🚨 CRITICAL: CVE-2026-41283 in OpenStack Mistral (v20.0.0 – 22.0.0) allows remote code execution via exposed API. No patch yet. Restrict API to trusted users & monitor closely. Full system compromise possible. https://radar.offseq.com/threat/cve-2026-41283-cwe-863-incorrect-authorization-in--186d9351 #OffSeq #OpenStack #Vuln #CloudSec

CVE-2026-41283 - Critical RCE in OpenStack Mistral. API exposure allows code exec & credential exfiltration. CVSS 9.9. No patch yet - restrict API access immediately. #CVE #OpenStack #infosec

https://www.valtersit.com/cve/CVE-2026-41283/

🔴 CVE-2026-41283 - Critical (9.9)

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41283/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CRITICAL: CVE-2026-41283 in OpenStack Mistral (v20.0.0 – 22.0.0) allows remote code execution via exposed API. No patch yet. Restrict API to trusted users & monitor closely. Full system compromise possible. https://radar.offseq.com/threat/cve-2026-41283-cwe-863-incorrect-authorization-in--186d9351 #OffSeq #OpenStack #Vuln #CloudSec

🔴 CVE-2026-41283 - Critical (9.9)

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41283/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49143 - High (8.8)

BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauthenticated network-adjacent attackers to execute arbitrary code by submitting crafted JSON request bodies to the handler, w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49143/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49443 - High (8.8)

authentik is an open-source identity provider. Prior to versions 2025.12.6, 2026.2.4, and 2026.5.1, an attacker with the ability to change a source connection, and an account in one of the configured sources can log into any account. This issue ha...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49443/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CVE-2026-31942: HIGH severity in LibreChat < 0.8.3-rc1. Authenticated users can overwrite others’ API key configs via IDOR in /api/keys. Patch is live (0.8.3-rc1), vendor manages remediation for cloud. More: https://radar.offseq.com/threat/cve-2026-31942-cwe-862-missing-authorization-in-da-025369dc #OffSeq #LibreChat #InfoSec #CVE

🟠 CVE-2026-34077 - High (7.5)

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34077/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-33245 - High (8)

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33245/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-36608 - High (8.8)

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP (192.168.1.1) or localhost (127.0.0.1) as InternalClient. An unauthent...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-36608/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-36607 - High (8.8)

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-force attacks via the TDDP password change endpoint (code=10), which lacks the rate limiting applied to the login endpoint (code=7). An attacker on the ad...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-36607/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ HIGH severity: CVE-2026-40108 impacts GLPI (11.0.0 – 11.0.6). Privileged technicians can inject XSS via ITIL cost fields. Upgrade to 11.0.7 to fix. No active exploits, but patching is critical. https://radar.offseq.com/threat/cve-2026-40108-cwe-79-improper-neutralization-of-i-b1d24331 #OffSeq #CVE202640108 #XSS #GLPI

Progress LoadMaster is up there with Ivanti now.

https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691

Progress LoadMaster is up there with Ivanti now.

https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691

🟠 CVE-2026-41010 - High (8.2)

ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name returns @job_meta['name'], a value taken verbatim from the jobs: array of the attacker-supplied releas...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41010/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-41010 - High (8.2)

ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name returns @job_meta['name'], a value taken verbatim from the jobs: array of the attacker-supplied releas...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41010/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-7312 - Critical (10)

CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.8335, 15.2.8400 to 15.2.8441, 15.3.8500 to 15.3.8531, and 15.4.8600 to 15...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7312/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9516 - High (7.5)

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws.

To skip a leading 3-byte UTF-8 BOM, decode_json() advances the input scalar's string pointer past the mark w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9516/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9516 - High (7.5)

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws.

To skip a leading 3-byte UTF-8 BOM, decode_json() advances the input scalar's string pointer past the mark w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9516/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚩 CVE-2026-8936: Docker Desktop 4.33.0 has a HIGH-severity vuln in grpcfuse (CWE-674) — uncontrolled recursion can cause VM panic if containers create deeply nested dirs. Upgrade to 4.76.0! https://radar.offseq.com/threat/cve-2026-8936-cwe-674-uncontrolled-recursion-in-do-fc846554 #OffSeq #Docker #InfoSec

https://nvd.nist.gov/vuln/detail/CVE-2026-10864

A vulnerability in the MISP dashboard widgets allowed an authenticated user to manipulate the fields option and influence which fields were returned by the New Users and New Organisations widgets. In some cases, requesting a field set that became empty after validation or redaction could cause the underlying query to fall back to returning unintended model fields. For the New Users widget, this could allow a non-site-admin user to obtain user e-mail addresses even when user e-mail disclosure was disabled by configuration. For the New Organisations widget, crafted field selection could similarly result in unintended organisation fields being included in the dashboard response. The issue was caused by applying field filtering and redaction in a way that could leave the selected field list empty. The patch ensures that the allowed field list is built safely, that restricted fields such as user e-mail addresses are removed before user-supplied field selection is processed, and that an empty field selection falls back only to the permitted default fields. Impact: An authenticated low-privileged user with access to the affected dashboard widgets may be able to disclose restricted user or organisation metadata, including user e-mail addresses depending on configuration.

Edit: More MISP advisories. The CVEs are new, at least. Not sure about the advisories.

#misp

https://nvd.nist.gov/vuln/detail/CVE-2026-10864

A vulnerability in the MISP dashboard widgets allowed an authenticated user to manipulate the fields option and influence which fields were returned by the New Users and New Organisations widgets. In some cases, requesting a field set that became empty after validation or redaction could cause the underlying query to fall back to returning unintended model fields. For the New Users widget, this could allow a non-site-admin user to obtain user e-mail addresses even when user e-mail disclosure was disabled by configuration. For the New Organisations widget, crafted field selection could similarly result in unintended organisation fields being included in the dashboard response. The issue was caused by applying field filtering and redaction in a way that could leave the selected field list empty. The patch ensures that the allowed field list is built safely, that restricted fields such as user e-mail addresses are removed before user-supplied field selection is processed, and that an empty field selection falls back only to the permitted default fields. Impact: An authenticated low-privileged user with access to the affected dashboard widgets may be able to disclose restricted user or organisation metadata, including user e-mail addresses depending on configuration.

Edit: More MISP advisories. The CVEs are new, at least. Not sure about the advisories.

#misp

🟠 CVE-2026-35078 - High (8.1)

The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35078/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35078 - High (8.1)

The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35078/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35077 - High (8.1)

The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35077/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35077 - High (8.1)

The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35077/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-35075 - Critical (9.8)

An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35075/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-35075 - Critical (9.8)

An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35075/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35081 - High (8.1)

The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35081/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35081 - High (8.1)

The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35081/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35080 - High (8.1)

The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35080/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35080 - High (8.1)

The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35080/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35085 - High (8.8)

A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35085/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-14773 - High (8)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-14773/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-14773 - High (8)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-14773/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

HIGH severity: CVE-2026-49189 in Acer Connect M6E 5G WiFi Router lets unauthorized local apps invoke admin ops via improper privilege management. No patch yet — restrict local access & monitor for updates. Details: https://radar.offseq.com/threat/cve-2026-49189-cwe-269-improper-privilege-manageme-7d497fd8 #OffSeq #Acer #Vuln #Cybersecurity

HIGH severity: CVE-2026-49189 in Acer Connect M6E 5G WiFi Router lets unauthorized local apps invoke admin ops via improper privilege management. No patch yet — restrict local access & monitor for updates. Details: https://radar.offseq.com/threat/cve-2026-49189-cwe-269-improper-privilege-manageme-7d497fd8 #OffSeq #Acer #Vuln #Cybersecurity

⚠️ CVE-2026-49185: Acer Connect M6E 5G WiFi Router has a CRITICAL OS command injection bug (CVSS 10). Remote, unauthenticated exploitation possible. No patch available — limit exposure & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-49185-cwe-78-improper-neutralization-of-s-b208b2de #OffSeq #CVE202649185 #Infosec #Vuln

⚠️ CVE-2026-49185: Acer Connect M6E 5G WiFi Router has a CRITICAL OS command injection bug (CVSS 10). Remote, unauthenticated exploitation possible. No patch available — limit exposure & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-49185-cwe-78-improper-neutralization-of-s-b208b2de #OffSeq #CVE202649185 #Infosec #Vuln

Cisco Fixes Unified CM Flaw as Exploit Code Goes Public

Cisco has patched a critical vulnerability in its Unified Communications Manager, known as CVE-2026-20230, which could allow hackers to write arbitrary files to the server's operating system and potentially escalate privileges to root. With proof-of-concept exploit code now public, the threat level has significantly increased.

https://osintsights.com/cisco-fixes-unified-cm-flaw-as-exploit-code-goes-public?utm_source=mastodon&utm_medium=social

#Cisco #UnifiedCm #Cve202620230 #ServersideRequestForgery #Ssrf

CVE-2026-20230: Critical Cisco Unified CM SSRF Flaw Exposes Enterprises to Root-Level Takeover via Public Exploit Code + Video

Breaking Security Reality: A Hidden Door Inside Enterprise Voice Infrastructure A newly disclosed vulnerability in Cisco Unified Communications Manager (Unified CM) has sent a sharp warning across enterprise security teams worldwide. Identified as CVE-2026-20230, this critical Server-Side Request Forgery (SSRF) flaw carries a CVSS score of 8.6…

https://undercodenews.com/cve-2026-20230-critical-cisco-unified-cm-ssrf-flaw-exposes-enterprises-to-root-level-takeover-via-public-exploit-code-video/?utm_source=mastodon&utm_medium=jetpack_social

⚠️ CRITICAL: Cisco Unified CM/SME hit by SSRF vuln (CVE-2026-20230). Unauthenticated remote attackers can write files & escalate to root if WebDialer is enabled. Patch to 14SU6 ASAP. PoC out, no active exploitation. https://radar.offseq.com/threat/cisco-warns-of-available-poc-for-critical-unified--c947124b #OffSeq #Cisco #SSRF #Vuln

CVE-2026-20230 - SSRF in Cisco Unified CM & Unified CM SME. Improper HTTP input validation. CVSS 8.6. Unpatched. No workaround available. Monitor for updates. #CVE #Cisco #infosec

https://www.valtersit.com/cve/CVE-2026-20230/

⚠️ CRITICAL: Cisco Unified CM/SME hit by SSRF vuln (CVE-2026-20230). Unauthenticated remote attackers can write files & escalate to root if WebDialer is enabled. Patch to 14SU6 ASAP. PoC out, no active exploitation. https://radar.offseq.com/threat/cisco-warns-of-available-poc-for-critical-unified--c947124b #OffSeq #Cisco #SSRF #Vuln

CVE-2026-20230 - SSRF in Cisco Unified CM & Unified CM SME. Improper HTTP input validation. CVSS 8.6. Unpatched. No workaround available. Monitor for updates. #CVE #Cisco #infosec

https://www.valtersit.com/cve/CVE-2026-20230/

🟠 CVE-2026-20230 - High (8.6)

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF)...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20230/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

There are two updates from Broadcom for critical vulnerabilities: https://support.broadcom.com/web/ecx/security-advisory

- Mainframe Application Tuner 12.0.04 Vulnerability in REST API and GUI and a vulnerability in the OM Spool Web Interface

Cisco has three, one of them critical:

CRITICAL: CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW

MEDIUM: CVE-2026-20233: Cisco Webex Meetings Cross-Site Scripting Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-jw3NeQzS

MEDIUM: CVE-2026-20175: Cisco Finesse Remote File Inclusion Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-rfi-gwpkdc89 @TalosSecurity #infosec #Broadcom #vulnerability #Cisco

@cR0w

There are two updates from Broadcom for critical vulnerabilities: https://support.broadcom.com/web/ecx/security-advisory

- Mainframe Application Tuner 12.0.04 Vulnerability in REST API and GUI and a vulnerability in the OM Spool Web Interface

Cisco has three, one of them critical:

CRITICAL: CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW

MEDIUM: CVE-2026-20233: Cisco Webex Meetings Cross-Site Scripting Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-jw3NeQzS

MEDIUM: CVE-2026-20175: Cisco Finesse Remote File Inclusion Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-rfi-gwpkdc89 @TalosSecurity #infosec #Broadcom #vulnerability #Cisco

@cR0w

There are two updates from Broadcom for critical vulnerabilities: https://support.broadcom.com/web/ecx/security-advisory

- Mainframe Application Tuner 12.0.04 Vulnerability in REST API and GUI and a vulnerability in the OM Spool Web Interface

Cisco has three, one of them critical:

CRITICAL: CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW

MEDIUM: CVE-2026-20233: Cisco Webex Meetings Cross-Site Scripting Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-jw3NeQzS

MEDIUM: CVE-2026-20175: Cisco Finesse Remote File Inclusion Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-rfi-gwpkdc89 @TalosSecurity #infosec #Broadcom #vulnerability #Cisco

@cR0w

🟠 CVE-2025-15656 - High (8.8)

Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation.

This issue affects School Management: from n/a through 93.2.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15656/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15656 - High (8.8)

Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation.

This issue affects School Management: from n/a through 93.2.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15656/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-10737 - High (7.5)

The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the view_file function in all versions up to, and including, 4.71. This makes it possible for unauthenticated attacker...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10737/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-10737 - High (7.5)

The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the view_file function in all versions up to, and including, 4.71. This makes it possible for unauthenticated attacker...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10737/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1829 - High (8.8)

The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.02 via the 'et_pb_text' shortcode 'cvdb_content_visibility_check' parameter. This makes it possible for aut...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1829/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-7313 - High (8.7)

CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 8.0.5700 to 13.3.7652 allows a remote authenticated attacker to obtain plain-text credentials used connect to Sitefinity Insight service. Successfu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7313/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-7195 - High (8.8)

CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1.x before 15.1.8335, 15.2.x before 15.2.8441, 15.3.x before 15.3.8531, and 15.4.x before 15.4.863...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7195/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

https://access.redhat.com/security/cve/cve-2026-10840

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the cluster, any authenticated user can disrupt workload scheduling, tamper with scheduling priorities, delete other tenants' Workload objects, or induce cert-manager to overwrite TLS Secrets including the default ingress controller certificate.

https://access.redhat.com/security/cve/cve-2026-10840

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the cluster, any authenticated user can disrupt workload scheduling, tamper with scheduling priorities, delete other tenants' Workload objects, or induce cert-manager to overwrite TLS Secrets including the default ingress controller certificate.

CVE-2026-4104 - Critical SQLi in TeknoPass by Akmer Informatics. Authorization bypass via user-controlled SQL primary key. CVSS 9.8. No patch available. Block access or isolate affected systems immediately. #CVE #infosec #cybersecurity

https://www.valtersit.com/cve/CVE-2026-4104/

🟠 CVE-2026-49771 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection.

This issue affects Photo Gallery by 10Web: from n/a through 1.8.41.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49771/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49771 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection.

This issue affects Photo Gallery by 10Web: from n/a through 1.8.41.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49771/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-41860 - Supply chain MITM in BOSH (CWE-326). Hard-coded SSL verify none allows credential theft and token hijacking. CVSS 8.8. No patch yet for all versions before v282.1.9. Update to v282.1.9+ immediately. #CVE #BOSH #infosec

https://www.valtersit.com/cve/CVE-2026-41860/

🟠 CVE-2026-41860 - High (8.8)

CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_endpoint and #send_http_get_request_synchronous hard-code OpenSSL::SSL::VERIFY_NONE, enabling an attack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41860/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-41860 - High (8.8)

CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_endpoint and #send_http_get_request_synchronous hard-code OpenSSL::SSL::VERIFY_NONE, enabling an attack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41860/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-41859 - High (7.8)

A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secret) and can tamper with the VM list that is written into the NATS authorization file. Stolen credentials gr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41859/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-41859 - High (7.8)

A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secret) and can tamper with the VM list that is written into the NATS authorization file. Stolen credentials gr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41859/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-41858 - High (7.5)

Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a network attacker to estimate VM boot time and reconstruct a small candidate list to recover the Administrator...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41858/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-41858 - High (7.5)

Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a network attacker to estimate VM boot time and reconstruct a small candidate list to recover the Administrator...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41858/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-41011 - High (8.2)

PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and name = package_meta['name'] comes directly from release.MF inside the uploaded tarball. The string is passed to Bosh::Comm...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41011/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CVE-2026-41011 (HIGH, 8.7): OS command injection in Cloud Foundry BOSH < v282.1.12 lets attackers execute arbitrary commands via package name input. Upgrade ASAP! Details: https://radar.offseq.com/threat/cve-2026-41011-cwe-78-improper-neutralization-of-s-1c5e8b82 #OffSeq #CloudFoundry #Infosec

🟠 CVE-2026-41011 - High (8.2)

PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and name = package_meta['name'] comes directly from release.MF inside the uploaded tarball. The string is passed to Bosh::Comm...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41011/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CVE-2026-41011 (HIGH, 8.7): OS command injection in Cloud Foundry BOSH < v282.1.12 lets attackers execute arbitrary commands via package name input. Upgrade ASAP! Details: https://radar.offseq.com/threat/cve-2026-41011-cwe-78-improper-neutralization-of-s-1c5e8b82 #OffSeq #CloudFoundry #Infosec

🔴 CVE-2026-36576 - Critical (9.8)

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-36576/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-36748 - Critical (9)

RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-36748/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-10701 - High (7.5)

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10701/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-10701 - High (7.5)

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10701/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA Warns of Exploited Magento Extension Flaw

A critical flaw in the Mirasvit Full Page Cache Warmer Magento extension, tracked as CVE-2026-45247, has been exploited by hackers, allowing them to execute remote code without authentication. This vulnerability, rated 9.8 on the CVSS scale, enables attackers to wreak havoc by supplying a malicious PHP object in the CacheWarmer…

https://osintsights.com/cisa-warns-of-exploited-magento-extension-flaw?utm_source=mastodon&utm_medium=social

#MagentoExtensionFlaw #Cve202645247 #DeserializationVulnerability #RemoteCodeExecution #Cisa

CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog

**Critical Alert:** A severe vulnerability (CVE-2026-45247) has been identified and requires immediate attention from security teams worldwide.

## The Details

https://securitycyber.uk

Resources: https://securitycyber.uk | https://www.hackthebox.com

CISA stuft Magento-Lücke CVE-2026-45247 als aktiv ausgenutzt ein

Für Shop-Betreiber, die den Patch noch nicht eingespielt haben, zählt jetzt jede Stunde.

https://www.all-about-security.de/cisa-stuft-magento-luecke-cve-2026-45247-als-aktiv-ausgenutzt-ein/

#cve #cybersecurity

CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog

**Critical Alert:** A severe vulnerability (CVE-2026-45247) has been identified and requires immediate attention from security teams worldwide.

## The Details

https://securitycyber.uk

Resources: https://securitycyber.uk | https://www.hackthebox.com

🚨 [CISA-2026:0603] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0603)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-45247 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45247)
- Name: Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Mirasvit
- Product: Mirasvit Full Page Cache Warmer
- Notes: https://mirasvit.com/package/changelog/?package=mirasvit/module-cache-warmer ; https://nvd.nist.gov/vuln/detail/CVE-2026-45247

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260603 #cisa20260603 #cve_2026_45247 #cve202645247

🏛️ Mirasvit Full Page Cache Warmer Vulnerability Added to Catalog

📝 CVE-2026-45247 vulnerability added to CISA's KEV Catalog, posing significant risks.

https://www.cisa.gov/news-events/alerts/2026/06/03/cisa-adds-one-known-exploited-vulnerability-catalog

📰 Alerts

#GovSec #CVE

CVE ID: CVE-2026-45247
Vendor: Mirasvit
Product: Mirasvit Full Page Cache Warmer
Date Added: 2026-06-03
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-45247

CISA has added to the KEV catalogue.

- CVE-2026-45247: Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-45247 #CISA #infosec #vulnerability

🟠 CVE-2026-42342 - High (7.5)

React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportionate server resources via unbounded path expansi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42342/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42211 - High (8.1)

React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code execution (RCE) through external requests. This attack requires the applicatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42211/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-30652 - High (8.8)

A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30652/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-30652 - High (8.8)

A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30652/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-38967 - Critical (9.8)

CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-38967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-38967 - Critical (9.8)

CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-38967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42504 - High (7.5)

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42504/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42504 - High (7.5)

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42504/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-30650 - High (8.8)

A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-30650 - High (8.8)

A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-37228 - High (7.5)

FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The function allocates a fixed 32KB receive buffer and enforces assert(rc < len) on the sctp_recvmsg() return value. A remote unauthenticated attacker ca...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-37228/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-37229 - High (7.5)

FlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER decoding fails. A remote unauthenticated attacker can send any non-PER byte sequence (e.g., a single 0x00 byte) over SCTP to the near-RT RIC (port 36421) o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-37229/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5241 - High (8)

A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the `trust_remote_code` pa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35083 - High (8.8)

A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35083/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35083 - High (8.8)

A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35083/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35082 - High (8.8)

The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35082/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35082 - High (8.8)

The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35082/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35084 - High (8.8)

A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35084/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35076 - High (8.1)

The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35076/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35076 - High (8.1)

The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35076/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-35079 - High (8.1)

The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-35079/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0096 - High (7.8)

In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. U...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0096/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-28580 - High (7.8)

In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28580/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-14771 - Critical (9.9)

Files or directories accessible to external parties vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-14771/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-14771 - Critical (9.9)

Files or directories accessible to external parties vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-14771/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-14772 - High (8.8)

Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-14772/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-14772 - High (8.8)

Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-14772/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-47065 - Critical (9.8)

ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy

Assessment: Fully addressed.

When the serialised stream contains a TC_PROXYCLASSDESC (the marker
for a java.lang.reflect.Proxy ), JDK’s O...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47065/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-47065 - Critical (9.8)

ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy

Assessment: Fully addressed.

When the serialised stream contains a TC_PROXYCLASSDESC (the marker
for a java.lang.reflect.Proxy ), JDK’s O...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47065/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-41032 - High (7.5)

It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some restricted information.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41032/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-41032 - High (7.5)

It is possible for an unauthenticated adjacent attacker to download log files of the controller, which may disclose some restricted information.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41032/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15655 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Management allows SQL Injection.

This issue affects School Management: from n/a through 93.2.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15655/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-15655 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Management allows SQL Injection.

This issue affects School Management: from n/a through 93.2.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15655/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-4035 - Critical (9.1)

A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environment credentials to an attacker-controlled endpoi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4035/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-4035 - Critical (9.1)

A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environment credentials to an attacker-controlled endpoi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4035/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CRITICAL: CVE-2026-4035 in mlflow/mlflow (<3.11.0) allows exfiltration of sensitive env creds via AI Gateway secrets. Impacts cloud artifact keys — risk of artifact poisoning & code exec. Update to 3.11.0. Details: https://radar.offseq.com/threat/cve-2026-4035-cwe-201-insertion-of-sensitive-infor-704b6815 #OffSeq #CVE20264035 #CloudSec

🟠 CVE-2026-50031 - High (7.5)

ipmi-oem in FreeIPMI before 1.16.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50031/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-10629 - Critical (9.1)

SIP signaling stack in Verizon IMS (unspecified version) implements SIP signaling without IPsec integrity protection (missing Security-Client/Security-Server headers and ESP traffic), which allows an on-path attacker to compromise confidentiality,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10629/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

:dumpster_fire_gif: :blobcatpopcorn: :dumpster_fire_gif:

https://www.kb.cert.org/vuls/id/615987

CVE-2026-10629
Verizon IMS deployments were observed transmitting SIP signaling without integrity protection. REGISTER exchanges lacked Security-Client, Security-Server, and Security-Verify headers, and no ESP-encapsulated SIP traffic was detected during subsequent signaling such as INVITE, MESSAGE, BYE, and UPDATE. This pattern persisted across devices, operating systems, and network conditions, indicating a deliberate network configuration rather than a transient issue.

Per 3GPP TS 33.203 and GSMA IR.92, SIP signaling between the UE and P-CSCF must be protected using IPsec ESP following IMS AKA authentication, with negotiation occurring during registration. The absence of this protection allows attackers to manipulate SIP signaling undetected, enabling call hijacking, spoofing, denial-of-service, and misrouting of emergency calls.

Verizon initially acknowledged the issue and stated that integrity support would be available upon request and extended broadly later in the year. However, the company has since ceased participation in coordination, including follow-up discussions and draft review, and has not provided verifiable evidence of mitigation. As remediation remains unconfirmed, this disclosure proceeds to inform users of an ongoing security exposure.

Independent verification would require observation of successful SIP security negotiation, ESP-protected traffic, or official confirmation from Verizon.

🟠 CVE-2026-10622 - High (8.2)

Improper Authentication in REST API in Collibra Agent, allows a remote unauthenticated attacker to access privileged functionality via exposed '/rest/* endpoints.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-10621 - High (7.5)

Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during ZIP extraction, this can allow an attacker to w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10621/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Tenable Research Advisories added this yesterday:

HIGH: CVE-2026-28299: SolarWinds Web Help Desk Unauthenticated File Upload https://www.tenable.com/security/research/tra-2026-48 @tenable #infosec #vulnerability

🟠 CVE-2026-28299 - High (8.2)

SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insufficient memory.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28299/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49120 - High (8.5)

Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal network requests by creating FHIR Subscription resources with arbitrary endpoint...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49120/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-5076 - Critical (9.8)

The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset key in the `arm_reset_password_key` user meta fie...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5076/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5073 - High (7.5)

The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'arm_directory_paging_action' AJAX action in all versions up to, and including, 7.3.1. This is due to insufficient escaping on the user-suppl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5073/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CRITICAL: Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited

Google patched 124 Android vulnerabilities in June 2026, including CVE-2025-48595, a high-severity privilege escalation flaw (CVSS 8.4) in the Framework component that is actively exploited in the wild. The vulnerability affects Android 14, 15, 16, and 16 QPR2, allowing code execution through integ…

https://threatnoir.com/focus

#infosec #cybersecurity

Recent reports highlight escalating geopolitical tensions, particularly fresh US and Iranian strikes, prompting the US House to approve a resolution limiting military action. Concurrently, France has restricted Israeli participation at the Eurosatory 2026 defense exhibition.

In technology, Microsoft Build 2026 introduced advanced AI, including the MAI-Thinking-1 model and Copilot Agent Mode. However, GitHub Copilot's new token billing system is causing significant cost increases for users.

On the cybersecurity front, Google has patched an actively exploited high-severity Android flaw (CVE-2025-48595). Additionally, Russian maritime entities have been targeted by hackers, and the FBI warns of the Kali365 Phishing-as-a-Service platform.

#AnonNews_irc #Cybersecurity #News

⚪️ Android patches 124 vulnerabilities, including a 0‑day under active attack

🗨️ The June Android update bundle includes fixes for 124 vulnerabilities. Among them is the already-exploited issue CVE-2025-48595, which affects Android 14, 15, 16, and 16 QPR2 and allows privilege escalation on the device without any user interaction. The 0-day vulnerability…

🔗 https://hackmag.com/news/android-patch?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

⚠️ CRITICAL: Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited

Google patched 124 Android vulnerabilities in June 2026, including CVE-2025-48595, a high-severity privilege escalation flaw (CVSS 8.4) in the Framework component that is actively exploited in the wild. The vulnerability affects Android 14, 15, 16, and 16 QPR2, allowing code execution through integ…

https://threatnoir.com/focus

#infosec #cybersecurity

Recent reports highlight escalating geopolitical tensions, particularly fresh US and Iranian strikes, prompting the US House to approve a resolution limiting military action. Concurrently, France has restricted Israeli participation at the Eurosatory 2026 defense exhibition.

In technology, Microsoft Build 2026 introduced advanced AI, including the MAI-Thinking-1 model and Copilot Agent Mode. However, GitHub Copilot's new token billing system is causing significant cost increases for users.

On the cybersecurity front, Google has patched an actively exploited high-severity Android flaw (CVE-2025-48595). Additionally, Russian maritime entities have been targeted by hackers, and the FBI warns of the Kali365 Phishing-as-a-Service platform.

#AnonNews_irc #Cybersecurity #News

⚪️ Android patches 124 vulnerabilities, including a 0‑day under active attack

🗨️ The June Android update bundle includes fixes for 124 vulnerabilities. Among them is the already-exploited issue CVE-2025-48595, which affects Android 14, 15, 16, and 16 QPR2 and allows privilege escalation on the device without any user interaction. The 0-day vulnerability…

🔗 https://hackmag.com/news/android-patch?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

Aggiornamenti Android giugno 2026: corretta una zero-day già sfruttata in attacchi mirati

Google rilascia il bollettino di sicurezza Android per il mese di giugno 2026 con patch per 124 vulnerabilità, tra cui la zero-day CVE-2025-48595...

🔗️ [Cybersecurity360] https://link.is.it/fQgerZ

Google Patches Android Zero-Day CVE-2025-48595 Exploited in Targeted Attacks

Google has released its June 2026 Android security update, addressing 124 vulnerabilities, including one actively exploited zero-day. The zero-day —

🔗️ [Thecyberexpress] https://link.is.it/nMTbDs

Google Android security bulletin for June 2026 Patches Over 100 Flaws, Including One Actively Exploited Vulnerability

Google's June 2026 Android Security Bulletin addresses 122 vulnerabilities with 18 critical flaws and one high-severity zero-day (CVE-2025-48595) confirmed to be under active, targeted exploitation.

**This month a bunch of critical flaws including one actively exploited and a huge list of patches. Most users can't rush the patch because their vendors may not have released an updated version of Android for their devices. Once you get a notification that an update is available for your phone, do not delay the update.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/google-android-security-bulletin-for-june-2026-patches-over-100-flaws-including-actively-exploited-framework-vulnerability-4-2-k-0-f/gD2P6Ple2L

Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited

**Critical Alert:** A severe vulnerability (CVE-2025-48595) has been identified and requires immediate attention from security teams worldwide.

## The Details

https://securitycyber.uk

Resources: https://securitycyber.uk | https://www.hackthebox.com

🚨 [CISA-2026:0602] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0602)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2022-0492 (https://secdb.nttzen.cloud/cve/detail/CVE-2022-0492)
- Name: Linux Kernel Improper Authentication Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af ; https://www.kernel.org/ ; https://nvd.nist.gov/vuln/detail/CVE-2022-0492

⚠️ CVE-2025-48595 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-48595)
- Name: Android Framework Integer Overflow Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Android
- Product: Framework
- Notes: https://source.android.com/docs/security/bulletin/2026/2026-06-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48595

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260602 #cisa20260602 #cve_2022_0492 #cve_2025_48595 #cve20220492 #cve202548595

CISA has added to the KEV catalogue.

CVE-2025-48595: Android Framework Integer Overflow Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-48595

CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2022-0492 #CISA #infosec #Linux #Android #vulnerability

CVE ID: CVE-2025-48595
Vendor: Android
Product: Framework
Date Added: 2026-06-02
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-48595

Google disclosed CVE-2025-48595 to OEMs in a security preview release near the end of September 2025. Those patches are allowed to be shipped right away, so it was included in our 2025092501 release. We noted it was already publicly fixed so it was added to our regular releases too in 2025100300.

June 2026 Android Security Bulletin notes CVE-2025-48595 is being exploited in the wild. It's being widely misreported in tech media as a 0-day vulnerability being exploited. That's a major misunderstanding of Android Security Bulletins and how poorly OEMs keep up with patches.

🔴 CVE-2026-0611 - Critical (9.8)

Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthenticated remote code execution vulnerability through a deprecated .NET Remoting HTTP channel exposed on port 8989 that allows attackers to perform ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0611/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-37226 - High (7.5)

FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lookup function returns NULL, which is enforced by assert() in Debug builds (SIGABRT) and dereferenced in Release builds (SIGSEGV...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-37226/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-40715 - High (7.8)

Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40715/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-40619 - High (7.8)

A high security vulnerability affecting Security Center main server installations has been identified. It could allow an attacker with local OS privileges to the main server to access the Server Admin credentials. A third party hired by Genetec fo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40619/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24237 - High (7.8)

NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24237/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-40780 - High (7.5)

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation.

This issue affects BookIt: from n/a before 2.5.4.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40780/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42670 - High (7.5)

Missing Authorization vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Five Star Restaurant Reservations: from n/a throug...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42670/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24221 - High (7.8)

NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering and information disclosure.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24221/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-10591 - High (8.8)

Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via crafted instructions that cause writes to execution-sensitive paths ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10591/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-47117 - Critical (9.8)

OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used broad substring matching on the user-supplied model_name parameter, allowing a value such as attac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47117/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45553 - High (7.5)

NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructured_text() renders reStructuredText server-side with Docutils without disabling file insertion directives. When a NiceGUI application passes attacker-controlled content t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45553/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-39553 - High (8.1)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes WaveRide allows PHP Local File Inclusion.

This issue affects WaveRide: from n/a through 1.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39553/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-39552 - High (8.1)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Supply Co. Blueprint allows PHP Local File Inclusion.

This issue affects Blueprint: from n/a before 1.1.5.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39552/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-7201 - High (8.8)

CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity 15.2.x before 15.2.8441, 15.3.x before 15.3.8531, and 15.4.x before 15.4.8630 allows a remote authenticated attacker to modify account properties of o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7201/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-7198 - Critical (9.8)

CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restricted, resulting in full compromise of confidentiality, integrity, an...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-68886 - High (8.1)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in androThemes Cookiteer allows PHP Local File Inclusion.

This issue affects Cookiteer: from n/a through 1.4.8.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68886/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-58707 - High (8.1)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Spin allows PHP Local File Inclusion.

This issue affects Spin: from n/a through 1.8.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-58707/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🛡️ CVE-2026-10510: HIGH severity XSS in TECNO Mobile AI Assistant Lifestyle (v1.3.0.002). Remote JS execution via GeniexWebView; no patch yet. Monitor vendor updates & avoid untrusted links. https://radar.offseq.com/threat/cve-2026-10510-cwe-79-improper-neutralization-of-i-501798a2 #OffSeq #Android #XSS #Vuln

🟠 CVE-2025-58897 - High (8.1)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Fermentio allows PHP Local File Inclusion.

This issue affects Fermentio: from n/a through 1.5.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-58897/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-69369 - High (8.1)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion.

This issue affects Racquet: from n/a through 1.12.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69369/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-39555 - High (8.1)

Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection.

This issue affects Askka: from n/a through 1.3.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39555/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔎 HIGH severity: CVE-2026-8293 in Really Simple Security WP plugin (<9.5.10.1) allows 2FA bypass via REST endpoints if password is known. Update to 9.5.10.1+ or disable affected endpoints. https://radar.offseq.com/threat/cve-2026-8293-cwe-287-improper-authentication-in-r-fe9aba14 #OffSeq #WordPress #CVE20268293 #Security

🚨 CRITICAL: CVE-2026-34906 in Simple SA Wirtualna Uczelnia enables unauthenticated RCE via SSTI in redirectToUrl. No patch yet — restrict access & monitor for exploitation. https://radar.offseq.com/threat/cve-2026-34906-cwe-1336-improper-neutralization-of-6a6ef566 #OffSeq #CVE202634906 #infosec #RCE

🔴 CVE-2025-53209 - Critical (9.8)

Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation.

This issue affects Masteriyo LMS PRO: from n/a through 2.20.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-53209/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-53209 - Critical (9.8)

Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation.

This issue affects Masteriyo LMS PRO: from n/a through 2.20.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-53209/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-39551 - High (8.1)

Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection.

This issue affects Töbel: from n/a through 1.8.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39551/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-42684 - Critical (9.3)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ahmad WP Job Portal allows Blind SQL Injection.

This issue affects WP Job Portal: from n/a through 2.5.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42684/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-53345 - High (8.8)

Missing Authorization vulnerability leading to code execution after installing malicious vulnerable plugin in ThimPress Thim Core.

This issue affects Thim Core: from n/a through 2.3.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-53345/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-53345 - High (8.8)

Missing Authorization vulnerability leading to code execution after installing malicious vulnerable plugin in ThimPress Thim Core.

This issue affects Thim Core: from n/a through 2.3.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-53345/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-58705 - High (8.1)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion.

This issue affects Crafti: from n/a through 1.12.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-58705/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-58705 - High (8.1)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion.

This issue affects Crafti: from n/a through 1.12.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-58705/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-58024 - High (7.5)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in UnboundStudio Accordion FAQ allows PHP Local File Inclusion.

This issue affects Accordion FAQ: from n/a through 2.2.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-58024/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-58024 - High (7.5)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in UnboundStudio Accordion FAQ allows PHP Local File Inclusion.

This issue affects Accordion FAQ: from n/a through 2.2.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-58024/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-53440 - High (8.1)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion.

This issue affects Confidant: from n/a through 1.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-53440/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42669 - High (7.5)

Missing Authorization vulnerability in EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects EventPrime: from n/a through 4.3.2.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42669/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-39550 - High (8.1)

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection.

This issue affects Aperitif: from n/a through 1.6.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39550/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5422 - High (8.1)

A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the _get_os_path() function within jupyter_server/services/contents/fileio.py. The check uses startswith(root) without appe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5422/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5422 - High (8.1)

A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the _get_os_path() function within jupyter_server/services/contents/fileio.py. The check uses startswith(root) without appe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5422/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-3514 - High (7.5)

In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes. Specifically, the authentication middleware exempts any URL path ending with 'health...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3514/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-3514 - High (7.5)

In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes. Specifically, the authentication middleware exempts any URL path ending with 'health...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3514/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CRITICAL: Critical Kirki flaw exploited to hijack WordPress admin accounts

Critical privilege escalation flaw in Kirki WordPress plugin (CVE-2026-8206) allows unauthenticated attackers to reset any user account including admins via an unvalidated REST API endpoint. Wordfence has already blocked 222+ exploitation attempts in 24 hours. Any WordPress site running Kirki versi…

https://threatnoir.com/focus

#infosec #cybersecurity

⚠️ CRITICAL: Critical Kirki flaw exploited to hijack WordPress admin accounts

Critical privilege escalation flaw in Kirki WordPress plugin (CVE-2026-8206) allows unauthenticated attackers to reset any user account including admins via an unvalidated REST API endpoint. Wordfence has already blocked 222+ exploitation attempts in 24 hours. Any WordPress site running Kirki versi…

https://threatnoir.com/focus

#infosec #cybersecurity

Critical Kirki flaw exploited to hijack WordPress admin accounts

Hackers are exploiting a critical privilege escalation vulnerability (CVE-2026-8206) in the Kirki plugin for WordPress to take over any user...

🔗️ [Bleepingcomputer] https://link.is.it/CG9Q56

🔴 CVE-2026-8206 - Critical (9.8)

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions 6.0.0 to 6.0.6. This is due to the plugin accepting an arbitrary email address when a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8206/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚩 CRITICAL: CVE-2026-8206 in Kirki Page Builder (v6.0.0 – 6.0.6) lets unauth attackers reset any user password & hijack WordPress accounts. No patch yet — admins should disable or monitor plugin. Details: https://radar.offseq.com/threat/cve-2026-8206-cwe-269-improper-privilege-managemen-ac423059 #OffSeq #WordPress #Infosec

CVE-2026-25260: HIGH severity TOCTOU race condition in Qualcomm Snapdragon (Cologne, FastConnect, WCD series). Memory corruption risk — no patch yet. Monitor advisories for updates. https://radar.offseq.com/threat/cve-2026-25260-cwe-367-time-of-check-time-of-use-t-bb1b86cd #OffSeq #Qualcomm #Vuln #Infosec

🟠 CVE-2026-28577 - High (7.8)

In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28577/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0097 - High (8)

In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User in...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0097/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-0095 - High (8)

In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process due to an integer overflow. This could lead to local escalation of privilege with no additional execution pri...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-0095/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Asim Manizada disclosed CVE-2026-46243 on the oss-security list May 28, after a private report May 16 and a coordinated embargo. The bug sits in the kernel's CIFS file-sharing client. Any local user can forge a request that starts the privileged cifs.upcall helper as root. In their own mount namespace, that helper loads their code as root. Patches landed around June 2. The root flaw lived in the handshake to a userspace helper wired up years ago.

#Linux #CyberSecurity #InfoSec #Kernel

CIFSwitch: 19-Year-Old Linux Kernel Vulnerability Allows Local Root Access

A 19-year-old vulnerability in the Linux kernel's CIFS subsystem (CVE-2026-46243) allows unprivileged users to gain root access by forging key descriptions that hijack a root-level helper. The flaw enables attackers to execute arbitrary code through namespace manipulation and malicious module loading on various Linux distributions.

**If you are using CIFS on Linux, plan a quick patch to Linux kernel and cifs-utils security updates. If you don't use CIFS, disable unprivileged user namespaces or remove the cifs-utils package.**
#cybersecurity #infosec #advisory #databreach
https://beyondmachines.net/event_details/cifswitch-19-year-old-linux-kernel-vulnerability-allows-local-root-access-b-9-k-l-p/gD2P6Ple2L

CISA Warns of Active Exploitation Targeting Oracle WebLogic Server Vulnerabilities

Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0 are being actively attacked via CVE-2024-21182, a high-severity flaw allowing unauthenticated data access via T3 and IIOP protocols. CISA mandated federal agencies patch the vulnerability by June 4, 2026, after evidence of active exploitation.

**Apply Oracle's July 2024 Critical Patch Update (and all subsequent patches) to your WebLogic Server installations right away, as attackers are actively exploiting this flaw. In the meantime, restrict or disable access to the T3 and IIOP protocols. If the server does not serve public content for external visitors, make sure WebLogic servers are only reachable from trusted internal networks, not the open internet.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-warns-of-active-exploitation-targeting-oracle-weblogic-server-vulnerabilities-9-h-h-w-r/gD2P6Ple2L

🐛 Oracle WebLogic Server CVE-2024-21182 Exploitati...

📝 US federal depa...

https://www.csoonline.com/article/4180218/two-year-old-oracle-weblogic-server-vulnerability-is-being-exploited.html

📰 Two-year old Oracle WebLogic Server vulnerability is being exploited | CSO Online

#CVE #ZeroDay

Critical RCE Vulnerability in HP Poly VoIP Phones Exposes Enterprise Networks

HP Poly VoIP phones are vulnerable to a critical stack-based buffer overflow (CVE-2026-0826) that allows unauthenticated remote code execution with root privileges. Attackers can exploit this flaw via malicious SIP INVITE requests to gain a persistent foothold in enterprise networks and intercept sensitive audio.

**Make sure all your VVX and Trio phones are isolated from the internet and reachable only from trusted internal networks. Then update the firmware right away (VVX to UCS 6.4.8, Trio 8300 to UCS 8.1.7, Trio 8500/8800 to UCS 7.2.8). If you can't patch, disable ICE connectivity in the device settings as a temporary fix.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-rce-vulnerability-in-hp-poly-voip-phones-exposes-enterprise-networks-l-d-s-3-8/gD2P6Ple2L

🔴 HP Poly VoIP Vulnerability CVE-2026-0826

📝 A critical buffer ov...

https://www.csoonline.com/article/4180223/hp-poly-voip-vulnerability-sets-the-stage-for-executive-voice-deepfakes.html

📰 HP Poly VoIP vulnerability sets the stage for executive voice deepfakes | CSO Online

#CVE #RedTeam

Rapid7, posted yesterday: CVE-2026-0826: How an Old Bug Can Feed AI-Powered Impersonation https://www.rapid7.com/blog/post/ve-cve-2026-0826-how-an-old-bug-can-feed-ai-powered-impersonation/ @Rapid7Official #infosec #vulnerability

⚠️ CRITICAL: Attackers are exploiting Palo Alto Networks defect that initially flew under the radar

Palo Alto Networks GlobalProtect portals and gateways are under active attack via CVE-2026-0257, a critical authentication-bypass vulnerability. Attackers can forge valid auth cookies using public TLS certificates and gain VPN access with a single HTTP request. All affected customers are at immedia…

https://threatnoir.com/focus

#infosec #cybersecurity

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

**Critical Alert:** A severe vulnerability (CVE-2026-0257) has been identified and requires immediate attention from security teams worldwide.

## The Details

https://securitycyber.uk

Resources: https://securitycyber.uk | https://www.hackthebox.com

🟠 CVE-2026-47201 - High (8.5)

authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is vulnerable to XML Signature Wrapping when validating upstream SAML responses. An attacker with any account ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47201/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CRITICAL: Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts

Critical privilege escalation vulnerability CVE-2026-8732 in WP Maps Pro is actively being exploited to create unauthorized administrator accounts on WordPress sites. Any unpatched installation is at immediate risk of complete site takeover. This affects all versions prior to 6.1.1.

https://threatnoir.com/focus

#infosec #cybersecurity

Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts

**Critical Alert:** A severe vulnerability (CVE-2026-8732) has been identified and requires immediate attention from security teams worldwide.

## The Details

https://securitycyber.uk

Resources: https://securitycyber.uk | https://www.hackthebox.com

Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts

**Critical Alert:** A severe vulnerability (CVE-2026-8732) has been identified and requires immediate attention from security teams worldwide.

## The Details

https://securitycyber.uk

Resources: https://securitycyber.uk | https://www.hackthebox.com

Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts

**Critical Alert:** A severe vulnerability (CVE-2026-8732) has been identified and requires immediate attention from security teams worldwide.

## The Details

https://securitycyber.uk

Resources: https://securitycyber.uk | https://www.hackthebox.com

Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts

**Critical Alert:** A severe vulnerability (CVE-2026-8732) has been identified and requires immediate attention from security teams worldwide.

## The Details

https://securitycyber.uk

Resources: https://securitycyber.uk | https://www.hackthebox.com

Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts

**Critical Alert:** A severe vulnerability (CVE-2026-8732) has been identified and requires immediate attention from security teams worldwide.

## The Details

https://securitycyber.uk

Resources: https://securitycyber.uk | https://www.hackthebox.com

Follow-up to last week's TeamSpeak bugs: the story behind the use-after-free (CVE-2026-4390). A race in the handshake, a dangling pointer across two hashmaps, and a server that logs "please do not hack me" before it crashes.
https://modzero.com/en/blog/please-do-not-hack-me/

If you're running LiteSpeed Cache below version 7.8, I'd update it now. CVE-2026-3375 allows an unauthorised party to gain full administrative control over your site. Given how widely this plugin is installed, the exposure is significant. Check your version and apply the update.

#WordPress #WordPressSecurity #LiteSpeedCache #WebSecurity #CyberSecurity

https://wpguy.uk/blog/high-vulnerability-in-litespeed-cache-litespeed-cache-litespeed-cache-78/