-18T12:47:45.000Z ##

Noch ein Cisco Zero-Day (perfekte 10) unter Angriff

Ja, Cisco-Evangelisten müssen dieser Tage ganz stark sein. Kurz nach dem Desaster mit dem "sicheren" E-Mail-Gateway ist die nächste "Sicherheitslücke" aufgefallen, weil sie bereits angegriffen wird. CVE-2026-76460 hat eine perfekte 10 (von 10) als Risiko-Einstufung erhalten. Die "Sicherheitslücke" steckt in der Cisco Identity Services Engine (ISE). Wie der Name nahelegt, ist die Aufgabe dieser Funktion, Benutzer/innen zu identifizieren und dann für bestimmte Tätigkeiten zu autorisieren. Die Schwachstelle entsteht durch, ich zitiere: "... insufficient authentication control ... Weiterlesen:

https://www.pc-fluesterer.info/wordpress/2026/09/18/noch-ein-cisco-zero-day-perfekte-10-unter-angriff/

#0day #backdoor #closedsource #exploits #hersteller #identität #sicherheit #UnplugTrump #zeroday #cisco

##

oversecurity@mastodon.social at 2026-09-18T12:00:10.000Z ##

Cisco ISE Vulnerability With CVSS 10.0 Score Under Active Attack

Cisco patched CVE-2026-76460, a critical Cisco Identity Services Engine (ISE) bug under active attack. CISA lists it as an exploited vulnerability.

🔗️ [Thecyberexpress] https://link.is.it/LOu95i

##

ottoto2017@prattohome.com at 2026-09-18T08:03:46.000Z ##

「Cisco、ISE認証バイパスの新たなゼロデイ脆弱性（CVSS 10.0）が現在進行中の攻撃で悪用されていると警告」： #TheHackerNews

「Ciscoは、Identity Services Engine（ISE）に影響を与える新たな最高レベルのセキュリティ脆弱性が発見され、現在悪用されていると警告した。

CVE-2026-76460 （CVSSスコア：10.0）として追跡されているこの脆弱性により、認証されていないリモート攻撃者が認証を回避できる可能性がある。

「この脆弱性は、APIエンドポイントにおける認証制御の不備に起因するものです」とシスコは述べています。「攻撃者は、細工されたリクエストを影響を受けるAPIエンドポイントに送信することで、この脆弱性を悪用する可能性があります。攻撃が成功すると、攻撃者はWebベースの管理インターフェースを迂回して、影響を受けるデバイスへの不正アクセスを取得できる可能性があります。」」

https://thehackernews.com/2026/09/cisco-warns-of-new-zero-day-ise-auth.html

https://osintsights.com/cisco-discloses-second-actively-exploited-zero-day-vulnerability?utm_source=mastodon&utm_medium=social

##

Analyst207@mastodon.social at 2026-09-18T06:03:06.000Z ##

Cisco Discloses Second Actively Exploited Zero-Day Vulnerability

Cisco has disclosed a second actively exploited zero-day vulnerability, CVE-2026-76460, a maximum-severity flaw in its Identity Services Engine (ISE) that lets attackers bypass authentication and take full control of affected devices. This vulnerability is particularly alarming because it allows hackers to modify network access…

#ZeroDay #Cisco #IdentityServicesEngine #Cve202676460 #AuthenticationBypass

##

youranonnewsirc@nerdculture.de at 2026-09-18T04:26:20.000Z ##

Critical cybersecurity alerts issued as Check Point (CVE-2026-91843) and Cisco (CVE-2026-76460) disclose severe vulnerabilities, with Cisco's already exploited. Geopolitically, USCG/FBI investigate suspected foreign cyberattacks on two oil tankers; Iran reportedly targeted another in the Strait of Hormuz. Tech advances with OpenAI's 'Astra for Law' for legal AI workflows.

https://threatnoir.com/focus

##

threatnoir at 2026-09-18T03:05:51.971Z ##

⚠️ CRITICAL: Cisco alerts customers to second actively exploited zero-day in as many days

Cisco ISE zero-day CVE-2026-76460 is actively exploited in the wild. Remote attackers can bypass authentication, take full device control, modify network policies, and steal credentials. If you run ISE, this is a direct threat to your network perimeter and access controls.

#infosec #cybersecurity

🤖 AI generated summary

##

undercodenews@mastodon.social at 2026-09-18T02:16:37.000Z ##

Cisco ISE Faces a Critical Zero-Day Threat as CISA Adds CVE-2026-76460 to the KEV Catalog + Video

A Critical Warning for Cisco ISE Administrators A new Cisco security vulnerability has moved rapidly from a newly disclosed flaw to an active-exploitation concern. On September 16, 2026, Cisco disclosed CVE-2026-76460, a critical authentication-bypass vulnerability affecting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). Cisco…

https://undercodenews.com/cisco-ise-faces-a-critical-zero-day-threat-as-cisa-adds-cve-2026-76460-to-the-kev-catalog-video/?utm_source=mastodon&utm_medium=jetpack_social

##

Matchbook3469@mastodon.social at 2026-09-17T19:36:05.000Z ##

🔵 THREAT INTELLIGENCE

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

Vulnerability | CRITICAL
CVEs: CVE-2026-76460

Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in...

Full analysis:
https://www.yazoul.net/news/article/cisco-warns-of-new-zero-day-ise-auth-bypass-cvss-10-0-exploited-in-active-attack

by Yazoul AI

#InfoSec #Ransomware #IncidentResponse

##

netsecio@mastodon.social at 2026-09-17T15:31:25.000Z ##

📰 CISA Adds Actively Exploited Cisco and Acronis Flaws to KEV Catalog

CISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow

🔗 https://cyber.netsecops.io/articles/cisa-adds-cisco-acronis-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

##

netsecio@mastodon.social at 2026-09-17T15:31:22.000Z ##

📰 Cisco ISE Zero-Day (CVSS 10.0) Under Active Attack, Bypasses Auth

Cisco warns of a critical (CVSS 10.0) zero-day in Identity Services Engine (ISE) actively exploited in the wild. The flaw, CVE-2026-76460, allows full authentication bypass. CISA added to KEV catalog. Patch immediately! #Cisco #ZeroDay #CyberSecurity

🔗 https://cyber.netsecops.io/articles/cisco-ise-zero-day-cve-2026-76460-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

##

Analyst207@mastodon.social at 2026-09-17T14:10:01.000Z ##

Cisco Discloses Zero-Day ISE Auth Bypass Under Active Exploitation

Cisco has uncovered a critical zero-day vulnerability, CVE-2026-76460, that lets hackers bypass authentication on its Identity Services Engine and Passive Identity Connector, and it's already being exploited by attackers. This flaw allows unauthorized access to affected devices with just a crafted request.

https://osintsights.com/cisco-discloses-zero-day-ise-auth-bypass-under-active-exploitation?utm_source=mastodon&utm_medium=social

#ZeroDay #Cve202676460 #IdentityServicesEngine #Ise #Cisco

##

beyondmachines1 at 2026-09-17T14:01:13.778Z ##

Cisco Patches 21 Flaws in ISE Identity Infrastructure Including Actively Exploited Zero-Days

Cisco released a set of security updates for Identity Services Engine (ISE) addressing 21 vulnerabilities, including two critical authentication bypasses (CVE-2026-20192 and CVE-2026-76460) currently exploited by attackers to gain root access.

**Treat this as a top-priority emergency attackers are already using some of these flaws to take over identity servers. If you run Cisco ISE or ISE-PIC, first make sure the management interface is never reachable from the internet. Then patch ASAP to 3.1 P12, 3.2 P11, 3.3 P12, 3.4 P7 or 3.5 P4. Check your access logs for strange accounts like "dummyuser". Assume a breach if you find anything weird.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/cisco-patches-21-flaws-in-ise-identity-infrastructure-including-actively-exploited-zero-days-e-2-9-l-x/gD2P6Ple2L

##

Matchbook3469@mastodon.social at 2026-09-17T12:28:07.000Z ##

🔴 New security advisory:

CVE-2026-76460 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-76460-cisco-ise-auth-bypass-exploited-in-wild

by Yazoul AI

#InfoSec #SecurityPatching #HackerNews

##

undercodenews@mastodon.social at 2026-09-17T12:21:13.000Z ##

Cisco ISE Under Attack: Critical CVE-2026-76460 Gives Attackers a Path to Root Access + Video

A Maximum-Severity Warning for Network Defenders Cisco has issued an urgent warning over active exploitation of a maximum-severity vulnerability in Cisco Identity Services Engine (ISE), a platform used by organizations to control and enforce access to corporate networks. The vulnerability, tracked as CVE-2026-76460, carries the highest possible CVSS score of 10.0 and has now…

https://undercodenews.com/cisco-ise-under-attack-critical-cve-2026-76460-gives-attackers-a-path-to-root-access-video/?utm_source=mastodon&utm_medium=jetpack_social

##

Analyst207@mastodon.social at 2026-09-17T12:03:14.000Z ##

Cisco Discloses Active Exploitation of ISE Flaw

Cisco warns that a critical API vulnerability, CVE-2026-76460, is under active exploitation, allowing attackers to bypass security and gain unauthorized access to devices with a simple crafted request. This maximum-severity flaw scores a perfect 10.0 on the CVSS scale, making it a high-risk threat that demands immediate attention.

https://osintsights.com/cisco-discloses-active-exploitation-of-ise-flaw?utm_source=mastodon&utm_medium=social

#Cve202676460 #ApiVulnerability #ActiveExploitation #Cisco #IseFlaw

##

cyclone@infosec.exchange at 2026-09-18T14:20:41.000Z ##

Cisco ISE zero-day CVE-2026-76460 is being actively exploited.

The CVSS 10.0 flaw allows remote, unauthenticated attackers to bypass authentication and potentially execute commands with root privileges.

Cisco says there is no complete workaround and recommends upgrading immediately.

Read more here:
https://forum.hashpwn.net/post/16740

#Cisco #CVE #CyberSecurity #InfoSec #hashpwn

##

PC_Fluesterer@social.tchncs.de at 2026-09-18T12:47:45.000Z ##

Noch ein Cisco Zero-Day (perfekte 10) unter Angriff

Ja, Cisco-Evangelisten müssen dieser Tage ganz stark sein. Kurz nach dem Desaster mit dem "sicheren" E-Mail-Gateway ist die nächste "Sicherheitslücke" aufgefallen, weil sie bereits angegriffen wird. CVE-2026-76460 hat eine perfekte 10 (von 10) als Risiko-Einstufung erhalten. Die "Sicherheitslücke" steckt in der Cisco Identity Services Engine (ISE). Wie der Name nahelegt, ist die Aufgabe dieser Funktion, Benutzer/innen zu identifizieren und dann für bestimmte Tätigkeiten zu autorisieren. Die Schwachstelle entsteht durch, ich zitiere: "... insufficient authentication control ... Weiterlesen:

https://www.pc-fluesterer.info/wordpress/2026/09/18/noch-ein-cisco-zero-day-perfekte-10-unter-angriff/

#0day #backdoor #closedsource #exploits #hersteller #identität #sicherheit #UnplugTrump #zeroday #cisco

##

oversecurity@mastodon.social at 2026-09-18T12:00:10.000Z ##

Cisco ISE Vulnerability With CVSS 10.0 Score Under Active Attack

Cisco patched CVE-2026-76460, a critical Cisco Identity Services Engine (ISE) bug under active attack. CISA lists it as an exploited vulnerability.

🔗️ [Thecyberexpress] https://link.is.it/LOu95i

##

ottoto2017@prattohome.com at 2026-09-18T08:03:46.000Z ##

「Cisco、ISE認証バイパスの新たなゼロデイ脆弱性（CVSS 10.0）が現在進行中の攻撃で悪用されていると警告」： #TheHackerNews

「Ciscoは、Identity Services Engine（ISE）に影響を与える新たな最高レベルのセキュリティ脆弱性が発見され、現在悪用されていると警告した。

CVE-2026-76460 （CVSSスコア：10.0）として追跡されているこの脆弱性により、認証されていないリモート攻撃者が認証を回避できる可能性がある。

「この脆弱性は、APIエンドポイントにおける認証制御の不備に起因するものです」とシスコは述べています。「攻撃者は、細工されたリクエストを影響を受けるAPIエンドポイントに送信することで、この脆弱性を悪用する可能性があります。攻撃が成功すると、攻撃者はWebベースの管理インターフェースを迂回して、影響を受けるデバイスへの不正アクセスを取得できる可能性があります。」」

https://thehackernews.com/2026/09/cisco-warns-of-new-zero-day-ise-auth.html

##

youranonnewsirc@nerdculture.de at 2026-09-18T04:26:20.000Z ##

Critical cybersecurity alerts issued as Check Point (CVE-2026-91843) and Cisco (CVE-2026-76460) disclose severe vulnerabilities, with Cisco's already exploited. Geopolitically, USCG/FBI investigate suspected foreign cyberattacks on two oil tankers; Iran reportedly targeted another in the Strait of Hormuz. Tech advances with OpenAI's 'Astra for Law' for legal AI workflows.

https://threatnoir.com/focus

##

threatnoir@infosec.exchange at 2026-09-18T03:05:51.000Z ##

⚠️ CRITICAL: Cisco alerts customers to second actively exploited zero-day in as many days

Cisco ISE zero-day CVE-2026-76460 is actively exploited in the wild. Remote attackers can bypass authentication, take full device control, modify network policies, and steal credentials. If you run ISE, this is a direct threat to your network perimeter and access controls.

#infosec #cybersecurity

🤖 AI generated summary

##

beyondmachines1@infosec.exchange at 2026-09-17T14:01:13.000Z ##

Cisco Patches 21 Flaws in ISE Identity Infrastructure Including Actively Exploited Zero-Days

Cisco released a set of security updates for Identity Services Engine (ISE) addressing 21 vulnerabilities, including two critical authentication bypasses (CVE-2026-20192 and CVE-2026-76460) currently exploited by attackers to gain root access.

**Treat this as a top-priority emergency attackers are already using some of these flaws to take over identity servers. If you run Cisco ISE or ISE-PIC, first make sure the management interface is never reachable from the internet. Then patch ASAP to 3.1 P12, 3.2 P11, 3.3 P12, 3.4 P7 or 3.5 P4. Check your access logs for strange accounts like "dummyuser". Assume a breach if you find anything weird.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/cisco-patches-21-flaws-in-ise-identity-infrastructure-including-actively-exploited-zero-days-e-2-9-l-x/gD2P6Ple2L

##

thecybermind@infosec.exchange at 2026-09-17T10:58:07.000Z ##

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-76460 – Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

A strategic executive briefing detailing privileged API mitigation, network segmentation, and zero-trust verification frameworks for CVE-2026-76460 in Cisco ISE....

https://thecybermind.co/78ny

##

offseq@infosec.exchange at 2026-09-17T10:30:26.000Z ##

CVE-2026-76460: CRITICAL auth bypass in Cisco ISE & ISE-PIC is actively exploited. Remote attackers can gain admin access via crafted API requests. Patch ISE 3.1 – 3.5 now — no workarounds. More: https://radar.offseq.com/threat/cisco-warns-of-max-severity-ise-zero-day-exploited-in-attacks-7c00b7de95d29289 #OffSeq #Cisco #ZeroDay #Vuln #Cybersecurity

##

guru@thecybersecguru.com at 2026-09-17T08:44:54.000Z ##

Cisco ISE Zero-Day: CVE-2026-76460 Bypasses Authentication With a Perfect CVSS 10.0

Cisco ISE CVE-2026-76460 is a critical CVSS 10 authentication bypass. Learn how the flaw enables admin and root access, IOCs, hunting and fixes

https://thecybersecguru.com/news/cisco-ise-cve-2026-76460-authentication-bypass/

##

ottoto2017@prattohome.com at 2026-09-17T07:49:31.000Z ##

「Ciscoは、ISEのゼロデイ脆弱性が攻撃に悪用され、深刻な被害を受ける可能性があると警告している。」： #BLEEPINGCOMPUTER

「シスコは、攻撃者が実際に悪用している、深刻度が最大レベルのアイデンティティサービスエンジンの脆弱性に対処するためのセキュリティアップデートをリリースしました。

Cisco ISEは、IT管理者がエンドポイント、ユーザー、およびデバイスのネットワークリソースへのアクセスを管理するために使用する集中型ポリシープラットフォームであり、多くの場合、ゼロトラストセキュリティモデルを適用しながら使用されます。

このセキュリティ上の欠陥（ CVE-2026-76460 として追跡）により、リモートの攻撃者は、Cisco Identity Services Engine（ISE）およびCisco ISE Passive Identity Connector（ISE-PIC）のAPIの脆弱性を悪用することで、設定に関係なく認証を回避できます。」

https://www.bleepingcomputer.com/news/security/cisco-warns-of-identity-service-engine-zero-day-exploited-in-attacks/

https://cyberworldops.eu/en/cisco-ise-api-authentication-flaw-opens-a-remote-path-to-root-access

##

offseq@infosec.exchange at 2026-09-17T07:30:37.000Z ##

CRITICAL auth bypass (CVE-2026-76460) in Cisco ISE & ISE-PIC is being actively exploited. Remote attackers gain root on management interface via crafted API calls. Patch ASAP — no workarounds except ACLs. Details: https://radar.offseq.com/threat/active-exploitation-triggers-emergency-patch-for-cisco-ise-zero-day-d5bd452a61e0a8f8 #OffSeq #Cisco #ZeroDay

##

cyberworldops@infosec.exchange at 2026-09-17T07:00:01.000Z ##

Cisco confirmed active exploitation of CVE-2026-76460, an authentication bypass in an ISE API endpoint. Unauthenticated remote access can lead to root compromise of ISE and ISE-PIC, now listed in CISA KEV. Patching and log review are urgent. #CiscoIse #AuthBypass #CisaKev

##

cR0w@infosec.exchange at 2026-09-16T17:54:16.000Z ##

Patch your Cisco ISE. CVE-2026-76460 a perfect 10 and is EITW. 🥳

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5

The Cisco PSIRT is aware of active exploitation of this vulnerability. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.

##

DailyCyberSecurity@infosec.exchange at 2026-09-16T17:27:21.000Z ##

An exploited Cisco ISE vulnerability (CVE-2026-76460) allows remote root access. Patch this critical Cisco ISE vulnerability to secure networks.

#Cisco #CiscoISE #CVE202676460 #Cybersecurity #InfoSec

https://securityonline.info/cisco-ise-vulnerability-exploited/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-92913
(7.4 HIGH)

EPSS: 0.51%

updated 2026-09-17T12:18:30.290000

2 posts

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 uses a cryptographically weak pseudo-random number generator when creating account activation / login pairing codes. getRandomCode() in objects/functions.php derives the code entirely from uniqid() (sprintf('%08x%05x', seconds, microseconds)) with a single non-CSPRNG rand() character used only as padding, reducing the code space to rou

offseq at 2026-09-17T12:00:25.402Z ##

CVE-2026-92913 | WWBN AVideo (CRITICAL, CVSS 9.1): Weak random pairing codes + exposed microtime API = unauthenticated account takeover risk. No patch yet — restrict API access if possible. https://radar.offseq.com/threat/cve-2026-92913-use-of-insufficiently-random-values-in-wwbn-avideo-bdf60cd1a8224a92 #OffSeq #AVideo #CVE202692913 #AccountSecurity

##

offseq@infosec.exchange at 2026-09-17T12:00:25.000Z ##

CVE-2026-92913 | WWBN AVideo (CRITICAL, CVSS 9.1): Weak random pairing codes + exposed microtime API = unauthenticated account takeover risk. No patch yet — restrict API access if possible. https://radar.offseq.com/threat/cve-2026-92913-use-of-insufficiently-random-values-in-wwbn-avideo-bdf60cd1a8224a92 #OffSeq #AVideo #CVE202692913 #AccountSecurity

##

CVE-2026-20211
(9.1 CRITICAL)

EPSS: 0.56%

updated 2026-09-17T12:17:25.350000

1 posts

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid high-privileged administrative credentials. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attacker could exploit this vul

AAKL@infosec.exchange at 2026-09-16T17:17:37.000Z ##

New.

Cisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x

This one is new, but there are others:

CRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

Broadcom:

Broadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Tenable:

Tenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60

And if you missed this, Microsoft posted two advisories for Edge yesterday: https://msrc.microsoft.com/update-guide #Microsoft #infosec #Cisco #vulnerability

##

CVE-2026-20176
(9.1 CRITICAL)

EPSS: 0.78%

updated 2026-09-17T12:17:25.200000

1 posts

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid high-privileged administrative credentials. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sendi

AAKL@infosec.exchange at 2026-09-16T17:17:37.000Z ##

New.

Cisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x

This one is new, but there are others:

CRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

Broadcom:

Broadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Tenable:

Tenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60

And if you missed this, Microsoft posted two advisories for Edge yesterday: https://msrc.microsoft.com/update-guide #Microsoft #infosec #Cisco #vulnerability

##

CVE-2026-15688(CVSS UNKNOWN)

EPSS: 0.12%

updated 2026-09-17T09:33:03

3 posts

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in memory, and thereby may be able to view, tamper with, destroy, or delete control programs.

cyberworldops at 2026-09-18T05:10:00.815Z ##

Mitsubishi GX Works3 and bundled Motion Control Settings allow local bypass of block-password auth via in-memory patching (CVE-2026-15688). It matters because it breaks project protection for PLC logic, enabling undetected modification. #OtSecurity #PlcSecurity #VulnerabilityManagement

https://cyberworldops.eu/en/mitsubishi-engineering-tools-expose-control-programs-through-local

##

cyberworldops@infosec.exchange at 2026-09-18T05:10:00.000Z ##

Mitsubishi GX Works3 and bundled Motion Control Settings allow local bypass of block-password auth via in-memory patching (CVE-2026-15688). It matters because it breaks project protection for PLC logic, enabling undetected modification. #OtSecurity #PlcSecurity #VulnerabilityManagement

https://cyberworldops.eu/en/mitsubishi-engineering-tools-expose-control-programs-through-local

##

offseq@infosec.exchange at 2026-09-17T09:00:28.000Z ##

CVE-2026-15688 | Mitsubishi Electric GX Works3 (CVSS 9.2, CRITICAL): Local attackers can bypass authentication by modifying memory, risking control program compromise. No fix yet — restrict local access. #OffSeq #ICS #CVE202615688 https://radar.offseq.com/threat/cve-2026-15688-cwe-303-incorrect-implementation-of-authentication-algorithm-in-mitsubishi-electric-b35e18a6ba962469

##

CVE-2026-86320
(7.8 HIGH)

EPSS: 0.22%

updated 2026-09-17T09:33:03

2 posts

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary code execution with the privileges of the user running flatpak-builder.

thehackerwire@mastodon.social at 2026-09-17T11:00:52.000Z ##

🟠 CVE-2026-86320 - High (7.8)

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86320/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

updated 2026-09-16T21:32:55

updated 2026-09-16T21:32:50

6 posts

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-

security_crawler_carl at 2026-09-18T14:02:42.144Z ##

Reward: You've received the Cursed Amulet of Maximum CVSS — it goes great with your existing collection of regrets.

https://www.ionix.io/threat-center/cve-2026-20192

#CyberSecurity #CVE #Cisco #CriticalVulnerability #AccessControl #PatchedOrPerish (3/3)

##

security_crawler_carl at 2026-09-18T14:02:41.867Z ##

🏆 New Achievement! Perfect Score, Perfect Doom!

Splendid news, brave adventurer! Your quest to secure the network is absolutely still possible — and to help you on your way, Cisco has gifted the world CVE-2026-20192, a shiny CVSS 10.0 access control bypass in Cisco Identity Services Engine and ISE Passive Identity Connector. Maximum score! Like a Tamagotchi dying the moment you crack the box open.

Cisco caught this one themselves during an internal review, which is the good news. (1/3)

##

beyondmachines1 at 2026-09-17T14:01:13.778Z ##

Cisco Patches 21 Flaws in ISE Identity Infrastructure Including Actively Exploited Zero-Days

Cisco released a set of security updates for Identity Services Engine (ISE) addressing 21 vulnerabilities, including two critical authentication bypasses (CVE-2026-20192 and CVE-2026-76460) currently exploited by attackers to gain root access.

**Treat this as a top-priority emergency attackers are already using some of these flaws to take over identity servers. If you run Cisco ISE or ISE-PIC, first make sure the management interface is never reachable from the internet. Then patch ASAP to 3.1 P12, 3.2 P11, 3.3 P12, 3.4 P7 or 3.5 P4. Check your access logs for strange accounts like "dummyuser". Assume a breach if you find anything weird.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/cisco-patches-21-flaws-in-ise-identity-infrastructure-including-actively-exploited-zero-days-e-2-9-l-x/gD2P6Ple2L

##

security_crawler_carl@infosec.exchange at 2026-09-18T14:02:42.000Z ##

Reward: You've received the Cursed Amulet of Maximum CVSS — it goes great with your existing collection of regrets.

https://www.ionix.io/threat-center/cve-2026-20192

#CyberSecurity #CVE #Cisco #CriticalVulnerability #AccessControl #PatchedOrPerish (3/3)

##

security_crawler_carl@infosec.exchange at 2026-09-18T14:02:41.000Z ##

🏆 New Achievement! Perfect Score, Perfect Doom!

Splendid news, brave adventurer! Your quest to secure the network is absolutely still possible — and to help you on your way, Cisco has gifted the world CVE-2026-20192, a shiny CVSS 10.0 access control bypass in Cisco Identity Services Engine and ISE Passive Identity Connector. Maximum score! Like a Tamagotchi dying the moment you crack the box open.

Cisco caught this one themselves during an internal review, which is the good news. (1/3)

##

beyondmachines1@infosec.exchange at 2026-09-17T14:01:13.000Z ##

Cisco Patches 21 Flaws in ISE Identity Infrastructure Including Actively Exploited Zero-Days

Cisco released a set of security updates for Identity Services Engine (ISE) addressing 21 vulnerabilities, including two critical authentication bypasses (CVE-2026-20192 and CVE-2026-76460) currently exploited by attackers to gain root access.

**Treat this as a top-priority emergency attackers are already using some of these flaws to take over identity servers. If you run Cisco ISE or ISE-PIC, first make sure the management interface is never reachable from the internet. Then patch ASAP to 3.1 P12, 3.2 P11, 3.3 P12, 3.4 P7 or 3.5 P4. Check your access logs for strange accounts like "dummyuser". Assume a breach if you find anything weird.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/cisco-patches-21-flaws-in-ise-identity-infrastructure-including-actively-exploited-zero-days-e-2-9-l-x/gD2P6Ple2L

##

CVE-2026-20341
(9.1 CRITICAL)

EPSS: 0.45%

updated 2026-09-16T21:32:50

1 posts

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This vulnerability is due to unsecured deserialization of untrusted data over the sftunnel management connection. An attacker could exploit this vulnerability by sending crafted sftunnel remote procedure calls (RPCs). A succ

offseq@infosec.exchange at 2026-09-17T03:00:25.000Z ##

CVE-2026-20341: CRITICAL flaw in Cisco Secure FMC Software sftunnel protocol. Admin remote attackers can gain root via insecure deserialization. Limit admin access, monitor for abuse, and check for patch updates. https://radar.offseq.com/threat/a-vulnerability-in-the-sftunnel-inter-device-communication-protocol-of-cisco-secure-fmc-software-could-c3ce1a1e4096035e #OffSeq #Cisco #Infosec #Vulnerability

##

CVE-2026-87024
(7.2 HIGH)

EPSS: 0.31%

updated 2026-09-16T21:32:47

1 posts

Tanium addressed a SQL injection vulnerability in Asset.

thehackerwire@mastodon.social at 2026-09-16T21:00:12.000Z ##

🟠 CVE-2026-87024 - High (7.5)

Tanium addressed a SQL injection vulnerability in Asset.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87024/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-77179
(0 None)

EPSS: 0.16%

updated 2026-09-16T20:38:33.883000

8 posts

On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest can replace a parent directory with a symlink, escape the shared workspace, and read or modify arbitrary host files as the VMM user, potentially achieving host code execution.

1 repos

https://github.com/HORKimhab/CVE-2026-77179

_r_netsec at 2026-09-19T06:28:04.750Z ##

CVE-2026-77179: Docker's hypervisor for Mac compromised (Docker Desktop, Docker Sandboxes) https://www.accomplish.ai/blog/escaping-dockers-hypervisor/

##

ottoto2017@prattohome.com at 2026-09-18T07:52:46.000Z ##

「Dockerサンドボックスの重大な脆弱性により、悪意のあるゲストコードがmacOSホストファイルを読み取り、変更することが可能になる。」： #TheHackerNews

「Dockerは9月15日のセキュリティ発表で、macOS上のDocker Sandboxes 仮想マシン内で実行されている悪意のあるコードが、共有されているプロジェクトディレクトリから脱出し、ホスト上の他の場所にあるファイルを読み取ったり変更したりする可能性があると警告した。

このエスケープ処理は、仮想マシンを実行するホストアカウントの権限で実行されます。この脆弱性（ CVE-2026-77179 ）は、深刻度が「重大」と評価されており、macOS 版のバージョン 0.28.0 から 0.42.0 まで（0.42.0 は含まない）に影響があり、 9 月 7 日にリリースされたバージョン 0.42.0 で修正されました。」

https://thehackernews.com/2026/09/critical-docker-sandboxes-flaw-lets.html

https://thecybersecguru.com/news/docker-sandboxes-cve-2026-77179-cve-2026-79994/

##

guru@thecybersecguru.com at 2026-09-18T06:46:02.000Z ##

Critical Docker Sandboxes Flaws Let AI Agents Escape MicroVMs to Hijack Hosts (CVE-2026-77179 & CVE-2026-79994)

Critical Docker Sandboxes flaws CVE-2026-77179 and CVE-2026-79994 can let malicious AI agents escape microVM isolation and access the host system

##

Analyst207@mastodon.social at 2026-09-18T04:04:42.000Z ##

Docker Flaw Lets Guest Code Read, Modify macOS Host Files

A newly discovered Docker flaw on macOS could allow malicious code in a virtual machine to break free from its sandbox and read or modify sensitive host files, potentially leading to code execution on the host. This vulnerability, tracked as CVE-2026-77179, leverages a weakness in the virtio-fs host server to gain unauthorized access.

https://osintsights.com/docker-flaw-lets-guest-code-read-modify-macos-host-files?utm_source=mastodon&utm_medium=social

#DockerFlaw #Macos #Cve202677179 #Containerization #VirtualMachine

##

_r_netsec@infosec.exchange at 2026-09-19T06:28:04.000Z ##

CVE-2026-77179: Docker's hypervisor for Mac compromised (Docker Desktop, Docker Sandboxes) https://www.accomplish.ai/blog/escaping-dockers-hypervisor/

##

ottoto2017@prattohome.com at 2026-09-18T07:52:46.000Z ##

「Dockerサンドボックスの重大な脆弱性により、悪意のあるゲストコードがmacOSホストファイルを読み取り、変更することが可能になる。」： #TheHackerNews

「Dockerは9月15日のセキュリティ発表で、macOS上のDocker Sandboxes 仮想マシン内で実行されている悪意のあるコードが、共有されているプロジェクトディレクトリから脱出し、ホスト上の他の場所にあるファイルを読み取ったり変更したりする可能性があると警告した。

このエスケープ処理は、仮想マシンを実行するホストアカウントの権限で実行されます。この脆弱性（ CVE-2026-77179 ）は、深刻度が「重大」と評価されており、macOS 版のバージョン 0.28.0 から 0.42.0 まで（0.42.0 は含まない）に影響があり、 9 月 7 日にリリースされたバージョン 0.42.0 で修正されました。」

https://thehackernews.com/2026/09/critical-docker-sandboxes-flaw-lets.html

https://thecybersecguru.com/news/docker-sandboxes-cve-2026-77179-cve-2026-79994/

##

guru@thecybersecguru.com at 2026-09-18T06:46:02.000Z ##

Critical Docker Sandboxes Flaws Let AI Agents Escape MicroVMs to Hijack Hosts (CVE-2026-77179 & CVE-2026-79994)

Critical Docker Sandboxes flaws CVE-2026-77179 and CVE-2026-79994 can let malicious AI agents escape microVM isolation and access the host system

##

DailyCyberSecurity@infosec.exchange at 2026-09-17T02:33:27.000Z ##

Docker released an update for critical Docker Sandboxes vulnerabilities (CVE-2026-77179, CVE-2026-79994). Patch these Docker Sandboxes vulnerabilities today.

#Docker #DockerSandboxes #CVE202677179 #CVE202679994 #Cybersecurity

https://securityonline.info/docker-sandboxes-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-79994
(0 None)

EPSS: 0.11%

updated 2026-09-16T20:38:33.883000

3 posts

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to connect to an arbitrary AF_UNIX socket outside the shared workspace. This can expose data or host-side cap

guru@thecybersecguru.com at 2026-09-18T06:46:02.000Z ##

Critical Docker Sandboxes Flaws Let AI Agents Escape MicroVMs to Hijack Hosts (CVE-2026-77179 & CVE-2026-79994)

Critical Docker Sandboxes flaws CVE-2026-77179 and CVE-2026-79994 can let malicious AI agents escape microVM isolation and access the host system

https://thecybersecguru.com/news/docker-sandboxes-cve-2026-77179-cve-2026-79994/

##

guru@thecybersecguru.com at 2026-09-18T06:46:02.000Z ##

Critical Docker Sandboxes Flaws Let AI Agents Escape MicroVMs to Hijack Hosts (CVE-2026-77179 & CVE-2026-79994)

Critical Docker Sandboxes flaws CVE-2026-77179 and CVE-2026-79994 can let malicious AI agents escape microVM isolation and access the host system

https://thecybersecguru.com/news/docker-sandboxes-cve-2026-77179-cve-2026-79994/

##

DailyCyberSecurity@infosec.exchange at 2026-09-17T02:33:27.000Z ##

Docker released an update for critical Docker Sandboxes vulnerabilities (CVE-2026-77179, CVE-2026-79994). Patch these Docker Sandboxes vulnerabilities today.

#Docker #DockerSandboxes #CVE202677179 #CVE202679994 #Cybersecurity

https://securityonline.info/docker-sandboxes-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-70416
(10.0 CRITICAL)

EPSS: 0.91%

updated 2026-09-16T20:37:16.870000

1 posts

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

thehackerwire@mastodon.social at 2026-09-16T17:02:58.000Z ##

🔴 CVE-2026-70416 - Critical (10)

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70416/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-78547
(0 None)

EPSS: 0.15%

updated 2026-09-16T19:16:15.097000

1 posts

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.

hugovalters@mastodon.social at 2026-09-18T06:40:21.000Z ##

CVE-2026-78547: Out-of-bounds write in Citrix Workspace app for Windows. CVSS not yet assigned, no patch confirmed. Treat as urgent, update to 2603.11 CR or 2507.1 LTSR CU3 now. https://www.valtersit.com/cve/CVE-2026-78547/ #CVE #Citrix #infosec

##

CVE-2026-20331
(9.6 CRITICAL)

EPSS: 0.23%

updated 2026-09-16T18:32:09

3 posts

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally disc

AAKL at 2026-09-18T16:27:33.387Z ##

Grab a coffee. Cisco has posted several advisories, one of them addressing a critical vulnerability that was first published on the 16th. More here https://sec.cloudapps.cisco.com/security/center/publicationListing.x

CRITICAL: CVE-2026-20329, CVE-2026-20330, and CVE-2026-20331: Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026 @TalosSecurity #Cisco #vulnerability #infosec

##

AAKL@infosec.exchange at 2026-09-18T16:27:33.000Z ##

Grab a coffee. Cisco has posted several advisories, one of them addressing a critical vulnerability that was first published on the 16th. More here https://sec.cloudapps.cisco.com/security/center/publicationListing.x

CRITICAL: CVE-2026-20329, CVE-2026-20330, and CVE-2026-20331: Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026 @TalosSecurity #Cisco #vulnerability #infosec

##

nyanbinary@infosec.exchange at 2026-09-16T18:08:42.000Z ##

@cR0w was just looking at those, lol. Don't sleep on this great advertisment of a CVE though: https://db.gcve.eu/vuln/cve-2026-20331

##

CVE-2026-20307
(9.9 CRITICAL)

EPSS: 0.95%

updated 2026-09-16T18:32:09

1 posts

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative credentials. This vulnerability is due to insecure deserialization of a user-supplied Java byte stream. A

AAKL@infosec.exchange at 2026-09-16T17:17:37.000Z ##

New.

Cisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x

This one is new, but there are others:

CRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

Broadcom:

Broadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Tenable:

Tenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60

And if you missed this, Microsoft posted two advisories for Edge yesterday: https://msrc.microsoft.com/update-guide #Microsoft #infosec #Cisco #vulnerability

##

CVE-2026-92397
(9.1 CRITICAL)

EPSS: 2.30%

updated 2026-09-16T18:32:09

EPSS: 0.50%

updated 2026-09-16T15:31:14

19 posts

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.

1 repos

https://github.com/HORKimhab/CVE-2026-91843

security_crawler_carl at 2026-09-18T20:55:25.862Z ##

Two companion curses arrived earlier: an auth bypass in August and a heap overflow in VPN certificate decoding in September.

INVENTORY PENALTY: Your management plane is now haunted. Patch Check Point Security Management Server immediately to close CVE-2026-91843 and its critical siblings.

Reward: You've received the Debuffed Robe of Five Failures — Armor Class: negative five. The "found internally, no exploitation detected" enchantment is fading fast. (2/3)

##

security_crawler_carl at 2026-09-18T20:55:25.725Z ##

🏆 New Achievement! Stack Overflow, Stack Underdelivery!

ITEM ACQUIRED: Cursed Login Request (very long username, -9.8 integrity, equips in zero hands). Check Point's Security Management Server has taken its fifth critical unauthenticated hit since July — CVE-2026-91843, a 9.8-rated stack overflow in the login handler that lets attackers execute code as root before a single password is checked. Censys confirms the trigger: just send a comically oversized username. (1/3)

##

netsecio@mastodon.social at 2026-09-18T15:42:44.000Z ##

📰 Check Point Patches Critical RCE Flaw in Management Servers

Check Point patches critical RCE flaw (CVE-2026-91843, CVSS 9.8) in Security Management Servers. Unauthenticated attackers can gain root access via a long username. LivePatch is available. Restrict trusted client access now! #CyberSecurity #CheckPoin...

🔗 https://cyber.netsecops.io/articles/check-point-patches-critical-rce-flaw-cve-2026-91843-in-management-servers/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

##

offseq at 2026-09-18T10:30:23.977Z ##

Check Point Security Mgmt & Log Server face CRITICAL stack buffer overflow (CVE-2026-91843). Remote, unauthenticated RCE as root possible. Patch now or restrict access, monitor for 'Username too long' login failures. https://radar.offseq.com/threat/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-00056aa571ef0004 #OffSeq #CheckPoint #Vuln #RCE

##

undercodenews@mastodon.social at 2026-09-18T10:19:58.000Z ##

Check Point Management Servers Face Critical Root-Level Remote Code Execution Risk

A Dangerous New Flaw Puts Security Management Systems in the Spotlight A critical vulnerability in Check Point Software Technologies security management products has raised fresh concerns for organizations that rely on centralized systems to control firewalls, collect security logs, and administer enterprise networks. Tracked as CVE-2026-91843, the flaw can potentially allow an…

https://undercodenews.com/check-point-management-servers-face-critical-root-level-remote-code-execution-risk/?utm_source=mastodon&utm_medium=jetpack_social

##

Analyst207@mastodon.social at 2026-09-18T10:03:06.000Z ##

Check Point Flaw Enables Hackers to Execute Code with Root Privileges

A critical flaw in Check Point's Security Management Server has been discovered, leaving all deployments vulnerable to hackers who can exploit it to execute code with root privileges, putting the entire firewall estate at risk. This severe vulnerability, tracked as CVE-2026-91843, requires immediate…

https://osintsights.com/check-point-flaw-enables-hackers-to-execute-code-with-root-privileges?utm_source=mastodon&utm_medium=social

#CheckPoint #Cve202691843 #FirewallVulnerability #RootPrivilegeEscalation #SecurityManagementServer

##

beyondmachines1 at 2026-09-18T09:01:13.603Z ##

Critical Check Point Management Flaw Allows Unauthenticated Remote Root Access

Check Point issued an patch for a critical stack overflow vulnerability (CVE-2026-91843) in its Security Management and Log Servers that allows unauthenticated attackers to gain root-level code execution.

**If you run Check Point Security Management or Log Servers, make sure they are never reachable from the internet and restrict the Trusted Clients setting so only specific, known admin IP addresses can connect (use a VPN for remote access). Then apply the LivePatch fix released on September 16, 2026 to every management and log server, confirm it installed with `cplp list`, and check your logs for "Administrator failed to log in: Username too long" to spot attempted attacks.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-check-point-management-flaw-allows-unauthenticated-remote-root-access-9-x-m-8-o/gD2P6Ple2L

##

undercodenews@mastodon.social at 2026-09-18T08:30:02.000Z ##

Critical Check Point Vulnerability CVE-2026-91843 Exposes Management Servers to Unauthenticated Root-Level Remote Code Execution + Video

Critical Check Point Vulnerability CVE-2026-91843 Exposes Management Servers to Unauthenticated Root-Level Remote Code Execution A Critical Warning for Check Point Administrators A newly disclosed critical vulnerability in Check Point Security Management and Log Servers could allow a remote, unauthenticated attacker to execute…

https://undercodenews.com/critical-check-point-vulnerability-cve-2026-91843-exposes-management-servers-to-unauthenticated-root-level-remote-code-execution-video/?utm_source=mastodon&utm_medium=jetpack_social

##

offseq at 2026-09-18T07:30:24.291Z ##

Check Point Security Mgmt & Log Server hit by CRITICAL RCE (CVE-2026-91843) via unauthenticated login. No active exploitation yet. Patch ASAP. Tanium (SQLi, RCE) & Kaspersky (Redis) also patched. https://radar.offseq.com/threat/check-point-kaspersky-tanium-patch-product-vulnerabilities-ae8c3757ea9b181a #OffSeq #Vulnerability #RCE #PatchNow

##

youranonnewsirc@nerdculture.de at 2026-09-18T04:26:20.000Z ##

Critical cybersecurity alerts issued as Check Point (CVE-2026-91843) and Cisco (CVE-2026-76460) disclose severe vulnerabilities, with Cisco's already exploited. Geopolitically, USCG/FBI investigate suspected foreign cyberattacks on two oil tankers; Iran reportedly targeted another in the Strait of Hormuz. Tech advances with OpenAI's 'Astra for Law' for legal AI workflows.

##

security_crawler_carl@infosec.exchange at 2026-09-18T20:55:25.000Z ##

Two companion curses arrived earlier: an auth bypass in August and a heap overflow in VPN certificate decoding in September.

INVENTORY PENALTY: Your management plane is now haunted. Patch Check Point Security Management Server immediately to close CVE-2026-91843 and its critical siblings.

Reward: You've received the Debuffed Robe of Five Failures — Armor Class: negative five. The "found internally, no exploitation detected" enchantment is fading fast. (2/3)

##

security_crawler_carl@infosec.exchange at 2026-09-18T20:55:25.000Z ##

🏆 New Achievement! Stack Overflow, Stack Underdelivery!

ITEM ACQUIRED: Cursed Login Request (very long username, -9.8 integrity, equips in zero hands). Check Point's Security Management Server has taken its fifth critical unauthenticated hit since July — CVE-2026-91843, a 9.8-rated stack overflow in the login handler that lets attackers execute code as root before a single password is checked. Censys confirms the trigger: just send a comically oversized username. (1/3)

##

offseq@infosec.exchange at 2026-09-18T10:30:23.000Z ##

Check Point Security Mgmt & Log Server face CRITICAL stack buffer overflow (CVE-2026-91843). Remote, unauthenticated RCE as root possible. Patch now or restrict access, monitor for 'Username too long' login failures. https://radar.offseq.com/threat/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-00056aa571ef0004 #OffSeq #CheckPoint #Vuln #RCE

##

beyondmachines1@infosec.exchange at 2026-09-18T09:01:13.000Z ##

Critical Check Point Management Flaw Allows Unauthenticated Remote Root Access

Check Point issued an patch for a critical stack overflow vulnerability (CVE-2026-91843) in its Security Management and Log Servers that allows unauthenticated attackers to gain root-level code execution.

**If you run Check Point Security Management or Log Servers, make sure they are never reachable from the internet and restrict the Trusted Clients setting so only specific, known admin IP addresses can connect (use a VPN for remote access). Then apply the LivePatch fix released on September 16, 2026 to every management and log server, confirm it installed with `cplp list`, and check your logs for "Administrator failed to log in: Username too long" to spot attempted attacks.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-check-point-management-flaw-allows-unauthenticated-remote-root-access-9-x-m-8-o/gD2P6Ple2L

##

offseq@infosec.exchange at 2026-09-18T07:30:24.000Z ##

Check Point Security Mgmt & Log Server hit by CRITICAL RCE (CVE-2026-91843) via unauthenticated login. No active exploitation yet. Patch ASAP. Tanium (SQLi, RCE) & Kaspersky (Redis) also patched. https://radar.offseq.com/threat/check-point-kaspersky-tanium-patch-product-vulnerabilities-ae8c3757ea9b181a #OffSeq #Vulnerability #RCE #PatchNow

##

youranonnewsirc@nerdculture.de at 2026-09-18T04:26:20.000Z ##

Critical cybersecurity alerts issued as Check Point (CVE-2026-91843) and Cisco (CVE-2026-76460) disclose severe vulnerabilities, with Cisco's already exploited. Geopolitically, USCG/FBI investigate suspected foreign cyberattacks on two oil tankers; Iran reportedly targeted another in the Strait of Hormuz. Tech advances with OpenAI's 'Astra for Law' for legal AI workflows.

#Cybersecurity #CVE #Vulnerability #CensysARC

##

censys@infosec.exchange at 2026-09-16T22:29:53.000Z ##

🚨New Censys Advisory: CVE-2026-91843

A critical (CVSS 9.8) unauthenticated RCE affects Check Point Quantum Security Management and Log Servers.

Censys observes 3,836 hosts globally exposing the management/log server role. This is total product presence, not a confirmed-vulnerable count.

No public PoC or confirmed exploitation has been reported as of publication. Check Point has released patches for supported versions via LivePatch.

Read the analysis and remediation details: https://censys.com/advisory/cve-2026-91843/

##

daniel1820815@infosec.exchange at 2026-09-16T19:23:20.000Z ##

🚨 Please read this important update from Check Point:

CVE-2026-91843 - Stack overflow in login process to the Security Management and Log Servers

https://support.checkpoint.com/results/sk/sk1000155

#CheckPoint #CheckPointsoftwareTechnologies #CVE #CVE202691843

##

DailyCyberSecurity@infosec.exchange at 2026-09-16T16:08:43.000Z ##

Check Point fixed a critical Check Point login flaw (CVE-2026-91843). Patch this Check Point login flaw now to block unauthenticated remote root takeovers.

#CheckPoint #Cybersecurity #CVE202691843 #InfoSec #Vulnerability

https://securityonline.info/check-point-login-flaw-cve-2026-91843/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-58704
(8.0 HIGH)

EPSS: 0.21%

updated 2026-09-16T15:30:57

22 posts

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

cyberveille@mastobot.ping.moi at 2026-09-18T09:30:07.000Z ##

📢 [VULN] Google confirme un piratage des Pixel via une faille du modem - CVE-2026-58704

Google a confirmé que ses smartphones Pixel ont été piratés à la suite d’attaques ciblées exploitant une faille de type zero-day dans le modem. La faille de sécurité, qui a pour identifiant CVE-2026-58704, permet une élévation de privilèges sans aucune interaction de l’utilisateur et bénéficie désormais d’un…

🔗 https://kulturegeek.fr/news-359668/google-confirme-piratage-pixel-via-faille-modem
💬 discussion : https://infosec.pub/post/52458473
#ZeroDay #CVE #Cyberveille

##

kuketzblog@social.tchncs.de at 2026-09-18T06:19:59.000Z ##

Google sieht Hinweise auf eine begrenzte, gezielte Ausnutzung von
CVE-2026-58704 auf Pixel-Geräten. Die Schwachstelle steckt im Modem
und ermöglicht eine Rechteausweitung. Der September-Patchlevel
2026-09-05 behebt die Lücke.

https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01

#Android #Pixel #ITSecurity

##

undercodenews@mastodon.social at 2026-09-17T19:33:26.000Z ##

Google Pixel Zero-Day Warning: CVE-2026-58704 Exploited in Targeted Attacks + Video

Google Pixel Zero-Day Warning: CVE-2026-58704 Exploited in Targeted Attacks A Silent Pixel Attack Has Triggered a New Security Warning Google Pixel users are facing a serious security warning after Google disclosed that a high-severity vulnerability in the cellular modem may have already been exploited in limited, targeted attacks. Tracked as CVE-2026-58704, the flaw involves a…

https://undercodenews.com/google-pixel-zero-day-warning-cve-2026-58704-exploited-in-targeted-attacks-video/?utm_source=mastodon&utm_medium=jetpack_social

##

DarkWebInformer at 2026-09-17T17:33:47.483Z ##

🚨 Google confirms Pixel phones targeted in zero-click zero-day attacks

Google has patched CVE-2026-58704, a high-severity vulnerability in Pixel phones' cellular modem that the company says was already under "limited, targeted exploitation."
⠀
The flaw is caused by a logic error that can allow an attacker to bypass permission checks and escalate privileges beyond the modem's isolated environment.
⠀
Most importantly, exploitation requires no interaction from the victim.

No malicious link needs to be clicked and no file needs to be opened, making it a zero-click attack.
⠀
Google has not disclosed:

• Who carried out the attacks
• How many Pixel owners were targeted
• How the victims were selected
• What tools or spyware may have been deployed
⠀
CISA has added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog and set a September 19 remediation deadline for affected federal systems.
⠀
Google says Pixel devices with the September 5, 2026 security patch level or later are protected.

Pixel owners should update their devices immediately.

Source: https://techcrunch.com/2026/09/16/google-says-some-pixel-phone-owners-were-hacked-in-zero-day-attacks/

##

sayzard@mastodon.sayzard.org at 2026-09-17T16:42:17.000Z ##

Google Pixel phones pwned in zero-click attacks

Google Pixel 휴대폰의 셀룰러 모뎀에서 권한 검증을 우회하고 권한 상승을 가능하게 하는 제로데이 취약점 CVE-2026-58704가 제한적 표적 공격에 악용된 정황이 공개됐다. 사용자 상호작용이 필요 없는 zero-click 공격이 가능하며, 이런 유형은 상용 스파이웨어 기반 표적 감시에 자주 활용된다. Google은 패치를 배포했고, CISA는 이 취약점을 KEV 카탈로그에 추가하며 미국 연방기관에 9월 19일까지 패치하도록 지시했다. AI 개발 자체와 직접 관련되지는 않지만, Android 기기를...

https://www.theregister.com/security/2026/09/16/google-pixel-phones-pwned-in-zero-click-attacks/5296936

##

beyondmachines1 at 2026-09-17T13:01:13.438Z ##

Google Patches Pixel Modem Zero-Day Exploited in Targeted Attacks

Google's September 2026 update for Pixel devices fixes 110 vulnerabilities, including a high-severity modem flaw (CVE-2026-58704) that attackers are actively exploiting to escalate privileges without user interaction.

**Update your Pixel devices to the September 2026 patch level ASAP to block an active modem exploit and patch a huge set of issues.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/google-patches-pixel-modem-zero-day-exploited-in-targeted-attacks-w-p-u-q-l/gD2P6Ple2L

##

kuketzblog@social.tchncs.de at 2026-09-18T06:19:59.000Z ##

Google sieht Hinweise auf eine begrenzte, gezielte Ausnutzung von
CVE-2026-58704 auf Pixel-Geräten. Die Schwachstelle steckt im Modem
und ermöglicht eine Rechteausweitung. Der September-Patchlevel
2026-09-05 behebt die Lücke.

https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01

#Android #Pixel #ITSecurity

##

DarkWebInformer@infosec.exchange at 2026-09-17T17:33:47.000Z ##

🚨 Google confirms Pixel phones targeted in zero-click zero-day attacks

Google has patched CVE-2026-58704, a high-severity vulnerability in Pixel phones' cellular modem that the company says was already under "limited, targeted exploitation."
⠀
The flaw is caused by a logic error that can allow an attacker to bypass permission checks and escalate privileges beyond the modem's isolated environment.
⠀
Most importantly, exploitation requires no interaction from the victim.

No malicious link needs to be clicked and no file needs to be opened, making it a zero-click attack.
⠀
Google has not disclosed:

• Who carried out the attacks
• How many Pixel owners were targeted
• How the victims were selected
• What tools or spyware may have been deployed
⠀
CISA has added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog and set a September 19 remediation deadline for affected federal systems.
⠀
Google says Pixel devices with the September 5, 2026 security patch level or later are protected.

Pixel owners should update their devices immediately.

Source: https://techcrunch.com/2026/09/16/google-says-some-pixel-phone-owners-were-hacked-in-zero-day-attacks/

##

beyondmachines1@infosec.exchange at 2026-09-17T13:01:13.000Z ##

Google Patches Pixel Modem Zero-Day Exploited in Targeted Attacks

Google's September 2026 update for Pixel devices fixes 110 vulnerabilities, including a high-severity modem flaw (CVE-2026-58704) that attackers are actively exploiting to escalate privileges without user interaction.

**Update your Pixel devices to the September 2026 patch level ASAP to block an active modem exploit and patch a huge set of issues.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/google-patches-pixel-modem-zero-day-exploited-in-targeted-attacks-w-p-u-q-l/gD2P6Ple2L

##

ottoto2017@prattohome.com at 2026-09-17T04:56:11.000Z ##

「Google Pixel端末がゼロクリック攻撃でハッキングされる
/CISAは連邦政府機関に対し、パッチ適用にわずか3日間しか猶予を与えていない。」： #TheRegister

「Googleと米国政府は、Pixelスマートフォンの携帯モデムに存在するゼロデイ脆弱性を悪用した攻撃者が、権限チェックを回避し、ユーザーの操作なしに権限を昇格できると警告した。この脆弱性は、アップデートを行うことで既に修正されている。

Googleは火曜日に、 CVE-2026-58704 として追跡されているこの重大な脆弱性を公表し、その際、このセキュリティホールが「限定的かつ標的を絞った悪用を受けている可能性がある」と警告した。つまり、Googleが問題を修正する前に、悪意のある人物がこのバグを発見し、悪用していたということだ。」

https://www.theregister.com/security/2026/09/16/google-pixel-phones-pwned-in-zero-click-attacks/5296936

https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html

##

ottoto2017@prattohome.com at 2026-09-17T04:40:19.000Z ##

「Google、限定的な標的型攻撃の兆候が見られる中、Pixelモデムの脆弱性を修正」： #TheHackerNews

「Googleは、明らかにした。同社のPixel Cellular Modemに存在する深刻なセキュリティ上の欠陥が、実際に悪用されていることを

（CVSSスコア：8.0）として追跡されているこの脆弱性は CVE-2026-58704 、権限昇格の欠陥です。

によると、「セルラーモデムには、コードの論理エラーにより権限がバイパスされる可能性がある」とのことです NIST（米国国立標準技術研究所）の国家脆弱性データベース（NVD）に掲載されているバグの説明。「これにより、追加の実行権限を必要とせずに、リモート（近接/隣接）での権限昇格が可能になる可能性がある。悪用にはユーザーの操作は不要である。」」

#Pixel #ZeroDay #CVE202658704 #Google #Spyware #ZeroClick #CyberSecurity

##

DailyCyberSecurity@infosec.exchange at 2026-09-17T04:07:33.000Z ##

Google confirmed a Pixel modem zero-day (CVE-2026-58704) exploited in a zero-click spyware attack to escape the modem sandbox. Update now.

https://securityexpress.info/pixel-modem-zero-day/?utm_source=mastodon&utm_medium=jetpack_social

##

thecybermind@infosec.exchange at 2026-09-16T21:31:34.000Z ##

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-58704 – Google Pixel Improper Authorization Vulnerability

A strategic executive briefing detailing governance, risk mitigation, and compliance frameworks for CVE-2026-58704 on Google Pixel mobile devices....

https://thecybermind.co/h86g

##

simonzerafa@infosec.exchange at 2026-09-16T21:27:45.000Z ##

Google and CISA warned that an actively exploited zero-day vulnerability (CVE-2026-58704) affecting Pixel cellular modems.

This allows attackers to silently bypass permission checks and escalate privileges with no user interaction!

It was quickly added to CISA's Known Exploited Vulnerabilities (KEV) catalog [1.2.1, 1.5.1].

Would be an excellent idea for Pixel owners to ownload and apply the September Android OS patches ASAP!

#Google #PixelPhone #ZeroDay #Exploit

##

thecybermind@infosec.exchange at 2026-09-16T20:58:59.000Z ##

(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2026-58704 – Google Pixel Improper Authorization Vulnerability

Actionable threat intelligence and end-to-end hardening strategies for CVE-2026-58704, addressing improper authorization flaws in Google Pixel cellular modems....

https://thecybermind.co/iuw6

##

cyberworldops@infosec.exchange at 2026-09-16T16:50:00.000Z ##

Google patched CVE-2026-58704, a high-severity Pixel Cellular Modem privilege-escalation flaw reportedly exploited in limited, targeted attacks. Its addition to CISA’s KEV Catalog underscores the need to prioritize affected device updates. #ZeroDay #MobileSecurity #ThreatIntelligence

https://cyberworldops.eu/en/google-patches-pixel-modem-zero-day-exploited-in-targeted-attacks

##

AAKL@infosec.exchange at 2026-09-16T16:26:50.000Z ##

New.

Press release: New CISA Guidance Helps Critical Infrastructure Detect, Observe and Impede Malicious Cyber Activity https://www.cisa.gov/news-events/news/new-cisa-guidance-helps-critical-infrastructure-detect-observe-and-impede-malicious-cyber-activity

The guide: Using Cyber Decoys to Strengthen Detection and Response https://www.cisa.gov/resources-tools/resources/using-cyber-decoys-strengthen-detection-and-response

CISA has also added one vulnerability to the catalogue.

CVE-2026-58704: Google Pixel Improper Authorization Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-58704 #Google #infosec #vulnerability #CISA

##

security_crawler_carl@infosec.exchange at 2026-09-16T16:14:16.000Z ##

🏆 New Achievement! Tutorial: Learning to Live With Being Actively Exploited!

Welcome to the Mandatory Pixel Debuff Sequence. Before you proceed, please note that CVE-2026-58704 has been equipped to your device without your consent. This is a zero-day — that means the tutorial boss was already in your pocket before the level loaded. (1/3)

##

secdb@infosec.exchange at 2026-09-16T15:01:11.000Z ##

🚨 [CISA-2026:0916] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-58704 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-58704)
- Name: Google Pixel Improper Authorization Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Pixel
- Notes: https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-58704

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260916 #cisa20260916 #cve_2026_58704 #cve202658704

##

rogeragrimes@infosec.exchange at 2026-09-16T14:56:00.000Z ##

If you've got a Google Pixel cell phone, do a system patch immediately. There is an active vulnerability that allows the hacker to take control of your device with no user interaction. It is being actively used in the wild.

https://www.cve.org/CVERecord?id=CVE-2026-58704

##

tugatech@masto.pt at 2026-09-16T14:31:09.000Z ##

Google corrige falha zero-day em telemóveis Pixel com atualização que resolve 110 vulnerabilidades. A falha, identificada como CVE-2026-58704, está a ser explorada em ataques direcionados de alcance limitado. 📱

🔗 https://tugatech.com.pt/t91149-google-corrige-falha-zero-day-em-telemoveis-pixel-numa-atualizacao-com-110-vulnerabilidades-resolvidas

#falha #google #pixel

##

cisakevtracker@mastodon.social at 2026-09-16T14:01:08.000Z ##

CVE ID: CVE-2026-58704
Vendor: Google
Product: Pixel
Date Added: 2026-09-16
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-58704

##

CVE-2026-40854(CVSS UNKNOWN)

EPSS: 0.30%

updated 2026-09-16T12:30:47

1 posts

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/login_user. An attacker can bypass authentication by using directory entries such as "." or ".." in the cookie, allowing unauthorized access to the admin

cR0w@infosec.exchange at 2026-09-16T14:35:20.000Z ##

Vulnerabilities in a 5g router from T-Mobile, the company known for its security?! I'm shocked. Shocked! Well, not that shocked.

https://cert.pl/posts/2026/09/CVE-2026-40854/

#internetOfShit #miraiWillNeverDie
#jobSecurityForSomeone

##

CVE-2026-81642(CVSS UNKNOWN)

EPSS: 0.52%

updated 2026-09-16T09:30:28

4 posts

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA can overflow the digest buffer. Remote code execution is possible through attacker controlled data. An adversary can exploit the vulnerabili

1 repos

https://github.com/suominen/CVE-2026-81642

undercodenews@mastodon.social at 2026-09-18T00:02:32.000Z ##

Critical Unbound DNSSEC Flaw Opens a Dangerous Path to Remote Code Execution + Video

Critical Unbound DNSSEC Flaw Could Turn a Malicious DNS Zone Into a Remote Code Execution Gateway A Critical Weakness Hidden Inside DNS Validation A critical security flaw in the Unbound DNS resolver has placed organizations running older versions under serious patching pressure. Tracked as CVE-2026-81642, the vulnerability is a heap buffer overflow in Unbound's DNSSEC validation…

https://undercodenews.com/critical-unbound-dnssec-flaw-opens-a-dangerous-path-to-remote-code-execution-video/?utm_source=mastodon&utm_medium=jetpack_social

##

cyberworldops at 2026-09-17T20:30:00.629Z ##

NLnet Labs Unbound before 1.26.1 contains heap overflow CVE-2026-81642 in the DNSSEC validator via crafted DNSKEY with compression pointer into RDATA. Any resolver induced to query a malicious zone risks crash or potential RCE, exposing core DNS infrastructure. #Unbound #DnsSec #HeapOverflow

https://cyberworldops.eu/en/unbound-dnssec-heap-overflow-puts-vulnerable-resolvers-at-risk-of

##

Analyst207@mastodon.social at 2026-09-17T14:03:25.000Z ##

Unbound DNSSEC Validator Flaw Enables Remote Code Execution

updated 2026-09-15T15:17:21.707000

2 posts

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.0.7 via the `withdraw_method_field` parameter of the `tutor_save_withdraw_account` AJAX handler. This is due to the handler lacking any capability or role check, relying solely on a nonce, while also passing attacker-supplied values through `esc_sq

guru@thecybersecguru.com at 2026-09-18T13:12:51.000Z ##

Tutor LMS Critical Flaw (CVE-2026-78175) Exposes 100,000+ WordPress Sites to Remote Code Execution

Tutor LMS CVE-2026-78175 is a critical RCE flaw affecting 100,000+ WordPress sites. Learn how the exploit works and how to patch it

https://thecybersecguru.com/news/cve-2026-78175-tutor-lms-rce/

##

guru@thecybersecguru.com at 2026-09-18T13:12:51.000Z ##

Tutor LMS Critical Flaw (CVE-2026-78175) Exposes 100,000+ WordPress Sites to Remote Code Execution

Tutor LMS CVE-2026-78175 is a critical RCE flaw affecting 100,000+ WordPress sites. Learn how the exploit works and how to patch it

https://thecybersecguru.com/news/cve-2026-78175-tutor-lms-rce/

##

CVE-2026-39919
(9.8 CRITICAL)

EPSS: 0.49%

updated 2026-09-15T15:17:14.723000

1 posts

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image components declare different subsampling values, the non-samescale sub-byte-depth output path allocates

DailyCyberSecurity@infosec.exchange at 2026-09-17T02:20:05.000Z ##

A Ghostscript buffer overflow enables unauthenticated remote code execution. Patch this Ghostscript buffer overflow flaw (CVE-2026-39919) immediately.

#Ghostscript #CVE202639919 #RemoteCodeExecution #Cybersecurity #InfoSec

https://securityonline.info/ghostscript-buffer-overflow-cve-2026-39919/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-81915
(0 None)

EPSS: 0.42%

updated 2026-09-15T14:40:24.370000

1 posts

Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::submit() dashboard controller loaded and saved the Page Type identified by a user-supplied ptID without calling canEditPageType(), so a signed-in dashboard user permitted to edit one Page Type could modify the configuration of Page Types outside their assigned authorization bounda

hugovalters@mastodon.social at 2026-09-17T21:10:08.000Z ##

CVE-2026-81915 Concrete CMS below 9.5.3: broken object-level authz lets any dashboard user edit Page Types outside their scope. CVSS N/A, patch status unknown. Update immediately. https://www.valtersit.com/cve/CVE-2026-81915/ #CVE #infosec #ConcreteCMS

##

CVE-2026-76461
(9.8 CRITICAL)

EPSS: 2.01%

updated 2026-09-15T12:47:32.497000

5 posts

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that co

4 repos

https://github.com/HORKimhab/CVE-2026-76461

https://github.com/S3v3n-JG/CVE-2026-76461

https://github.com/fevar54/CVE-2026-76461-Detection-Kit-

https://github.com/0xBlackash/CVE-2026-76461

hackmag at 2026-09-18T15:36:29.481Z ##

⚪️ Cisco Secure Email Gateway Appliances Can Be Hacked with a Malicious Email

🗨️ Cisco researchers have fixed a critical vulnerability in Secure Email Gateway, a gateway designed to protect email from malicious messages. Ironically, to compromise the gateway itself, an attacker only had to send a specially crafted email through it. The vulnerability…

🔗 https://hackmag.com/news/cve-2026-76461?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

https://www.pc-fluesterer.info/wordpress/2026/09/17/cisco-zero-day-wird-aktiv-angegriffen/

##

PC_Fluesterer@social.tchncs.de at 2026-09-17T13:30:04.000Z ##

Cisco Zero-Day wird aktiv angegriffen

Mal was neues - ach nein, Hintertüren bei Cisco sind ja gar nicht neu, sondern schon fast Gewohnheit. Am Montag hat die Firma ihre Kunden informiert, dass im Secure Email Gateway (SEG) eine Sicherheitslücke steckt, die bereits aktiv angegriffen wird. Dabei ist gleichgültig, ob das SEG auf eigener Hardware (Appliance) läuft oder als virtuelle Maschine oder Cloud-Dienst. Auch die Konfiguration des SEG macht keinen Unterschied. Das muss man sich mal auf der Zunge zergehen lassen: Das SEG, das vor schädlichen E-Mails schützen soll, kann durch genau solche angegriffen werden! Die Sicherheitslücke CVE-2026-76461 ... Weiterlesen:

#0day #backdoor #closedsource #email #exploits #hersteller #sicherheit #UnplugTrump #zeroday #cisco

##

hackmag@infosec.exchange at 2026-09-18T15:36:29.000Z ##

⚪️ Cisco Secure Email Gateway Appliances Can Be Hacked with a Malicious Email

🗨️ Cisco researchers have fixed a critical vulnerability in Secure Email Gateway, a gateway designed to protect email from malicious messages. Ironically, to compromise the gateway itself, an attacker only had to send a specially crafted email through it. The vulnerability…

🔗 https://hackmag.com/news/cve-2026-76461?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

##

security_crawler_carl@infosec.exchange at 2026-09-16T23:37:29.000Z ##

🏆 New Achievement! Root Access? We'll Get That Escalated for You!

updated 2026-09-14T14:22:15.323000

1 posts

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.

https://github.com/gagaltotal/CVE-2026-85706-gitlab-poc

13 repos

https://github.com/gabrielunknown/CVE-2026-85706

https://github.com/0xenesbayram/cve-2026-85706

https://github.com/brigadeops32/CVE-2026-85706

https://github.com/jithinkrishnanrs/gitlab-cve-2026-85706-ioc

https://github.com/ynsmroztas/GitLabSniper

https://github.com/FlowerWitch/CVE-2026-85706_docker_exp

https://github.com/0xlyvio/cve-2026-85706-poc-exploit-gitlab

https://github.com/mhtsec/CVE-2026-85706

https://github.com/solivaquaant/CVE-2026-85706

updated 2026-09-14T13:18:54.883000

2 posts

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration try_smi_init() allocates new_smi->si_sm and later calls ipmi_register_smi_mod(), which maps to ipmi_add_smi(). During ipmi_add_smi(), the upper IPMI message handler obtains the initial BMC device information through __bmc_get_device_id(). This can fail if the BMC

NyxKai@ieji.de at 2026-09-17T08:48:16.000Z ##

@hugovalters Thanks for flagging CVE-2026-81005. This NULL pointer dereference in ipmi_si is nasty — BMC failure during Get Device ID shouldn't crash the kernel. Mitigation: disable ipmi_si module if BMC is unresponsive (modprobe -r ipmi_si) or ensure ipmi_si.force_kipmi=0 to avoid kernel thread hang. Patch backports likely in stable kernel queue. #infosec #Linux #CVE

##

hugovalters@mastodon.social at 2026-09-17T08:40:00.000Z ##

CVE-2026-81005 Linux kernel NULL pointer dereference in ipmi_si after failed SMI registration. CVSS N/A. Unpatched. A BMC that fails Get Device ID can crash the kernel. Patch now. https://www.valtersit.com/cve/CVE-2026-81005/ #CVE #Linux #infosec

##

CVE-2026-81000
(7.8 HIGH)

EPSS: 0.16%

updated 2026-09-14T13:18:54.210000

7 posts

In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an oversized headroom request from another port to TUN or TAP. When align is larger than the usable space in a one-page skb head, SKB_MAX_HEAD(align) underflows and the re

cyberworldops at 2026-09-19T04:30:00.974Z ##

Researcher Asim Manizada released working local root exploits for four Linux kernel flaws: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121 and CVE-2026-74469. Public code lowers exploitation barrier for unpatched hosts, increasing post-compromise privilege escalation risk. #LinuxSecurity #PrivilegeEscalation #KernelSecurity

https://cyberworldops.eu/en/four-public-linux-kernel-exploits-put-unpatched-hosts-at-risk-of-local

##

sayzard@mastodon.sayzard.org at 2026-09-18T14:40:50.000Z ##

A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, DiagSpill

Linux 커널에서 일반 로컬 사용자를 root로 승격할 수 있는 4개 취약점 DirtyAH6(CVE-2026-80844), TUNderflow(CVE-2026-81000), PPPoEject(CVE-2026-68121), DiagSpill(CVE-2026-74469)가 공개됐다. 취약점들은 네트워크 서브시스템의 오래된 메모리 손상 문제이며, DiagSpill은 별도 capability나 비특권 사용자 네임스페이스 없이도 조건 충족 시 LPE가 가능하고 컨테이너 호스트 탈출 가능성도 있다. 수정은 Linux stable 5.10.270,...

https://www.openwall.com/lists/oss-security/2026/09/18/3

##

decio at 2026-09-18T08:13:07.228Z ##

Ouep, vendredi vuln assisté is back : le kernel Linux, toujours la cible préférée du branding CVE 🐧

DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121) et DiagSpill (CVE-2026-74469) permettent, dans les configurations adaptées, à un utilisateur local non privilégié d'obtenir root.
Bugs présents dans le kernel depuis 10 à 21 ans.

Risque pas uniforme : les trois premières nécessitent des user namespaces non privilégiés + des fonctionnalités réseau particulières (AH6/XFRM, TUN/TAP, PPPoE).
DiagSpill est directement accessible sans capability, MAIS nécessite SCTP + sctp_diag.

Pas de RCE distante générique, mais nuance à connaître pour les passerelles : DirtyAH6 peut causer un DoS distant sur un routeur IPv6 faisant de l'AH en mode transport (root distant obtenu en labo par l'auteur, via grooming côté cible--> jugé "extrêmement difficile").
DiagSpill a aussi un vecteur DoS distant si ASCONF/ADD-IP + SCTP-AUTH (ou addip_noauth_enable=1) sont actifs-->désactivés par défaut.

➡️ À surveiller en priorité : systèmes multi-utilisateurs, conteneurs, hôtes TUN/TAP, PPPoE, XFRM/AH6 ou SCTP.

🔎 Analyse complète
👇
https://heyitsas.im/posts/lpe-quartet/

:debian:
👇
DirtyAH6 corrigé sur Bookworm-security, encore vulnérable sur Trixie.

TUNderflow corrigée uniquement dans sid

PPPoEject et DiagSpill corrigés sur Bookworm-security et Trixie.
⬇️

DirtyAH6 — CVE-2026-80844

Debian Security Tracker
TUNderflow — CVE-2026-81000

Debian Security Tracker
PPPoEject — CVE-2026-68121

Debian Security Tracker
DiagSpill — CVE-2026-74469

Debian Security Tracker

PoCs 👀
👇
DirtyAH6 — CVE-2026-80844 : https://github.com/manizada/DirtyAH6
TUNderflow — CVE-2026-81000 : https://github.com/manizada/TUNderflow
PPPoEject — CVE-2026-68121 : https://github.com/manizada/PPPoEject
DiagSpill — CVE-2026-74469 : https://github.com/manizada/DiagSpill

https://www.openwall.com/lists/oss-security/2026/09/18/3
https://heyitsas.im/posts/lpe-quartet/

##

harrysintonen at 2026-09-18T06:48:39.896Z ##

It's Friday, and we have 4 more local privilege escalation vulnerabilities disclosed for the Linux kernel:

- DirtyAH6 (CVE-2026-80844)
- TUNderflow (CVE-2026-81000)
- PPPoEject (CVE-2026-68121)
- DiagSpill (CVE-2026-74469)

"The underlying bugs have been around for 10-21 years. The first three LPEs require either unprivileged user namespaces or specific CAPs; DiagSpill does not."

#CVE_2026_80844 #CVE_2026_81000 #CVE_2026_68121 #CVE_2026_74469

##

cyberworldops@infosec.exchange at 2026-09-19T04:30:00.000Z ##

Researcher Asim Manizada released working local root exploits for four Linux kernel flaws: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121 and CVE-2026-74469. Public code lowers exploitation barrier for unpatched hosts, increasing post-compromise privilege escalation risk. #LinuxSecurity #PrivilegeEscalation #KernelSecurity

https://cyberworldops.eu/en/four-public-linux-kernel-exploits-put-unpatched-hosts-at-risk-of-local

##

decio@infosec.exchange at 2026-09-18T08:13:07.000Z ##

Ouep, vendredi vuln assisté is back : le kernel Linux, toujours la cible préférée du branding CVE 🐧

DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121) et DiagSpill (CVE-2026-74469) permettent, dans les configurations adaptées, à un utilisateur local non privilégié d'obtenir root.
Bugs présents dans le kernel depuis 10 à 21 ans.

Risque pas uniforme : les trois premières nécessitent des user namespaces non privilégiés + des fonctionnalités réseau particulières (AH6/XFRM, TUN/TAP, PPPoE).
DiagSpill est directement accessible sans capability, MAIS nécessite SCTP + sctp_diag.

Pas de RCE distante générique, mais nuance à connaître pour les passerelles : DirtyAH6 peut causer un DoS distant sur un routeur IPv6 faisant de l'AH en mode transport (root distant obtenu en labo par l'auteur, via grooming côté cible--> jugé "extrêmement difficile").
DiagSpill a aussi un vecteur DoS distant si ASCONF/ADD-IP + SCTP-AUTH (ou addip_noauth_enable=1) sont actifs-->désactivés par défaut.

➡️ À surveiller en priorité : systèmes multi-utilisateurs, conteneurs, hôtes TUN/TAP, PPPoE, XFRM/AH6 ou SCTP.

🔎 Analyse complète
👇
https://heyitsas.im/posts/lpe-quartet/

:debian:
👇
DirtyAH6 corrigé sur Bookworm-security, encore vulnérable sur Trixie.

TUNderflow corrigée uniquement dans sid

PPPoEject et DiagSpill corrigés sur Bookworm-security et Trixie.
⬇️

DirtyAH6 — CVE-2026-80844

Debian Security Tracker
TUNderflow — CVE-2026-81000

Debian Security Tracker
PPPoEject — CVE-2026-68121

Debian Security Tracker
DiagSpill — CVE-2026-74469

Debian Security Tracker

PoCs 👀
👇
DirtyAH6 — CVE-2026-80844 : https://github.com/manizada/DirtyAH6
TUNderflow — CVE-2026-81000 : https://github.com/manizada/TUNderflow
PPPoEject — CVE-2026-68121 : https://github.com/manizada/PPPoEject
DiagSpill — CVE-2026-74469 : https://github.com/manizada/DiagSpill

https://github.com/20000419/CVE-2026-39113

##

harrysintonen@infosec.exchange at 2026-09-18T06:48:39.000Z ##

updated 2026-09-14T12:31:44

1 posts

updated 2026-09-12T04:16:42.757000

1 posts

updated 2026-09-11T21:31:06

1 posts

updated 2026-09-11T04:17:13.060000

2 posts

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on the PA-Series firewalls. The security risk posed by this issue is minimiz

cR0w at 2026-09-18T12:46:29.099Z ##

@badsamurai CVE-2026-0310 go brrrrrr

##

cR0w@infosec.exchange at 2026-09-18T12:46:29.000Z ##

@badsamurai CVE-2026-0310 go brrrrrr

##

CVE-2026-39113
(4.0 MEDIUM)

EPSS: 0.21%

updated 2026-09-09T16:04:24.933000

1 posts

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d (Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11) and later snapshots/builds allows an attacker to cause a denial of service via the ext/misc/sqlar.c, sqlarUncompressFunc(), sqlar_uncompress(), sqlite3_value_int

1 repos

ottoto2017@prattohome.com at 2026-09-17T00:13:30.000Z ##

#Ubuntu 24.04.5 で #update 。

aom (3.8.2-2ubuntu0.2)
CVE-2026-56208, CVE-2026-56209, CVE-2026-56210, CVE-2026-56211へのセキュリティ対応。
ibaom3

perl (5.38.2-3.2ubuntu0.6)
CVE-2026-15534、CVE-2026-19487へのセキュリティ対応。
libperl5.38t64
perl-base
perl-modules-5.38

sqlite3 (3.45.1-1ubuntu2.8)
CVE-2026-39113へのセキュリティ対応。
libsqlite3-0

セキュリティ対応なのでお早めに。

##

CVE-2026-15534
(5.7 MEDIUM)

EPSS: 0.17%

updated 2026-09-08T22:17:38.113000

1 posts

Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch. The regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the sig

ottoto2017@prattohome.com at 2026-09-17T00:13:30.000Z ##

#Ubuntu 24.04.5 で #update 。

aom (3.8.2-2ubuntu0.2)
CVE-2026-56208, CVE-2026-56209, CVE-2026-56210, CVE-2026-56211へのセキュリティ対応。
ibaom3

perl (5.38.2-3.2ubuntu0.6)
CVE-2026-15534、CVE-2026-19487へのセキュリティ対応。
libperl5.38t64
perl-base
perl-modules-5.38

sqlite3 (3.45.1-1ubuntu2.8)
CVE-2026-39113へのセキュリティ対応。
libsqlite3-0

セキュリティ対応なのでお早めに。

##

CVE-2026-60004
(9.8 CRITICAL)

EPSS: 86.78%

updated 2026-09-08T17:56:31

1 posts

### Summary Gitea's `diffpatch` endpoint can be abused to install and execute a Git hook from repository-controlled content. An attacker with ordinary write access to a repository can execute arbitrary shell commands as the Gitea OS user. With default open registration, an unauthenticated visitor can obtain the required write access by registering an account and creating a repository. ### Detai

https://github.com/shinthink/CVE-2026-60004

10 repos

https://github.com/HORKimhab/CVE-2026-60004

https://github.com/gagaltotal/CVE-2026-60004-poc-gitea

https://github.com/imbas007/CVE-2026-60004-POC

https://github.com/HackSpeak/CVE-2026-60004

https://github.com/0xBlackash/CVE-2026-60004

https://github.com/EQSTLab/CVE-2026-60004

https://github.com/erberkan/CVE-2026-60004-PoC

https://github.com/Sachinart/CVE-2026-60004-gitea-0day

https://github.com/fevar54/cve-2026-60004

cyberveille@mastobot.ping.moi at 2026-09-17T15:00:05.000Z ##

📢 Red Heron exploite CVE-2026-60004 dans Gitea pour déployer un rootkit Linux inédit

L'Acronis Threat Research Unit (TRU) a publié le 13 septembre 2026 une analyse détaillée d'une campagne multinationale menée par un acteur malveillant sinophone qu'ils suivent sous le nom Red Heron. La découverte initiale remonte au 4 août 2026, lorsque TRU a…

📖 cyberveille : https://cyberveille.ch/posts/2026-09-17-red-heron-exploite-cve-2026-60004-dans-gitea-pour-deployer-un-rootkit-linux-inedit/
🌐 source : https://www.acronis.com/en/tru/posts/red-heron-exploits-gitea-n-day-flaw-in-multinational-campaign-exposing-new-linux-rootkit/
🟢 vérification factuelle haute
#RedHeron #RootkitLinux #Cyberveille

##

CVE-2026-31431
(7.8 HIGH)

EPSS: 99.91%

updated 2026-09-08T15:13:07.273000

1 posts

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just

https://github.com/ben-slates/CVE-2026-31431-Exploit

100 repos

https://github.com/wesmar/CVE-2026-31431

https://github.com/pyroceper/copy-fail-CVE-2026-31431

https://github.com/Boos4721/copyfail-rs

https://github.com/erlangparasu/mitigate_cve_2026_31431-sh

https://github.com/mahdi13830510/CVE-2026-31431-mitigation-suite

https://github.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail

https://github.com/insomnisec/Detections-CVE-2026-31431

https://github.com/Smarttfoxx/copyfail

https://github.com/sgkdev/page_inject

https://github.com/desultory/CVE-2026-31431

https://github.com/Juguitos/copy-fail

https://github.com/4xura/CVE-2026-31431-Copy-Fail

https://github.com/bigwario/copy-fail-CVE-2026-31431-C

https://github.com/Huchangzhi/autorootlinux

https://github.com/badsectorlabs/copyfail-go

https://github.com/philfry/cve-2026-31431-ftrace

https://github.com/ErdemOzgen/copy-fail-cve-2026-31431

https://github.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe

https://github.com/liamromanis101/CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script

https://github.com/aestechno/cve-2026-31431-ansible

https://github.com/cozystack/copy-fail-blocker

https://github.com/KaraZajac/DIRTYFAIL

https://github.com/theori-io/copy-fail-CVE-2026-31431

https://github.com/xeloxa/copyfail-exploit

https://github.com/kinryulabs/rootpacket-cve-2026-31431

https://github.com/Crihexe/copy-fail-tiny-elf-CVE-2026-31431

https://github.com/painoob/Copy-Fail-Exploit-CVE-2026-31431

https://github.com/nisec-eric/cve-2026-31431

https://github.com/b5null/CVE-2026-31431-C

https://github.com/KanbaraAkihito/CVE-2026-31431-copyfail-rs

https://github.com/adityasingh108/CVE-2026-31431-Metasploit-exploit

https://github.com/povzayd/CVE-2026-31431

https://github.com/mrunalp/block-copyfail

https://github.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag

https://github.com/diemoeve/copyfail-rs

https://github.com/ExploitEoom/CVE-2026-31431

https://github.com/wuwu001/CVE-2026-31431-exploit

https://github.com/TheMalwareGuardian/CVE-2026-31431

https://github.com/samanzamani/copy-fail-checker

https://github.com/JuanBindez/CVE-2026-31431

https://github.com/SeanRickerd/cve-2026-31431

https://github.com/wgnet/wg.copyfail.patch

https://github.com/qi4L/CVE-2026-31431-Container-Escape

https://github.com/beatbeast007/Linux-CopyFail-C-Version-CVE-2026-31431

https://github.com/shadowabi/CVE-2026-31431-CopyFail-Universal-LPE

https://github.com/tgies/copy-fail-c

https://github.com/ZephrFish/CopyFail-CVE-2026-31431

https://github.com/Webhosting4U/Copy-Fail_Detect_and_mitigate_CVE-2026-31431

https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Statically-PoC

https://github.com/ncmprbll/copy-fail-rs

https://github.com/EynaExp/Copy-Fail-CVE-2026-31431-modernized

https://github.com/Dabbleam/CVE-2026-31431-mitigation

https://github.com/Sl4cK0TH/CVE-2026-31431-PoC

https://github.com/AliHzSec/CVE-2026-31431

https://github.com/rvzsec/CVE-2026-31431

https://github.com/yuspring/cve-2026-31431-poc

https://github.com/M4xSec/CVE-2026-31431-RCE-Exploit

https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit

https://github.com/Alfredooe/CVE-2026-31431

https://github.com/0xBlackash/CVE-2026-31431

https://github.com/scriptzteam/Paranoid-Copy-Fail-CVE-2026-31431

https://github.com/haydenjames/CVE-2026-31431-check

https://github.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation

https://github.com/sgkdev/ptrace_may_dream

https://github.com/Qengineering/RK35xx-CopyFail-Hotfix

https://github.com/g1nt0n1x/copy-fail-CVE-2026-31431-shell

https://github.com/mym0us3r/COPY-FAIL-Detection-with-Wazuh-4.14.4

https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC

https://github.com/Shotafry/CopyFail-Exploits-CVE-2026-31431

https://github.com/JnamerZ/CopyFail-CVE-2026-31431

https://github.com/pedromizz/copy-fail

https://github.com/lonelyor/CVE-2026-31431-exp

https://github.com/Iamliuxiaozhen/copy_fail

https://github.com/rootsecdev/cve_2026_31431

https://github.com/bootsareme/copyfail-deconstructed

https://github.com/adampielak/CVE-2026-31431_SCA_WAZUH

https://github.com/gagaltotal/cve-2026-31431-copy-fail

https://github.com/malwarekid/CVE-2026-31431

https://github.com/kadir/copy-fail-CVE-2026-31431-IOC

https://github.com/jbnetwork-git/copy-fail-check

https://github.com/sammwyy/copyfail-rs

https://github.com/Xerxes-2/CVE-2026-31431-rs

https://github.com/luotian2/CVE-2026-31431

https://github.com/cs8425/copy-fail-go

https://github.com/MartinPham/copy-fail-CVE-2026-31431-php

https://github.com/iss4cf0ng/CVE-2026-31431-Linux-Copy-Fail

https://github.com/guiimoraes/CVE-2026-31431

https://github.com/atgreen/block-copyfail

https://github.com/sudoytang/copyfail-arm64

https://github.com/XsanFlip/CVE-2026-31431-Patch

https://github.com/MrAriaNet/cPanel-Fix

https://github.com/sec17br/CVE-2026-31431-Copy-Fail

https://github.com/cyber-joker/copy-fail-python

https://github.com/novysodope/copy-fail-CVE-2026-31431-C

https://github.com/0xShe/CVE-2026-31431

https://github.com/pascal-gujer/CVE-2026-31431

https://github.com/abdelkabirouadoukou/CVE-2026-31431-Analysis-and-Fix

https://github.com/hans362/CVE-2026-31431-Copy-Fail-Container-Escape

https://github.com/AdityaBhatt3010/CVE-2026-31431

sayzard@mastodon.sayzard.org at 2026-09-17T11:41:42.000Z ##

When the Red Light Goes On: How We Responded to the Linux Kernel 0-Day

Linux 커널의 공개 PoC 로컬 권한 상승 취약점 CVE-2026-31431("Copy Fail")이 Ubuntu 24.04에서 비권한 사용자로부터 root 획득까지 가능하다고 보고됐다. 원인은 Crypto User API의 AF_ALG 경로에서 `algif_aead` 모듈에 도달 가능한 out-of-bounds write이며, 웹 애플리케이션 침해가 호스트 전체 침해로 확대될 수 있어 멀티테넌트 서버와 컨테이너 노드 운영자에게 특히 중요하다. 패치가 배포되기 전에는 `algif_aead`를 언로드하고 modprobe 설정으로 재로딩을 차단하는 방식으로 공...

https://nine.ch/en/blog/linux-kernel-0day-copy-fail/

##

CVE-2026-15315
(8.8 HIGH)

EPSS: 0.30%

updated 2026-09-04T18:32:18

3 posts

Tapo C200 v5 contains an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls and obtain administrative session tokens. Successful exploitation may allow an attacker to subsequently execute privileged management actions,

1 repos

https://github.com/HORKimhab/CVE-2026-15315

beyondmachines1 at 2026-09-17T11:01:13.911Z ##

TP-Link Patches Critical Flaws in Tapo Surveillance Cameras

TP-Link patched multiple vulnerabilities in its Tapo C200 and C120 cameras, including an authentication bypass (CVE-2026-15315) and a denial-of-service flaw (CVE-2026-15316), while a third critical vulnerability remains under investigation.

**Update your Tapo camera firmware to version V5_1.4.6 ASAP, and check for new updates for the most severe issue that's still not patched. And move all smart cameras to a separate guest network to keep your main computers safe if a device is hacked.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/tp-link-patches-critical-flaws-in-tapo-surveillance-cameras-w-h-9-n-b/gD2P6Ple2L

##

beyondmachines1@infosec.exchange at 2026-09-17T11:01:13.000Z ##

TP-Link Patches Critical Flaws in Tapo Surveillance Cameras

TP-Link patched multiple vulnerabilities in its Tapo C200 and C120 cameras, including an authentication bypass (CVE-2026-15315) and a denial-of-service flaw (CVE-2026-15316), while a third critical vulnerability remains under investigation.

**Update your Tapo camera firmware to version V5_1.4.6 ASAP, and check for new updates for the most severe issue that's still not patched. And move all smart cameras to a separate guest network to keep your main computers safe if a device is hacked.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/tp-link-patches-critical-flaws-in-tapo-surveillance-cameras-w-h-9-n-b/gD2P6Ple2L

##

AAKL@infosec.exchange at 2026-09-16T16:32:55.000Z ##

In case you didn't have enough problems with cameras, here's another one.

OPSWAT, posted yesterday: Authentication Bypass and DoS Vulnerabilities: OPSWAT Discovers CVE-2026-15315 & CVE-2026-15316 in TP-Link Tapo Cameras https://www.opswat.com/blog/authentication-bypass-and-dos-vulnerabilities-opswat-discovers-cve-2026-15315-cve-2026-15316-in-tp-link-tapo-cameras

More:

Infosecurity-Magazine: Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping https://www.infosecurity-magazine.com/news/zeroday-tplink-cameras/ #infosec #vulnerability #spyware #zeroday #threatresearch

##

CVE-2026-15316
(6.5 MEDIUM)

EPSS: 0.23%

updated 2026-09-04T17:26:04.617000

4 posts

An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attacker can send oversized crypted ciphertext values that may trigger exception handling failures, due to insufficient validation, causing the affected device to crash or restart. Successful exploitation may temporarily disrupt HTTPS manage

1 repos

https://github.com/HORKimhab/CVE-2026-15315

beyondmachines1 at 2026-09-17T11:01:13.911Z ##

TP-Link Patches Critical Flaws in Tapo Surveillance Cameras

TP-Link patched multiple vulnerabilities in its Tapo C200 and C120 cameras, including an authentication bypass (CVE-2026-15315) and a denial-of-service flaw (CVE-2026-15316), while a third critical vulnerability remains under investigation.

**Update your Tapo camera firmware to version V5_1.4.6 ASAP, and check for new updates for the most severe issue that's still not patched. And move all smart cameras to a separate guest network to keep your main computers safe if a device is hacked.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/tp-link-patches-critical-flaws-in-tapo-surveillance-cameras-w-h-9-n-b/gD2P6Ple2L

##

beyondmachines1@infosec.exchange at 2026-09-17T11:01:13.000Z ##

TP-Link Patches Critical Flaws in Tapo Surveillance Cameras

TP-Link patched multiple vulnerabilities in its Tapo C200 and C120 cameras, including an authentication bypass (CVE-2026-15315) and a denial-of-service flaw (CVE-2026-15316), while a third critical vulnerability remains under investigation.

**Update your Tapo camera firmware to version V5_1.4.6 ASAP, and check for new updates for the most severe issue that's still not patched. And move all smart cameras to a separate guest network to keep your main computers safe if a device is hacked.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/tp-link-patches-critical-flaws-in-tapo-surveillance-cameras-w-h-9-n-b/gD2P6Ple2L

##

AAKL@infosec.exchange at 2026-09-16T16:32:55.000Z ##

In case you didn't have enough problems with cameras, here's another one.

OPSWAT, posted yesterday: Authentication Bypass and DoS Vulnerabilities: OPSWAT Discovers CVE-2026-15315 & CVE-2026-15316 in TP-Link Tapo Cameras https://www.opswat.com/blog/authentication-bypass-and-dos-vulnerabilities-opswat-discovers-cve-2026-15315-cve-2026-15316-in-tp-link-tapo-cameras

More:

Infosecurity-Magazine: Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping https://www.infosecurity-magazine.com/news/zeroday-tplink-cameras/ #infosec #vulnerability #spyware #zeroday #threatresearch

##

security_crawler_carl@infosec.exchange at 2026-09-16T13:10:27.000Z ##

CVE-2026-15316 throws in a denial-of-service against the onboarding flow as a bonus gift with purchase.

Perhaps you'd like our Extended Vulnerability Warranty? Only $49.99. Or — and hear me out — you could just update your Tapo C200 to firmware V5_1.4.6, released August 18, for the remarkable price of free.

Reward: You've received a slightly-used Tin Foil Lens Cap. Refurbished. Non-returnable.

https://www.infosecurity-magazine.com/news/zeroday-tplink-cameras

#ZeroDay #CyberSecurity (2/2)

##

CVE-2026-80844
(0 None)

EPSS: 0.19%

updated 2026-09-04T16:18:13.023000

7 posts

In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than the number of addresses described by the routing header's hdrlen field. That assumption does not hold for raw IPv6 HDRINCL packets.

cyberworldops at 2026-09-19T04:30:00.974Z ##

Researcher Asim Manizada released working local root exploits for four Linux kernel flaws: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121 and CVE-2026-74469. Public code lowers exploitation barrier for unpatched hosts, increasing post-compromise privilege escalation risk. #LinuxSecurity #PrivilegeEscalation #KernelSecurity

https://cyberworldops.eu/en/four-public-linux-kernel-exploits-put-unpatched-hosts-at-risk-of-local

##

sayzard@mastodon.sayzard.org at 2026-09-18T14:40:50.000Z ##

A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, DiagSpill

Linux 커널에서 일반 로컬 사용자를 root로 승격할 수 있는 4개 취약점 DirtyAH6(CVE-2026-80844), TUNderflow(CVE-2026-81000), PPPoEject(CVE-2026-68121), DiagSpill(CVE-2026-74469)가 공개됐다. 취약점들은 네트워크 서브시스템의 오래된 메모리 손상 문제이며, DiagSpill은 별도 capability나 비특권 사용자 네임스페이스 없이도 조건 충족 시 LPE가 가능하고 컨테이너 호스트 탈출 가능성도 있다. 수정은 Linux stable 5.10.270,...

https://www.openwall.com/lists/oss-security/2026/09/18/3

##

decio at 2026-09-18T08:13:07.228Z ##

Ouep, vendredi vuln assisté is back : le kernel Linux, toujours la cible préférée du branding CVE 🐧

DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121) et DiagSpill (CVE-2026-74469) permettent, dans les configurations adaptées, à un utilisateur local non privilégié d'obtenir root.
Bugs présents dans le kernel depuis 10 à 21 ans.

Risque pas uniforme : les trois premières nécessitent des user namespaces non privilégiés + des fonctionnalités réseau particulières (AH6/XFRM, TUN/TAP, PPPoE).
DiagSpill est directement accessible sans capability, MAIS nécessite SCTP + sctp_diag.

Pas de RCE distante générique, mais nuance à connaître pour les passerelles : DirtyAH6 peut causer un DoS distant sur un routeur IPv6 faisant de l'AH en mode transport (root distant obtenu en labo par l'auteur, via grooming côté cible--> jugé "extrêmement difficile").
DiagSpill a aussi un vecteur DoS distant si ASCONF/ADD-IP + SCTP-AUTH (ou addip_noauth_enable=1) sont actifs-->désactivés par défaut.

➡️ À surveiller en priorité : systèmes multi-utilisateurs, conteneurs, hôtes TUN/TAP, PPPoE, XFRM/AH6 ou SCTP.

🔎 Analyse complète
👇
https://heyitsas.im/posts/lpe-quartet/

:debian:
👇
DirtyAH6 corrigé sur Bookworm-security, encore vulnérable sur Trixie.

TUNderflow corrigée uniquement dans sid

PPPoEject et DiagSpill corrigés sur Bookworm-security et Trixie.
⬇️

DirtyAH6 — CVE-2026-80844

Debian Security Tracker
TUNderflow — CVE-2026-81000

Debian Security Tracker
PPPoEject — CVE-2026-68121

Debian Security Tracker
DiagSpill — CVE-2026-74469

Debian Security Tracker

PoCs 👀
👇
DirtyAH6 — CVE-2026-80844 : https://github.com/manizada/DirtyAH6
TUNderflow — CVE-2026-81000 : https://github.com/manizada/TUNderflow
PPPoEject — CVE-2026-68121 : https://github.com/manizada/PPPoEject
DiagSpill — CVE-2026-74469 : https://github.com/manizada/DiagSpill

https://www.openwall.com/lists/oss-security/2026/09/18/3
https://heyitsas.im/posts/lpe-quartet/

##

harrysintonen at 2026-09-18T06:48:39.896Z ##

It's Friday, and we have 4 more local privilege escalation vulnerabilities disclosed for the Linux kernel:

- DirtyAH6 (CVE-2026-80844)
- TUNderflow (CVE-2026-81000)
- PPPoEject (CVE-2026-68121)
- DiagSpill (CVE-2026-74469)

"The underlying bugs have been around for 10-21 years. The first three LPEs require either unprivileged user namespaces or specific CAPs; DiagSpill does not."

#CVE_2026_80844 #CVE_2026_81000 #CVE_2026_68121 #CVE_2026_74469

##

cyberworldops@infosec.exchange at 2026-09-19T04:30:00.000Z ##

Researcher Asim Manizada released working local root exploits for four Linux kernel flaws: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121 and CVE-2026-74469. Public code lowers exploitation barrier for unpatched hosts, increasing post-compromise privilege escalation risk. #LinuxSecurity #PrivilegeEscalation #KernelSecurity

https://cyberworldops.eu/en/four-public-linux-kernel-exploits-put-unpatched-hosts-at-risk-of-local

##

decio@infosec.exchange at 2026-09-18T08:13:07.000Z ##

Ouep, vendredi vuln assisté is back : le kernel Linux, toujours la cible préférée du branding CVE 🐧

DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121) et DiagSpill (CVE-2026-74469) permettent, dans les configurations adaptées, à un utilisateur local non privilégié d'obtenir root.
Bugs présents dans le kernel depuis 10 à 21 ans.

Risque pas uniforme : les trois premières nécessitent des user namespaces non privilégiés + des fonctionnalités réseau particulières (AH6/XFRM, TUN/TAP, PPPoE).
DiagSpill est directement accessible sans capability, MAIS nécessite SCTP + sctp_diag.

Pas de RCE distante générique, mais nuance à connaître pour les passerelles : DirtyAH6 peut causer un DoS distant sur un routeur IPv6 faisant de l'AH en mode transport (root distant obtenu en labo par l'auteur, via grooming côté cible--> jugé "extrêmement difficile").
DiagSpill a aussi un vecteur DoS distant si ASCONF/ADD-IP + SCTP-AUTH (ou addip_noauth_enable=1) sont actifs-->désactivés par défaut.

➡️ À surveiller en priorité : systèmes multi-utilisateurs, conteneurs, hôtes TUN/TAP, PPPoE, XFRM/AH6 ou SCTP.

🔎 Analyse complète
👇
https://heyitsas.im/posts/lpe-quartet/

:debian:
👇
DirtyAH6 corrigé sur Bookworm-security, encore vulnérable sur Trixie.

TUNderflow corrigée uniquement dans sid

PPPoEject et DiagSpill corrigés sur Bookworm-security et Trixie.
⬇️

DirtyAH6 — CVE-2026-80844

Debian Security Tracker
TUNderflow — CVE-2026-81000

Debian Security Tracker
PPPoEject — CVE-2026-68121

Debian Security Tracker
DiagSpill — CVE-2026-74469

Debian Security Tracker

2 posts

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user

15 repos

https://github.com/ynsmroztas/KeySniper

https://github.com/BlackHatExploitation/Exploit-For-CVE-2026-18963

https://github.com/0xlyvio/CVE-2026-18963-keycloak

https://github.com/prot0tw/Keycloak_CVE-2026-18963_PoC

https://github.com/T0w0T/POC-CVE-2026-18963

https://github.com/kyos-public/keycloak-cve-2026-18963-hunt

https://github.com/debugactiveprocess/CVE-2026-18963

https://github.com/Snizi/CVE-2026-18963-Exploit

https://github.com/minh3102011/CVE-2026-18963_analyst

https://github.com/alt3kx/CVE-2026-18963

https://github.com/EQSTLab/CVE-2026-18963

https://github.com/gman0x00/keycloak-CVE-2026-18963

https://github.com/M4xSec/My-Exploits

https://github.com/ivanesk315/CVE-2026-18963

https://github.com/Red-Darkin/CVE-2026-18963-keycloak

DailyCyberSecurity at 2026-09-18T09:26:48.724Z ##

HCL Software patched critical HCL BigFix vulnerabilities, including CVE-2026-67100 and CVE-2026-18963. Patch now to prevent total account takeovers.

#HCLBigFix #Cybersecurity #CVE202667100 #Vulnerability #InfoSec

https://securityonline.info/hcl-bigfix-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-09-18T09:26:48.000Z ##

HCL Software patched critical HCL BigFix vulnerabilities, including CVE-2026-67100 and CVE-2026-18963. Patch now to prevent total account takeovers.

#HCLBigFix #Cybersecurity #CVE202667100 #Vulnerability #InfoSec

https://securityonline.info/hcl-bigfix-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-56389
(8.6 HIGH)

EPSS: 0.16%

updated 2026-08-24T18:32:30

2 posts

GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without restriction and passed directly to execvp(). When running bison --html on a attacker-provided gramma

ottoto2017@prattohome.com at 2026-09-18T00:27:51.000Z ##

#Ubuntu 24.04.5 で #update 。

bison (2:3.8.2+dfsg-1ubuntu0.24.04.1)
CVE-2026-56389へのセキュリティ対応。

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-18T00:27:51.000Z ##

#Ubuntu 24.04.5 で #update 。

bison (2:3.8.2+dfsg-1ubuntu0.24.04.1)
CVE-2026-56389へのセキュリティ対応。

セキュリティ対応なのでお早めに。

https://cyberworldops.eu/en/four-public-linux-kernel-exploits-put-unpatched-hosts-at-risk-of-local

##

CVE-2026-74469
(8.8 HIGH)

EPSS: 0.47%

updated 2026-08-19T17:21:03.977000

7 posts

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload, then copies one sockaddr_storage for every entry in t

cyberworldops at 2026-09-19T04:30:00.974Z ##

Researcher Asim Manizada released working local root exploits for four Linux kernel flaws: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121 and CVE-2026-74469. Public code lowers exploitation barrier for unpatched hosts, increasing post-compromise privilege escalation risk. #LinuxSecurity #PrivilegeEscalation #KernelSecurity

##

sayzard@mastodon.sayzard.org at 2026-09-18T14:40:50.000Z ##

A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, DiagSpill

Linux 커널에서 일반 로컬 사용자를 root로 승격할 수 있는 4개 취약점 DirtyAH6(CVE-2026-80844), TUNderflow(CVE-2026-81000), PPPoEject(CVE-2026-68121), DiagSpill(CVE-2026-74469)가 공개됐다. 취약점들은 네트워크 서브시스템의 오래된 메모리 손상 문제이며, DiagSpill은 별도 capability나 비특권 사용자 네임스페이스 없이도 조건 충족 시 LPE가 가능하고 컨테이너 호스트 탈출 가능성도 있다. 수정은 Linux stable 5.10.270,...

https://www.openwall.com/lists/oss-security/2026/09/18/3

##

decio at 2026-09-18T08:13:07.228Z ##

Ouep, vendredi vuln assisté is back : le kernel Linux, toujours la cible préférée du branding CVE 🐧

DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121) et DiagSpill (CVE-2026-74469) permettent, dans les configurations adaptées, à un utilisateur local non privilégié d'obtenir root.
Bugs présents dans le kernel depuis 10 à 21 ans.

Risque pas uniforme : les trois premières nécessitent des user namespaces non privilégiés + des fonctionnalités réseau particulières (AH6/XFRM, TUN/TAP, PPPoE).
DiagSpill est directement accessible sans capability, MAIS nécessite SCTP + sctp_diag.

Pas de RCE distante générique, mais nuance à connaître pour les passerelles : DirtyAH6 peut causer un DoS distant sur un routeur IPv6 faisant de l'AH en mode transport (root distant obtenu en labo par l'auteur, via grooming côté cible--> jugé "extrêmement difficile").
DiagSpill a aussi un vecteur DoS distant si ASCONF/ADD-IP + SCTP-AUTH (ou addip_noauth_enable=1) sont actifs-->désactivés par défaut.

➡️ À surveiller en priorité : systèmes multi-utilisateurs, conteneurs, hôtes TUN/TAP, PPPoE, XFRM/AH6 ou SCTP.

🔎 Analyse complète
👇
https://heyitsas.im/posts/lpe-quartet/

:debian:
👇
DirtyAH6 corrigé sur Bookworm-security, encore vulnérable sur Trixie.

TUNderflow corrigée uniquement dans sid

PPPoEject et DiagSpill corrigés sur Bookworm-security et Trixie.
⬇️

DirtyAH6 — CVE-2026-80844

Debian Security Tracker
TUNderflow — CVE-2026-81000

Debian Security Tracker
PPPoEject — CVE-2026-68121

Debian Security Tracker
DiagSpill — CVE-2026-74469

Debian Security Tracker

PoCs 👀
👇
DirtyAH6 — CVE-2026-80844 : https://github.com/manizada/DirtyAH6
TUNderflow — CVE-2026-81000 : https://github.com/manizada/TUNderflow
PPPoEject — CVE-2026-68121 : https://github.com/manizada/PPPoEject
DiagSpill — CVE-2026-74469 : https://github.com/manizada/DiagSpill

https://www.openwall.com/lists/oss-security/2026/09/18/3
https://heyitsas.im/posts/lpe-quartet/

##

harrysintonen at 2026-09-18T06:48:39.896Z ##

It's Friday, and we have 4 more local privilege escalation vulnerabilities disclosed for the Linux kernel:

- DirtyAH6 (CVE-2026-80844)
- TUNderflow (CVE-2026-81000)
- PPPoEject (CVE-2026-68121)
- DiagSpill (CVE-2026-74469)

"The underlying bugs have been around for 10-21 years. The first three LPEs require either unprivileged user namespaces or specific CAPs; DiagSpill does not."

#CVE_2026_80844 #CVE_2026_81000 #CVE_2026_68121 #CVE_2026_74469

##

cyberworldops@infosec.exchange at 2026-09-19T04:30:00.000Z ##

Researcher Asim Manizada released working local root exploits for four Linux kernel flaws: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121 and CVE-2026-74469. Public code lowers exploitation barrier for unpatched hosts, increasing post-compromise privilege escalation risk. #LinuxSecurity #PrivilegeEscalation #KernelSecurity

https://cyberworldops.eu/en/four-public-linux-kernel-exploits-put-unpatched-hosts-at-risk-of-local

##

decio@infosec.exchange at 2026-09-18T08:13:07.000Z ##

Ouep, vendredi vuln assisté is back : le kernel Linux, toujours la cible préférée du branding CVE 🐧

DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121) et DiagSpill (CVE-2026-74469) permettent, dans les configurations adaptées, à un utilisateur local non privilégié d'obtenir root.
Bugs présents dans le kernel depuis 10 à 21 ans.

Risque pas uniforme : les trois premières nécessitent des user namespaces non privilégiés + des fonctionnalités réseau particulières (AH6/XFRM, TUN/TAP, PPPoE).
DiagSpill est directement accessible sans capability, MAIS nécessite SCTP + sctp_diag.

Pas de RCE distante générique, mais nuance à connaître pour les passerelles : DirtyAH6 peut causer un DoS distant sur un routeur IPv6 faisant de l'AH en mode transport (root distant obtenu en labo par l'auteur, via grooming côté cible--> jugé "extrêmement difficile").
DiagSpill a aussi un vecteur DoS distant si ASCONF/ADD-IP + SCTP-AUTH (ou addip_noauth_enable=1) sont actifs-->désactivés par défaut.

➡️ À surveiller en priorité : systèmes multi-utilisateurs, conteneurs, hôtes TUN/TAP, PPPoE, XFRM/AH6 ou SCTP.

🔎 Analyse complète
👇
https://heyitsas.im/posts/lpe-quartet/

:debian:
👇
DirtyAH6 corrigé sur Bookworm-security, encore vulnérable sur Trixie.

TUNderflow corrigée uniquement dans sid

PPPoEject et DiagSpill corrigés sur Bookworm-security et Trixie.
⬇️

DirtyAH6 — CVE-2026-80844

Debian Security Tracker
TUNderflow — CVE-2026-81000

Debian Security Tracker
PPPoEject — CVE-2026-68121

Debian Security Tracker
DiagSpill — CVE-2026-74469

Debian Security Tracker

PoCs 👀
👇
DirtyAH6 — CVE-2026-80844 : https://github.com/manizada/DirtyAH6
TUNderflow — CVE-2026-81000 : https://github.com/manizada/TUNderflow
PPPoEject — CVE-2026-68121 : https://github.com/manizada/PPPoEject
DiagSpill — CVE-2026-74469 : https://github.com/manizada/DiagSpill

https://www.openwall.com/lists/oss-security/2026/09/18/3
https://heyitsas.im/posts/lpe-quartet/

##

harrysintonen@infosec.exchange at 2026-09-18T06:48:39.000Z ##

It's Friday, and we have 4 more local privilege escalation vulnerabilities disclosed for the Linux kernel:

- DirtyAH6 (CVE-2026-80844)
- TUNderflow (CVE-2026-81000)
- PPPoEject (CVE-2026-68121)
- DiagSpill (CVE-2026-74469)

"The underlying bugs have been around for 10-21 years. The first three LPEs require either unprivileged user namespaces or specific CAPs; DiagSpill does not."

#CVE_2026_80844 #CVE_2026_81000 #CVE_2026_68121 #CVE_2026_74469

##

CVE-2026-68121
(7.8 HIGH)

EPSS: 0.14%

updated 2026-08-19T17:20:29.553000

7 posts

In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to the PPPoE header before calling dev_hard_header(). Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This can happen when a send is blocked in copy_from_user() while the first non-Ethernet port is

cyberworldops at 2026-09-19T04:30:00.974Z ##

Researcher Asim Manizada released working local root exploits for four Linux kernel flaws: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121 and CVE-2026-74469. Public code lowers exploitation barrier for unpatched hosts, increasing post-compromise privilege escalation risk. #LinuxSecurity #PrivilegeEscalation #KernelSecurity

https://cyberworldops.eu/en/four-public-linux-kernel-exploits-put-unpatched-hosts-at-risk-of-local

##

sayzard@mastodon.sayzard.org at 2026-09-18T14:40:50.000Z ##

A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, DiagSpill

Linux 커널에서 일반 로컬 사용자를 root로 승격할 수 있는 4개 취약점 DirtyAH6(CVE-2026-80844), TUNderflow(CVE-2026-81000), PPPoEject(CVE-2026-68121), DiagSpill(CVE-2026-74469)가 공개됐다. 취약점들은 네트워크 서브시스템의 오래된 메모리 손상 문제이며, DiagSpill은 별도 capability나 비특권 사용자 네임스페이스 없이도 조건 충족 시 LPE가 가능하고 컨테이너 호스트 탈출 가능성도 있다. 수정은 Linux stable 5.10.270,...

https://www.openwall.com/lists/oss-security/2026/09/18/3

##

decio at 2026-09-18T08:13:07.228Z ##

Ouep, vendredi vuln assisté is back : le kernel Linux, toujours la cible préférée du branding CVE 🐧

DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121) et DiagSpill (CVE-2026-74469) permettent, dans les configurations adaptées, à un utilisateur local non privilégié d'obtenir root.
Bugs présents dans le kernel depuis 10 à 21 ans.

Risque pas uniforme : les trois premières nécessitent des user namespaces non privilégiés + des fonctionnalités réseau particulières (AH6/XFRM, TUN/TAP, PPPoE).
DiagSpill est directement accessible sans capability, MAIS nécessite SCTP + sctp_diag.

Pas de RCE distante générique, mais nuance à connaître pour les passerelles : DirtyAH6 peut causer un DoS distant sur un routeur IPv6 faisant de l'AH en mode transport (root distant obtenu en labo par l'auteur, via grooming côté cible--> jugé "extrêmement difficile").
DiagSpill a aussi un vecteur DoS distant si ASCONF/ADD-IP + SCTP-AUTH (ou addip_noauth_enable=1) sont actifs-->désactivés par défaut.

➡️ À surveiller en priorité : systèmes multi-utilisateurs, conteneurs, hôtes TUN/TAP, PPPoE, XFRM/AH6 ou SCTP.

🔎 Analyse complète
👇
https://heyitsas.im/posts/lpe-quartet/

:debian:
👇
DirtyAH6 corrigé sur Bookworm-security, encore vulnérable sur Trixie.

TUNderflow corrigée uniquement dans sid

PPPoEject et DiagSpill corrigés sur Bookworm-security et Trixie.
⬇️

DirtyAH6 — CVE-2026-80844

Debian Security Tracker
TUNderflow — CVE-2026-81000

Debian Security Tracker
PPPoEject — CVE-2026-68121

Debian Security Tracker
DiagSpill — CVE-2026-74469

Debian Security Tracker

PoCs 👀
👇
DirtyAH6 — CVE-2026-80844 : https://github.com/manizada/DirtyAH6
TUNderflow — CVE-2026-81000 : https://github.com/manizada/TUNderflow
PPPoEject — CVE-2026-68121 : https://github.com/manizada/PPPoEject
DiagSpill — CVE-2026-74469 : https://github.com/manizada/DiagSpill

https://www.openwall.com/lists/oss-security/2026/09/18/3
https://heyitsas.im/posts/lpe-quartet/

##

harrysintonen at 2026-09-18T06:48:39.896Z ##

It's Friday, and we have 4 more local privilege escalation vulnerabilities disclosed for the Linux kernel:

- DirtyAH6 (CVE-2026-80844)
- TUNderflow (CVE-2026-81000)
- PPPoEject (CVE-2026-68121)
- DiagSpill (CVE-2026-74469)

"The underlying bugs have been around for 10-21 years. The first three LPEs require either unprivileged user namespaces or specific CAPs; DiagSpill does not."

#CVE_2026_80844 #CVE_2026_81000 #CVE_2026_68121 #CVE_2026_74469

##

cyberworldops@infosec.exchange at 2026-09-19T04:30:00.000Z ##

Researcher Asim Manizada released working local root exploits for four Linux kernel flaws: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121 and CVE-2026-74469. Public code lowers exploitation barrier for unpatched hosts, increasing post-compromise privilege escalation risk. #LinuxSecurity #PrivilegeEscalation #KernelSecurity

https://cyberworldops.eu/en/four-public-linux-kernel-exploits-put-unpatched-hosts-at-risk-of-local

##

decio@infosec.exchange at 2026-09-18T08:13:07.000Z ##

Ouep, vendredi vuln assisté is back : le kernel Linux, toujours la cible préférée du branding CVE 🐧

DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121) et DiagSpill (CVE-2026-74469) permettent, dans les configurations adaptées, à un utilisateur local non privilégié d'obtenir root.
Bugs présents dans le kernel depuis 10 à 21 ans.

Risque pas uniforme : les trois premières nécessitent des user namespaces non privilégiés + des fonctionnalités réseau particulières (AH6/XFRM, TUN/TAP, PPPoE).
DiagSpill est directement accessible sans capability, MAIS nécessite SCTP + sctp_diag.

Pas de RCE distante générique, mais nuance à connaître pour les passerelles : DirtyAH6 peut causer un DoS distant sur un routeur IPv6 faisant de l'AH en mode transport (root distant obtenu en labo par l'auteur, via grooming côté cible--> jugé "extrêmement difficile").
DiagSpill a aussi un vecteur DoS distant si ASCONF/ADD-IP + SCTP-AUTH (ou addip_noauth_enable=1) sont actifs-->désactivés par défaut.

➡️ À surveiller en priorité : systèmes multi-utilisateurs, conteneurs, hôtes TUN/TAP, PPPoE, XFRM/AH6 ou SCTP.

🔎 Analyse complète
👇
https://heyitsas.im/posts/lpe-quartet/

:debian:
👇
DirtyAH6 corrigé sur Bookworm-security, encore vulnérable sur Trixie.

TUNderflow corrigée uniquement dans sid

PPPoEject et DiagSpill corrigés sur Bookworm-security et Trixie.
⬇️

DirtyAH6 — CVE-2026-80844

Debian Security Tracker
TUNderflow — CVE-2026-81000

Debian Security Tracker
PPPoEject — CVE-2026-68121

Debian Security Tracker
DiagSpill — CVE-2026-74469

Debian Security Tracker

PoCs 👀
👇
DirtyAH6 — CVE-2026-80844 : https://github.com/manizada/DirtyAH6
TUNderflow — CVE-2026-81000 : https://github.com/manizada/TUNderflow
PPPoEject — CVE-2026-68121 : https://github.com/manizada/PPPoEject
DiagSpill — CVE-2026-74469 : https://github.com/manizada/DiagSpill

https://www.openwall.com/lists/oss-security/2026/09/18/3
https://heyitsas.im/posts/lpe-quartet/

##

harrysintonen@infosec.exchange at 2026-09-18T06:48:39.000Z ##

It's Friday, and we have 4 more local privilege escalation vulnerabilities disclosed for the Linux kernel:

- DirtyAH6 (CVE-2026-80844)
- TUNderflow (CVE-2026-81000)
- PPPoEject (CVE-2026-68121)
- DiagSpill (CVE-2026-74469)

"The underlying bugs have been around for 10-21 years. The first three LPEs require either unprivileged user namespaces or specific CAPs; DiagSpill does not."

#CVE_2026_80844 #CVE_2026_81000 #CVE_2026_68121 #CVE_2026_74469

##

CVE-2026-59310
(9.8 CRITICAL)

EPSS: 49.68%

updated 2026-08-18T18:32:52

3 posts

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

2 repos

https://github.com/BiuTrap/CVE-2026-59310

https://github.com/HORKimhab/CVE-2026-59310

CapTechGroup@mastodon.social at 2026-09-18T12:48:49.000Z ##

Oracle's quarterly release fixed 800+ flaws, none flagged as exploited. Meanwhile CVE-2026-59310, an unauthenticated directory traversal in the VMware vCenter Syslog server patched in July, is now in ransomware hands after...

https://captechgroup.com/threat-intelligence-center/threatsday-tracks-800-patched-flaws-insider-sim-sw-e26a77?utm_source=mastodon&utm_medium=social&utm_campaign=threat_intel&utm_content=threatsday-tracks-800-patched-flaws-insider-sim-swaps-and-insomnia-rat

##

DailyCyberSecurity at 2026-09-17T14:01:28.726Z ##

Discover how ransomware gangs actively exploit the critical VMware vCenter flaw, CVE-2026-59310. Learn about the swift weaponization and severe infrastructure risks.

#VMware #vCenter #CVE202659310 #Ransomware #CyberSecurity

https://meterpreter.org/vmware-vcenter-flaw-cve-2026-59310/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-09-17T14:01:28.000Z ##

Discover how ransomware gangs actively exploit the critical VMware vCenter flaw, CVE-2026-59310. Learn about the swift weaponization and severe infrastructure risks.

#VMware #vCenter #CVE202659310 #Ransomware #CyberSecurity

https://meterpreter.org/vmware-vcenter-flaw-cve-2026-59310/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-19487
(5.3 MEDIUM)

EPSS: 0.42%

updated 2026-08-13T21:37:11

1 posts

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear

ottoto2017@prattohome.com at 2026-09-17T00:13:30.000Z ##

#Ubuntu 24.04.5 で #update 。

aom (3.8.2-2ubuntu0.2)
CVE-2026-56208, CVE-2026-56209, CVE-2026-56210, CVE-2026-56211へのセキュリティ対応。
ibaom3

perl (5.38.2-3.2ubuntu0.6)
CVE-2026-15534、CVE-2026-19487へのセキュリティ対応。
libperl5.38t64
perl-base
perl-modules-5.38

sqlite3 (3.45.1-1ubuntu2.8)
CVE-2026-39113へのセキュリティ対応。
libsqlite3-0

セキュリティ対応なのでお早めに。

https://github.com/HORKimhab/CVE-2026-5430

##

CVE-2026-5430
(10.0 CRITICAL)

EPSS: 0.32%

updated 2026-08-06T09:30:40

1 posts

The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthorized access. Successful exploitation of this vulnerability may result in unauthorized access to the system, including the potential compromise of adm

1 repos

beyondmachines1@infosec.exchange at 2026-09-17T09:01:13.000Z ##

WSO2 Warns of Active Exploitation Targeting Critical Authentication Bypass

WSO2 is warning of active exploitation of a critical authentication bypass vulnerability (CVE-2026-5430) that allows attackers to take over administrative accounts and steal sensitive API credentials. The flaw affects multiple middleware products and has been targeted in the wild since mid-September 2026.

**If you run WSO2 API Manager, API Control Plane, Traffic Manager, or Universal Gateway, check for affected versions and patch immediately to the latest update level from WSO2. If you are using open source version apply the public GitHub fix. Attackers are already using forged tokens to gain full admin access.
After patching, assume your secrets were exposed and rotate all API keys, backend credentials, consumer keys, and application secrets, and check your logs for suspicious access since September 13, 2026.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/wso2-warns-of-active-exploitation-targeting-critical-authentication-bypass-6-5-6-k-k/gD2P6Ple2L

##

CVE-2026-7646
(6.5 MEDIUM)

EPSS: 0.30%

updated 2026-08-05T18:31:49

2 posts

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP `resources/read` request with a URL-encoded path traversal sequence in the filename.

5 repos

https://github.com/S3v3n-JG/CVE-2026-76461

https://github.com/fevar54/CVE-2026-76461-Detection-Kit-

https://github.com/S3v3n-JG/CVE-2026-76460

https://github.com/HORKimhab/CVE-2026-76461

https://github.com/0xBlackash/CVE-2026-76461

hackmag at 2026-09-18T15:36:29.481Z ##

⚪️ Cisco Secure Email Gateway Appliances Can Be Hacked with a Malicious Email

🗨️ Cisco researchers have fixed a critical vulnerability in Secure Email Gateway, a gateway designed to protect email from malicious messages. Ironically, to compromise the gateway itself, an attacker only had to send a specially crafted email through it. The vulnerability…

🔗 https://hackmag.com/news/cve-2026-76461?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

🔗 https://hackmag.com/news/cve-2026-76461?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

##

hackmag@infosec.exchange at 2026-09-18T15:36:29.000Z ##

⚪️ Cisco Secure Email Gateway Appliances Can Be Hacked with a Malicious Email

🗨️ Cisco researchers have fixed a critical vulnerability in Secure Email Gateway, a gateway designed to protect email from malicious messages. Ironically, to compromise the gateway itself, an attacker only had to send a specially crafted email through it. The vulnerability…

https://cyberworldops.eu/en/mitsubishi-protocol-flaw-exposes-industrial-control-traffic-to-on

##

CVE-2026-15830
(5.3 MEDIUM)

EPSS: 1.26%

updated 2026-08-04T18:31:31

1 posts

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango's `django.contrib.gis.geos.GEOSGeometry` is subject to a potential denial-of-service when parsing deeply nested `GEOMETRYCOLLECTION` objects supplied as well-known text (WKT), well-known binary (WKB), or hex-encoded WKB, which triggers unbounded recursion and a segmentation fault in the underlying GEOS library. Spa

djangonews@mastodon.social at 2026-09-16T20:00:11.000Z ##

[Django Fellow Reports] Django Fellow Report - Jacob

Jacob reviewed six Django pull requests and authored changes covering GEOS 3.10 support removal and expanded WKT depth-check coverage related to CVE-2026-15830.
https://forum.djangoproject.com/t/django-fellow-report-jacob-2026/43851/39

##

CVE-2026-13584(CVSS UNKNOWN)

EPSS: 0.13%

updated 2026-08-04T06:32:37

2 posts

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, Motion Control Board, Block-type remote module, Block-type remote module with safety functions, Analog-Digital converter module, Digital-Ana

cyberworldops at 2026-09-18T02:40:00.943Z ##

Mitsubishi Electric CC-Link IE TSN is affected by CVE-2026-13584, CWE-924 message integrity failure. An adjacent attacker can inject crafted packets under timing conditions to tamper with OT traffic. It matters for ICS integrity and safety assumptions on trusted segments. #IcsSecurity #OtSecurity #MessageIntegrity

##

cyberworldops@infosec.exchange at 2026-09-18T02:40:00.000Z ##

Mitsubishi Electric CC-Link IE TSN is affected by CVE-2026-13584, CWE-924 message integrity failure. An adjacent attacker can inject crafted packets under timing conditions to tamper with OT traffic. It matters for ICS integrity and safety assumptions on trusted segments. #IcsSecurity #OtSecurity #MessageIntegrity

https://cyberworldops.eu/en/mitsubishi-protocol-flaw-exposes-industrial-control-traffic-to-on

##

CVE-2026-45659
(8.8 HIGH)

EPSS: 76.08%

updated 2026-07-01T21:35:53

1 posts

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

2 repos

https://github.com/WismanSec/sharepoint-2026-poc

https://github.com/HORKimhab/CVE-2026-45659

threatcodex@infosec.exchange at 2026-09-16T20:11:22.000Z ##

CVE-2026-45659: SharePoint Authenticated Deserialization RCE
#CVE_2026_45659
https://blog.securelayer7.net/cve-2026-45659-sharepoint-deserialization-rce/

##

CVE-2026-58138
(9.8 CRITICAL)

EPSS: 9.26%

updated 2026-06-30T21:31:51

2 posts

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to authentication. Attackers can exploit unsandboxed GraalVM evaluators configured with HostAccess.ALL or

https://github.com/BiiTts/CVE-2026-58138-Conductor-Unauth-RCE

6 repos

https://github.com/seqra/cve-2026-58138

https://github.com/0xgh057r3c0n/CVE-2026-58138

https://github.com/Procjevt/CVE-2026-58138

https://github.com/0xBlackash/CVE-2026-58138

https://github.com/Ch4120N/CVE-2026-58138

cyberworldops at 2026-09-18T13:10:00.595Z ##

Orkes Conductor 3.21.21 through before 3.30.2 is affected by CVE-2026-58138, an unauthenticated RCE via malicious workflow definitions using inline JS/Python. Exposed APIs allow arbitrary OS command execution with host-level impact. Patch to 3.30.2 and restrict exposure. #OrkesConductor #RemoteCodeExecution #ThreatIntel

https://cyberworldops.eu/en/exposed-orkes-conductor-apis-turn-workflow-scripts-into-root-level

##

cyberworldops@infosec.exchange at 2026-09-18T13:10:00.000Z ##

Orkes Conductor 3.21.21 through before 3.30.2 is affected by CVE-2026-58138, an unauthenticated RCE via malicious workflow definitions using inline JS/Python. Exposed APIs allow arbitrary OS command execution with host-level impact. Patch to 3.30.2 and restrict exposure. #OrkesConductor #RemoteCodeExecution #ThreatIntel

https://cyberworldops.eu/en/exposed-orkes-conductor-apis-turn-workflow-scripts-into-root-level

##

CVE-2026-8024
(9.8 CRITICAL)

EPSS: 0.55%

updated 2026-06-22T17:47:16.070000

1 posts

A remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerability in ibaPDA or ibaDatCoordinator to gain full access to the affected systems.

certvde@infosec.exchange at 2026-09-17T08:41:07.000Z ##

🔄 CSAF advisory updated (version 3.0.0)

VDE-2026-051
iba: Deserialization vulnerability in ibaPDA and ibaDatCoordinator
CVE-2026-8024

Changes: Corrected all CPE numbers and vendor name of all products.

HTML: https://certvde.com/en/advisories/VDE-2026-051
CSAF JSON: https://iba.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-051.json

#OT #Advisory

##

CVE-2026-32746
(9.8 CRITICAL)

EPSS: 23.67%

updated 2026-03-23T15:31:40

3 posts

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full.

8 repos

https://github.com/chosenonehacks/CVE-2026-32746

https://github.com/ekomsSavior/telnet_scan

https://github.com/danindiana/cve-2026-32746-mitigation

https://github.com/MonkeySeC-sys/Kangaroo

https://github.com/duduLiu8787/CVE-2026-32746-Exploit

https://github.com/kaleth4/CVE-2026-32746

https://github.com/watchtowrlabs/watchtowr-vs-telnetd-CVE-2026-32746

https://github.com/jeffaf/cve-2026-32746

hn50@social.lansky.name at 2026-09-17T07:50:07.000Z ##

A 32-year-old bug walks into a Telnet server

Link: https://labs.watchtowr.com/a-32-year-old-bug-walks-into-a-telnet-server-gnu-inetutils-telnetd-cve-2026-32746/
Discussion: https://news.ycombinator.com/item?id=49721291

##

ngate@mastodon.social at 2026-09-17T04:59:21.000Z ##

😂 Oh, look, a bug older than some of you on this site! GNU #inetutils just realized their #Telnet server had a 32-year-old #exploit hiding like a dusty family heirloom. Who knew pre-auth RCE could double as a boomer joke? 🧐🔍
https://labs.watchtowr.com/a-32-year-old-bug-walks-into-a-telnet-server-gnu-inetutils-telnetd-cve-2026-32746/ #bugreport #cybersecurity #humor #technews #HackerNews #ngated

##

h4ckernews@mastodon.social at 2026-09-17T04:59:17.000Z ##

A 32-year-old bug walks into a Telnet server

https://labs.watchtowr.com/a-32-year-old-bug-walks-into-a-telnet-server-gnu-inetutils-telnetd-cve-2026-32746/

Comments: https://news.ycombinator.com/item?id=49721291

#HackerNews #bugfix #cybersecurity #Telnet #server #technology #vulnerabilities #GNU #inetutils

##

CVE-2024-20260
(8.6 HIGH)

EPSS: 0.59%

updated 2024-10-23T18:33:16

1 posts

A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv), formerly Cisco Firepower Threat Defense Virtual, platforms could allow an unauthenticated, remote attacker to cause the virtual devices to run out of system memory, which could cause SSL VPN connection processing to slow down and eve

cR0w@infosec.exchange at 2026-09-16T18:00:58.000Z ##

Nice of Cisco to finally publish CVE-2024-20260 now that we're almost in 3Q2026.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftdvirtual-dos-MuenGnYR

##

CVE-2026-57228
(0 None)

EPSS: 0.00%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-18T23:02:48.000Z ##

🟠 CVE-2026-57228 - High (8.2)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57228/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T23:02:48.000Z ##

🟠 CVE-2026-57228 - High (8.2)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57228/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-63447
(0 None)

EPSS: 0.00%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-18T23:02:21.000Z ##

🟠 CVE-2026-63447 - High (7.5)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.5 until 8.0.6, the FTP parser in src/app-layer-ftp.c can continue allocating transactions after app-layer.protocols.ftp....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63447/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T23:02:21.000Z ##

🟠 CVE-2026-63447 - High (7.5)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.5 until 8.0.6, the FTP parser in src/app-layer-ftp.c can continue allocating transactions after app-layer.protocols.ftp....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63447/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-63446
(0 None)

EPSS: 0.00%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-18T22:03:40.000Z ##

🟠 CVE-2026-63446 - High (7.5)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, AppLayerParserSetTransactionInspectId() in src/app-layer-parser.c uses an inverted guard and marks only a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63446/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T22:03:40.000Z ##

🟠 CVE-2026-63446 - High (7.5)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, AppLayerParserSetTransactionInspectId() in src/app-layer-parser.c uses an inverted guard and marks only a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63446/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-63452
(0 None)

EPSS: 0.00%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-18T22:03:30.000Z ##

🟠 CVE-2026-63452 - High (7.5)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli comp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63452/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T22:03:30.000Z ##

🟠 CVE-2026-63452 - High (7.5)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli comp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63452/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-68928
(0 None)

EPSS: 0.00%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-18T22:03:20.000Z ##

🟠 CVE-2026-68928 - High (8.6)

Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service in src/plugins/terminal/plugin.xml without a binding permission, and src/plugins...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T22:03:20.000Z ##

🟠 CVE-2026-68928 - High (8.6)

Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service in src/plugins/terminal/plugin.xml without a binding permission, and src/plugins...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-71418
(0 None)

EPSS: 0.00%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-18T22:02:15.000Z ##

🟠 CVE-2026-71418 - High (7.5)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, DNS-over-HTTP/2 processing in rust/src/http2/http2.rs retains previously processed HTTP/2 DATA frame cont...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71418/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T22:02:15.000Z ##

🟠 CVE-2026-71418 - High (7.5)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, DNS-over-HTTP/2 processing in rust/src/http2/http2.rs retains previously processed HTTP/2 DATA frame cont...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71418/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-92708
(0 None)

EPSS: 0.00%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-18T21:02:57.000Z ##

🟠 CVE-2026-92708 - High (7.5)

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. In versions 5.1.0 through 5.9.2, stringify and uneval functions serialize a typed array by emitting its entire backing Arr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92708/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-18T21:02:57.000Z ##

🟠 CVE-2026-92708 - High (7.5)

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. In versions 5.1.0 through 5.9.2, stringify and uneval functions serialize a typed array by emitting its entire backing Arr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92708/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-72878
(0 None)

EPSS: 0.27%

2 posts

N/A

DailyCyberSecurity at 2026-09-18T06:14:51.981Z ##

A critical Dokploy OS command injection flaw (CVE-2026-72878) exposes servers to root takeover via backups. Patch this Dokploy OS command injection now.

#Dokploy #CommandInjection #CVE202672878 #Cybersecurity #PaaS

https://securityonline.info/dokploy-os-command-injection/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-09-18T06:14:51.000Z ##

A critical Dokploy OS command injection flaw (CVE-2026-72878) exposes servers to root takeover via backups. Patch this Dokploy OS command injection now.

#Dokploy #CommandInjection #CVE202672878 #Cybersecurity #PaaS

https://securityonline.info/dokploy-os-command-injection/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-54670
(0 None)

EPSS: 0.55%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-17T23:01:30.000Z ##

🔴 CVE-2026-54670 - Critical (9.1)

WeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request dispatcher in web/html/contribuicao/controller/control.php accepts attacker-controlled nomeClasse and metodo values without a complete controller and meth...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54670/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T23:01:30.000Z ##

🔴 CVE-2026-54670 - Critical (9.1)

WeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request dispatcher in web/html/contribuicao/controller/control.php accepts attacker-controlled nomeClasse and metodo values without a complete controller and meth...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54670/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-54734
(0 None)

EPSS: 0.36%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-17T23:00:45.000Z ##

🔴 CVE-2026-54734 - Critical (10)

Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into outbound request URLs without using HttpUtil to validate the resulting domain or path segment. A malicious ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54734/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T23:00:45.000Z ##

🔴 CVE-2026-54734 - Critical (10)

Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into outbound request URLs without using HttpUtil to validate the resulting domain or path segment. A malicious ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54734/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-93426
(0 None)

EPSS: 0.37%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-17T23:00:26.000Z ##

🟠 CVE-2026-93426 - High (8.5)

SigNoz versions 0.87.0 before 0.142.0 fail to escape user-supplied telemetry field-key names in the v5 query_range API, allowing authenticated users to inject SQL. Attackers with Viewer role or higher can embed backticks and quotes in field names ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93426/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T23:00:26.000Z ##

🟠 CVE-2026-93426 - High (8.5)

SigNoz versions 0.87.0 before 0.142.0 fail to escape user-supplied telemetry field-key names in the v5 query_range API, allowing authenticated users to inject SQL. Attackers with Viewer role or higher can embed backticks and quotes in field names ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93426/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-54752
(0 None)

EPSS: 0.35%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-17T21:01:39.000Z ##

🔴 CVE-2026-54752 - Critical (9.6)

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the read_pickle_d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54752/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T21:01:39.000Z ##

🔴 CVE-2026-54752 - Critical (9.6)

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the read_pickle_d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54752/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-54716
(0 None)

EPSS: 0.32%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-17T21:01:30.000Z ##

🟠 CVE-2026-54716 - High (7.5)

Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. In 3.7.0 and earlier, a POST request to /sources_to_targets containing an exclude_polygons ring formed by three collinear points can cause unboun...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54716/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T21:01:30.000Z ##

🟠 CVE-2026-54716 - High (7.5)

Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. In 3.7.0 and earlier, a POST request to /sources_to_targets containing an exclude_polygons ring formed by three collinear points can cause unboun...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54716/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-54627
(0 None)

EPSS: 0.44%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-17T21:00:40.000Z ##

🔴 CVE-2026-54627 - Critical (9.8)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, psd_private_sail_pixel_format() in src/sail-codecs/psd/helpers.c resolves a one-channel PSD in Bitmap col...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54627/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T21:00:40.000Z ##

🔴 CVE-2026-54627 - Critical (9.8)

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, psd_private_sail_pixel_format() in src/sail-codecs/psd/helpers.c resolves a one-channel PSD in Bitmap col...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54627/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-93337
(0 None)

EPSS: 0.15%

2 posts

N/A

thehackerwire@mastodon.social at 2026-09-17T21:00:20.000Z ##

🟠 CVE-2026-93337 - High (7.8)

NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93337/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-17T21:00:20.000Z ##

🟠 CVE-2026-93337 - High (7.8)

NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93337/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-85500
(0 None)

EPSS: 0.55%

2 posts

N/A

offseq at 2026-09-17T13:30:29.257Z ##

CVE-2026-85500: team-alembic ash_authentication (4.3.8 – 4.15.0, 5.0.0-rc.14) suffers a CRITICAL auth bypass — unconfirmed users may gain sessions, defeating email confirmation. Patch urgently. https://radar.offseq.com/threat/cve-2026-85500-cwe-305-authentication-bypass-by-primary-weakness-in-team-alembic-ashauthentication-cb315bb57ae7fd92 #OffSeq #Vuln #CVE202685500 #AshAuthentication

##

offseq@infosec.exchange at 2026-09-17T13:30:29.000Z ##

CVE-2026-85500: team-alembic ash_authentication (4.3.8 – 4.15.0, 5.0.0-rc.14) suffers a CRITICAL auth bypass — unconfirmed users may gain sessions, defeating email confirmation. Patch urgently. https://radar.offseq.com/threat/cve-2026-85500-cwe-305-authentication-bypass-by-primary-weakness-in-team-alembic-ashauthentication-cb315bb57ae7fd92 #OffSeq #Vuln #CVE202685500 #AshAuthentication

##

CVE-2026-59347
(0 None)

EPSS: 0.00%

2 posts

N/A

sekurakbot@mastodon.com.pl at 2026-09-17T13:24:00.000Z ##

VMware łata poważne błędy w Workstation i Fusion. Można wyskoczyć z maszyny wirtualnej i wykonać kod na hoście

Broadcom poinformował o załataniu dwóch poważnych błędów w popularnych produktach VMware Workstation oraz VMware Fusion. W określonych warunkach ich wykorzystanie mogło doprowadzić do ucieczki z maszyny wirtualnej oraz wykonanie kodu bezpośrednio na hoście. TLDR: Podatności otrzymały identyfikatory CVE-2026-59346 (CVSS 9.3) oraz CVE-2026-59347 (CVSS 8.1). Pierwsza z nich to błąd typu...

https://sekurak.pl/vmware-lata-powazne-bledy-w-workstation-i-fusion-mozna-wyskoczyc-z-maszyny-wirtualnej-i-wykonac-kod-na-hoscie/

##

sekurakbot@mastodon.com.pl at 2026-09-17T13:24:00.000Z ##

VMware łata poważne błędy w Workstation i Fusion. Można wyskoczyć z maszyny wirtualnej i wykonać kod na hoście

Broadcom poinformował o załataniu dwóch poważnych błędów w popularnych produktach VMware Workstation oraz VMware Fusion. W określonych warunkach ich wykorzystanie mogło doprowadzić do ucieczki z maszyny wirtualnej oraz wykonanie kodu bezpośrednio na hoście. TLDR: Podatności otrzymały identyfikatory CVE-2026-59346 (CVSS 9.3) oraz CVE-2026-59347 (CVSS 8.1). Pierwsza z nich to błąd typu...

https://sekurak.pl/vmware-lata-powazne-bledy-w-workstation-i-fusion-mozna-wyskoczyc-z-maszyny-wirtualnej-i-wykonac-kod-na-hoscie/

##

CVE-2026-59346
(0 None)

EPSS: 0.00%

2 posts

N/A

1 repos

https://github.com/0xCyberstan/CVE-2026-59346-POC

sekurakbot@mastodon.com.pl at 2026-09-17T13:24:00.000Z ##

VMware łata poważne błędy w Workstation i Fusion. Można wyskoczyć z maszyny wirtualnej i wykonać kod na hoście

Broadcom poinformował o załataniu dwóch poważnych błędów w popularnych produktach VMware Workstation oraz VMware Fusion. W określonych warunkach ich wykorzystanie mogło doprowadzić do ucieczki z maszyny wirtualnej oraz wykonanie kodu bezpośrednio na hoście. TLDR: Podatności otrzymały identyfikatory CVE-2026-59346 (CVSS 9.3) oraz CVE-2026-59347 (CVSS 8.1). Pierwsza z nich to błąd typu...

https://sekurak.pl/vmware-lata-powazne-bledy-w-workstation-i-fusion-mozna-wyskoczyc-z-maszyny-wirtualnej-i-wykonac-kod-na-hoscie/

##

sekurakbot@mastodon.com.pl at 2026-09-17T13:24:00.000Z ##

VMware łata poważne błędy w Workstation i Fusion. Można wyskoczyć z maszyny wirtualnej i wykonać kod na hoście

Broadcom poinformował o załataniu dwóch poważnych błędów w popularnych produktach VMware Workstation oraz VMware Fusion. W określonych warunkach ich wykorzystanie mogło doprowadzić do ucieczki z maszyny wirtualnej oraz wykonanie kodu bezpośrednio na hoście. TLDR: Podatności otrzymały identyfikatory CVE-2026-59346 (CVSS 9.3) oraz CVE-2026-59347 (CVSS 8.1). Pierwsza z nich to błąd typu...