🟠 CVE-2025-69620 - High (7.5)

A path traversal in Moo Chan Song v4.5.7 allows attackers to cause a Denial of Service (DoS) via writing files to the internal storage.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69620/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-69619 - High (7.5)

A path traversal in My Text Editor v1.6.2 allows attackers to cause a Denial of Service (DoS) via writing files to the internal storage.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69619/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-1731: Pre-Auth RCE in BeyondTrust Remote Support & PRA
#BeyondTrust #BeyondTrustSecureRemoteAccess #CVE_2026_1731
https://www.hacktron.ai/blog/cve-2026-1731-beyondtrust-remote-support-rce

A single bug in BeyondTrust’s remote access tools lets hackers break in without a password or any help from users. With thousands of companies at risk, how exposed is your organization?

https://thedefendopsdiaries.com/cve-2026-1731-critical-rce-vulnerability-in-beyondtrust-rspra-threatens-enterprise-security/

BeyondTrust fixes easy-to-exploit pre-auth RCE vulnerability in remote access tools (CVE-2026-1731)

https://www.helpnetsecurity.com/2026/02/09/beyondtrust-remote-access-vulnerability-cve-2026-1731/

#RemoteAccess #PrivilegedAccessManagement #Enterprise #Cybersecurity #CVE

BeyondTrust Zero-Day CVE-2026-1731 Exposes Remote Access Systems to Pre-Auth RCE

Introduction: A Silent Door Into Enterprise Networks BeyondTrust has issued an urgent warning that should immediately capture the attention of enterprise security teams worldwide. A newly disclosed zero-day vulnerability, tracked as CVE-2026-1731, affects core BeyondTrust remote access products used to manage and secure privileged connections. Rated an alarming 9.9 out of 10 on the CVSSv4…

https://undercodenews.com/beyondtrust-zero-day-cve-2026-1731-exposes-remote-access-systems-to-pre-auth-rce/

📈 CVE Published in last 7 days (2026-02-02 - 2026-02-09)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1178

Severity:
- Critical: 93
- High: 363
- Medium: 498
- Low: 65
- None: 159

Status:
- : 9
- Analyzed: 94
- Awaiting Analysis: 636
- Modified: 2
- Received: 139
- Rejected: 20
- Undergoing Analysis: 278

Top CNAs:
- GitHub, Inc.: 225
- VulnCheck: 149
- VulDB: 134
- kernel.org: 79
- Wordfence: 71
- MITRE: 64
- wikimedia-foundation: 47
- Patchstack: 45
- Tanium: 26
- TPLink: 25

Top Affected Products:
- UNKNOWN: 1071
- Samsung Exynos 850 Firmware: 10
- Tp-link Archer Be230 Firmware: 10
- Samsung Exynos 980 Firmware: 10
- Samsung Exynos W920 Firmware: 10
- Samsung Exynos W1000 Firmware: 10
- Samsung Exynos 1080 Firmware: 10
- Samsung Exynos W930 Firmware: 10
- Samsung Exynos 1480 Firmware: 9
- Mediatek Nr15: 9

Top EPSS Score:
- CVE-2026-1802 - 1.28 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1802)
- CVE-2026-1499 - 1.23 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1499)
- CVE-2026-23515 - 0.91 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-23515)
- CVE-2020-37088 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37088)
- CVE-2026-20098 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20098)
- CVE-2020-37086 - 0.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37086)
- CVE-2026-25643 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-25643)
- CVE-2026-1761 - 0.46 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1761)
- CVE-2026-1731 - 0.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1731)
- CVE-2020-37125 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37125)

BeyondTrust Patches Critical Pre-Authentication RCE Vulnerability in Remote Access Products

BeyondTrust reports a critical pre-authentication RCE vulnerability (CVE-2026-1731) in its Remote Support and Privileged Remote Access products, allowing unauthenticated attackers to execute OS commands.

**If you use self-hosted BeyondTrust Remote Support or PRA, this is important. Plan a quick update to the BT26-02 patches. Isolation probably won't work since these systems are designed for remote access. SaaS users are already protected, but self-hosted environments require manual action.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/beyondtrust-patches-critical-pre-authentication-rce-vulnerability-in-remote-access-products-1-5-4-d-s/gD2P6Ple2L

BeyondTrust fixes easy-to-exploit pre-auth RCE vulnerability in remote access tools (CVE-2026-1731)

https://www.helpnetsecurity.com/2026/02/09/beyondtrust-remote-access-vulnerability-cve-2026-1731/

#RemoteAccess #PrivilegedAccessManagement #Enterprise #Cybersecurity #CVE

BeyondTrust Patches Critical Pre-Authentication RCE Vulnerability in Remote Access Products

BeyondTrust reports a critical pre-authentication RCE vulnerability (CVE-2026-1731) in its Remote Support and Privileged Remote Access products, allowing unauthenticated attackers to execute OS commands.

**If you use self-hosted BeyondTrust Remote Support or PRA, this is important. Plan a quick update to the BT26-02 patches. Isolation probably won't work since these systems are designed for remote access. SaaS users are already protected, but self-hosted environments require manual action.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/beyondtrust-patches-critical-pre-authentication-rce-vulnerability-in-remote-access-products-1-5-4-d-s/gD2P6Ple2L

🔴 CVE-2026-25803 - Critical (9.8)

3DP-MANAGER is an inbound generator for 3x-ui. In version 2.0.1 and prior, the application automatically creates an administrative account with known default credentials (admin/admin) upon the first initialization. Attackers with network access to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25803/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25803 - Critical (9.8)

3DP-MANAGER is an inbound generator for 3x-ui. In version 2.0.1 and prior, the application automatically creates an administrative account with known default credentials (admin/admin) upon the first initialization. Attackers with network access to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25803/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25644 - High (7.5)

DataHub is an open-source metadata platform. Prior to version 1.3.1.8, the LDAP ingestion source is vulnerable to MITM attack through TLS downgrade. This issue has been patched in version 1.3.1.8.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25644/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25732 - High (7.5)

NiceGUI is a Python-based UI framework. Prior to 3.7.0, NiceGUI's FileUpload.name property exposes client-supplied filename metadata without sanitization, enabling path traversal when developers use the pattern UPLOAD_DIR / file.name. Malicious fi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25732/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-59023 - High (8.2)

Crafted delegations or IP fragments can poison cached delegations in Recursor.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-59023/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-59023 - High (8.2)

Crafted delegations or IP fragments can poison cached delegations in Recursor.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-59023/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-10465 - High (8.8)

Unrestricted Upload of File with Dangerous Type vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Sensaway allows Upload a Web Shell to a Web Server.This issue affects Sensaway: through 09022026.

NOTE: The vendor was c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-10465/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-10465 - High (8.8)

Unrestricted Upload of File with Dangerous Type vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Sensaway allows Upload a Web Shell to a Web Server.This issue affects Sensaway: through 09022026.

NOTE: The vendor was c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-10465/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25848 - Critical (9.1)

In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25848/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25848 - Critical (9.1)

In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25848/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2236 - High (7.5)

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2236/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2236 - High (7.5)

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2236/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2236 - High (7.5)

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2236/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2236 - High (7.5)

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2236/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2236 - High (7.5)

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2236/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2236 - High (7.5)

C&Cm@il developed by HGiga has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2236/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CVE-2026-1615: CRITICAL code injection in all jsonpath versions — RCE in Node.js, XSS in browsers. No patch yet. Audit dependencies, block untrusted JSON Path input, monitor for attacks. Details: https://radar.offseq.com/threat/cve-2026-1615-arbitrary-code-injection-in-jsonpath-a64ac077 #OffSeq #Vulnerability #NodeJS #Security

🔴 CVE-2026-1615 - Critical (9.8)

All versions of the package jsonpath are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions. The library relies on the static-eval module to process JSON Path input, which is not designed to handle ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1615/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-1615 - Critical (9.8)

All versions of the package jsonpath are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions. The library relies on the static-eval module to process JSON Path input, which is not designed to handle ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1615/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ HIGH-severity OS command injection (CVE-2026-2210) in D-Link DIR-823X v250416 — remote, unauthenticated code execution possible. Patch firmware or restrict admin access now. European orgs: prioritize response! https://radar.offseq.com/threat/cve-2026-2210-os-command-injection-in-d-link-dir-8-a510703e #OffSeq #Vuln #DLink

🟠 CVE-2026-2186 - High (8.8)

A vulnerability has been found in Tenda RX3 16.03.13.11. Impacted is the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument list leads to stack-based buffer overflow. The attack may be performed from remo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2186/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2186 - High (8.8)

A vulnerability has been found in Tenda RX3 16.03.13.11. Impacted is the function fromSetIpMacBind of the file /goform/SetIpMacBind. Such manipulation of the argument list leads to stack-based buffer overflow. The attack may be performed from remo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2186/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2181 - High (8.8)

A security flaw has been discovered in Tenda RX3 16.03.13.11. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi. Performing a manipulation of the argument schedStartTime/schedEndTime results in stack-base...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2181/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2181 - High (8.8)

A security flaw has been discovered in Tenda RX3 16.03.13.11. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi. Performing a manipulation of the argument schedStartTime/schedEndTime results in stack-base...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2181/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 HIGH severity (CVSS 8.6): CVE-2026-2155 affects D-Link DIR-823X (v250416). Remote OS command injection via /goform/set_dmz — public exploit out! Restrict management access, monitor traffic, patch ASAP. https://radar.offseq.com/threat/cve-2026-2155-os-command-injection-in-d-link-dir-8-3a93a385 #OffSeq #DLink #Vuln #Infosec

🔥 CVE-2026-2143 (HIGH, CVSS 8.6): D-Link DIR-823X v250416 allows OS command injection via DDNS endpoint (/goform/set_ddns). Remote attackers with privileges can fully compromise affected routers. Mitigate now — restrict remote mgmt, monitor traffic. https://radar.offseq.com/threat/cve-2026-2143-os-command-injection-in-d-link-dir-8-43a9e1df #OffSeq #CVE20262143 #DLink #infosec

🛡️ HIGH severity OS command injection (CVE-2026-2143) in D-Link DIR-823X (fw 250416): Exploitable via /goform/set_ddns by privileged users. No patch yet — disable remote management, monitor traffic, and check for updates. https://radar.offseq.com/threat/cve-2026-2143-os-command-injection-in-d-link-dir-8-43a9e1df #OffSeq #DLink #Security

🟠 CVE-2026-2139 - High (8.8)

A vulnerability was determined in Tenda TX9 up to 22.03.02.10_multi. Affected by this vulnerability is the function sub_432580 of the file /goform/fast_setting_wifi_set. This manipulation of the argument ssid causes buffer overflow. The attack may...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2139/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2139 - High (8.8)

A vulnerability was determined in Tenda TX9 up to 22.03.02.10_multi. Affected by this vulnerability is the function sub_432580 of the file /goform/fast_setting_wifi_set. This manipulation of the argument ssid causes buffer overflow. The attack may...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2139/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2138 - High (8.8)

A vulnerability was found in Tenda TX9 up to 22.03.02.10_multi. Affected is the function sub_42D03C of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2138/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2138 - High (8.8)

A vulnerability was found in Tenda TX9 up to 22.03.02.10_multi. Affected is the function sub_42D03C of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2138/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CVE-2026-25857: HIGH-severity OS command injection in Tenda G300-F routers (≤16.01.14.2). No patch yet — exposure of management interface risks full device compromise. Restrict access, monitor WAN diagnostics. Details: https://radar.offseq.com/threat/cve-2026-25857-cwe-78-improper-neutralization-of-s-97d5f696 #OffSeq #Infosec #Vuln

🛡️ CVE-2026-2120: HIGH severity OS command injection in D-Link DIR-823X (v250416) via /goform/set_server_settings. Remote, unauthenticated — public exploit released. Patch or restrict access immediately. https://radar.offseq.com/threat/cve-2026-2120-os-command-injection-in-d-link-dir-8-eb87b902 #OffSeq #DLink #Vuln #CVE20262120

🔴 CVE-2026-25722 - Critical (9.1)

Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By using the cd command to navigate into sensitive directories like...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25722/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25722 - Critical (9.1)

Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By using the cd command to navigate into sensitive directories like...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25722/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25724 - High (7.5)

Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file (suc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25724/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25724 - High (7.5)

Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file (suc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25724/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25725 - Critical (10)

Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to properly protect the .claude/settings.json configuration file when it did not exist at startup. While the parent directory was m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25725/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25725 - Critical (10)

Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to properly protect the .claude/settings.json configuration file when it did not exist at startup. While the parent directory was m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25725/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-6830 - Critical (9.8)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpoda Türkiye Information Technology Inc. Xpoda Studio allows SQL Injection.This issue affects Xpoda Studio: through 09022026. NOTE: The vendor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-6830/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-6830 - Critical (9.8)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpoda Türkiye Information Technology Inc. Xpoda Studio allows SQL Injection.This issue affects Xpoda Studio: through 09022026. NOTE: The vendor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-6830/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25847 - High (8.2)

In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25847/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25847 - High (8.2)

In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25847/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-1709 - Critical (9.4)

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to pe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1709/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last 7 days (2026-02-02 - 2026-02-09)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1178

Severity:
- Critical: 93
- High: 363
- Medium: 498
- Low: 65
- None: 159

Status:
- : 9
- Analyzed: 94
- Awaiting Analysis: 636
- Modified: 2
- Received: 139
- Rejected: 20
- Undergoing Analysis: 278

Top CNAs:
- GitHub, Inc.: 225
- VulnCheck: 149
- VulDB: 134
- kernel.org: 79
- Wordfence: 71
- MITRE: 64
- wikimedia-foundation: 47
- Patchstack: 45
- Tanium: 26
- TPLink: 25

Top Affected Products:
- UNKNOWN: 1071
- Samsung Exynos 850 Firmware: 10
- Tp-link Archer Be230 Firmware: 10
- Samsung Exynos 980 Firmware: 10
- Samsung Exynos W920 Firmware: 10
- Samsung Exynos W1000 Firmware: 10
- Samsung Exynos 1080 Firmware: 10
- Samsung Exynos W930 Firmware: 10
- Samsung Exynos 1480 Firmware: 9
- Mediatek Nr15: 9

Top EPSS Score:
- CVE-2026-1802 - 1.28 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1802)
- CVE-2026-1499 - 1.23 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1499)
- CVE-2026-23515 - 0.91 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-23515)
- CVE-2020-37088 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37088)
- CVE-2026-20098 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20098)
- CVE-2020-37086 - 0.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37086)
- CVE-2026-25643 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-25643)
- CVE-2026-1761 - 0.46 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1761)
- CVE-2026-1731 - 0.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1731)
- CVE-2020-37125 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37125)

🚨 CVE-2026-22904 (CRITICAL, CVSS 9.8): WAGO 0852-1322 vulnerable to stack-based buffer overflow via oversized HTTP cookies. RCE & DoS possible. Isolate devices, monitor traffic, deploy WAF/IPS. No patch yet. https://radar.offseq.com/threat/cve-2026-22904-cwe-121-stack-based-buffer-overflow-f7b2d93e #OffSeq #ICS #Vuln

🔴 CVE-2026-22904 - Critical (9.8)

Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attacker to send oversized cookie values and trigger a stack buffer overflow, resulting in a denial‑of‑service condition and poss...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22904/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2026-004
WAGO: Vulnerabilities in Managed Switch

Several vulnerabilities have been identified in the WAGO 852‑1328 device's web‑based management interface, which is implemented using a modified lighttpd server and custom CGI binaries. These issues include multiple stack buffer overflows, an authentication bypass, and insecure credential storage.
#CVE CVE-2026-22906, CVE-2026-22904, CVE-2026-22903, CVE-2026-22905

https://certvde.com/en/advisories/vde-2026-004/

#CSAF https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-004.json

🔴 CVE-2026-22904 - Critical (9.8)

Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote attacker to send oversized cookie values and trigger a stack buffer overflow, resulting in a denial‑of‑service condition and poss...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22904/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-7799 - High (8.6)

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. E-Taxpayer Accounting Website allows Reflected XSS.This issue affects e-Taxpayer Accounting Website: t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-7799/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-7799 - High (8.6)

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. E-Taxpayer Accounting Website allows Reflected XSS.This issue affects e-Taxpayer Accounting Website: t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-7799/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-2234 - Critical (9.1)

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2234/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-2234 - Critical (9.1)

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2234/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-2234 - Critical (9.1)

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2234/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-2234 - Critical (9.1)

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2234/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-2234 - Critical (9.1)

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2234/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-2234 - Critical (9.1)

C&Cm@il developed by HGiga has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read and modify any user's mail content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2234/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-22903 - Critical (9.8)

An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie. This can trigger a stack buffer overflow in the modified lighttpd server, causing it to crash and potentially enabling remote code execu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22903/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2026-004
WAGO: Vulnerabilities in Managed Switch

Several vulnerabilities have been identified in the WAGO 852‑1328 device's web‑based management interface, which is implemented using a modified lighttpd server and custom CGI binaries. These issues include multiple stack buffer overflows, an authentication bypass, and insecure credential storage.
#CVE CVE-2026-22906, CVE-2026-22904, CVE-2026-22903, CVE-2026-22905

https://certvde.com/en/advisories/vde-2026-004/

#CSAF https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-004.json

🔴 CVE-2026-22903 - Critical (9.8)

An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie. This can trigger a stack buffer overflow in the modified lighttpd server, causing it to crash and potentially enabling remote code execu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22903/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CRITICAL: CVE-2026-1868 in GitLab AI Gateway (18.1.6 – 18.8.0) allows remote code execution or DoS via Duo Workflow Service. Patch to 18.6.2, 18.7.1, or 18.8.1. Restrict workflow access & monitor for abuse! https://radar.offseq.com/threat/cve-2026-1868-cwe-1336-improper-neutralization-of--f5bf4abe #OffSeq #GitLab #Vuln #CVE20261868

🔴 CVE-2026-1868 - Critical (9.9)

GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions of the AI Gateway from 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0, and 18.8.0 in which AI Gateway was vulnerable to insecure temp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1868/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-1868 - Critical (9.9)

GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions of the AI Gateway from 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0, and 18.8.0 in which AI Gateway was vulnerable to insecure temp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1868/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CVE-2026-22906 (CRITICAL, CVSS 9.8): WAGO 0852-1322 uses a hardcoded AES key, letting unauthenticated attackers decrypt credentials from config files. No patch yet. Restrict access, segment networks, monitor closely! https://radar.offseq.com/threat/cve-2026-22906-cwe-321-use-of-hard-coded-cryptogra-e9045210 #OffSeq #ICS #OTSecurity

🔴 CVE-2026-22906 - Critical (9.8)

User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentic...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22906/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2026-004
WAGO: Vulnerabilities in Managed Switch

Several vulnerabilities have been identified in the WAGO 852‑1328 device's web‑based management interface, which is implemented using a modified lighttpd server and custom CGI binaries. These issues include multiple stack buffer overflows, an authentication bypass, and insecure credential storage.
#CVE CVE-2026-22906, CVE-2026-22904, CVE-2026-22903, CVE-2026-22905

https://certvde.com/en/advisories/vde-2026-004/

#CSAF https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-004.json

🔴 CVE-2026-22906 - Critical (9.8)

User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentic...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22906/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22905 - High (7.5)

An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences (e.g., /js/../cgi-bin/post.cgi), gaining unauthorized access to protected CGI endpoints and configuration dow...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22905/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22905 - High (7.5)

An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences (e.g., /js/../cgi-bin/post.cgi), gaining unauthorized access to protected CGI endpoints and configuration dow...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22905/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2026-004
WAGO: Vulnerabilities in Managed Switch

Several vulnerabilities have been identified in the WAGO 852‑1328 device's web‑based management interface, which is implemented using a modified lighttpd server and custom CGI binaries. These issues include multiple stack buffer overflows, an authentication bypass, and insecure credential storage.
#CVE CVE-2026-22906, CVE-2026-22904, CVE-2026-22903, CVE-2026-22905

https://certvde.com/en/advisories/vde-2026-004/

#CSAF https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-004.json

🟠 CVE-2026-22905 - High (7.5)

An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences (e.g., /js/../cgi-bin/post.cgi), gaining unauthorized access to protected CGI endpoints and configuration dow...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22905/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-22905 - High (7.5)

An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences (e.g., /js/../cgi-bin/post.cgi), gaining unauthorized access to protected CGI endpoints and configuration dow...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22905/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0870 - High (7.8)

MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing authenticated local attackers to execute arbitrary code with SYSTEM p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0870/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0870 - High (7.8)

MacroHub developed by GIGABYTE has a Local Privilege Escalation vulnerability. Due to the MacroHub application launching external applications with improper privileges, allowing authenticated local attackers to execute arbitrary code with SYSTEM p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0870/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CVE-2026-2203 (HIGH, CVSS 8.7): Tenda AC8 (16.03.33.05) buffer overflow in /goform/fast_setting_wifi_set lets remote attackers execute code w/o auth. Public exploit exists — update firmware, segment networks, monitor HTTP! https://radar.offseq.com/threat/cve-2026-2203-buffer-overflow-in-tenda-ac8-23b5fa92 #OffSeq #Vuln #Router

🟠 CVE-2026-2203 - High (8.8)

A flaw has been found in Tenda AC8 16.03.33.05. Affected by this vulnerability is an unknown functionality of the file /goform/fast_setting_wifi_set of the component Embedded Httpd Service. This manipulation of the argument timeZone causes buffer ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2203/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2203 - High (8.8)

A flaw has been found in Tenda AC8 16.03.33.05. Affected by this vulnerability is an unknown functionality of the file /goform/fast_setting_wifi_set of the component Embedded Httpd Service. This manipulation of the argument timeZone causes buffer ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2203/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔥 HIGH-severity: CVE-2026-2191 in Tenda AC9 (v15.03.06.42_multi) enables remote, unauthenticated code execution via stack overflow. Public exploit out — segment networks & disable remote admin. No patch yet. https://radar.offseq.com/threat/cve-2026-2191-stack-based-buffer-overflow-in-tenda-65760e1b #OffSeq #CVE20262191 #netsec #routers

🚩 CVE-2026-2192 (HIGH): Stack-based buffer overflow in Tenda AC9 (15.03.06.42_multi). Remote, privileged attackers can fully compromise routers. Disable remote mgmt, restrict admin access, and monitor for patches. More: https://radar.offseq.com/threat/cve-2026-2192-stack-based-buffer-overflow-in-tenda-017bd58d #OffSeq #CVE #RouterSecurity

🟠 CVE-2026-2180 - High (8.8)

A vulnerability was identified in Tenda RX3 16.03.13.11. Affected is an unknown function of the file /goform/fast_setting_wifi_set. Such manipulation of the argument ssid_5g leads to stack-based buffer overflow. The attack can be launched remotely...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2180/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2180 - High (8.8)

A vulnerability was identified in Tenda RX3 16.03.13.11. Affected is an unknown function of the file /goform/fast_setting_wifi_set. Such manipulation of the argument ssid_5g leads to stack-based buffer overflow. The attack can be launched remotely...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2180/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CVE-2026-2157: HIGH severity OS command injection in D-Link DIR-823X (fw 250416) via /goform/set_static_route_table. Remote, no auth needed. Update firmware, segment networks, and restrict access! https://radar.offseq.com/threat/cve-2026-2157-os-command-injection-in-d-link-dir-8-f7732c6f #OffSeq #DLink #Vuln #Cybersecurity

🔥 CVE-2026-2152: HIGH-severity OS command injection in D-Link DIR-615 (v4.10, adv_routing.php). Remote, unauthenticated RCE possible; public exploits out. No patch — replace or isolate now! https://radar.offseq.com/threat/cve-2026-2152-os-command-injection-in-d-link-dir-6-1ad93e00 #OffSeq #Vulnerability #RouterSecurity #CVE20262152

⚠️ CVE-2026-2151: HIGH severity OS command injection in D-Link DIR-615 v4.10 (DMZ Host/adv_firewall.php) enables unauthenticated remote code execution. No patch — replace or isolate affected routers ASAP. https://radar.offseq.com/threat/cve-2026-2151-os-command-injection-in-d-link-dir-6-3276f328 #OffSeq #DLink #CVE20262151 #Infosec

⚪ APT28 group exploits new vulnerability in Microsoft Office

🗨️ Just three days after Microsoft released an out-of-band patch for Office, the APT28 group began exploiting the CVE-2026-21509 vulnerability in attacks against Ukrainian and European organizations.

🔗 https://hackmag.com/news/cve-2026-21509-atp28?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

⚠️ CVE-2026-2140: High-severity buffer overflow in Tenda TX9 (≤22.03.02.10_multi) via /goform/setMacFilterCfg. Public exploit available; risks RCE & DoS. Restrict remote access & monitor traffic. Patch ASAP when available. https://radar.offseq.com/threat/cve-2026-2140-buffer-overflow-in-tenda-tx9-09ab607e #OffSeq #Vulnerability #Tenda #CVE20262140

🟠 CVE-2026-2140 - High (8.8)

A vulnerability was identified in Tenda TX9 up to 22.03.02.10_multi. Affected by this issue is the function sub_4223E0 of the file /goform/setMacFilterCfg. Such manipulation of the argument deviceList leads to buffer overflow. The attack may be la...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2140/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2140 - High (8.8)

A vulnerability was identified in Tenda TX9 up to 22.03.02.10_multi. Affected by this issue is the function sub_4223E0 of the file /goform/setMacFilterCfg. Such manipulation of the argument deviceList leads to buffer overflow. The attack may be la...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2140/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2137 - High (8.8)

A vulnerability has been found in Tenda TX3 up to 16.03.13.11_multi. This impacts an unknown function of the file /goform/SetIpMacBind. The manipulation of the argument list leads to buffer overflow. The attack can be initiated remotely. The explo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2137/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2137 - High (8.8)

A vulnerability has been found in Tenda TX3 up to 16.03.13.11_multi. This impacts an unknown function of the file /goform/SetIpMacBind. The manipulation of the argument list leads to buffer overflow. The attack can be initiated remotely. The explo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2137/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-15027 - Critical (9.8)

The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to update arbitrary user meta through the 'jay_login_register_ajax_create_f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15027/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-15027 - Critical (9.8)

The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to update arbitrary user meta through the 'jay_login_register_ajax_create_f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15027/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15100 - High (8.8)

The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to update arbitrary user meta through the 'jay_panel_ajax_update_profile' f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15100/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15100 - High (8.8)

The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to update arbitrary user meta through the 'jay_panel_ajax_update_profile' f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15100/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25546 - High (7.8)

Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlle...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25546/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25546 - High (7.8)

Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlle...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25546/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CVE-2026-25858 (CRITICAL): macrozheng mall ≤1.0.3 exposes OTP in API, letting attackers reset any user password with just a phone number. Disable reset flow & apply MFA now! https://radar.offseq.com/threat/cve-2026-25858-cwe-640-weak-password-recovery-mech-3ff06a38 #OffSeq #CVE202625858 #vuln

⚠️ CRITICAL: CVE-2026-25858 in macrozheng mall ≤1.0.3 lets attackers reset any user’s password by exploiting a weak OTP process tied only to phone numbers. Disable reset, require MFA, and patch ASAP. https://radar.offseq.com/threat/cve-2026-25858-cwe-640-weak-password-recovery-mech-3ff06a38 #OffSeq #macrozhenmall #CVE202625858 #infosec

⚠️ CVE-2026-2086: HIGH-severity buffer overflow in UTT HiPER 810G (≤1.7.7-171114). Remote code execution possible, public exploit exists, no patch. Segment networks, disable remote mgmt, monitor for attacks. https://radar.offseq.com/threat/cve-2026-2086-buffer-overflow-in-utt-hiper-810g-43cb38da #OffSeq #UTT #Infosec #BufferOverflow

🟠 CVE-2026-2086 - High (8.8)

A vulnerability was detected in UTT HiPER 810G up to 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formFireWall of the component Management Interface. The manipulation of the argument GroupName results in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2071 - High (8.8)

A vulnerability was found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formP2PLimitConfig. Performing a manipulation of the argument except results in buffer overflow. The attack is possible to b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2071/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-2103 - Infor Syteline ERP

https://blog.blacklanternsecurity.com/p/cve-2026-2103-infor-syteline-erp

#cybersecurity #vulnerability

CVE-2026-2103 - Infor Syteline ERP - Keys Included: No Assembly Required https://blog.blacklanternsecurity.com/p/cve-2026-2103-infor-syteline-erp

CVE-2026-2103 - Infor Syteline ERP

https://blog.blacklanternsecurity.com/p/cve-2026-2103-infor-syteline-erp

#cybersecurity #vulnerability

CVE-2026-2103 - Infor Syteline ERP - Keys Included: No Assembly Required https://blog.blacklanternsecurity.com/p/cve-2026-2103-infor-syteline-erp

📈 CVE Published in last 7 days (2026-02-02 - 2026-02-09)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1178

Severity:
- Critical: 93
- High: 363
- Medium: 498
- Low: 65
- None: 159

Status:
- : 9
- Analyzed: 94
- Awaiting Analysis: 636
- Modified: 2
- Received: 139
- Rejected: 20
- Undergoing Analysis: 278

Top CNAs:
- GitHub, Inc.: 225
- VulnCheck: 149
- VulDB: 134
- kernel.org: 79
- Wordfence: 71
- MITRE: 64
- wikimedia-foundation: 47
- Patchstack: 45
- Tanium: 26
- TPLink: 25

Top Affected Products:
- UNKNOWN: 1071
- Samsung Exynos 850 Firmware: 10
- Tp-link Archer Be230 Firmware: 10
- Samsung Exynos 980 Firmware: 10
- Samsung Exynos W920 Firmware: 10
- Samsung Exynos W1000 Firmware: 10
- Samsung Exynos 1080 Firmware: 10
- Samsung Exynos W930 Firmware: 10
- Samsung Exynos 1480 Firmware: 9
- Mediatek Nr15: 9

Top EPSS Score:
- CVE-2026-1802 - 1.28 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1802)
- CVE-2026-1499 - 1.23 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1499)
- CVE-2026-23515 - 0.91 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-23515)
- CVE-2020-37088 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37088)
- CVE-2026-20098 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20098)
- CVE-2020-37086 - 0.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37086)
- CVE-2026-25643 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-25643)
- CVE-2026-1761 - 0.46 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1761)
- CVE-2026-1731 - 0.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1731)
- CVE-2020-37125 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37125)

🔴 CVE-2026-25643 - Critical (9.1)

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.4, a critical Remote Command Execution (RCE) vulnerability has been identified in the Frigate integration with go2rtc. The application doe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25643/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25643 - Critical (9.1)

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.4, a critical Remote Command Execution (RCE) vulnerability has been identified in the Frigate integration with go2rtc. The application doe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25643/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25635 - High (8.6)

calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows (haven't tested on other OS's), this can lead to Remot...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25635/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25635 - High (8.6)

calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows (haven't tested on other OS's), this can lead to Remot...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25635/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25635 - High (8.6)

calibre is an e-book manager. Prior to 9.2.0, Calibre's CHM reader contains a path traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows (haven't tested on other OS's), this can lead to Remot...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25635/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25592 - Critical (9.9)

Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.70.0, an Arbitrary File Write vulnerability has been identified in Microsoft's Semantic Kernel .NET SDK, specifically within the Ses...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25592/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25731 - High (7.8)

calibre is an e-book manager. Prior to 9.2.0, a Server-Side Template Injection (SSTI) vulnerability in Calibre's Templite templating engine allows arbitrary code execution when a user converts an ebook using a malicious custom template file via th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25731/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25731 - High (7.8)

calibre is an e-book manager. Prior to 9.2.0, a Server-Side Template Injection (SSTI) vulnerability in Calibre's Templite templating engine allows arbitrary code execution when a user converts an ebook using a malicious custom template file via th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25731/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25586 - Critical (10)

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, a sandbox escape is possible by shadowing hasOwnProperty on a sandbox object, which disables prototype whitelist enforcement in the property-access path. This permits direct access to ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25586/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-23989 - High (8.2)

REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23989/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25628 - High (8.5)

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled on_disk.log_file path. Minimal privileges are required (rea...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25628/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25628 - High (8.5)

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled on_disk.log_file path. Minimal privileges are required (rea...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25628/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25593 - High (8.4)

OpenClaw is a personal AI assistant. Prior to 2026.1.20, an unauthenticated local client could use the Gateway WebSocket API to write config via config.apply and set unsafe cliPath values that were later used for command discovery, enabling comman...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25593/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25641 - Critical (10)

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, there is a sandbox escape vulnerability due to a mismatch between the key on which the validation is performed and the key used for accessing properties. Even though the key used in pr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25641/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25641 - Critical (10)

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, there is a sandbox escape vulnerability due to a mismatch between the key on which the validation is performed and the key used for accessing properties. Even though the key used in pr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25641/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25580 - High (8.6)

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applicatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25580/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25520 - Critical (10)

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, The return values of functions aren't wrapped. Object.values/Object.entries can be used to get an Array containing the host's Function constructor, by using Array.prototype.at you can ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25520/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25520 - Critical (10)

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, The return values of functions aren't wrapped. Object.values/Object.entries can be used to get an Array containing the host's Function constructor, by using Array.prototype.at you can ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25520/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-70963 - High (7.6)

Gophish <=0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived API key directly inside the rendered HTML/JavaScript of the page on every login. This makes permanent API credentials acce...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70963/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-2066 - High (8.8)

A weakness has been identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the file /goform/formIpGroupConfig. Executing a manipulation of the argument groupName can lead to buffer overflow. The attack can be launched remo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2066/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CVE-2025-11953 (Metro4Shell)
React Native Community CLI OS Command Injection Vulnerability

The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary executables. On Windows, the attackers can also execute arbitrary shell commands with fully controlled arguments.

https://secdb.nttzen.cloud/cve/detail/CVE-2025-11953

#ZEN #SecDB #InfoSec #React #Metro4Shell #CVE202511953

⚪ Critical Metro4Shell Vulnerability Exploited to Breach Development Systems

🗨️ Attackers are actively exploiting the critical CVE-2025-11953 vulnerability in the React Native Metro server to infect developers’ systems with malware for Windows and Linux.

🔗 https://hackmag.com/news/metro4shell?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

CVE ID: CVE-2025-11953
Vendor: React Native Community
Product: CLI
Date Added: 2026-02-05
Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/react-native-community/cli/commit/15089907d1f1301b22c72d7f68846a2ef20df547;https://github.com/react-native-community/cli/pull/2735 ; https://nvd.nist.gov/vuln/detail/CVE-2025-11953
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-11953

New:

CISA Orders Federal Agencies to Strengthen Edge Device Security Amid Rising Cyber Threats https://www.cisa.gov/news-events/news/cisa-orders-federal-agencies-strengthen-edge-device-security-amid-rising-cyber-threats

CISA has also updated the KEV catalogue.

- CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-24423

- CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-11953

Five industrial vulnerabilities have also been added: https://www.cisa.gov/ #CISA #infosec #vulnerabilities

‼️ CISA has added two vulnerabilities to the KEV Catalog

https://darkwebinformer.com/cisa-kev-catalog/

CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability:

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.

CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability:

React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute arbitrary shell commands with fully controlled arguments.

🔴 CVE-2026-25505 - Critical (9.8)

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Prior to version 0.1.7, a hardcoded secret key used for signing JWTs is checked into source code and ManyAPI routes do not check authentication. This issue ha...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25505/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-70073 - Critical (9.8)

An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-70073/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Global news highlights include the kickoff of the 2026 Winter Olympics in Italy (Feb 7). In technology, OpenAI launched its Frontier enterprise AI agent platform. Apple acquired AI startup Q.AI for $2B, while Google reported significant AI-driven profit gains. Intel and AMD warned of server CPU shortages impacting China due to AI demand. The EU is also scrutinizing TikTok's "addictive design".

Cybersecurity saw CISA warn of a critical SmarterMail vulnerability (CVE-2026-24423) actively exploited in ransomware campaigns (Feb 7). Italian authorities thwarted Russian cyberattacks targeting government and Olympic-related websites. A rise in AI-driven phishing attacks was also reported.

#News #Anonymous #AnonNews_irc

Global news highlights include the kickoff of the 2026 Winter Olympics in Italy (Feb 7). In technology, OpenAI launched its Frontier enterprise AI agent platform. Apple acquired AI startup Q.AI for $2B, while Google reported significant AI-driven profit gains. Intel and AMD warned of server CPU shortages impacting China due to AI demand. The EU is also scrutinizing TikTok's "addictive design".

Cybersecurity saw CISA warn of a critical SmarterMail vulnerability (CVE-2026-24423) actively exploited in ransomware campaigns (Feb 7). Italian authorities thwarted Russian cyberattacks targeting government and Olympic-related websites. A rise in AI-driven phishing attacks was also reported.

#News #Anonymous #AnonNews_irc

"CISA warns of SmarterMail RCE flaw used in ransomware attacks"

"[...] has issued a warning about CVE-2026-24423, an unauthenticated remote code execution (RCE) flaw in SmarterMail that is used in ransomware attacks. The Cybersecurity & Infrastructure Security Agency (CISA) in the U.S."

https://www.bleepingcomputer.com/news/security/cisa-warns-of-smartermail-rce-flaw-used-in-ransomware-attacks/

#Cybersecurity

CISA warns of SmarterMail RCE flaw used in ransomware attacks

The Cybersecurity & Infrastructure Security Agency (CISA) in the U.S. has issued a warning about CVE-2026-24423, an unauthenticated remote code...

🔗️ [Bleepingcomputer] https://link.is.it/Kkych1

CVE-2026-24423 - Changed to Known Ransomware Status

SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityVendor: SmarterToolsProduct: SmarterMailSmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead https://nvd.nist.gov/vuln/detail/CVE-2026-24423

CVE ID: CVE-2026-24423
Vendor: SmarterTools
Product: SmarterMail
Date Added: 2026-02-05
Notes: https://www.smartertools.com/smartermail/release-notes/current ; https://www.cve.org/CVERecord?id=CVE-2026-24423 ; https://nvd.nist.gov/vuln/detail/CVE-2026-24423
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-24423

New:

CISA Orders Federal Agencies to Strengthen Edge Device Security Amid Rising Cyber Threats https://www.cisa.gov/news-events/news/cisa-orders-federal-agencies-strengthen-edge-device-security-amid-rising-cyber-threats

CISA has also updated the KEV catalogue.

- CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-24423

- CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-11953

Five industrial vulnerabilities have also been added: https://www.cisa.gov/ #CISA #infosec #vulnerabilities

‼️ CISA has added two vulnerabilities to the KEV Catalog

https://darkwebinformer.com/cisa-kev-catalog/

CVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability:

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.

CVE-2025-11953: React Native Community CLI OS Command Injection Vulnerability:

React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute arbitrary shell commands with fully controlled arguments.

🟠 CVE-2025-69906 - High (8.8)

Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin. The application relies on blacklist-based file extension validation and stores uploaded files directly in a web-accessible directory. Under typical ser...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69906/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last 7 days (2026-02-02 - 2026-02-09)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1178

Severity:
- Critical: 93
- High: 363
- Medium: 498
- Low: 65
- None: 159

Status:
- : 9
- Analyzed: 94
- Awaiting Analysis: 636
- Modified: 2
- Received: 139
- Rejected: 20
- Undergoing Analysis: 278

Top CNAs:
- GitHub, Inc.: 225
- VulnCheck: 149
- VulDB: 134
- kernel.org: 79
- Wordfence: 71
- MITRE: 64
- wikimedia-foundation: 47
- Patchstack: 45
- Tanium: 26
- TPLink: 25

Top Affected Products:
- UNKNOWN: 1071
- Samsung Exynos 850 Firmware: 10
- Tp-link Archer Be230 Firmware: 10
- Samsung Exynos 980 Firmware: 10
- Samsung Exynos W920 Firmware: 10
- Samsung Exynos W1000 Firmware: 10
- Samsung Exynos 1080 Firmware: 10
- Samsung Exynos W930 Firmware: 10
- Samsung Exynos 1480 Firmware: 9
- Mediatek Nr15: 9

Top EPSS Score:
- CVE-2026-1802 - 1.28 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1802)
- CVE-2026-1499 - 1.23 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1499)
- CVE-2026-23515 - 0.91 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-23515)
- CVE-2020-37088 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37088)
- CVE-2026-20098 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20098)
- CVE-2020-37086 - 0.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37086)
- CVE-2026-25643 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-25643)
- CVE-2026-1761 - 0.46 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1761)
- CVE-2026-1731 - 0.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1731)
- CVE-2020-37125 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37125)

🔴 CVE-2026-1499 - Critical (9.8)

The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8. This is due to a missing capability check on the `process_add_site()` AJAX action combined wit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1499/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

ahhh… la bonne vuln critique du vendredi qui sent le café ☕️

🕵️‍♂️ CVE-2026-21643

D’après la fiche : SQL Injection (improper neutralization of special elements used in an SQL command) dans Fortinet FortiClientEMS 7.4.4

➡️ pourrait permettre à un attaquant non authentifié d’exécuter du code/commandes via des requêtes HTTP spécialement forgées.

RCE “unauth” sur un produit exposé, quelle surprise… 🙃

il me manque un traversal path dans l'histoire pour être définitivement comblé

may or may not, qui sait…
attendons l’advisory officiel avant de sortir les fourches (ou les patchs).
👇
https://cve.circl.lu/vuln/CVE-2026-21643 👀

#CyberVeille #Fortinet #FortiClientEMS

🔴 CVE-2026-21643 - Critical (9.8)

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP req...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21643/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-2017 - Critical (9.8)

A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurityHandler of the file /goform/wx3auth of the component POST Request Handler. The manipulation of the argument data results in sta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2017/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-0106 - Critical (9.3)

In vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0106/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Mitsubishi Electric Patches Critical Remote Takeover Flaw in MELSEC iQ-R Series PLCs

Mitsubishi Electric patched a critical vulnerability (CVE-2025-15080) in MELSEC iQ-R Series PLCs that allows unauthenticated remote attackers to read or tamper with control data and cause system outages.

**Make sure all MELSEC iQ-R Series PLCs are isolated from the public internet and accessible only from trusted networks. Then plan an update to firmware version 49.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/mitsubishi-electric-patches-critical-remote-takeover-flaw-in-melsec-iq-r-series-plcs-y-b-o-n-n/gD2P6Ple2L

🟠 CVE-2026-24926 - High (8.4)

Out-of-bounds write vulnerability in the camera module.
Impact: Successful exploitation of this vulnerability may affect availability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24926/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2025-15566 #devopsish #kubernetes #cve https://github.com/kubernetes/kubernetes/issues/136789

🟠 CVE-2025-15566 - High (8.8)

A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/auth-proxy-set-headers` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15566/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24302 - High (8.6)

Azure Arc Elevation of Privilege Vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24302/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

https://winbuzzer.com/2026/02/06/cve-2026-0391-microsoft-edge-android-ui-spoofing-xcxwbn/

CVE-2026-0391: Edge Android Flaw Enables Spoofing Attacks

#MicrosoftEdge #Security #Cybersecurity #Microsoft #Android #WebBrowsers #Phishing #CredentialTheft #ZeroDayVulnerabilities #Chromium

🟠 CVE-2026-21532 - High (8.2)

Azure Function Information Disclosure Vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21532/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20983 - High (7.8)

Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privilege.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-68721 - Critical (9.1)

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68721/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-68721 - Critical (9.1)

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68721/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20979 - High (7.8)

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20979/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15311 - High (7.8)

Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15311/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25056 - High (8.8)

n8n is an open source workflow automation platform. Prior to versions 1.118.0 and 2.4.0, a vulnerability in the Merge node's SQL Query mode allowed authenticated users with permission to create or modify workflows to write arbitrary files to the n...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25056/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25055 - High (8.1)

n8n is an open source workflow automation platform. Prior to versions 1.123.12 and 2.4.0, when workflows process uploaded files and transfer them to remote servers via the SSH node without validating their metadata the vulnerability can lead to fi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25055/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25539 - Critical (9.1)

SiYuan is a personal knowledge management system. Prior to version 3.5.5, the /api/file/copyFile endpoint does not validate the dest parameter, allowing authenticated users to write files to arbitrary locations on the filesystem. This can lead to ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25539/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last 7 days (2026-02-02 - 2026-02-09)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1178

Severity:
- Critical: 93
- High: 363
- Medium: 498
- Low: 65
- None: 159

Status:
- : 9
- Analyzed: 94
- Awaiting Analysis: 636
- Modified: 2
- Received: 139
- Rejected: 20
- Undergoing Analysis: 278

Top CNAs:
- GitHub, Inc.: 225
- VulnCheck: 149
- VulDB: 134
- kernel.org: 79
- Wordfence: 71
- MITRE: 64
- wikimedia-foundation: 47
- Patchstack: 45
- Tanium: 26
- TPLink: 25

Top Affected Products:
- UNKNOWN: 1071
- Samsung Exynos 850 Firmware: 10
- Tp-link Archer Be230 Firmware: 10
- Samsung Exynos 980 Firmware: 10
- Samsung Exynos W920 Firmware: 10
- Samsung Exynos W1000 Firmware: 10
- Samsung Exynos 1080 Firmware: 10
- Samsung Exynos W930 Firmware: 10
- Samsung Exynos 1480 Firmware: 9
- Mediatek Nr15: 9

Top EPSS Score:
- CVE-2026-1802 - 1.28 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1802)
- CVE-2026-1499 - 1.23 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1499)
- CVE-2026-23515 - 0.91 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-23515)
- CVE-2020-37088 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37088)
- CVE-2026-20098 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20098)
- CVE-2020-37086 - 0.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37086)
- CVE-2026-25643 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-25643)
- CVE-2026-1761 - 0.46 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1761)
- CVE-2026-1731 - 0.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1731)
- CVE-2020-37125 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37125)

🔴 CVE-2026-25233 - Critical (9.1)

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version 1.33.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25233/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-25235 - High (7.5)

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, predictable verification hashes may allow attackers to guess verification tokens and potentially verify election account requests without authorizati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25235/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25236 - Critical (9.8)

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN (...) list. This issue has been patched in version 1.33.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25236/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25238 - Critical (9.8)

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability in bug subscription deletion may allow attackers to inject SQL via a crafted email value. This issue has been patched i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25238/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25240 - Critical (9.8)

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability can occur in user::maintains() when role filters are provided as an array and interpolated into an IN (...) clause. Thi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25240/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-25241 - Critical (9.8)

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, an unauthenticated SQL injection in the /get// endpoint allows remote attackers to execute arbitrary SQL via a crafted package version. This issue ha...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-25241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-46651 - Critical (9.1)

Tiny File Manager through 2.6 contains a server-side request forgery (SSRF) vulnerability in the URL upload feature. Due to insufficient validation of user-supplied URLs, an attacker can send crafted requests to localhost by using http://www.127.0...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-46651/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71031 - High (7.5)

Water-Melon Melon commit 9df9292 and below is vulnerable to Denial of Service. The HTTP component doesn't have any maximum length. As a result, an excessive request header could cause a denial of service by consuming RAM memory.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71031/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-67188 - Critical (9.8)

A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the /lib/cste_modules/ipv6.so module. The function fails to properly validate the length of the user-controlled ra...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67188/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13379 - High (8.6)

IBM Aspera Console 3.4.0 through 3.4.8 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13379/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-67189 - Critical (9.8)

A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The urlKeyword parameter is not properly validated, and the function concatenates multiple user-controlled fields into a fixed-siz...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-67189/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-61732 - High (8.6)

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-61732/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-61732 - High (8.6)

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-61732/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last 7 days (2026-02-02 - 2026-02-09)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 1178

Severity:
- Critical: 93
- High: 363
- Medium: 498
- Low: 65
- None: 159

Status:
- : 9
- Analyzed: 94
- Awaiting Analysis: 636
- Modified: 2
- Received: 139
- Rejected: 20
- Undergoing Analysis: 278

Top CNAs:
- GitHub, Inc.: 225
- VulnCheck: 149
- VulDB: 134
- kernel.org: 79
- Wordfence: 71
- MITRE: 64
- wikimedia-foundation: 47
- Patchstack: 45
- Tanium: 26
- TPLink: 25

Top Affected Products:
- UNKNOWN: 1071
- Samsung Exynos 850 Firmware: 10
- Tp-link Archer Be230 Firmware: 10
- Samsung Exynos 980 Firmware: 10
- Samsung Exynos W920 Firmware: 10
- Samsung Exynos W1000 Firmware: 10
- Samsung Exynos 1080 Firmware: 10
- Samsung Exynos W930 Firmware: 10
- Samsung Exynos 1480 Firmware: 9
- Mediatek Nr15: 9

Top EPSS Score:
- CVE-2026-1802 - 1.28 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1802)
- CVE-2026-1499 - 1.23 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1499)
- CVE-2026-23515 - 0.91 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-23515)
- CVE-2020-37088 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37088)
- CVE-2026-20098 - 0.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20098)
- CVE-2020-37086 - 0.75 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37086)
- CVE-2026-25643 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-25643)
- CVE-2026-1761 - 0.46 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1761)
- CVE-2026-1731 - 0.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-1731)
- CVE-2020-37125 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2020-37125)