🟠 CVE-2026-89061 - High (7.8)

During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed exclusively in the Chinese market, that could allow a local user to escalate privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89061/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-89061 - High (7.8)

During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed exclusively in the Chinese market, that could allow a local user to escalate privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89061/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77882 - High (7.8)

A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77882/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77882 - High (7.8)

A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77882/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125845 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti vdequator vdequator allows Cross Site Request Forgery.This issue affects vdequator: from n/a through 1.2.7.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125845/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125845 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti vdequator vdequator allows Cross Site Request Forgery.This issue affects vdequator: from n/a through 1.2.7.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125845/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update Apache HTTP Server to 2.4.71 now to fix CVE-2026-119618, a critical mod_http2 remote code execution flaw, alongside CVE-2026-106023.

#Apache #ApacheHTTPServer #WebSecurity #Cybersecurity #InfoSec

https://securityonline.info/apache-http-server-cve-2026-119618-rce-fixed/?utm_source=mastodon&utm_medium=jetpack_social

Update Apache HTTP Server to 2.4.71 now to fix CVE-2026-119618, a critical mod_http2 remote code execution flaw, alongside CVE-2026-106023.

#Apache #ApacheHTTPServer #WebSecurity #Cybersecurity #InfoSec

https://securityonline.info/apache-http-server-cve-2026-119618-rce-fixed/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-125842 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Wallstreet Agency wallstreet-agency allows Cross Site Request Forgery.This issue affects Wallstreet Agency: from n/a through 1.3.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125842/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125842 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Wallstreet Agency wallstreet-agency allows Cross Site Request Forgery.This issue affects Wallstreet Agency: from n/a through 1.3.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125842/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125848 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Leo leo allows Cross Site Request Forgery.This issue affects Leo: from n/a through 1.7.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125848/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125848 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Leo leo allows Cross Site Request Forgery.This issue affects Leo: from n/a through 1.7.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125848/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125844 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti vice vice allows Cross Site Request Forgery.This issue affects vice: from n/a through 1.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125844/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125844 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti vice vice allows Cross Site Request Forgery.This issue affects vice: from n/a through 1.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125844/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125843 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Spasalon spasalon allows Cross Site Request Forgery.This issue affects Spasalon: from n/a through 3.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125843/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125843 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Spasalon spasalon allows Cross Site Request Forgery.This issue affects Spasalon: from n/a through 3.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125843/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125841 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Heroic heroic allows Cross Site Request Forgery.This issue affects Heroic: from n/a through 1.4.2.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125841/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125841 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Heroic heroic allows Cross Site Request Forgery.This issue affects Heroic: from n/a through 1.4.2.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125841/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125849 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Shk Corporate shk-corporate allows Cross Site Request Forgery.This issue affects Shk Corporate: from n/a through 2.4.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125849/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125849 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Shk Corporate shk-corporate allows Cross Site Request Forgery.This issue affects Shk Corporate: from n/a through 2.4.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125849/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-85632 - Critical (9.1)

Missing authentication for critical function and Improper validation of integrity check value vulnerability in Sipay Electronic Money and Payment Services Inc. WooCommerce Virtual POS Module allows Authentication Bypass and Application API Message...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85632/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-85632 - Critical (9.1)

Missing authentication for critical function and Improper validation of integrity check value vulnerability in Sipay Electronic Money and Payment Services Inc. WooCommerce Virtual POS Module allows Authentication Bypass and Application API Message...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85632/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-126325 - Critical (9)

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-126325/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-126325 - Critical (9)

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-126325/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

More info on the CVEs fixed in httpd 2.4.71 here:

https://securityonline.info/apache-http-server-cve-2026-119618-rce-fixed/

#apache #httpd #cve #cve_2026_119618 #rce #remote_code_execution

Among the CVEs fixed in httpd 2.4.71 is CVE-2026-119618, a "heap corruption and RCE in assign_headers" in mod_http2:

https://www.cve.org/CVERecord?id=CVE-2026-119618

#web #webServer #apache #httpd #rce #remote_code_execution #cve #cve_2026_119618

CVE-2026-119618 (critical): mod_HTTP2: heap corruption and RCE in assign_headers

Apache HTTP Server 프로젝트가 보안 취약점 페이지를 통해 2.4.71 릴리스(2026-11-11)에서 CVE 3건을 수정했다고 공개했다. 이 중 CVE-2026-119618(critical)은 mod_http2의 assign_headers()에서 공유 자원에 대한 동기화 오류로 힙 손상과 원격 코드 실행(RCE)이 가능한 문제다. 영향 범위는 httpd 2.4.55~2.4.70이고, GitHub의 mod_h2 2.0.8~2.0.42도 해당된다. 발견자는 Anthropic's OSS Scanner(ANT-2026-MAPK...

https://httpd.apache.org/security/vulnerabilities_24.html

Update Apache HTTP Server to 2.4.71 now to fix CVE-2026-119618, a critical mod_http2 remote code execution flaw, alongside CVE-2026-106023.

#Apache #ApacheHTTPServer #WebSecurity #Cybersecurity #InfoSec

https://securityonline.info/apache-http-server-cve-2026-119618-rce-fixed/?utm_source=mastodon&utm_medium=jetpack_social

Update Apache HTTP Server to 2.4.71 now to fix CVE-2026-119618, a critical mod_http2 remote code execution flaw, alongside CVE-2026-106023.

#Apache #ApacheHTTPServer #WebSecurity #Cybersecurity #InfoSec

https://securityonline.info/apache-http-server-cve-2026-119618-rce-fixed/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-125850 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Appointment Dark appointment-dark allows Cross Site Request Forgery.This issue affects Appointment Dark: from n/a through 1.3.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125850/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125850 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti Appointment Dark appointment-dark allows Cross Site Request Forgery.This issue affects Appointment Dark: from n/a through 1.3.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125850/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125847 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti vdperanto vdperanto allows Cross Site Request Forgery.This issue affects vdperanto: from n/a through 2.2.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125847/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-125847 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in webriti vdperanto vdperanto allows Cross Site Request Forgery.This issue affects vdperanto: from n/a through 2.2.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-125847/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL: CVE-2026-78287 allows remote code execution in Staggs STAGGS (versions <3.4.0) via code injection. No privileges or user interaction required. Upgrade to 3.4.0+ to secure your systems. Details: https://radar.offseq.com/threat/cve-2026-78287-improper-control-of-generation-of-code-code-injection-in-staggs-staggs-73b1e21a8d192dad #OffSeq #CVE #infosec #patch

🔴 CVE-2026-78287 - Critical (10)

Improper Control of Generation of Code ('Code Injection') vulnerability in Staggs STAGGS staggs allows Remote Code Inclusion.This issue affects STAGGS: from n/a through 3.3.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78287/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124737 - High (7.5)

A flaw was found in BusyBox. When the TFTP (Trivial File Transfer Protocol) client requests a custom small block size and receives a standard response, it falls back to the default block size without resizing the allocated memory buffer. A malicio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124737/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 Microsoft patches Windows BitLocker flaws that could let attackers bypass encryption and access protected files

Microsoft has released security updates for two BitLocker vulnerabilities that could allow attackers with physical access to bypass security protections on affected Windows devices.

The flaws, tracked as CVE-2026-97015 (CVSS 6.8) and CVE-2026-119832 (CVSS 5.9), involve memory corruption and improper access controls.

Successful exploitation of CVE-2026-119832 could allow attackers to bypass BitLocker encryption and access sensitive data stored on a device.

The vulnerabilities affect multiple Windows 10, Windows 11, and Windows Server versions. Microsoft addressed both issues in its November 2026 security updates, with no confirmed exploitation in the wild.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119832

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

🚨 Microsoft patches Windows BitLocker flaws that could let attackers bypass encryption and access protected files

Microsoft has released security updates for two BitLocker vulnerabilities that could allow attackers with physical access to bypass security protections on affected Windows devices.

The flaws, tracked as CVE-2026-97015 (CVSS 6.8) and CVE-2026-119832 (CVSS 5.9), involve memory corruption and improper access controls.

Successful exploitation of CVE-2026-119832 could allow attackers to bypass BitLocker encryption and access sensitive data stored on a device.

The vulnerabilities affect multiple Windows 10, Windows 11, and Windows Server versions. Microsoft addressed both issues in its November 2026 security updates, with no confirmed exploitation in the wild.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119832

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

🟠 CVE-2026-124741 - High (7.6)

A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options sent by a server before copying them into memory. A malicious DHCPv6 server on the local network can exploit this flaw by sending a craft...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124741/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124739 - High (7.5)

A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124739/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 Critical Ivanti flaw allows hackers to execute code on enterprise management servers without authentication, CVE-2026-121653

Ivanti has released security updates addressing 13 vulnerabilities across five products, including a critical SQL injection flaw in Endpoint Manager (EPM) that could allow unauthenticated attackers to remotely execute malicious code.

The vulnerability, tracked as CVE-2026-121653 (CVSS 9.8), affects EPM Core versions before 2024 SU8. Another critical flaw, CVE-2026-121683 (CVSS 9.4), affects Ivanti Cloud Services Application and could allow attackers to manipulate trusted certificate entries without authentication.

Ivanti has released patches for the affected products and confirmed there is currently no evidence of exploitation in the wild. Administrators are urged to update immediately.

Source: https://www.ivanti.com/blog/november-2026-security-update

Enterprise-level intel, without the enterprise price tag. Plans for everyone. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

CC-4890 - Ivanti Releases Critical Security Update for Endpoint Manager

Severity: Medium

Successful exploitation of CVE-2026-121653 could allow an unauthenticated attacker to achieve remote code execution

Successful exploitation of CVE-2026-121653 could allow an unauthenticated attacker to achieve remote code execution

Updated: 11 Nov 2026

🚨 Critical Ivanti flaw allows hackers to execute code on enterprise management servers without authentication, CVE-2026-121653

Ivanti has released security updates addressing 13 vulnerabilities across five products, including a critical SQL injection flaw in Endpoint Manager (EPM) that could allow unauthenticated attackers to remotely execute malicious code.

The vulnerability, tracked as CVE-2026-121653 (CVSS 9.8), affects EPM Core versions before 2024 SU8. Another critical flaw, CVE-2026-121683 (CVSS 9.4), affects Ivanti Cloud Services Application and could allow attackers to manipulate trusted certificate entries without authentication.

Ivanti has released patches for the affected products and confirmed there is currently no evidence of exploitation in the wild. Administrators are urged to update immediately.

Source: https://www.ivanti.com/blog/november-2026-security-update

Enterprise-level intel, without the enterprise price tag. Plans for everyone. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

CRITICAL path traversal in Checkmk <2.5.0p19, <2.4.0p40, 2.3.0 (EOL): attackers in distributed setups can write arbitrary files & execute code as central site user. CVE-2026-118965. Update ASAP! https://radar.offseq.com/threat/path-traversal-in-the-discovered-host-label-synchronization-in-checkmk-250p19-240p40-and-230-eol-9bfe79e23136458d #OffSeq #Checkmk #Vuln #CVE2026118965

CRITICAL path traversal in Checkmk <2.5.0p19, <2.4.0p40, 2.3.0 (EOL): attackers in distributed setups can write arbitrary files & execute code as central site user. CVE-2026-118965. Update ASAP! https://radar.offseq.com/threat/path-traversal-in-the-discovered-host-label-synchronization-in-checkmk-250p19-240p40-and-230-eol-9bfe79e23136458d #OffSeq #Checkmk #Vuln #CVE2026118965

Zoom has addressed two security vulnerabilities in its Workplace application for Windows, identified as CVE-2026-108186 and CVE-2026-108187. These flaws could allow an unauthorized user to escalate privileges over the network.

Affected versions for CVE-2026-108186 include 7.1.0 through 7.1.7, while CVE-2026-108187 affects versions prior to 7.1.5. Zoom has issued patches and recommends that all users update to the latest…

https://en.hacks.gr/enimeroste-amesa-tin-efarmogi-zoom-gia-na-diorthosete-kena-asfaleias/

#Zoom #Windows #CVE_2026_108186 #CVE_2026_108187

🟠 CVE-2026-126617 - High (8.8)

SQL injection in the database layer of Progressive Robot hMailServer 6.0.0-B1 through 6.2.18, when the server uses MySQL/MariaDB or PostgreSQL, allows a remote attacker to alter SQL statements the server runs. On those two engines parameters are n...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-126617/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-126623 - High (7.5)

Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer 6.3.6 and 6.3.7 allows a remote attacker to hold the server's mail delivery threads or its REST API's worker threads, making mail delivery, the REST API and the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-126623/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-126612 - High (7.8)

Improper link resolution in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.7 allows a local authenticated user to run code as the mail server's service account or as an administrator when the path to the program folder pa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-126612/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-126621 - High (7.5)

Progressive Robot hMailServer 6.0.0-B1 through 6.3.7 on Windows hands OpenSSL the names of its own TLS files - the listeners' certificates, chains, private keys and Diffie-Hellman parameters, a port's client-certificate CA file (from 6.2.19), the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-126621/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-126613 - High (7.5)

Allocation of resources without limits in the JSON reader of Progressive Robot hMailServer 6.3.2 through 6.3.7 allows a remote attacker to exhaust the server's memory and hold its threads, making mail delivery, the REST API and the webmail unavail...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-126613/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Podman 6.2 is out with security fixes and Kubernetes improvements.

It fixes CVE-2026-121885, involving systemd handling through image labels; CVE-2026-111361, involving an image-signature check bypass; and CVE-2026-123876, involving a bypass of socket restrictions in a seccomp profile.

The release also adds --validate and --label to podman kube play, plus --multiple-pods for Kubernetes deployments.

https://en.hacks.gr/kykloforise-to-podman-6-2-me-simantikes-diorthoseis-asfaleias-kai-nees-dynatotites/

#Podman #Kubernetes #CVE2026121885 #CVE2026111361

An open directory exposed the live workspace of an autonomous AI intrusion harness: ~70 session transcripts of a jailbroken DeepSeek agent running two weeks of autonomous attacks, directed by a Chinese-speaking operator, against a European telecoms provider and thirteen organizations hosted on its infrastructure.

CISA likely added CVE-2026-20320 to the KEV Catalog due to the exploitation evidence here.

h/t: @serghei

https://malbearlabs.com/posts/operation-snowball-inside-an-autonomous-ai-intrusion-campaign

#threatintel #china #cyberespionage #IOC

An open directory exposed the live workspace of an autonomous AI intrusion harness: ~70 session transcripts of a jailbroken DeepSeek agent running two weeks of autonomous attacks, directed by a Chinese-speaking operator, against a European telecoms provider and thirteen organizations hosted on its infrastructure.

CISA likely added CVE-2026-20320 to the KEV Catalog due to the exploitation evidence here.

h/t: @serghei

https://malbearlabs.com/posts/operation-snowball-inside-an-autonomous-ai-intrusion-campaign

#threatintel #china #cyberespionage #IOC

Barracuda Email Security Gateway wird angegriffen

Wozu installiert man eine Appliance, die vor bösen E-Mails schützen soll? Sicher nicht, damit sie selber zum Einfallstor für Angriffe wird. Aber genau das passiert mit schöner Regelmäßigkeit; einige meiner Meldungen dazu habe ich unten aufgelistet. Diesmal ist das Email Security Gateway (ESG) der - amerikanischen - Firma Barracuda der Hauptdarsteller. Darin wurden zwei gefährliche Sicherheitslücken gefunden: CVE-2026-116606 (9,3 von 10) und CVE-2026-111560 (8,6 von 10). Wer die beiden kombiniert, kann damit die komplette Kontrolle über die Appliance erlangen. Das passiert bereits: Beide Lücken wurden und werden ... Weiterlesen:

https://www.pc-fluesterer.info/wordpress/2026/11/11/barracuda-email-security-gateway-wird-angegriffen/

#zeroday #closedsource #cybercrime #email #exploits #firewall #UnplugTrump #wissen

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-111560 – Barracuda Networks Multiple Products OS Command Injection Vulnerability

Executive risk and governance perspective on CVE-2026-111560, providing leadership with actionable compliance strategies, asset integrity audits, and boardroom oversight metrics....

https://thecybermind.co/kqxi

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-111560 – Barracuda Networks Multiple Products OS Command Injection Vulnerability

Actionable threat intelligence on CVE-2026-111560 targeting Barracuda products, featuring verified detection queries and endpoint hardening guidance....

https://thecybermind.co/psgq

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-111560 – Barracuda Networks Multiple Products OS Command Injection Vulnerability

Executive risk and governance perspective on CVE-2026-111560, providing leadership with actionable compliance strategies, asset integrity audits, and boardroom oversight metrics....

https://thecybermind.co/kqxi

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-111560 – Barracuda Networks Multiple Products OS Command Injection Vulnerability

Actionable threat intelligence on CVE-2026-111560 targeting Barracuda products, featuring verified detection queries and endpoint hardening guidance....

https://thecybermind.co/psgq

Zoom has addressed two security vulnerabilities in its Workplace application for Windows, identified as CVE-2026-108186 and CVE-2026-108187. These flaws could allow an unauthorized user to escalate privileges over the network.

Affected versions for CVE-2026-108186 include 7.1.0 through 7.1.7, while CVE-2026-108187 affects versions prior to 7.1.5. Zoom has issued patches and recommends that all users update to the latest…

https://en.hacks.gr/enimeroste-amesa-tin-efarmogi-zoom-gia-na-diorthosete-kena-asfaleias/

#Zoom #Windows #CVE_2026_108186 #CVE_2026_108187

🚨 Microsoft patches Windows BitLocker flaws that could let attackers bypass encryption and access protected files

Microsoft has released security updates for two BitLocker vulnerabilities that could allow attackers with physical access to bypass security protections on affected Windows devices.

The flaws, tracked as CVE-2026-97015 (CVSS 6.8) and CVE-2026-119832 (CVSS 5.9), involve memory corruption and improper access controls.

Successful exploitation of CVE-2026-119832 could allow attackers to bypass BitLocker encryption and access sensitive data stored on a device.

The vulnerabilities affect multiple Windows 10, Windows 11, and Windows Server versions. Microsoft addressed both issues in its November 2026 security updates, with no confirmed exploitation in the wild.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119832

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

🚨 Microsoft patches Windows BitLocker flaws that could let attackers bypass encryption and access protected files

Microsoft has released security updates for two BitLocker vulnerabilities that could allow attackers with physical access to bypass security protections on affected Windows devices.

The flaws, tracked as CVE-2026-97015 (CVSS 6.8) and CVE-2026-119832 (CVSS 5.9), involve memory corruption and improper access controls.

Successful exploitation of CVE-2026-119832 could allow attackers to bypass BitLocker encryption and access sensitive data stored on a device.

The vulnerabilities affect multiple Windows 10, Windows 11, and Windows Server versions. Microsoft addressed both issues in its November 2026 security updates, with no confirmed exploitation in the wild.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119832

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

🚨 CRITICAL: React Server Components have another unauthenticated Remote Code Execution vulnerability. And there's already a public PoC.

CVE-2026-126187 carries a CVSS 4.0 score of 9.5 and exposes vulnerable React Server Components implementations to remote code execution without authentication.

The exploit chain is particularly interesting:

🔴 Abuses a desynchronization bug in React Flight serialization.
🔴 Exploits detached ArrayBuffer views and incorrect length framing.
🔴 Turns a deserialization over-read into Server Action invocation.
🔴 Works through a crafted HTTP GET request, without requiring a multipart POST or Next-Action header.
🔴 Public PoC includes a reproducible Docker lab.
The scale is concerning. According to the November 11 npm data cited in the research, 73% of react-server-dom-webpack downloads were still using affected versions.

And here's the catch for Next.js developers: updating react and react-dom alone does not necessarily fix the vulnerable React Flight runtime bundled inside Next.js.
Fixed releases include React 19.0.9, 19.1.10 and 19.2.9, with Next.js fixes in 16.4.1 and 15.5.28.
No workaround is available. Upgrade now.

Full technical breakdown:
https://thecybersecguru.com/exploits/cve-2026-126187-react-flight-rce/

#CyberSecurity #InfoSec #ReactJS #NextJS #ReactServerComponents #RCE #AppSec #JavaScript #NodeJS #VulnerabilityResearch

React Server Components Just Got an Unauthenticated RCE: Breaking Down CVE-2026-126187

https://thecybersecguru.com/exploits/cve-2026-126187-react-flight-rce/

React Server Components Just Got an Unauthenticated RCE: Breaking Down CVE-2026-126187

https://thecybersecguru.com/exploits/cve-2026-126187-react-flight-rce/

🚨 A VISIT TO A MALICIOUS WEBSITE COULD GIVE ATTACKERS REMOTE CODE EXECUTION ON YOUR MACHINE.

Technical breakdown, affected versions, attack mechanics and mitigation:
https://thecybersecguru.com/news/fortinet2shell-cve-2026-121529/

Fortinet2Shell (CVE-2026-121529) is a newly disclosed critical vulnerability affecting Fortinet FortiClient, with a CVSS score of 9.1.

The attack chain is particularly concerning because a malicious website sends cross-origin requests to a privileged local FortiClient service. Due to a CORS / origin validation failure, attackers can abuse that service to execute arbitrary code on the victim's endpoint.

No authentication required. No special privileges required. Just one visit to a malicious webpage.

The vulnerability affects FortiClient for Windows, macOS and Windows PAM across specific 7.2 and 7.4 releases.

Some important details for defenders:

• Tracked as CVE-2026-121529 (CWE-346).
• Discovered by Kevin Joensen of Baldur Security.
• Windows hunting indicators include TCP port 9191 and FortiVRS.exe.
• Fixed releases include FortiClient 7.4.8 and 7.2.15.
• No virtual patch is available.

This is another reminder that local services exposed by endpoint security software can become an attack surface themselves.

#Fortinet #FortiClient #CVE2026121529 #RemoteCodeExecution #RCE #CyberSecurity #InfoSec #CORS #VulnerabilityManagement #AppSec

Fortinet2Shell (CVE-2026-121529): How a CORS Flaw in FortiClient Gives Attackers a Shell From a Web Page

https://thecybersecguru.com/news/fortinet2shell-cve-2026-121529/

Fortinet2Shell (CVE-2026-121529): How a CORS Flaw in FortiClient Gives Attackers a Shell From a Web Page

https://thecybersecguru.com/news/fortinet2shell-cve-2026-121529/

Microsoft Fixes Nearly 1,100 Security Vulnerabilities

Microsoft가 11월 Patch Tuesday에서 Windows와 지원 소프트웨어의 보안 취약점 1,093건을 수정했다. 이 중 63건이 critical이고 535건은 권한 상승 취약점이며, Outlook 스푸핑 버그 CVE-2026-124194는 이미 악용 중이다. Microsoft는 올해 5,100건 넘게 패치했고 지난달에는 1,400건 이상을 배포했는데, 1년 전 월평균은 약 100건이었다. Microsoft는 AI의 발전이 취약점 발견과 수정 증가에 기여했다고 밝혔다. 같은 주 Apple, Google Chrom...

https://krebsonsecurity.com/2026/11/microsoft-fixes-nearly-1100-security-vulnerabilities/

Microsoft November 2026 Patch Tuesday Fixes 1,093 Vulnerabilities, including an Outlook Zero-Day (CVE-2026-124194) that can leak a user’s NTLMv2 authentication hash to an attacker.

According to Microsoft’s advisory, an unauthenticated attacker can send a specially crafted message file and trick the recipient into opening it in Outlook. Opening the file can make Outlook connect to an attacker-controlled network location without showing the usual external-content warning. This connection can expose authentication information that an attacker could use to impersonate the victim.

Read more: https://www.windowscult.com/microsoft-patch-tuesday-review/

#PatchTuesday #security #Microsoft

Microsoft Patches 1,235 Flaws in November 2026 Update Including Actively Exploited Outlook Flaw

Microsoft's November 2026 Patch Tuesday fixes 1,235 vulnerabilities, including an actively exploited Outlook zero-day tracked as CVE-2026-124194. The update fixes 66 critical flaws that allow remote code execution and credential theft across Windows and Office products.

**Patch Microsoft Outlook first, because CVE-2026-124194 is exploited in attacks to steal NTLM hashes. While the update rolls out, block outbound SMB (TCP 445) to the internet and restrict NTLM where you can, so a malicious message file cannot leak credentials to an external server. Then patch the network-facing Windows Servers, IIS, Exchange Server, and Message Queuing wherever MSMQ is enabled. Next, update Hyper-V hosts and work through the remaining critical bugs in Office, Windows components and Edge. Finally, check your fleet: Windows 11 23H2 Enterprise, Education and IoT Enterprise receive their last update today.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/microsoft-patches-1235-flaws-in-november-2026-update-including-actively-exploited-outlook-flaw-a-y-v-q-f/gD2P6Ple2L

🟡 New security advisory:

CVE-2026-124194 affects Microsoft 365 Apps.

• Impact: Security weakness that could be exploited
• Risk: Potential for targeted attacks
• Mitigation: Schedule patching in your next maintenance window

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-124194-outlook-spoofing-actively-exploited-poc/?utm_source=mastodon&utm_medium=social

by Yazoul AI

#CVE #VulnerabilityManagement #CyberSec

📢 [VULN] Patch Tuesday Novembre 2026 – 1093 CVE - CVE-2026-124194 (faille Outlook exploitée)

Le 10 novembre 2026, Microsoft corrige 1 093 vulnérabilités, son deuxième volume mensuel après le record d’octobre, dont une seule est exploitée : la CVE-2026-124194, une usurpation d’identité dans Outlook qui livre le hash NTLMv2 de l’utilisateur à l’attaquant.

🔗 https://blog.marcfredericgomez.fr/patch-tuesday-novembre-2026-1093-cve/
💬 discussion : https://infosec.pub/post/54784228
#Vulnérabilité #CVE #Cyberveille

Microsoft Patches 1,235 Flaws in November 2026 Update Including Actively Exploited Outlook Flaw

Microsoft's November 2026 Patch Tuesday fixes 1,235 vulnerabilities, including an actively exploited Outlook zero-day tracked as CVE-2026-124194. The update fixes 66 critical flaws that allow remote code execution and credential theft across Windows and Office products.

**Patch Microsoft Outlook first, because CVE-2026-124194 is exploited in attacks to steal NTLM hashes. While the update rolls out, block outbound SMB (TCP 445) to the internet and restrict NTLM where you can, so a malicious message file cannot leak credentials to an external server. Then patch the network-facing Windows Servers, IIS, Exchange Server, and Message Queuing wherever MSMQ is enabled. Next, update Hyper-V hosts and work through the remaining critical bugs in Office, Windows components and Edge. Finally, check your fleet: Windows 11 23H2 Enterprise, Education and IoT Enterprise receive their last update today.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/microsoft-patches-1235-flaws-in-november-2026-update-including-actively-exploited-outlook-flaw-a-y-v-q-f/gD2P6Ple2L

new `git` CVE just dropped: might be good for @forgejo and @Codeberg to publish a statement

https://nvd.nist.gov/vuln/detail/cve-2026-105437

Barracuda Email Security Gateway wird angegriffen

Wozu installiert man eine Appliance, die vor bösen E-Mails schützen soll? Sicher nicht, damit sie selber zum Einfallstor für Angriffe wird. Aber genau das passiert mit schöner Regelmäßigkeit; einige meiner Meldungen dazu habe ich unten aufgelistet. Diesmal ist das Email Security Gateway (ESG) der - amerikanischen - Firma Barracuda der Hauptdarsteller. Darin wurden zwei gefährliche Sicherheitslücken gefunden: CVE-2026-116606 (9,3 von 10) und CVE-2026-111560 (8,6 von 10). Wer die beiden kombiniert, kann damit die komplette Kontrolle über die Appliance erlangen. Das passiert bereits: Beide Lücken wurden und werden ... Weiterlesen:

https://www.pc-fluesterer.info/wordpress/2026/11/11/barracuda-email-security-gateway-wird-angegriffen/

#zeroday #closedsource #cybercrime #email #exploits #firewall #UnplugTrump #wissen

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-116606 – Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

Actionable threat intelligence on CVE-2026-116606 targeting Barracuda ESG products, featuring verified detection queries and endpoint hardening guidance....

https://thecybermind.co/m245

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-116606 – Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

Executive risk and governance perspective on CVE-2026-116606, providing leadership with actionable compliance strategies, asset integrity audits, and boardroom oversight metrics....

https://thecybermind.co/a5wv

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-116606 – Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

Actionable threat intelligence on CVE-2026-116606 targeting Barracuda ESG products, featuring verified detection queries and endpoint hardening guidance....

https://thecybermind.co/m245

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-116606 – Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

Executive risk and governance perspective on CVE-2026-116606, providing leadership with actionable compliance strategies, asset integrity audits, and boardroom oversight metrics....

https://thecybermind.co/a5wv

🚨 Microsoft patches Windows Active Directory flaw that could allow attackers to remotely execute malicious code, CVE-2026-119948

Microsoft has released security updates for a high-severity Active Directory vulnerability that could allow attackers with low-level privileges to execute malicious code remotely on affected Windows systems.

The flaw, tracked as CVE-2026-119948 (CVSS 7.5), stems from a stack-based buffer overflow and affects multiple versions of Windows Server 2016 through 2025, Windows 10, and Windows 11.

Successful exploitation requires specific conditions but no user interaction. Microsoft has not identified any active exploitation or publicly available exploit code.

Administrators are urged to deploy the November 2026 security updates, particularly across affected Windows Server environments.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119948

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

🚨 Microsoft patches Windows Active Directory flaw that could allow attackers to remotely execute malicious code, CVE-2026-119948

Microsoft has released security updates for a high-severity Active Directory vulnerability that could allow attackers with low-level privileges to execute malicious code remotely on affected Windows systems.

The flaw, tracked as CVE-2026-119948 (CVSS 7.5), stems from a stack-based buffer overflow and affects multiple versions of Windows Server 2016 through 2025, Windows 10, and Windows 11.

Successful exploitation requires specific conditions but no user interaction. Microsoft has not identified any active exploitation or publicly available exploit code.

Administrators are urged to deploy the November 2026 security updates, particularly across affected Windows Server environments.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119948

No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

🚨 Critical Ivanti flaw allows hackers to execute code on enterprise management servers without authentication, CVE-2026-121653

Ivanti has released security updates addressing 13 vulnerabilities across five products, including a critical SQL injection flaw in Endpoint Manager (EPM) that could allow unauthenticated attackers to remotely execute malicious code.

The vulnerability, tracked as CVE-2026-121653 (CVSS 9.8), affects EPM Core versions before 2024 SU8. Another critical flaw, CVE-2026-121683 (CVSS 9.4), affects Ivanti Cloud Services Application and could allow attackers to manipulate trusted certificate entries without authentication.

Ivanti has released patches for the affected products and confirmed there is currently no evidence of exploitation in the wild. Administrators are urged to update immediately.

Source: https://www.ivanti.com/blog/november-2026-security-update

Enterprise-level intel, without the enterprise price tag. Plans for everyone. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

🚨 Critical Ivanti flaw allows hackers to execute code on enterprise management servers without authentication, CVE-2026-121653

Ivanti has released security updates addressing 13 vulnerabilities across five products, including a critical SQL injection flaw in Endpoint Manager (EPM) that could allow unauthenticated attackers to remotely execute malicious code.

The vulnerability, tracked as CVE-2026-121653 (CVSS 9.8), affects EPM Core versions before 2024 SU8. Another critical flaw, CVE-2026-121683 (CVSS 9.4), affects Ivanti Cloud Services Application and could allow attackers to manipulate trusted certificate entries without authentication.

Ivanti has released patches for the affected products and confirmed there is currently no evidence of exploitation in the wild. Administrators are urged to update immediately.

Source: https://www.ivanti.com/blog/november-2026-security-update

Enterprise-level intel, without the enterprise price tag. Plans for everyone. darkwebinformer.com/pricing

Need API access? darkwebinformer.com/api-details

Check out the Telegram channel: t.me/SliceForLifeee

Alpine box with SSH open? SSHole (CVE-2026-123158, CISA KEV) lets an attacker in with one long password on sshd built without PAM. Run apk upgrade -U -a and restart sshd, or set PasswordAuthentication no.

Also: SonicWall's SAML/MFA bypass, Plex2Shell on QNAP, and an Outlook zero-day now in KEV. GPUStack and FreeSWITCH have fixes; CISA confirmed both exploited this week.

https://patchorpass.beehiiv.com/?utm_source=mastodon&utm_medium=social&utm_campaign=issue-4

#infosec #homelab #linux

Alpine box with SSH open? SSHole (CVE-2026-123158, CISA KEV) lets an attacker in with one long password on sshd built without PAM. Run apk upgrade -U -a and restart sshd, or set PasswordAuthentication no.

Also: SonicWall's SAML/MFA bypass, Plex2Shell on QNAP, and an Outlook zero-day now in KEV. GPUStack and FreeSWITCH have fixes; CISA confirmed both exploited this week.

https://patchorpass.beehiiv.com/?utm_source=mastodon&utm_medium=social&utm_campaign=issue-4

#infosec #homelab #linux

Podman 6.2 is out with security fixes and Kubernetes improvements.

It fixes CVE-2026-121885, involving systemd handling through image labels; CVE-2026-111361, involving an image-signature check bypass; and CVE-2026-123876, involving a bypass of socket restrictions in a seccomp profile.

The release also adds --validate and --label to podman kube play, plus --multiple-pods for Kubernetes deployments.

https://en.hacks.gr/kykloforise-to-podman-6-2-me-simantikes-diorthoseis-asfaleias-kai-nees-dynatotites/

#Podman #Kubernetes #CVE2026121885 #CVE2026111361

🚨 Attackers exploit zero-day flaws
in AhsayCBS (CVE-2026-105133 & CVE-2026-105134) to bypass authentication and deploy sandbox-evading Python backdoors on backup servers. Patch immediately!

Read more: https://denizhalil.com/2026/11/11/ahsaycbs-vulnerabilities-python-backdoor/

#CyberSecurity #CyberThreats #Malware

🚨 Attackers exploit zero-day flaws
in AhsayCBS (CVE-2026-105133 & CVE-2026-105134) to bypass authentication and deploy sandbox-evading Python backdoors on backup servers. Patch immediately!

Read more: https://denizhalil.com/2026/11/11/ahsaycbs-vulnerabilities-python-backdoor/

#CyberSecurity #CyberThreats #Malware

🚨 EUVD-2026-123533

📊 Score: n/a
📦 Product: Apache HTTP Server
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-11-11

📝 Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292)

This issue affects Apache HTTP Server: 2.4.69.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123533

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-123533

📊 Score: n/a
📦 Product: Apache HTTP Server
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-11-11

📝 Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292)

This issue affects Apache HTTP Server: 2.4.69.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123533

#cybersecurity #infosec #euvd #cve #vulnerability

CVE-2026-59163: Mnemosyne's sync server skipped JWT signature checks, so any forged or alg:none token passed auth. CVSS 9.1. Fix is in v3.10.1 but the patch is still under review, so treat unpatched agents as exposed. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-59163/

CVE-2026-59163: Mnemosyne's sync server skipped JWT signature checks, so any forged or alg:none token passed auth. CVSS 9.1. Fix is in v3.10.1 but the patch is still under review, so treat unpatched agents as exposed. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-59163/

CVE-2026-63406 AnyCable: telemetry hardcoded token leaks secrets from config and CLI args into digest. CVSS 5.9. Patch is still under review, so pin versions and strip secrets from args. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-63406/

christos: Import zlib-1.4.0 (previous was 1.3.2) to address CVE-2026-85091

Node.js fixes 17 bugs, including Node.js HTTP/2 vulnerabilities and a TLS heap leak (CVE-2026-123864). Update to 26.13.1, 24.22.3 or 22.23.5.

#NodeJS #HTTP2 #TLS #CVE2026123864 #DoS #JavaScript #CyberSecurity #InfoSec

https://securityonline.info/nodejs-http2-tls-vulnerabilities-november-2026/?utm_source=mastodon&utm_medium=jetpack_social

2026-11-11, Version 24.22.3 'Krypton' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v24.22.3

#nodejs #javascript

2026-11-11, Version 26.13.1 'Lithium' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v26.13.1

#nodejs #javascript

2026-11-11, Version 22.23.5 'Jod' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v22.23.5

#nodejs #javascript

Node.js fixes 17 bugs, including Node.js HTTP/2 vulnerabilities and a TLS heap leak (CVE-2026-123864). Update to 26.13.1, 24.22.3 or 22.23.5.

#NodeJS #HTTP2 #TLS #CVE2026123864 #DoS #JavaScript #CyberSecurity #InfoSec

https://securityonline.info/nodejs-http2-tls-vulnerabilities-november-2026/?utm_source=mastodon&utm_medium=jetpack_social

2026-11-11, Version 26.13.1 'Lithium' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v26.13.1

#nodejs #javascript

2026-11-11, Version 24.22.3 'Krypton' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v24.22.3

#nodejs #javascript

2026-11-11, Version 22.23.5 'Jod' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v22.23.5

#nodejs #javascript

2026-11-11, Version 24.22.3 'Krypton' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v24.22.3

#nodejs #javascript

2026-11-11, Version 26.13.1 'Lithium' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v26.13.1

#nodejs #javascript

2026-11-11, Version 22.23.5 'Jod' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v22.23.5

#nodejs #javascript

2026-11-11, Version 26.13.1 'Lithium' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v26.13.1

#nodejs #javascript

2026-11-11, Version 24.22.3 'Krypton' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v24.22.3

#nodejs #javascript

2026-11-11, Version 22.23.5 'Jod' (LTS), @aduh95

This is a security release. Notable Changes (CVE-2026-123863) http2: release headers when a stream is removed (Matteo Collina) – High (CVE-2026-123864) tls,http: prevent nested parser execution from empty writes (Matteo Collina) –...

https://github.com/nodejs/node/releases/tag/v22.23.5

#nodejs #javascript

🟠 CVE-2026-64855 - High (8.2)

soapbar is a SOAP library for Python — client, server, and WSDL handling. Prior to version 0.13.0, verify_envelope_bsp() derived its trust anchor from the message it was verifying. It read the X.509 certificate out of the caller-untrusted wsse:B...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-64855 - High (8.2)

soapbar is a SOAP library for Python — client, server, and WSDL handling. Prior to version 0.13.0, verify_envelope_bsp() derived its trust anchor from the message it was verifying. It read the X.509 certificate out of the caller-untrusted wsse:B...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Podman 6.2 is out with security fixes and Kubernetes improvements.

It fixes CVE-2026-121885, involving systemd handling through image labels; CVE-2026-111361, involving an image-signature check bypass; and CVE-2026-123876, involving a bypass of socket restrictions in a seccomp profile.

The release also adds --validate and --label to podman kube play, plus --multiple-pods for Kubernetes deployments.

https://en.hacks.gr/kykloforise-to-podman-6-2-me-simantikes-diorthoseis-asfaleias-kai-nees-dynatotites/

#Podman #Kubernetes #CVE2026121885 #CVE2026111361

CVE-2026-62943 btrbk 8.8: forced-command allowlist bypass lets restricted SSH users pipe arbitrary commands as the backup account. Patch not out yet - audit authorized_keys now. #CVE #infosec #btrbk https://www.valtersit.com/cve/CVE-2026-62943/

🚨 EUVD-2026-69235

📊 Score: 8.3/10 (CVSS v3.1)
📦 Product: otp, otp, otp
🏢 Vendor: erlang
📅 Published: 2026-09-01 | Updated: 2026-11-11

📝 httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handle_body/3 frames by chunked and sil...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-69235

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-69235

📊 Score: 8.3/10 (CVSS v3.1)
📦 Product: otp, otp, otp
🏢 Vendor: erlang
📅 Published: 2026-09-01 | Updated: 2026-11-11

📝 httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handle_body/3 frames by chunked and sil...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-69235

#cybersecurity #infosec #euvd #cve #vulnerability