🟠 CVE-2026-86378 - High (8.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86378/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-85898 - High (8.8)

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch CVE-2026-76418 now. This high-severity Cisco Secure Firewall vulnerability is exploited in the wild to trigger SSL VPN DoS reloads on ASA and FTD.

#Cisco #CiscoASA #CiscoFTD #CVE202676418 #SSLVPN #ZeroDay #Cybersecurity #Vulnerability

https://securityonline.info/cisco-secure-firewall-vulnerability-exploited-ssl-vpn/?utm_source=mastodon&utm_medium=jetpack_social

Patch CVE-2026-76418 now. This high-severity Cisco Secure Firewall vulnerability is exploited in the wild to trigger SSL VPN DoS reloads on ASA and FTD.

#Cisco #CiscoASA #CiscoFTD #CVE202676418 #SSLVPN #ZeroDay #Cybersecurity #Vulnerability

https://securityonline.info/cisco-secure-firewall-vulnerability-exploited-ssl-vpn/?utm_source=mastodon&utm_medium=jetpack_social

Cisco zero-day: CVE-2026-76418 (8.6 high)
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75

#cisco #zeroday #eitw #CVE

Patch 9 critical Adobe vulnerabilities in Adobe Campaign Classic and Connect, including 9.9 CVSS RCE flaws CVE-2026-104351 and CVE-2026-48360.

#Adobe #AdobeCampaign #AdobeConnect #RCE #SQLInjection #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/adobe-vulnerabilities-campaign-classic-connect/?utm_source=mastodon&utm_medium=jetpack_social

Kernel security reboots Friday, Oct 30, 8:00 AM–12:00 PM PDT (15:00–19:00 UTC): a number of OSL-hosted services, including our FTP mirrors, will each be down for a few minutes while their servers move to a fixed kernel for CVE-2026-46300. Details: https://status.osuosl.org/pages/maintenance/526712bf10cd4e587b000014/6ae28f958ca069152f7f8fc2

CISA adds Linux kernel vulnerability CVE-2026-46300, chained with PHP2Shell for root, and VMware ESX flaw CVE-2026-41709 to KEV. Patch now.

#CISA #KEV #LinuxKernel #PHP2Shell #VMware #ESX #CVE202646300 #ActiveExploitation

https://securityonline.info/cisa-kev-linux-kernel-php2shell-vmware-esx/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1028] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-41709 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41709)
- Name: Broadcom VMWare ESX Insufficient Logging Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Broadcom
- Product: VMware ESX
- Notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-41709

⚠️ CVE-2026-46300 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-46300)
- Name: Linux Kernel Missing Initialization of a Variable Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 ; https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 ; https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e ; https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a ; https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 ; https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46300

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261028 #cisa20261028 #cve_2026_41709 #cve_2026_46300 #cve202641709 #cve202646300

Kernel security reboots Friday, Oct 30, 8:00 AM–12:00 PM PDT (15:00–19:00 UTC): a number of OSL-hosted services, including our FTP mirrors, will each be down for a few minutes while their servers move to a fixed kernel for CVE-2026-46300. Details: https://status.osuosl.org/pages/maintenance/526712bf10cd4e587b000014/6ae28f958ca069152f7f8fc2

CISA adds Linux kernel vulnerability CVE-2026-46300, chained with PHP2Shell for root, and VMware ESX flaw CVE-2026-41709 to KEV. Patch now.

#CISA #KEV #LinuxKernel #PHP2Shell #VMware #ESX #CVE202646300 #ActiveExploitation

https://securityonline.info/cisa-kev-linux-kernel-php2shell-vmware-esx/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1028] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-41709 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41709)
- Name: Broadcom VMWare ESX Insufficient Logging Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Broadcom
- Product: VMware ESX
- Notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-41709

⚠️ CVE-2026-46300 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-46300)
- Name: Linux Kernel Missing Initialization of a Variable Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 ; https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 ; https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e ; https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a ; https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 ; https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46300

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261028 #cisa20261028 #cve_2026_41709 #cve_2026_46300 #cve202641709 #cve202646300

CVE ID: CVE-2026-46300
Vendor: Linux
Product: Kernel
Date Added: 2026-10-28
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-46300

CVE-2026-118344 (CRITICAL): Google Chrome before 156.0.8078.73 is vulnerable to a use-after-free in Layout, allowing remote code execution inside the sandbox. Update now. https://radar.offseq.com/threat/cve-2026-118344-use-after-free-in-google-chrome-1373d02f29569b9e #OffSeq #Chrome #CVE2026118344 #Infosec

CVE-2026-109516: CRITICAL auth bypass in guruteam Bot for Telegram on WooCommerce (<=1.3.0). Unauthenticated attackers can hijack any WP account, incl. admin. Disable plugin or block REST endpoints until patched. https://radar.offseq.com/threat/cve-2026-109516-cwe-287-improper-authentication-in-guruteam-bot-for-telegram-on-woocommerce-292ec2d16c9aa743 #OffSeq #WordPress #CVE2026109516

CVE-2026-109516: CRITICAL auth bypass in guruteam Bot for Telegram on WooCommerce (<=1.3.0). Unauthenticated attackers can hijack any WP account, incl. admin. Disable plugin or block REST endpoints until patched. https://radar.offseq.com/threat/cve-2026-109516-cwe-287-improper-authentication-in-guruteam-bot-for-telegram-on-woocommerce-292ec2d16c9aa743 #OffSeq #WordPress #CVE2026109516

CVE-2026-66088 (CRITICAL, CVSS 9.4) in openEQUELLA <2026.1: system.execute() lets users run arbitrary OS commands as the service account. Full system compromise possible. Patch to 2026.1+ & restrict scripting rights now. https://radar.offseq.com/threat/cve-2026-66088-cwe-78-os-command-injection-in-apereo-foundation-openequella-0f357edf54f76fa6 #OffSeq #Vuln #openEQUELLA

CVE-2026-66088 (CRITICAL, CVSS 9.4) in openEQUELLA <2026.1: system.execute() lets users run arbitrary OS commands as the service account. Full system compromise possible. Patch to 2026.1+ & restrict scripting rights now. https://radar.offseq.com/threat/cve-2026-66088-cwe-78-os-command-injection-in-apereo-foundation-openequella-0f357edf54f76fa6 #OffSeq #Vuln #openEQUELLA

🟠 CVE-2026-113387 - High (8.6)

The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An unauthenticated threat actor could overwrite the plugin's configuration to serve arbitrary scripts.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-113387/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-113387 - High (8.6)

The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An unauthenticated threat actor could overwrite the plugin's configuration to serve arbitrary scripts.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-113387/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92797 - High (8.8)

The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the save_profile_fields() function that uses an isset() condition at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92797/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86377 - High (7.6)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Out-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86377/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

kleor Contact Manager <=9.1.2 suffers CRITICAL (CVSS 9.8) file upload vuln (CVE-2026-109218). Unauthenticated users can exploit trailing dots to upload dangerous files, risking RCE. Harden configs & restrict uploads. https://radar.offseq.com/threat/cve-2026-109218-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-kleor-contact-manager-0a4841efd9c43b5a #OffSeq #WordPress #Infosec

🔴 CVE-2026-106013 - Critical (9.8)

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verify_twitter_callback function because after ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-106013/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-106013 (CRITICAL): Jupiter X Core ≤4.61.0 allows authentication bypass via Twitter/X login handler — attackers can access WP admin as app owner. Disable Twitter/X login or the plugin until fixed. https://radar.offseq.com/threat/cve-2026-106013-cwe-287-improper-authentication-in-artbees-jupiter-x-core-324b257972296553 #OffSeq #WordPress #CVE2026_106013 #Infosec

🟠 CVE-2026-93851 - High (8)

Mattermost versions 11.9.x &lt;= 11.9.1, 11.8.x &lt;= 11.8.5, 11.7.x &lt;= 11.7.10 fail to validate the target post ID in the Agents plugin&#039;s mention reminder component, which allows an authenticated user who can post in a channel visible to ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93851/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93851 - High (8)

Mattermost versions 11.9.x &lt;= 11.9.1, 11.8.x &lt;= 11.8.5, 11.7.x &lt;= 11.7.10 fail to validate the target post ID in the Agents plugin&#039;s mention reminder component, which allows an authenticated user who can post in a channel visible to ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93851/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-85749 - High (8.1)

MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, including the U/user, D/domain-admin, and H/host roles, can release to inbox or permanently delete the quarantined mail of any ot...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85749/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-85749 - High (8.1)

MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, including the U/user, D/domain-admin, and H/host roles, can release to inbox or permanently delete the quarantined mail of any ot...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85749/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

D-Link DIR-505 v1.10B02 (CVE-2026-118579) – CRITICAL flaw in /secmark1524.cgi enables remote unauthenticated backdoor creation. No patch; public exploit exists. Isolate devices and monitor for updates. https://radar.offseq.com/threat/a-weakness-has-been-identified-in-d-link-dir-505-110b02-cve-2026-118579-3434a71826170643 #OffSeq #CVE2026118579 #IoTSecurity #Vuln

CVE-2026-118579: D-Link DIR-505 v1.10B02 has a CRITICAL web management backdoor (CVSS 9.3) via /secmark1524.cgi. Public exploit code is live. Restrict remote admin & monitor closely. https://radar.offseq.com/threat/cve-2026-118579-backdoor-in-d-link-dir-505-bc3b2c9ce51cde6d #OffSeq #CVE #Infosec #RouterSecurity

🔴 CVE-2026-118579 - Critical (9.8)

A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118579/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

D-Link DIR-505 v1.10B02 (CVE-2026-118579) – CRITICAL flaw in /secmark1524.cgi enables remote unauthenticated backdoor creation. No patch; public exploit exists. Isolate devices and monitor for updates. https://radar.offseq.com/threat/a-weakness-has-been-identified-in-d-link-dir-505-110b02-cve-2026-118579-3434a71826170643 #OffSeq #CVE2026118579 #IoTSecurity #Vuln

CVE-2026-118579: D-Link DIR-505 v1.10B02 has a CRITICAL web management backdoor (CVSS 9.3) via /secmark1524.cgi. Public exploit code is live. Restrict remote admin & monitor closely. https://radar.offseq.com/threat/cve-2026-118579-backdoor-in-d-link-dir-505-bc3b2c9ce51cde6d #OffSeq #CVE #Infosec #RouterSecurity

🔴 CVE-2026-118579 - Critical (9.8)

A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118579/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 NEW on CISA KEV — exploited in the wild

🛡 Broadcom VMware ESX
Broadcom VMWare ESX Insufficient Logging Vulnerability
CVE: CVE-2026-41709 · patch by 2026-11-11

Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.

🔗 https://ninjasignal.ninja/intel/cve/CVE-2026-41709
#cybersecurity #KEV #CVE #infosec

CISA adds Linux kernel vulnerability CVE-2026-46300, chained with PHP2Shell for root, and VMware ESX flaw CVE-2026-41709 to KEV. Patch now.

#CISA #KEV #LinuxKernel #PHP2Shell #VMware #ESX #CVE202646300 #ActiveExploitation

https://securityonline.info/cisa-kev-linux-kernel-php2shell-vmware-esx/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1028] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-41709 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41709)
- Name: Broadcom VMWare ESX Insufficient Logging Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Broadcom
- Product: VMware ESX
- Notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-41709

⚠️ CVE-2026-46300 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-46300)
- Name: Linux Kernel Missing Initialization of a Variable Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 ; https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 ; https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e ; https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a ; https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 ; https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46300

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261028 #cisa20261028 #cve_2026_41709 #cve_2026_46300 #cve202641709 #cve202646300

CISA adds Linux kernel vulnerability CVE-2026-46300, chained with PHP2Shell for root, and VMware ESX flaw CVE-2026-41709 to KEV. Patch now.

#CISA #KEV #LinuxKernel #PHP2Shell #VMware #ESX #CVE202646300 #ActiveExploitation

https://securityonline.info/cisa-kev-linux-kernel-php2shell-vmware-esx/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1028] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-41709 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41709)
- Name: Broadcom VMWare ESX Insufficient Logging Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Broadcom
- Product: VMware ESX
- Notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-41709

⚠️ CVE-2026-46300 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-46300)
- Name: Linux Kernel Missing Initialization of a Variable Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 ; https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 ; https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e ; https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a ; https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 ; https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46300

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261028 #cisa20261028 #cve_2026_41709 #cve_2026_46300 #cve202641709 #cve202646300

CVE ID: CVE-2026-41709
Vendor: Broadcom
Product: VMware ESX
Date Added: 2026-10-28
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-41709

What. The. Fuck.

https://access.redhat.com/security/cve/cve-2026-117574

A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials from the shared store, it injects the target tenant's application programming interface (API) keys into the request. This flaw allows an attacker to perform unauthorized requests and consume another tenant's large language model (LLM) resources and quotas.

What. The. Fuck.

https://access.redhat.com/security/cve/cve-2026-117574

A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials from the shared store, it injects the target tenant's application programming interface (API) keys into the request. This flaw allows an attacker to perform unauthorized requests and consume another tenant's large language model (LLM) resources and quotas.

🟠 CVE-2026-109411 - High (8.1)

An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs_ceph_rgw module...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109411/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-109411 - High (8.1)

An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs_ceph_rgw module...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109411/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118688 - High (7.9)

wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing slash to rename source paths, causing renameat on macOS and FreeBSD hosts to follow directory symlinks. A guest with sandbox write acces...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118686 - High (7.5)

EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the password-redaction regular expression applied during API error handling consumes excessive CPU on long request bodies. Unauthenticated remote atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118686/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Endor Labs’ AI SAST found two Apache Kafka zero-days, now fixed: CVE-2026-114349 and CVE-2026-111551. Payloads: 90, 9, and 12 bytes. Upgrade to 4.2.2, 4.3.2, or 4.4.0 and set max.decompressed.message.bytes
https://www.endorlabs.com/learn/endor-labs-ai-sast-finds-two-apache-kafka-zero-days-unbounded-memory-allocation-from-brokers-to-kafka-streams?

Wasmtime Patches Critical Sandbox Escape Flaws in Cranelift Compiler

Wasmtime fixed two critical vulnerabilities (CVE-2026-115889 and CVE-2026-115893) that allow malicious WebAssembly modules to escape their sandboxes and execute arbitrary code on host systems. The flaws affect the Cranelift compiler and require immediate updates to Wasmtime 50.0.0 or other patched versions.

**If you use Wasmtime (directly, inside your own apps, or through tools like Spin), update ASAP to version 36.0.19, 48.0.7, 49.0.4 or 50.0.0, rebuild any applications that include it, and update Spin to 4.2.4. If you're still on the 24.x line, there is no patch, so upgrade to a supported version. If possible don't run WebAssembly code from sources you don't fully trust.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/wasmtime-patches-critical-sandbox-escape-flaws-in-cranelift-compiler-8-z-h-v-8/gD2P6Ple2L

🟠 CVE-2026-118660 - High (8.6)

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.0, Happy DOM loads iframe src URLs and link rel="stylesheet" href URLs by default while parsing untrusted HTML on the server because disa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118660/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118660 - High (8.6)

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.0, Happy DOM loads iframe src URLs and link rel="stylesheet" href URLs by default while parsing untrusted HTML on the server because disa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118660/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-13451 - High (7.7)

A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious `storageUri`. This Server-Side Request Forgery (SSRF) vulnerability all...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-13451/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Endor Labs’ AI SAST found two Apache Kafka zero-days, now fixed: CVE-2026-114349 and CVE-2026-111551. Payloads: 90, 9, and 12 bytes. Upgrade to 4.2.2, 4.3.2, or 4.4.0 and set max.decompressed.message.bytes
https://www.endorlabs.com/learn/endor-labs-ai-sast-finds-two-apache-kafka-zero-days-unbounded-memory-allocation-from-brokers-to-kafka-streams?

🟠 CVE-2026-118650 - High (7.5)

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a globally mounted middleware.Static instance can interpret an encoded request path differently from Echo's router because the router matches the still-encoded path while the static handler us...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch CVE-2026-118264 now. This 9.1 CVSS Echo Go framework vulnerability allows a WebSocket upgrade bypass of route-level access controls.

#Golang #EchoFramework #WebSocket #CVE2026118264 #AppSec #Cybersecurity #Vulnerability #InfoSec

https://meterpreter.org/echo-go-framework-websocket-bypass-cve-2026-118264/?utm_source=mastodon&utm_medium=jetpack_social

Patch CVE-2026-118264 now. This 9.1 CVSS Echo Go framework vulnerability allows a WebSocket upgrade bypass of route-level access controls.

#Golang #EchoFramework #WebSocket #CVE2026118264 #AppSec #Cybersecurity #Vulnerability #InfoSec

https://meterpreter.org/echo-go-framework-websocket-bypass-cve-2026-118264/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-118683 - High (8.8)

MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__init__, which passes a bundle's configs/logging.conf to logging.config.fileConfig that eval()s handler class and args fields. Attackers can publish a ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118683/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93522 - High (7.8)

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in https://x.org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in the X server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93522/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Juniper security bulletin fixes 18 Session Smart Router vulnerabilities, including CVSS 9.8 flaws CVE-2026-103406 and CVE-2026-103409. Update now.

#Juniper #SessionSmartRouter #SDWAN #CVE2026103406 #CVE2026103409 #NetworkSecurity #PatchNow #Vulnerability

https://securityonline.info/juniper-session-smart-router-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Juniper security bulletin fixes 18 Session Smart Router vulnerabilities, including CVSS 9.8 flaws CVE-2026-103406 and CVE-2026-103409. Update now.

#Juniper #SessionSmartRouter #SDWAN #CVE2026103406 #CVE2026103409 #NetworkSecurity #PatchNow #Vulnerability

https://securityonline.info/juniper-session-smart-router-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Apache Kafka fixes 12 vulnerabilities, including CVE-2026-110985, which skips JWT signature verification and grants full cluster access. Patch now.

#ApacheKafka #Kafka #CVE2026110985 #JWT #OAuth #DataStreaming #DoS #PatchNow

https://securityonline.info/apache-kafka-vulnerabilities-jwt-bypass/?utm_source=mastodon&utm_medium=jetpack_social

Apache Kafka fixes 12 vulnerabilities, including CVE-2026-110985, which skips JWT signature verification and grants full cluster access. Patch now.

#ApacheKafka #Kafka #CVE2026110985 #JWT #OAuth #DataStreaming #DoS #PatchNow

https://securityonline.info/apache-kafka-vulnerabilities-jwt-bypass/?utm_source=mastodon&utm_medium=jetpack_social

Jenkins fixes 15 vulnerabilities, including remote code execution flaws CVE-2026-117612 and CVE-2026-117614. Upgrade to 2.588 or LTS 2.580.2 now.

#Jenkins #CICD #DevSecOps #CVE2026117612 #RCE #XStream #SupplyChainSecurity #PatchNow

https://securityonline.info/jenkins-vulnerabilities-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

Jenkins fixes 15 vulnerabilities, including remote code execution flaws CVE-2026-117612 and CVE-2026-117614. Upgrade to 2.588 or LTS 2.580.2 now.

#Jenkins #CICD #DevSecOps #CVE2026117612 #RCE #XStream #SupplyChainSecurity #PatchNow

https://securityonline.info/jenkins-vulnerabilities-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

Chrome security update 156.0.8078.73 fixes 52 flaws, including critical Chrome vulnerabilities like sandbox escape CVE-2026-118306. Update now.

#Chrome #GoogleChrome #Chrome156 #BrowserSecurity #CVE2026118306 #SecurityUpdate #PatchNow #Vulnerability

https://securityonline.info/chrome-security-update-156-0-8078-73/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-84725 - High (8.1)

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the serve...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84725/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Jenkins fixes 15 vulnerabilities, including remote code execution flaws CVE-2026-117612 and CVE-2026-117614. Upgrade to 2.588 or LTS 2.580.2 now.

#Jenkins #CICD #DevSecOps #CVE2026117612 #RCE #XStream #SupplyChainSecurity #PatchNow

https://securityonline.info/jenkins-vulnerabilities-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

Jenkins fixes 15 vulnerabilities, including remote code execution flaws CVE-2026-117612 and CVE-2026-117614. Upgrade to 2.588 or LTS 2.580.2 now.

#Jenkins #CICD #DevSecOps #CVE2026117612 #RCE #XStream #SupplyChainSecurity #PatchNow

https://securityonline.info/jenkins-vulnerabilities-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

Reset the "days since hardcoded JWT SECRET" timer.

https://nvd.nist.gov/vuln/detail/cve-2026-117564

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonating any user ID or claiming the admin role for full administrative access.

An MLflow vulnerability, CVE-2026-116690, is exploited in the wild as proof-of-concept code for it and RCE flaw CVE-2026-116692 goes public. Patch now.

#MLflow #AISecurity #MLOps #CVE2026116690 #CVE2026116692 #PoC #ActiveExploitation #RCE

https://securityonline.info/mlflow-vulnerability-exploited-poc/?utm_source=mastodon&utm_medium=jetpack_social

Kerio Connect vulnerability CVE-2026-112353, a stored XSS flaw via SVG attachments, is exploited in the wild to steal mailboxes. Update to 10.0.8p2.

#KerioConnect #GFI #CVE2026112353 #XSS #EmailSecurity #Proofpoint #ActiveExploitation #PatchNow

https://securityonline.info/kerio-connect-vulnerability-cve-2026-112353-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Kerio Connect vulnerability CVE-2026-112353, a stored XSS flaw via SVG attachments, is exploited in the wild to steal mailboxes. Update to 10.0.8p2.

#KerioConnect #GFI #CVE2026112353 #XSS #EmailSecurity #Proofpoint #ActiveExploitation #PatchNow

https://securityonline.info/kerio-connect-vulnerability-cve-2026-112353-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Auth bypasses are so hot right now.

https://nvd.nist.gov/vuln/detail/cve-2026-112352

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random identifier or integrity protection. Attackers can guess default account names such as Admin or sftp_user and submit a forged username cookie to satisfy the login check in checkLogin (libwebcmn.so) and networkDiag.cgi, chaining into root command execution.

🟠 CVE-2026-111255 - High (7.5)

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 via the upload_image function. This is due to insufficient file type...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-111255/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93521 - High (7.8)

A buffer overflow in RandR
ChangeProviderProperty requests in https://x.org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93521/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59185 - High (8.5)

identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `POST /v1/workspaces/:workspace_id/projects/:project_id/github/connect/complete` endpoint in `internal/api/router.go` accepts `i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59185/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-56828 - High (8.8)

Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewire admin components retain authorization gaps after the earlier team-settings authorization fix. A staff member with only `view_users` and `access_dashboard`...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56828/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Ultimate Member <2.14.0 is vulnerable (CRITICAL, CVSS 9.8) to deserialization of untrusted data (CVE-2026-115968), enabling object injection and possible system takeover. Patch to 2.14.0+ ASAP. https://radar.offseq.com/threat/cve-2026-115968-deserialization-of-untrusted-data-in-ultimate-member-92e650ae59939656 #OffSeq #WordPress #Infosec #Vulnerability

🟠 CVE-2026-93520 - High (7.8)

A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in https://x.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93520/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-67074 | CRITICAL RCE in HCL BigFix AEX 13.0.0.1 (CVSS 9.1) 🛡️ Exploitation allows arbitrary code execution with app privileges. No patch yet — restrict access & monitor. More: https://radar.offseq.com/threat/cve-2026-67074-cwe-94-code-injection-in-hcl-software-bigfix-aex-a5f31975501a4a18 #OffSeq #CVE #RCE #BigFix

🟠 CVE-2026-59176 - High (7.8)

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functype_version` MCP tool in `functype-mcp-server` accepts an unconstrained `version` string using only `z.string()` validation in `packages/mcp-server/...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59176/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118485 - High (8.1)

Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed (URL-encoded ../) sequences in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118485/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-118477 - Critical (9.8)

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authenticated attacker (free registration available) to execute arbitrary c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118477/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118477 – HIGH severity OS Command Injection in EISGE Kalifast (>=0 <2026.02.1). Authenticated users can run arbitrary commands via ei_git_repo_url. Patch now: 2026061802 🛡️ https://radar.offseq.com/threat/cve-2026-118477-cwe-78-os-command-injection-in-eisge-kalifast-96357c3746a79f11 #OffSeq #infosec #vulnerability #CVE2026118477

🟠 CVE-2026-110747 - High (7.5)

ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into an attacker-controlled int and then checks (_inputPtr + len) &lt;= _inputEnd using signed arithmetic. For values near Integer.MAX_VALUE the addition ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110747/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116676 - High (8.8)

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled workspace value from atlantis.yaml into Terraform command argume...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116676/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93519 - High (7.8)

A buffer overflow when handling pointer barriers in the XFIXES extension in https://x.org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93519/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93518 - High (7.8)

An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in https://x.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93518/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-104383: CRITICAL code injection (CWE-94) in EagleCloud Aquila ≤2.6.7.2 Pigeon MFA service. Authenticated remote attackers can execute arbitrary code — full compromise possible. Restrict access & monitor for patches. https://radar.offseq.com/threat/cve-2026-104383-cwe-94-code-injection-in-eaglecloud-aquila-8c9d1a000de0f9b2 #OffSeq #CVE2026 #Vuln #CloudSec

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

CISA warns of EPICS Base vulnerabilities in the industrial control system toolkit, led by critical RCE flaw CVE-2026-114595. Update to 7.0.11.

#EPICS #ICS #IndustrialControlSystem #CISA #CVE2026114595 #RCE #OTSecurity #Vulnerability

https://meterpreter.org/epics-base-vulnerabilities-cve-2026-114595/?utm_source=mastodon&utm_medium=jetpack_social

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

#TeamViewer #RCE #PrivilegeEscalation #RemoteAccess #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/teamviewer-vulnerabilities-patched-tv-2026-1011/?utm_source=mastodon&utm_medium=jetpack_social

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

#TeamViewer #RCE #PrivilegeEscalation #RemoteAccess #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/teamviewer-vulnerabilities-patched-tv-2026-1011/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-92372 - High (8.8)

An out-of-bounds write vulnerability in the
screen-image decoder of TeamViewer Full Client for Linux and macOS prior to
version 15.83 allows a remote attacker to execute arbitrary code by supplying
crafted screen-image data during a remote-control...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92372/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92376 - High (7.8)

Improper authentication in the
inter-process communication (IPC) mechanism of TeamViewer Remote Management
Monitoring for Windows prior to version 26.10.1 allows a local authenticated
attacker with low privileges to impersonate the IPC broker and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92376/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WatchGuard fixes 18 Fireware OS vulnerabilities on the Firebox firewall, including critical CVE-2026-103594 (CVSS 9.5). Upgrade to 2026.4 now.

#WatchGuard #Fireware #Firebox #Firewall #CVE2026103594 #CVE202693865 #PatchNow #NetworkSecurity

https://securityonline.info/watchguard-fireware-os-vulnerabilities-2/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-57200 - High (7.5)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, an authenticated attacker with read-only permissions for the `Asterisk REST Interface ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57200/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116662 - High (7.5)

Tanium addressed a compression bomb vulnerability in Enforce.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88812 - High (7.8)

A double free in XKB SetGeometryin https://x.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88812/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86396 - High (8.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Impr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86396/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🏆 New Achievement! Cart Before The Hearse!

Step right up, online merchants! For only the low, low price of ignoring CVE-2026-48356, attackers are now offering a full remote code execution package for your Adobe Commerce or Magento store — hundreds of shops already redecorated, free of charge. CISA has slapped a patch deadline of November 10, 2026 on this critical file upload flaw, which lets uninvited guests take over your store like a haunted Best Buy. (1/3)

Adobe Commerce and Magento Under Active Attacks via Critical File Upload Flaw

CISA reports active exploitation of Adobe Commerce and Magento critical file upload vulnerability (CVE-2026-48356) that allows remote code execution. CISA has mandated a patch deadline of November 10, 2026, after reports showed hundreds of e-commerce sites were compromised.

**If you run Adobe Commerce or Magento, update to the latest patched version immediately. This flaw is actively exploited to take over online stores. Before patching, check your CMS blocks for unfamiliar or suspicious code; if you find any, treat the store as already hacked, then clean it and reset all admin passwords and sessions.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/adobe-commerce-and-magento-under-active-attacks-via-critical-file-upload-flaw-r-i-3-3-i/gD2P6Ple2L

CISA KEV catalog adds actively exploited Magento flaw CVE-2026-48356 and Brotli vulnerability CVE-2026-111497. Patch before November 10.

#CISA #KEV #Magento #AdobeCommerce #Brotli #CVE202648356 #CVE2026111497 #ActiveExploitation

https://securityonline.info/cisa-kev-magento-brotli-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1027] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-111497 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- Name: Google Brotli Unchecked Return Value Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Brotli
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111497

⚠️ CVE-2026-48356 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48356)
- Name: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://www.adobe.com/trust/security/products/commerce/apsb26-73.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48356

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261027 #cisa20261027 #cve_2026_111497 #cve_2026_48356 #cve2026111497 #cve202648356

CVE ID: CVE-2026-48356
Vendor: Adobe
Product: Commerce and Magento
Date Added: 2026-10-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-48356

CISA adds node2shell (broccoli2shell?) CVE-2026-111497 (Google Brotli Unchecked Return Value) and Adobe Commerce/Magento unrestricted file upload CVE-2026-48356 to the KEV Catalog:

https://www.cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog

#CISA #KEV #node2shell #broccoli2shell #brotli #Adobe #magento #CVE

🔴 CVE-2026-114278 - Critical (9.8)

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespace fields from the /exec/init and /exec/config JSON endpoints) into a double-quoted sh -c "echo "..." > ..." invocation without...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114278/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-103780 - Critical (9.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103780/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Dell fixes PowerProtect Data Domain vulnerabilities in DD OS, including four CVSS 9.8 flaws like CVE-2026-86400 allowing root command execution.

#Dell #PowerProtect #DataDomain #DDOS #Backup #CVE202686400 #Ransomware #PatchNow

https://securityonline.info/dell-powerprotect-data-domain-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Dell fixes PowerProtect Data Domain vulnerabilities in DD OS, including four CVSS 9.8 flaws like CVE-2026-86400 allowing root command execution.

#Dell #PowerProtect #DataDomain #DDOS #Backup #CVE202686400 #Ransomware #PatchNow

https://securityonline.info/dell-powerprotect-data-domain-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-86400 - Critical (9.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Impr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86400/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-90717 - Critical (9.1)

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.2...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90717/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Dell PowerProtect Data Domain CVE-2026-86397 (CRITICAL, CVSS 9.8): Unauthenticated remote attackers can create privileged accounts — full takeover possible. Patch to 7.13.1.90/8.3.1.50/8.6.1.30/8.9.0.0+. https://radar.offseq.com/threat/cve-2026-86397-cwe-862-missing-authorization-in-dell-powerprotect-data-domain-0bf4a4099bf98dd8 #OffSeq #Dell #Vuln #Infosec

🟠 CVE-2026-116613 - High (7.5)

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atb_shortcode_handler() function fetching an arbitrary post ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116613/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1928 - High (8.8)

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.276 via deserialization of untrusted input in the updateMeta REST API endpoint. This m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

@cxiao @ifin has a good summary that indicates... Probably? https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914

@cxiao @ifin has a good summary that indicates... Probably? https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914

We have finally listed #PHP2Shell as exploited in the wild with the release of a report detailing the compromise of multiple firewall devices, including some used by the US government.

https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914

#ThreatIntel

🖲️ #Noticia de #CiberSeguridad #CiberGuerra #CiberAtaque #CiberNoticia
⚫ Explotación efectiva de PHP2Shell confirmada (de nuevo, ahora por KEV)
🔗 http://blog.segu-info.com.ar/2026/10/explotacion-activa-de-php2shell.html

Como ya
adelantamos hace tres días, las dos vulnerabilidades críticas de ejecución remota de código (CVE-2026-109618 y CVE-2026-109619), conocidas como
PHP2Shell, han sido explotadas con éxito en entornos controlados.

Inicialmente, la actividad maliciosa fue

🔒 New CSAF advisory published

VDE-2026-137
METTLER TOLEDO: PHP2Shell in Octo Image Server
CVE-2026-109618, CVE-2026-109619

OCTO Image Server contains a vulnerable version of PHP affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619). We strongly recommend to upgrade PHP to version 8.2.35.

HTML: https://certvde.com/en/advisories/VDE-2026-137/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-137.json

#OT #Advisory

"Responder Guidance for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)":

https://bishopfox.com/blog/responder-guidance-for-php2shell

🚨🇱🇰 Barista Sri Lanka allegedly breached through PHP vulnerabilities, customer information exposed

Barista, one of Sri Lanka's largest café chains with more than 100 outlets, has been targeted by an actor using the handle "secret_solder".

The actor claims to have gained unauthorized server access by exploiting PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, allegedly achieving remote code execution without authentication.

According to the post, the server was running an outdated PHP 8.1.34 installation with exposed configuration details.

The actor also claims to have extracted customer names, email addresses, phone numbers, and delivery addresses from server memory.

A sample containing customer names and phone numbers was published. The intrusion and vulnerability claims remain independently unverified.

💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

🚨🇺🇸 CISA confirms critical PHP2Shell flaws are now being exploited in attacks

CISA has added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities catalog after confirming active exploitation.
⠀
Known collectively as PHP2Shell, the two memory corruption flaws can allow an unauthenticated attacker to remotely execute code on PHP systems serving web requests.

Affected configurations include PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. The PHP team considers mod_php installations at the highest risk.
⠀
Both vulnerabilities have a CVSS 4.0 score of 9.2.

Fixed versions:

• PHP 8.5.12
• PHP 8.4.27
• PHP 8.3.36
• PHP 8.2.35
⠀
CISA has ordered U.S. federal agencies to remediate the vulnerabilities by October 29.

The PHP team says there are no complete mitigations and that updating is the only safe solution.

Source: https://www.cisa.gov/news-events/alerts/2026/10/26/cisa-adds-two-known-exploited-vulnerabilities-catalog

#PHP2Shell is a critical wake-up call. Two #PHP flaws (CVE-2026-109618 & CVE-2026-109619), both CVSS 9.2, can enable unauthenticated remote code execution. If you run PHP, don’t wait. Assess exposure, patch now & verify your fixes. HT @PicusSecurity https://cybersec.picussecurity.com/s/php2shell-critical-php-rce-flaws-cve-2026-109618-cve-2026-109619-explained-30169

@cxiao @ifin has a good summary that indicates... Probably? https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914

@cxiao @ifin has a good summary that indicates... Probably? https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914

https://dreamgroup.com/blog/chained-php2shell-exploit-roots-25-servers

The affected devices run specific versions of a large vendor’s firewall software. For security purposes, we are not disclosing the vendor or the affected versions, and the vendor has been notified.

https://security.paloaltonetworks.com/CVE-2026-109618

Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet.

:brdThink:

We have finally listed #PHP2Shell as exploited in the wild with the release of a report detailing the compromise of multiple firewall devices, including some used by the US government.

https://ifin.network/t/cve-2026-109618-cve-2026-109619-remote-code-execution-in-php/914

#ThreatIntel

PHP "php2shell" (CVE-2026-109618/109619) is in CISA KEV and under attack: no-login code execution on PHP web servers. That includes the web UI on OPNsense, pfSense and Unraid, and PHP apps on Synology and QNAP. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 (or the vendor update), then restart PHP.

Also: Nextcloud's built-in Collabora CODE app (CVE-2026-110447), update to 26.4.303.

This week's issue:
https://patchorpass.beehiiv.com/p/patchorpass-2-php-php2shell-exploit-patch-now-plus-nextcloud-collabora?utm_source=mastodon&utm_medium=social&utm_campaign=issue-2

#infosec #homelab #selfhosted #nextcloud

🖲️ #Noticia de #CiberSeguridad #CiberGuerra #CiberAtaque #CiberNoticia
⚫ Explotación efectiva de PHP2Shell confirmada (de nuevo, ahora por KEV)
🔗 http://blog.segu-info.com.ar/2026/10/explotacion-activa-de-php2shell.html

Como ya
adelantamos hace tres días, las dos vulnerabilidades críticas de ejecución remota de código (CVE-2026-109618 y CVE-2026-109619), conocidas como
PHP2Shell, han sido explotadas con éxito en entornos controlados.

Inicialmente, la actividad maliciosa fue

🔒 New CSAF advisory published

VDE-2026-137
METTLER TOLEDO: PHP2Shell in Octo Image Server
CVE-2026-109618, CVE-2026-109619

OCTO Image Server contains a vulnerable version of PHP affected by PHP2Shell (CVE-2026-109618 and CVE-2026-109619). We strongly recommend to upgrade PHP to version 8.2.35.

HTML: https://certvde.com/en/advisories/VDE-2026-137/
CSAF JSON: https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-137.json

#OT #Advisory

"Responder Guidance for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)":

https://bishopfox.com/blog/responder-guidance-for-php2shell

🚨🇱🇰 Barista Sri Lanka allegedly breached through PHP vulnerabilities, customer information exposed

Barista, one of Sri Lanka's largest café chains with more than 100 outlets, has been targeted by an actor using the handle "secret_solder".

The actor claims to have gained unauthorized server access by exploiting PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, allegedly achieving remote code execution without authentication.

According to the post, the server was running an outdated PHP 8.1.34 installation with exposed configuration details.

The actor also claims to have extracted customer names, email addresses, phone numbers, and delivery addresses from server memory.

A sample containing customer names and phone numbers was published. The intrusion and vulnerability claims remain independently unverified.

💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

🚨🇺🇸 CISA confirms critical PHP2Shell flaws are now being exploited in attacks

CISA has added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities catalog after confirming active exploitation.
⠀
Known collectively as PHP2Shell, the two memory corruption flaws can allow an unauthenticated attacker to remotely execute code on PHP systems serving web requests.

Affected configurations include PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. The PHP team considers mod_php installations at the highest risk.
⠀
Both vulnerabilities have a CVSS 4.0 score of 9.2.

Fixed versions:

• PHP 8.5.12
• PHP 8.4.27
• PHP 8.3.36
• PHP 8.2.35
⠀
CISA has ordered U.S. federal agencies to remediate the vulnerabilities by October 29.

The PHP team says there are no complete mitigations and that updating is the only safe solution.

Source: https://www.cisa.gov/news-events/alerts/2026/10/26/cisa-adds-two-known-exploited-vulnerabilities-catalog

Here's a snapshot of the latest global developments:

Last 24 hrs: Critical PHP2Shell flaws (CVE-2026-109618/19) are actively exploited, CISA urges immediate patching. North Korea's Lazarus Group deploys post-quantum crypto malware in South Korea. An Alibaba AI model showed unexpected data upload attempts during security tests. OpenAI announced GPT-6 with quantum-logic AI, and Apple updated iPad mini with A20 Pro and Siri AI. Israeli elections are underway amid heightened Iran tensions.

#Cybersecurity #TechNews #Geopolitics

#PHP2Shell is a critical wake-up call. Two #PHP flaws (CVE-2026-109618 & CVE-2026-109619), both CVSS 9.2, can enable unauthenticated remote code execution. If you run PHP, don’t wait. Assess exposure, patch now & verify your fixes. HT @PicusSecurity https://cybersec.picussecurity.com/s/php2shell-critical-php-rce-flaws-cve-2026-109618-cve-2026-109619-explained-30169

GNU mtools ≤4.0.49 has a medium severity flaw (CVE-2026-118384): out-of-bounds write in parse_vses (vfat.c) via missing minimum check (CWE-839). Local attackers can impact integrity & availability. Patch status pending — avoid untrusted inputs. https://radar.offseq.com/threat/cve-2026-118384-cwe-839-numeric-range-comparison-without-minimum-check-in-gnu-mtools-d3d2f31aa39cf7f4 #OffSeq #Vuln #GNU

CVE-2026-84999 | Pie Register Premium <=3.8.4.0 for WordPress: CRITICAL file upload vuln allows unauthenticated remote code execution. Path disclosure eases exploitation. Disable plugin or restrict uploads until patched. https://radar.offseq.com/threat/the-pie-register-premium-plugin-for-wordpress-is-vulnerable-to-unrestricted-file-type-upload-in-all-53fb8a5bfb673cfb #OffSeq #WordPress #CVE202684999

🟠 CVE-2026-118008 - High (8.8)

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118008/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-83831 - High (8.8)

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-83831/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

An MLflow vulnerability, CVE-2026-116690, is exploited in the wild as proof-of-concept code for it and RCE flaw CVE-2026-116692 goes public. Patch now.

#MLflow #AISecurity #MLOps #CVE2026116690 #CVE2026116692 #PoC #ActiveExploitation #RCE

https://securityonline.info/mlflow-vulnerability-exploited-poc/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-116692 - Critical (9.8)

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116692/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116688 - High (8.1)

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can be reached while CKEditor processes incoming s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116682 - High (8.6)

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling in backend/pkg/indexing/indexingFiles.go resolves symbolic links through GetRealPath without confirming that the resolved ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116682/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87086 - High (7.5)

Tanium addressed a denial of service vulnerability in Provision.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Veeam Backup & Replication 13 (CVE-2026-108142) : une faille critique exploitable sans authentification https://www.it-connect.fr/veeam-backup-replication-13-faille-critique-cve-2026-108142/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Veeam

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

#Veeam #VeeamONE #BackupSecurity #CVE2026108142 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/veeam-vulnerabilities-backup-replication-veeam-one/?utm_source=mastodon&utm_medium=jetpack_social

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

#Veeam #VeeamONE #BackupSecurity #CVE2026108142 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/veeam-vulnerabilities-backup-replication-veeam-one/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-92377 - High (7.8)

Improper access control in the Patch
Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC res...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92377/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

#TeamViewer #RCE #PrivilegeEscalation #RemoteAccess #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/teamviewer-vulnerabilities-patched-tv-2026-1011/?utm_source=mastodon&utm_medium=jetpack_social

Patch 9 critical Adobe vulnerabilities in Adobe Campaign Classic and Connect, including 9.9 CVSS RCE flaws CVE-2026-104351 and CVE-2026-48360.

#Adobe #AdobeCampaign #AdobeConnect #RCE #SQLInjection #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/adobe-vulnerabilities-campaign-classic-connect/?utm_source=mastodon&utm_medium=jetpack_social

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Supermicro BMC vulnerabilities hit 392 boards. Critical IPMI flaw CVE-2026-18450 (CVSS 9.8) lets attackers run commands. Update BMC firmware now.

#Supermicro #BMC #IPMI #CVE202618450 #FirmwareSecurity #runZero #Vulnerability

https://securityonline.info/supermicro-bmc-vulnerabilities-ipmi/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-18450 - Critical (9.8)

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18450/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18449 - High (7.5)

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18449/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65220 - High (8.8)

A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-117602 - High (8.4)

Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature. A rogue...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117602/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

NVIDIA security update fixes NeMo Agent Toolkit vulnerability CVE-2026-65145 (CVSS 10.0) plus TensorRT-LLM and PhysX flaws. Update to 1.9.0 now.

#NVIDIA #NeMoAgentToolkit #TensorRTLLM #PhysX #CVE202665145 #AISecurity #SecurityUpdate #Vulnerability

https://securityonline.info/nemo-agent-toolkit-vulnerability-cve-2026-65145/?utm_source=mastodon&utm_medium=jetpack_social

Better than what?

https://nvd.nist.gov/vuln/detail/cve-2026-114607

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in social or Generic OAuth provider, and use account.storeStateStrategy set to database can accept an OAuth sign-in state value as a Magic Link token. These settings can cause Magic Link verification records and OAuth state to resolve to the same stored identifier, allowing an unauthenticated attacker to start OAuth sign-in for a known email address and redeem the returned state through Magic Link without controlling the mailbox or completing the provider callback. The attacker can obtain a normal session for an existing user, or create an account incorrectly marked as email verified when sign-up is enabled. This issue is fixed in version 1.7.7.

🟠 CVE-2026-117604 - High (7.5)

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profiler data via a loopback REMOTE_ADDR fallback. Behind a same-host reverse...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117604/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-82117: CRITICAL (CVSS 9.8) in Hitachi HiRDB Server v10 (<10-12-01) – authentication bypass via spoofing. Full system compromise possible. Update to 10-12-01 ASAP. https://radar.offseq.com/threat/cve-2026-82117-cwe-290-authentication-bypass-by-spoofing-in-hitachi-hirdb-server-version-10-8e50efd369906f3e #OffSeq #CVE202682117 #Infosec #Patch

For those still taking notes, two bonus failures: CVE-2026-65339 let apps quietly leak your sensitive information via the Audio component, and CVE-2026-86990 let malicious apps access your camera without permission via CoreMedia. Your camera. Without asking. We trust this lands with appropriate weight.

Please update to iOS or iPadOS 18.7.11 immediately, or Human Resources will be notified.

Reward: Compliance certificate pending. Check back after you've applied the patch. (2/3)

For those still taking notes, two bonus failures: CVE-2026-65339 let apps quietly leak your sensitive information via the Audio component, and CVE-2026-86990 let malicious apps access your camera without permission via CoreMedia. Your camera. Without asking. We trust this lands with appropriate weight.

Please update to iOS or iPadOS 18.7.11 immediately, or Human Resources will be notified.

Reward: Compliance certificate pending. Check back after you've applied the patch. (2/3)

CVE-2026-115216 – Eclipse ioFog Operator (3.8.0 – <3.9.2) has CRITICAL improper TLS cert validation (CWE-295), allowing attackers to intercept OAuth secrets & admin passwords. Upgrade to 3.9.2 to mitigate. https://radar.offseq.com/threat/cve-2026-115216-cwe-295-improper-certificate-validation-in-eclipse-foundation-eclipse-iofog-e8964354e78c9553 #OffSeq #CVE2026115216 #Eclipse #TLS #infosec

CVE-2026-92885: Qode Membership plugin (≤2.0.6.2) suffers a CRITICAL auth bypass (CVSS 9.8). Typo in Facebook OAuth check lets attackers hijack any WordPress account — including admins. Remove or restrict plugin use now. https://radar.offseq.com/threat/cve-2026-92885-cwe-287-improper-authentication-in-qode-themes-qode-membership-038e4dcfed22c95b #OffSeq #WordPress #Vuln

New advisories. You'll need to log into Broadcom for details.

CRITICAL: Broadcom Output Management Web Viewer 12.1 Vulnerabilities in Apache Tomcat https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Fortinet:

Medium-severity: CVE-2026-106174: Improper Locking Allows Unauthenticated DoS of FortiOS HTTPS Management Interface https://app.opencve.io/cve/CVE-2026-106174 #Fortinet

Adobe:

Note: Adobe doesn't allow you to bail out of data-theft if you're not a subscriber.

Security updates available for Substance 3D Painter | APSB26-178 https://www.adobe.com/trust/security/products/substance3d-painter/apsb26-178.html

Security update available for Adobe Campaign Classic | APSB26-162 https://www.adobe.com/trust/security/products/campaign/apsb26-162.html

Creative Cloud https://www.adobe.com/trust/security/products/creative-cloud/apsb26-135.html

Connect: https://www.adobe.com/trust/security/products/connect/apsb26-182.html #Adobe

Dell:

CRITICAL, affecting multiple CVEs: Security Update for Dell Integrated Data Protection Appliance Software 2.7.9 Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000524348/dsa-2026-474-security-update-for-dell-integrated-data-protection-appliance-software-2-7-9-vulnerabilities

Yesterday:

High-severity: Security Update for Multiple Dell Client Platform BIOS Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000502180/dsa-2026-373 #Dell #VMWare #vulnerability #infosec

🟠 CVE-2026-116837 - High (8.8)

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116837/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116836 - High (8.8)

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116836/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Apple Patches Exploited CoreGraphics Flaw and Hundreds of Vulnerabilities in October 2026 Security Update

On October 26, 2026, Apple released security updates across iOS, iPadOS, macOS, tvOS, watchOS, visionOS and Safari, patching several hundred vulnerabilities concentrated in WebKit, the kernel, ImageIO and CoreStorage. The fixes include WebKit code-execution and sandbox-escape flaws, a Remote Management remote code execution bug, and many privilege-escalation issues, plus the most urgent one: CVE-2026-86950 in CoreGraphics, which was exploited in targeted attacks and makes updating to iOS 18.7.11 critical for owners of older iPhones.

**If you use any Apple device (iPhone, iPad, Mac, Apple Watch, Apple TV or Vision Pro), update it now. The current versions are iOS/iPadOS 27.2, 26.7.2 or 18.7.11, macOS Golden Gate 27.2, Tahoe 26.7.2 or Sequoia 15.8.2, tvOS/watchOS/visionOS 27.2, and Safari 27.2. If you still use an iPhone XS, XS Max or XR, install iOS 18.7.11 first: it fixes a flaw that has been exploited in targeted attacks. Until you've updated, be extra careful about unfamiliar websites, files, images and fonts from strangers, and connecting to unknown file-sharing or Screen Sharing servers.**
#cybersecurity #infosec #advisory #databreach
https://beyondmachines.net/event_details/apple-addressed-329-unique-b-security-b-vulnerabilities-across-today-s-updates-9to5mac-y-u-w-g-y/gD2P6Ple2L

For those still taking notes, two bonus failures: CVE-2026-65339 let apps quietly leak your sensitive information via the Audio component, and CVE-2026-86990 let malicious apps access your camera without permission via CoreMedia. Your camera. Without asking. We trust this lands with appropriate weight.

Please update to iOS or iPadOS 18.7.11 immediately, or Human Resources will be notified.

Reward: Compliance certificate pending. Check back after you've applied the patch. (2/3)

For those still taking notes, two bonus failures: CVE-2026-65339 let apps quietly leak your sensitive information via the Audio component, and CVE-2026-86990 let malicious apps access your camera without permission via CoreMedia. Your camera. Without asking. We trust this lands with appropriate weight.

Please update to iOS or iPadOS 18.7.11 immediately, or Human Resources will be notified.

Reward: Compliance certificate pending. Check back after you've applied the patch. (2/3)

New perfect 10. 🥳

https://nvd.nist.gov/vuln/detail/cve-2026-115905

sev:CRIT 10.0 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L

zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as authoritative while ZipStreamReader extracts using Local File Header filenames without reconciling the duplicate metadata in src/read/stream.rs. A crafted archive can therefore appear benign to a component that inspects the central directory but cause a streaming extractor to write a different attacker-selected path and content, potentially overwriting files used by a downstream service. This issue is fixed in version 9.0.5.

New perfect 10. 🥳

https://nvd.nist.gov/vuln/detail/cve-2026-115905

sev:CRIT 10.0 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L

zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as authoritative while ZipStreamReader extracts using Local File Header filenames without reconciling the duplicate metadata in src/read/stream.rs. A crafted archive can therefore appear benign to a component that inspects the central directory but cause a streaming extractor to write a different attacker-selected path and content, potentially overwriting files used by a downstream service. This issue is fixed in version 9.0.5.

PHP "php2shell" (CVE-2026-109618/109619) is in CISA KEV and under attack: no-login code execution on PHP web servers. That includes the web UI on OPNsense, pfSense and Unraid, and PHP apps on Synology and QNAP. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 (or the vendor update), then restart PHP.

Also: Nextcloud's built-in Collabora CODE app (CVE-2026-110447), update to 26.4.303.

This week's issue:
https://patchorpass.beehiiv.com/p/patchorpass-2-php-php2shell-exploit-patch-now-plus-nextcloud-collabora?utm_source=mastodon&utm_medium=social&utm_campaign=issue-2

#infosec #homelab #selfhosted #nextcloud

Wasmtime Patches Critical Sandbox Escape Flaws in Cranelift Compiler

Wasmtime fixed two critical vulnerabilities (CVE-2026-115889 and CVE-2026-115893) that allow malicious WebAssembly modules to escape their sandboxes and execute arbitrary code on host systems. The flaws affect the Cranelift compiler and require immediate updates to Wasmtime 50.0.0 or other patched versions.

**If you use Wasmtime (directly, inside your own apps, or through tools like Spin), update ASAP to version 36.0.19, 48.0.7, 49.0.4 or 50.0.0, rebuild any applications that include it, and update Spin to 4.2.4. If you're still on the 24.x line, there is no patch, so upgrade to a supported version. If possible don't run WebAssembly code from sources you don't fully trust.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/wasmtime-patches-critical-sandbox-escape-flaws-in-cranelift-compiler-8-z-h-v-8/gD2P6Ple2L

Body-parser vulnerability CVE-2026-111181 (CVSS 7.5) enables Express denial of service with one request. Upgrade to body-parser 2.4.0 or 1.20.9.

#Express #NodeJS #bodyparser #CVE2026111181 #DoS #JavaScript #npm #WebSecurity

https://securityonline.info/body-parser-vulnerability-cve-2026-111181/?utm_source=mastodon&utm_medium=jetpack_social

CISA added CVE-2026-114625 to the Known Exploited Vulnerabilities catalog the very next morning. RESOLUTION NOTES: Patch your on-premises VeloCloud Orchestrator across all three release trains immediately and restrict VCO access to trusted administrators only — something you arguably should have done before handing out logins like candy corn.

Reward: You've received a Tier 1 Escalation Badge and absolutely zero sympathy. (2/3)

CISA added CVE-2026-114625 to the Known Exploited Vulnerabilities catalog the very next morning. RESOLUTION NOTES: Patch your on-premises VeloCloud Orchestrator across all three release trains immediately and restrict VCO access to trusted administrators only — something you arguably should have done before handing out logins like candy corn.

Reward: You've received a Tier 1 Escalation Badge and absolutely zero sympathy. (2/3)

Hackers exploit YOOtheme Pro vulnerability CVE-2026-102785 (CVSS 10) for remote code execution, dropping webshells. Update to 5.0.53 now.

#YOOtheme #YOOthemePro #CVE2026102785 #RCE #Webshell #Joomla #WordPress #Unit42 #ActiveExploitation

https://securityonline.info/yootheme-pro-vulnerability-cve-2026-102785-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3