FediSecfeeds

##

certvde@infosec.exchange at 2026-11-02T10:07:10.000Z ##

🔒 New CSAF advisory published

VDE-2026-132
WAGO: Multiple Devices affected by PHP2Shell
CVE-2026-109618, CVE-2026-109619

Critical vulnerabilities in the PHP runtime may allow a remote attacker to execute arbitrary code by exploiting weaknesses in PHP's internal memory and request handling mechanisms. Under specific conditions, specially…

HTML: https://certvde.com/en/advisories/VDE-2026-132
CSAF JSON: https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-132.json

##

secdb@infosec.exchange at 2026-11-01T01:06:24.000Z ##

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

https://github.com/Galeax/PHP2Shell-Mitigations

##

CVE-2026-109618
(9.8 CRITICAL)

EPSS: 100.00%

updated 2026-11-02T14:52:09.430000

5 posts

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and le

100 repos

https://github.com/pruiz/php-CVE-2026-109618

https://github.com/Bulletdev/php2shell-poc

https://github.com/ericmann/php2shell-ioc

https://github.com/assetnote/php2shell-scanner

https://github.com/alvarodh5/php2shell

https://github.com/junaire/CVE-2026-109618-exploit

https://github.com/Anton-Barinov/php2shell-patches

https://github.com/covertswarmlabs/PHP2Shell-Check

https://github.com/aarsaputra/php2shell

https://github.com/ersinkoc/php-fix

https://github.com/yetDevs/php2shell-triage

https://github.com/open0x01/php2shell

https://github.com/mpyw/php-eol-CVE-2026-109618-109619

https://github.com/kuwoo/php2shell-Lab

https://github.com/bahartanir/php2shell

https://github.com/CyberRoute/php2shell-scanner

https://github.com/MRdark-ops/php2shell

https://github.com/Felix3322/PHP-uniDoS

https://github.com/pentestershell/php2shellbt

https://github.com/devploit/php2shell

https://github.com/Niek/php7

https://github.com/alham-rizvi/php2shell-scanner

https://github.com/pattingbabies/php2shell-CVE-2026-109618-109619

https://github.com/murrez/php2shell

https://github.com/gumerzzzindo/php2shell-CVE-2026-109618-109619

https://github.com/cyberkiddle/CVE-2026-109618

https://github.com/hypnguyen1209/php2shell

https://github.com/break-the-build/php-multipart-waf-signals

https://github.com/MakFly/php2shell-check

https://github.com/vperetti/php-cve-2026-109618-109619-backports

https://github.com/cumakurt/php2shell-scan

https://github.com/ivanscm/php80-cve-2026-109618

https://github.com/david-alvarez-rosa/php-rce

https://github.com/waksboy/fixed-fpm-cve-2026-109618-and-109619-images

https://github.com/zenzue/CVE-2026-109618_19

https://github.com/corelight/php2shell-detect

https://github.com/revonnet/php-fix

https://github.com/cloudducoeur/ansible-playbook-CVE-2026-109618

https://github.com/mirrored-projects/PHP74-Windows-CVE2026

https://github.com/agrresore/php2shell

https://github.com/mikensec/php2shell-lab

https://github.com/exception0x876/php74-el7-patched

https://github.com/0x4148/CVE-2026-109618-php2shell-lab

https://github.com/PasqualePillitteri/php2shell-hardening

https://github.com/ikow/php2shell-poc

https://github.com/Qsnh/php2shell-fixed

https://github.com/godylockz/CVE-2026-109618-109619

https://github.com/ZeroHackOrg/php2shell-poc

https://github.com/1amrahul/php2shell-cve-2026-109618-cve-2026-109619

https://github.com/Swordsec/php2shell-guard

https://github.com/ginoa79/php56-php2shell-backport

https://github.com/RuanSerraAzul/CVE-2026-109618-POC

https://github.com/Is4yev/php2shell-poc

https://github.com/Blue-B/php2shell-guard

https://github.com/WoYinDao/CVE-2026-109618-CVSS-9.2-Critical

https://github.com/Masriyan/php2shell

https://github.com/akaihigurashi/php2scan

https://github.com/softjapan/php74-cve-patched

https://github.com/mefulton/CVE-2026-109618-analysis

https://github.com/AmpedWasTaken/PHP2Shell-CVE-2026-109618-CVE-2026-109619

https://github.com/CompleteTech-Security/php2shell-check

https://github.com/getastra/php2shell-triage

https://github.com/xuehuolll/php2shell-CVE-2026-109618-109619

https://github.com/slabbdev/php2shell-cve-2026-109618-109619

https://github.com/enactive-systems/CVE-2026-109618-poc

https://github.com/xaviware/go-php2shell-scanner-CVE-2026-109618-CVE-2026-109619

https://github.com/SamJUK/php2shell-check-cve-2026-109618

https://github.com/JoasASantos/php2shell-exploit

https://github.com/yashasrnair/php2shell

https://github.com/Chr1s-T/php2shell-cve-2026-109618

https://github.com/Noshadi-sec/cve-2026-109618-109619-poc

https://github.com/Sol0-dev/php2shell

https://github.com/aancw/php2shell-scanner

https://github.com/Nayrae/CVE-2026-109618

https://github.com/pax-k/Php2Shell-POC

https://github.com/HackSpeak/CVE-2026-109618

https://github.com/meuhland/php-legacy-windows-builds

https://github.com/mnk-works/php2shell-verify

https://github.com/lzz0403/CVE-2026-109618-PHP2Shell-poc

https://github.com/syrex1013/php2shell

https://github.com/umair-aziz025/PHP2Shell

https://github.com/brentmartinmiller/php2shell-check

https://github.com/syhunt/php2shell-protection

https://github.com/Stonlifer/php2shell

https://github.com/zr0n/php2shell

https://github.com/Bhavye-Malhotra/php2shell-2026

https://github.com/HOSTED-POWER/php_uploadprogress_guard

https://github.com/deconstruction/EOLphp-php2shell-patches

https://github.com/JoasASantos/php2shell-scanner

https://github.com/VABISMO/php2shell-nginx-fpm-full-rce

https://github.com/eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC

https://github.com/0xrsydn/php2shell-scan

https://github.com/GlobalsecureAcademy/php2shell-scanner-CVE-2026-109618-CVE-2026-109619

https://github.com/Ethen1212/php2shell-CVE-2026-109618

https://github.com/zhqagp/php-7.2

https://github.com/cozybear-dev/cve-2026-109618

https://github.com/EngOREOO/php2shell-CVE-2026-109618-CVE-2026-109619-PoC

https://github.com/dinosn/php-cve-2026-10961x-lab-poc

https://github.com/bagusindrayana/php-vuln-scan

inlinestyle@mastodon.social at 2026-11-02T15:24:55.000Z ##

mail.inlinestyle.it has been updated to the latest Mailu release (2024.06.67), which ships a patched webmail runtime fixing the recent PHP2Shell CVEs (CVE-2026-109618, CVE-2026-109619). Your mail keeps getting the security updates it deserves ✉️

##

offseq@infosec.exchange at 2026-11-02T12:00:33.000Z ##

CVE-2026-109618 (PHP2Shell) – CRITICAL vuln in WAGO CC100. Attackers can hijack the PHP process via web UI; public exploit exists, no patch yet. Restrict access & monitor for updates. https://radar.offseq.com/threat/wago-multiple-devices-affected-by-php2shell-b21f4d4a82bef247 #OffSeq #Vulnerability #ICS #WAGO

##

certvde@infosec.exchange at 2026-11-02T10:58:26.000Z ##

🔒 New CSAF advisory published

VDE-2026-139
Two critical PHP vulnerabilities in several Festo Didactic products
CVE-2026-109618, CVE-2026-109619

Festo Didactic FactoryViews and MES4 deployed along with xampp bundle an Apache web server with PHP. The bundled version of PHP is vulnerable to the two critical vulnerabilities CVE-2026-109618 a…

HTML: https://certvde.com/en/advisories/VDE-2026-139
CSAF JSON: https://festo.csaf-tp.certvde.com/.well-known/csaf/white/2026/fsa-202603.json

##

certvde@infosec.exchange at 2026-11-02T10:07:10.000Z ##

🔒 New CSAF advisory published

VDE-2026-132
WAGO: Multiple Devices affected by PHP2Shell
CVE-2026-109618, CVE-2026-109619

Critical vulnerabilities in the PHP runtime may allow a remote attacker to execute arbitrary code by exploiting weaknesses in PHP's internal memory and request handling mechanisms. Under specific conditions, specially…

HTML: https://certvde.com/en/advisories/VDE-2026-132
CSAF JSON: https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-132.json

##

secdb@infosec.exchange at 2026-11-01T01:06:24.000Z ##

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

#Barracuda #EmailSecurity #CVE2026116606 #CVE2026111560 #Cybersecurity #Vulnerability #InfoSec

##

CVE-2026-116606
(0 None)

EPSS: 0.00%

updated 2026-11-02T13:17:37.017000

3 posts

An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration.

DailyCyberSecurity at 2026-11-02T14:50:14.741Z ##

Patch two Barracuda vulnerabilities, CVE-2026-116606 and CVE-2026-111560, that allow attackers to gain Barracuda root access across multiple appliances.

https://securityonline.info/barracuda-vulnerabilities-root-access-patch/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-11-02T14:50:14.000Z ##

Patch two Barracuda vulnerabilities, CVE-2026-116606 and CVE-2026-111560, that allow attackers to gain Barracuda root access across multiple appliances.

#Barracuda #EmailSecurity #CVE2026116606 #CVE2026111560 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/barracuda-vulnerabilities-root-access-patch/?utm_source=mastodon&utm_medium=jetpack_social

##

offseq@infosec.exchange at 2026-11-02T13:30:36.000Z ##

CVE-2026-116606: CRITICAL auth bypass in Barracuda ESG (<9.4.0.030). Unauthenticated attackers can import crafted configs, altering appliance settings. Upgrade to 9.4.0.030+ now. https://radar.offseq.com/threat/cve-2026-116606-cwe-288-authentication-bypass-using-an-alternate-path-or-channel-in-barracuda-networks-f64fb8cb7ae70977 #OffSeq #Barracuda #Infosec #CVE2026_116606

##

CVE-2026-111560
(0 None)

EPSS: 0.00%

updated 2026-11-02T13:17:35.190000

2 posts

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently processed.

DailyCyberSecurity at 2026-11-02T14:50:14.741Z ##

Patch two Barracuda vulnerabilities, CVE-2026-116606 and CVE-2026-111560, that allow attackers to gain Barracuda root access across multiple appliances.

#Barracuda #EmailSecurity #CVE2026116606 #CVE2026111560 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/barracuda-vulnerabilities-root-access-patch/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-11-02T14:50:14.000Z ##

Patch two Barracuda vulnerabilities, CVE-2026-116606 and CVE-2026-111560, that allow attackers to gain Barracuda root access across multiple appliances.

#Barracuda #EmailSecurity #CVE2026116606 #CVE2026111560 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/barracuda-vulnerabilities-root-access-patch/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-120213
(9.1 CRITICAL)

EPSS: 0.00%

updated 2026-11-02T11:17:31.137000

1 posts

@fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In versions 9.0.0 through 11.6.5, when an application uses parameterized prefix and rewritePrefix options to pin clients to a fixed upstream path, the plugin substitutes URL-decoded route parameters into rewritePrefix without re-encoding them. A parameter value that encodes a path se

offseq@infosec.exchange at 2026-11-02T10:30:34.000Z ##

CVE-2026-120213 (CRITICAL, CVSS 9.1) impacts @fastify/http-proxy v9.0.0 – 11.6.5. Path traversal flaw lets unauthenticated attackers bypass prefix restrictions, risking SSRF. Update to 11.6.6+ ASAP. https://radar.offseq.com/threat/cve-2026-120213-cwe-22-path-traversal-in-fastifyhttp-proxy-ca54c813c9ce1f83 #OffSeq #NodeJS #infosec #CVE #vulnerability

##

CVE-2026-120345
(10.0 CRITICAL)

EPSS: 0.00%

updated 2026-11-02T06:31:15

updated 2026-11-02T03:30:34

2 posts

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.

offseq@infosec.exchange at 2026-11-02T04:30:36.000Z ##

WAVLINK WN536AX6-A V260507 is impacted by CVE-2026-120279 (CRITICAL, CVSS 10) – remote OS command injection via /protocol.csp openvpn_cli Handler. Exploit is public. Patch or isolate devices now! https://radar.offseq.com/threat/a-flaw-has-been-found-in-wavlink-wn536ax6-a-v260507-cve-2026-120279-f78efd8cb5e677e8 #OffSeq #Vulnerability #CVE2026120279

##

thehackerwire@mastodon.social at 2026-11-02T01:47:23.000Z ##

🔴 CVE-2026-120279 - Critical (10)

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120279/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-120283
(10.0 CRITICAL)

EPSS: 0.00%

updated 2026-11-02T03:30:34

2 posts

A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS: 0.00%

updated 2026-11-02T00:30:34

1 posts

A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor wa

thehackerwire@mastodon.social at 2026-11-02T01:03:48.000Z ##

🔴 CVE-2026-120276 - Critical (10)

A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120276/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-120277
(10.0 CRITICAL)

EPSS: 0.00%

updated 2026-11-02T00:30:34

2 posts

A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early

thehackerwire@mastodon.social at 2026-11-02T01:03:39.000Z ##

🔴 CVE-2026-120277 - Critical (10)

A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120277/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-11-02T00:00:41.000Z ##

CVE-2026-120277: CRITICAL OS command injection in WAVLINK WN536AX6-A (V260507_2.0.0). Remote attackers can execute OS commands – no patch yet. Restrict access & monitor for updates. Exploit code is public. https://radar.offseq.com/threat/cve-2026-120277-os-command-injection-in-wavlink-wn536ax6-a-51fe2fe977f184ad #OffSeq #CVE #Infosec #IoT

##

EPSS: 0.77%

updated 2026-11-01T18:30:24

2 posts

Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the launcher starts Deno with unrestricted --allow-read, --allow-write, and --allow-net, and the runner leaves the Deno API on the JavaScript glob

cyberseckyle@infosec.exchange at 2026-11-01T19:50:56.000Z ##

Prefab UI's opt-in Generative UI sandbox has a bypass (CVE-2026-120338). The Pyodide/Deno boundary let caller-supplied Python read and write host files as the server OS user.

Relevant to FastMCP servers that expose generate_prefab_ui. Unauthenticated exposure depends on the server's access controls.

Fixed in prefab-ui 0.21.0, released Oct 26. Check versions and tool access.

https://github.com/PrefectHQ/prefab/pull/538

#Cybersecurity #Infosec #AppSec #MCP

##

thehackerwire@mastodon.social at 2026-11-01T16:32:01.000Z ##

🔴 CVE-2026-120338 - Critical (10)

Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120338/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-94361
(5.3 MEDIUM)

A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit is publicly available and might be used. A fix is planned for the upcoming release.

1 repos

https://github.com/Element2023H/CVE-2026-120232

thehackerwire@mastodon.social at 2026-11-01T15:46:33.000Z ##

🟠 CVE-2026-120232 - High (8.8)

A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120232/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-120227
(9.9 CRITICAL)

EPSS: 2.21%

updated 2026-11-01T15:30:30

1 posts

A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file static_route_setting.sh of the component ioos Web Backend. Performing a manipulation of the argument rule_name results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosu

thehackerwire@mastodon.social at 2026-11-01T13:32:45.000Z ##

🔴 CVE-2026-120227 - Critical (9.9)

A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file static_route_setting.sh of the component ioos Web Backend. Performing a manipulation of the argument rule_name results in os comman...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120227/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-120308
(9.9 CRITICAL)

EPSS: 0.53%

updated 2026-11-01T15:30:30

2 posts

A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub configuration. Nothing checks that the identifier names a volume that workspace owns. Parent-directory segments in the identifier collapse the joined path to the worker's filesystem ro

thehackerwire@mastodon.social at 2026-11-01T13:31:27.000Z ##

🔴 CVE-2026-120308 - Critical (9.9)

A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub configuration. Nothing checks t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120308/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-11-01T13:30:33.000Z ##

CVE-2026-120308 (CRITICAL, CVSS 9.9): Path traversal in beam-cloud Beta9 gateway (<0.1.776/0.1.756) lets tenants with workspace tokens read/write any worker files. Upgrade gateway & worker ASAP to fix. https://radar.offseq.com/threat/cve-2026-120308-cwe-22-path-traversal-in-beam-cloud-beta9-gateway-9721aa33b77da3f8 #OffSeq #CVE2026120308 #infosec #CloudSecurity

##

CVE-2026-120307
(9.9 CRITICAL)

EPSS: 0.48%

updated 2026-11-01T15:30:20

1 posts

The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into a worker path. If the unresolved path starts with a mount destination, including the default upload mount at /tmp/.beta9, the remainder is joined onto that mount's source with filepath.Join, which cleans parent-directory segments after the prefix check. A lon

thehackerwire@mastodon.social at 2026-11-01T13:31:17.000Z ##

🔴 CVE-2026-120307 - Critical (9.9)

The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into a worker path. If the unresolved path starts with a mount destination, including the default upload mount ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120307/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-120231
(9.9 CRITICAL)

EPSS: 1.69%

updated 2026-11-01T15:17:23.053000

2 posts

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument file_id causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this dis

cyberseckyle@infosec.exchange at 2026-11-01T20:00:06.000Z ##

WAVLINK WN553X1-B firmware V260403_2.0.0 has authenticated command injection (CVE-2026-120231). A researcher reproduced root execution in emulated firmware. Default passwords raise the risk.

MSPs: inventory devices, change defaults, and restrict management access. No confirmed vendor fix or in-the-wild exploitation.

updated 2026-11-01T11:18:57.843000

2 posts

A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function config_restore_ex of the file /etc/openwrt_release. This manipulation of the argument filename causes relative path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about

offseq@infosec.exchange at 2026-11-01T12:00:34.000Z ##

CVE-2026-120225 (CVSS 9.4) affects Oray Pugongying X5 Pro v7.6.0 & v7.6.1 – critical path traversal in config_restore_ex lets remote attackers access/modify files. Public exploit code, no patch. Restrict access & monitor logs. https://radar.offseq.com/threat/cve-2026-120225-relative-path-traversal-in-oray-pugongying-x5-pro-9cee731f9b642b58 #OffSeq #CVE2026120225 #infosec #IoT

##

thehackerwire@mastodon.social at 2026-11-01T11:31:21.000Z ##

🔴 CVE-2026-120225 - Critical (9.1)

A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function config_restore_ex of the file /etc/openwrt_release. This manipulation of the argument filename causes relative path traversal. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120225/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-118386
(0 None)

EPSS: 0.15%

updated 2026-11-01T10:18:36.187000

1 posts

Workflows triggered by a pull request review were read from the commit named in the review's `commit_id`, while the fork restrictions were decided by the reviewed pull request, and the commit was not checked to belong to that pull request. A user with read access to a repository could place a commit of their own in it, through a fork pull request or an AGit push, and submit a review naming that co

linuxmint_hun@mastodon.social at 2026-11-01T20:23:10.000Z ##

CW: CVE-2026-120263, CVE-2026-118386 — OAuth2 alapú fiókátvétel és Actions workflow-k kihasználása; összesen 20 biztonsági javítás. Emellett több teljesítmény- és Actions-fejlesztés. Saját Gitea-t üzemeltetsz? Frissíts 28.3-ra. Részletek: https://linuxmint.hu/hir/2026/11/megjelent-a-gitea-283-20-biztonsagi-javitas-es-teljesitmenybeli-fejlesztes
#Gitea #Linux #OpenSource #Security

##

CVE-2026-120196
(9.9 CRITICAL)

EPSS: 1.69%

updated 2026-11-01T06:30:28

2 posts

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure.

offseq@infosec.exchange at 2026-11-01T10:30:33.000Z ##

WAVLINK WN579X3-D V250402 hit by CRITICAL OS command injection (CVE-2026-120196, CVSS 9.9). Public exploits available; no patch yet. Restrict device access, disable remote management. https://radar.offseq.com/threat/a-vulnerability-was-detected-in-wavlink-wn579x3-d-v250402-cve-2026-120196-2bf24d3ff2b5dc6b #OffSeq #infosec #CVE #IoT

##

thehackerwire@mastodon.social at 2026-11-01T07:47:12.000Z ##

🔴 CVE-2026-120196 - Critical (9.9)

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection. The attack may be performed from remote. The ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120196/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-120197
(9.9 CRITICAL)

EPSS: 1.69%

updated 2026-11-01T06:30:28

3 posts

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.

offseq@infosec.exchange at 2026-11-01T07:30:34.000Z ##

WAVLINK WL-WN530HG4B M_V260724 has a CRITICAL OS command injection (CVE-2026-120197, CVSS 9.9). Exploit code is public, no patch yet. Restrict management interface access. https://radar.offseq.com/threat/a-flaw-has-been-found-in-wavlink-wl-wn530hg4b-mv260724-cve-2026-120197-caef8b3ed7bd13a6 #OffSeq #CVE2026120197 #RouterVuln #Infosec

##

thehackerwire@mastodon.social at 2026-11-01T07:02:49.000Z ##

🔴 CVE-2026-120197 - Critical (9.9)

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-11-01T04:30:33.000Z ##

CVE-2026-120197 (CRITICAL, CVSS 9.4): WAVLINK WL-WN530HG4B routers have an OS command injection flaw in port_forward (/cgi-bin/wapi.cgi). Public exploit code exists. Restrict access, monitor devices, and check for updates. https://radar.offseq.com/threat/cve-2026-120197-os-command-injection-in-wavlink-wl-wn530hg4b-b13519810fe65740 #OffSeq #Vulnerability #IoTSecurity

##

CVE-2026-120195
(10.0 CRITICAL)

EPSS: 2.07%

updated 2026-11-01T06:30:28

1 posts

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlan_ssid leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor w

thehackerwire@mastodon.social at 2026-11-01T07:02:59.000Z ##

🔴 CVE-2026-120195 - Critical (10)

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlan_ssi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120195/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-120189
(10.0 CRITICAL)

EPSS: 1.35%

updated 2026-11-01T01:17:16.877000

2 posts

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

thehackerwire@mastodon.social at 2026-11-01T03:01:09.000Z ##

🔴 CVE-2026-120189 - Critical (10)

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120189/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-11-01T01:30:34.000Z ##

CVE-2026-120189: CRITICAL buffer overflow in D-Link DIR-505 v1.10B02 (TFTP handler). Remote, unauthenticated code execution possible. Exploit code public; patch unknown. Disable/restrict TFTP access ASAP. https://radar.offseq.com/threat/cve-2026-120189-stack-based-buffer-overflow-in-d-link-dir-505-3cde01417e371d27 #OffSeq #CVE #IoTSecurity

##

CVE-2026-118636
(9.8 CRITICAL)

EPSS: 0.57%

updated 2026-10-31T21:31:49

2 posts

**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class filter, so an application that puts it in front of an untrusted peer is open to gadget-chain RCE. As the 3.0.0 branch is inactive, we do not plan to release a version that fixes this issue. Users are recommended to use the latest Apache MINA 2.2

offseq@infosec.exchange at 2026-11-01T00:00:37.000Z ##

CVE-2026-118636: CRITICAL RCE in Apache MINA 3.0.0 codec via unsafe deserialization in JavaNativeMessageDecoder. No fix – 3.0.0 is unsupported. Immediate migration to 2.2.x recommended. Details: https://radar.offseq.com/threat/unsupported-when-assigned-javanativemessagedecoder-in-the-mina-30-codec-module-calls-6e22dafb201ce016 #OffSeq #ApacheMINA #RCE #JavaSecurity

##

thehackerwire@mastodon.social at 2026-10-31T22:00:28.000Z ##

🔴 CVE-2026-118636 - Critical (9.8)

**UNSUPPORTED WHEN ASSIGNED**

JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class filter, so an
application that puts it in front of an untrusted peer is open to gadget-chain R...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-98432
(9.8 CRITICAL)

EPSS: 0.46%

updated 2026-10-31T21:16:53.683000

36 posts

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently process a retransmitted SYN for the same request socket, and send a SYNACK from tcp_check_req(). tcp_v4_send_synack() an

55 repos

https://github.com/raahilmw/synipopt

https://github.com/brett6320/fix_CVE-2026-98432

https://github.com/mahdi-salmanzade/CVE-2026-98432

https://github.com/marcelofmatos/cve-2026-98432-check

https://github.com/matthew-hollick/mitigate-cve-2026-98432

https://github.com/tiendungdev/cve-2026-98432-guard

https://github.com/antonyantony/cve-2026-98432-nft

https://github.com/paulwouters/block_cve_2026_98432

https://github.com/illuscapital/CVE-2026-98432

https://github.com/thiscitze/cve-2026-98432-root-shell

https://github.com/ZombiePm/cve-2026-98432-mitigation

https://github.com/Alucard0x1/cve-2026-98432

https://github.com/0xSpuddy/cve-2026-98432-check

https://github.com/adeptum-labs/cve-emergency-monitor

https://github.com/MikkoAbudo/CVE-2026-98432-POC

https://github.com/AronWang001/linux-cve-2026-98432-fix

https://github.com/akamai/cve-2026-98432-validation-mitigation

https://github.com/mc493/kshield

https://github.com/davetha/cve-2026-98432

https://github.com/nfodor/cve-2026-98432-nft-mitigation

https://github.com/suominen/CVE-2026-98432

https://github.com/polikhronidi/cve-2026-98432-ubuntu-backport

https://github.com/nsrg-fmlorg/kpatch-cve-2026-98432

https://github.com/tc4dy/CVE-2026-98432-PoC-Exploit

https://github.com/bitwire-it/Probe-CVE-2026-98432

https://github.com/xen0bit/netprobe-cve-2026-98432

https://github.com/axisops/CVE-2026-98432

https://github.com/maxottovon/CVE-2026-98432-scan

https://github.com/typhoon1217/cve-2026-98432-mitigation

https://github.com/fetus-hina/cve-2026-98432-mitigation-rpm

https://github.com/techtaek77/ubuntu-tcp-guide

https://github.com/BigBIueWhale/cve-2026-98432-kernel-upgrade

https://github.com/al4n4n/CVE-2026-98432

https://github.com/johnhsb/linux-tcp-uaf-cve-2026-98432

https://github.com/jamilbk/drop-ipv4-opt

https://github.com/H1z3-br0/CVE-2026-98432

https://github.com/sevaepsteyn/cve-2026-98432-ebpf

https://github.com/uvian/xboard-core

https://github.com/pob220/ubuntu-noble-tcp-rcu-backport

https://github.com/maxigentr/netviser-linux-security-auditor

https://github.com/alvaroguzmancode/cve-2026-98432

https://github.com/fbuff-tools/cve-2026-98432-checker

https://github.com/Quaerendir/cve-2026-98432-audit

https://github.com/scriptzteam/Paranoid-CVE-2026-98432

https://github.com/Mervent/cve-2026-98432

https://github.com/soroushneshati/cve-2026-98432-ubuntu-mitigation

https://github.com/Ghost-Bx1/cve-2026-98432-linux-tcp-uaf

https://github.com/ndeet/cve-2026-98432

https://github.com/xxhjkl/cve-2026-98432-check

https://github.com/Omniversetr/omnicheck_CVE-2026-98432

https://github.com/offline-ant/tcp2kaslr

https://github.com/akaihigurashi/kernel98scan

https://github.com/googlesky/CVE-2026-98432

https://github.com/medandevsec/cve-2026-98432-ubuntu-analisis

https://github.com/knneth/cve-2026-98432-dkms

sayzard@mastodon.sayzard.org at 2026-11-02T15:46:51.000Z ##

WTF Ubuntu?

글쓴이는 리눅스 커널 TCP 코드의 원격 공격 가능 취약점 CVE-2026-98432가 CVSS 9.8로 평가됐다고 전한다. 또한 Anthropic이 서버의 루트 권한을 획득하는 익스플로잇을 제작했으며, Debian은 10월 16일 패치했지만 Ubuntu의 지원 중인 릴리스는 11월 2일까지 취약 상태라고 주장한다. Ubuntu 기반 AI 서버와 인프라 운영자는 배포판의 보안 권고와 커널 패치 상태를 직접 확인할 필요가 있다.

https://chalmovsky.com/posts/wtf-ubuntu

#linux #ubuntu #kernel #security #cve

##

nixCraft@mastodon.social at 2026-11-02T15:28:37.000Z ##

WTF Ubuntu? https://chalmovsky.com/posts/wtf-ubuntu

In case you missed it: CVE-2026-98432 is a critical (CVSS 9.8) bug in the Linux kernel's TCP code. It's been there since 2016, so virtually every Linux server on the planet has it, and it can be hit remotely. Anthropic says it built a working exploit that gets root on a server. A total takeover.

Debian patched it on October 16. Ubuntu still doesn't have a patch more than two weeks later. Every supported release, LTS included, is listed as "Vulnerable".

##

cyberveille@mastobot.ping.moi at 2026-11-02T14:30:06.000Z ##

📢 [VULN] CVE-2026-98432 : la faille critique du noyau Linux qui peut offrir un accès root à distance

Notée 9,8 sur 10, la faille CVE-2026-98432 présente dans le noyau Linux permettrait, selon Anthropic, d'exécuter des commandes à distance en tant que root, le tout sans être authentifié. Quels sont vraiment les risques ? Comment se protéger ? Voici ce qu'il faut savoir.

🔗 https://www.it-connect.fr/cve-2026-98432-faille-noyau-linux-tcp-root-distance
💬 discussion : https://infosec.pub/post/54407262
#CVE #Cyberveille

##

nixCraft@mastodon.social at 2026-11-02T15:28:37.000Z ##

WTF Ubuntu? https://chalmovsky.com/posts/wtf-ubuntu

In case you missed it: CVE-2026-98432 is a critical (CVSS 9.8) bug in the Linux kernel's TCP code. It's been there since 2016, so virtually every Linux server on the planet has it, and it can be hit remotely. Anthropic says it built a working exploit that gets root on a server. A total takeover.

Debian patched it on October 16. Ubuntu still doesn't have a patch more than two weeks later. Every supported release, LTS included, is listed as "Vulnerable".

##

leitmedium@tldr.nettime.org at 2026-11-02T12:05:39.000Z ##

Bin irritiert, dass für Debian schön länger Kernelpatches bereitstehen, aber man bei Ubuntu irgendwie hängt (CVE Score 9,8).

https://ubuntu.com/security/CVE-2026-98432

##

benzogaga33@mamot.fr at 2026-11-02T10:40:04.000Z ##

CVE-2026-98432 : la faille critique du noyau Linux qui peut offrir un accès root à distance https://www.it-connect.fr/cve-2026-98432-faille-noyau-linux-tcp-root-distance/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Linux

##

nurkiewicz@fosstodon.org at 2026-11-02T09:16:01.000Z ##

9.8 CVE in Linux kernel: https://www.cve.org/CVERecord?id=CVE-2026-98432

##

linuxmint_hun@mastodon.social at 2026-11-02T06:46:14.000Z ##

CW: biztonság

CVE-2026-98432 (CVSS 9.8) kritikus Linux kernel IPv4 use-after-free: Anthropic belső Claude modellje működő exploitot demonstrált—Multipath TCP listenerek esetén távoli root lehetséges. Upstream javítások elérhetők, de Ubuntu 22.04/24.04/26.04/26.10 még sebezhető. Ideiglenes mitigáció: sudo sysctl -w net.mptcp.enabled=0 vagy az iptables DROP szabály. Részletek: https://linuxmint.hu/hir/2026/11/a-claude-ai-jelszo-nelkul-torhet-be-sebezheto-linux-szerverekre-az-ubuntu-meg-mindig-nem

#Linux #CVE2026-98432 #Ubuntu #security #OpenSource

##

besendorf@chaos.social at 2026-11-02T06:36:35.000Z ##

Ubuntu is shitty software and backporting is flawed
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

##

crypto@eicker.news at 2026-11-02T03:41:35.000Z ##

Anza has urged Solana mainnet-beta validators to act on CVE-2026-98432, a critical Linux kernel use-after-free bug scored 9.8 that lets a remote attacker run commands as root. Ubuntu still lists the fix as work in progress, so operators should disable Multipath TCP. A host takeover could expose the validator identity key. https://thedefiant.io/news/security/anza-urges-solana-validators-to-act-on-critical-linux-flaw #Web3 #Blockchain #Solana

##

0x3e4@cyberplace.social at 2026-11-01T22:19:27.000Z ##

what the heck?

CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. Ubuntu and RHEL haven't shipped a fixed kernel yet.

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

##

CuratedHackerNews@mastodon.social at 2026-11-01T19:40:03.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

##

ericfreyss@mastodon.social at 2026-11-01T18:16:36.000Z ##

Linux's October 2026 TCP Use-After-Free: CVE-2026-98432 — Atlas
-> mptcp
-> IPv4 packets with options

##

hn500@social.lansky.name at 2026-11-01T09:30:13.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

##

raul@mastodon.in4matics.cat at 2026-11-01T07:20:09.000Z ##

Si portes Linux, això et toca avui: CVE-2026-98432, use-after-free a l'handshake TCP IPv4, CVSS 9.8. S'arriba per xarxa, abans de qualsevol autenticació.

✅ Debian, SUSE, Oracle UEK, Amazon: pedaç llest
❌ Ubuntu (totes) i RHEL 8/9/10: encara res

🔎 uname -r · ss -Mlnp #Linux #CVE #seguretat
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

##

shlee@aus.social at 2026-11-01T07:08:05.000Z ##

https://ubuntu.com/security/CVE-2026-98432

Ubuntu still haven’t released this fix? It’s been days since Debian released the new kernel? Wtf is going on Shuttleworth

##

technotenshi@infosec.exchange at 2026-11-01T06:45:08.000Z ##

Linux kernel CVE-2026-98432 is a use-after-free in the IPv4 TCP handshake that a remote, unauthenticated peer can reach. Upstream is fixed, but Ubuntu's tracker still lists its kernels as vulnerable and Red Hat lists RHEL 8, 9 and 10 as affected. Anthropic says Claude built a root exploit for servers with a multipath TCP listener, which Go 1.24+ enables by default. The Go team says the bug is not specific to MPTCP.

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

#LinuxKernel #InfoSec

##

benzogaga33@mamot.fr at 2026-11-01T06:10:09.000Z ##

CVE-2026-98432: blocking the Linux TCP bug until Ubuntu and Red Hat ship a fix https://getrff.com/blog/cve-2026-98432-linux-tcp-ip-options-block/

##

MrNuclearMonster@mastodon.social at 2026-11-01T06:03:04.000Z ##

ioquake3.org will be offline for a bit. Ubuntu hasn’t patched this yet https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

This includes all services (irc relay, directory server) as this looks severe and I don’t have time right now to look into it more.

##

poga@g0v.social at 2026-11-01T05:15:54.000Z ##

這年頭架服務真是有夠苦

https://blog.gslin.org/archives/2026/11/01/13313/linux-%E9%80%99%E6%AC%A1-mptcp-%E7%9A%84-use-after-free-%E6%BC%8F%E6%B4%9E-cve-2026-98432/

##

eckes@zusammenkunft.net at 2026-11-01T02:44:17.000Z ##

Did Canonical meanwhile communicate why their kernel fixes are still missing? https://ubuntu.com/security/CVE-2026-98432?utm_source=eckes

##

security_crawler_carl@infosec.exchange at 2026-11-01T02:38:47.000Z ##

🏆 New Achievement! Cursed Kernel (Soulbound, No Refund)!

Item: Linux Kernel — IPv4 TCP Networking Code. Rarity: Ubiquitous. Hidden Stat: CVE-2026-98432, a use-after-free flaw scoring 9.8 out of 10. Effect: Unauthenticated remote attackers may execute commands as root on any server running an MPTCP listener. Side Effects: Also degrades ordinary TCP connections. Lore Text: Researchers at Anthropic have already crafted a working exploit. Distributions affected include Ubuntu and Red Hat. (1/2)

##

hnbest@mastodon.social at 2026-11-01T01:00:02.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

##

hn250@social.lansky.name at 2026-10-31T23:25:11.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

##

masek@infosec.exchange at 2026-10-31T21:33:12.000Z ##

@thilo CVE-2026-98432 requires close monitoring because it is a remotely trigger-able Linux kernel use-after-free vulnerability with demonstrated root-level exploitation.

Although kernel fixes exist upstream, they are not yet available or deployed across all distributions and supported kernel versions.

The demonstrated exploit currently requires MPTCP, but the underlying vulnerability affects ordinary TCP as well.

A use-after-free has already been demonstrated without MPTCP, although a complete exploit chain has not.

Disabling MPTCP is therefore not a reliable security boundary. It is a bandage.

A working exploit (which is not impossible) against ordinary TCP listeners could suddenly and dramatically expand the attack surface, potentially exposing virtually any unpatched Linux server running a reachable TCP service.

The key uncertainty is not whether ordinary TCP is vulnerable, but how far an attacker can exploit it. That makes continued attention essential.

##

hackersnews@mastodon.cesium.pw at 2026-10-31T21:30:09.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
https://news.ycombinator.com/item?id=50319143

#hackernews #tech

##

newsycombinator@framapiaf.org at 2026-10-31T21:00:49.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Comments: https://news.ycombinator.com/item?id=50319143

##

hn100@social.lansky.name at 2026-10-31T20:50:10.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

##

hn50@social.lansky.name at 2026-10-31T20:20:09.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

##

CuratedHackerNews@mastodon.social at 2026-10-31T19:49:04.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

##

h4ckernews@mastodon.social at 2026-10-31T19:45:17.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Comments: https://news.ycombinator.com/item?id=50319143

#HackerNews

##

cyberseckyle@infosec.exchange at 2026-10-31T15:01:05.000Z ##

Linux CVE-2026-98432 is a TCP use-after-free. Anthropic demonstrated remote root against an MPTCP listener in a lab, not known in-the-wild exploitation. The underlying flaw is not limited to MPTCP.

Go 1.24+ enables MPTCP on Linux listeners by default. Inventory exposed services, check distro advisories and deploy fixed kernels.

https://www.anthropic.com/research/discovering-vulnerabilities-with-claude

#Cybersecurity #Infosec #Linux #PatchManagement

##

benzogaga33@mamot.fr at 2026-10-31T11:10:05.000Z ##

CVE-2026-98432: Linux IPv4 UAF https://nvd.nist.gov/vuln/detail/cve-2026-98432

##

tugatech@masto.pt at 2026-10-31T08:50:14.000Z ##

Um modelo do assistente Claude desenvolveu uma ferramenta de ataque a servidores Linux sem autenticação. A falha crítica CVE-2026-98432 foi identificada com uma pontuação de 9,8 em 10 pela equipa de segurança do kernel Linux." 🤖

🔗 https://tugatech.com.pt/t93788-anthropic-usa-modelo-claude-para-explorar-falha-critica-de-98-no-kernel-linux

#anthropic #claude #falha #kernel #linux

##

benzogaga33@mamot.fr at 2026-10-31T06:10:06.000Z ##

Go programs are vulnerable to CVE-2026-98432 (Linux RCE) https://groups.google.com/g/golang-announce/c/PCoQcdxoScw?pli=1

##

ifin@infosec.exchange at 2026-10-31T05:54:03.000Z ##

Patching is taking some time on this potentially serious Linux kernel vulnerability. While we wait, we have a rundown of the partial mitigations for the known attack path.

https://ifin.network/t/cve-2026-98432-unexpected-ipv4-options-lead-to-use-after-free-code-execution-in-linux/946

#ThreatIntel #ThreatIntelligence

##

CVE-2026-120209
(9.8 CRITICAL)

EPSS: 0.54%

updated 2026-10-31T18:30:30

2 posts

AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which passes scripts to GroovyClassLoader for unauthenticated remote code execution.

cyberseckyle@infosec.exchange at 2026-10-31T20:36:58.000Z ##

VulnCheck reports CVE-2026-120209 in AJ-Report ≤1.7.1. A hard-coded JWT signing secret can enable forged share tokens and unauthenticated remote code execution.

No in-the-wild exploitation or fixed release was confirmed in the sources checked. Admins: inventory installations, restrict exposure and track vendor guidance.

updated 2026-10-31T09:31:25

1 posts

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated directly into the pipe-delimited validation rule string, which is then split and each token invoked as

1 repos

https://github.com/BabyMushr00w/CVE-2026-116512

thehackerwire@mastodon.social at 2026-10-31T14:45:33.000Z ##

🔴 CVE-2026-116512 - Critical (9.8)

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116512/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-119096
(9.8 CRITICAL)

EPSS: 0.46%

updated 2026-10-31T09:31:25

2 posts

The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the `email` parameter of the `uo_login_action()` function. This is due to a parser-differential flaw in which the plugin's account-verification gate resolves the submitted `email` value using the raw, unsanitized string passed to `get_user_by()`, while the subse

offseq@infosec.exchange at 2026-10-31T14:00:33.000Z ##

CVE-2026-119096 | CRITICAL auth bypass in Uncanny Toolkit for LearnDash <=3.8.2. Attackers with creds for unverified/suspended accounts can log in via a parser-differential flaw. No patch yet — monitor logins & restrict access. https://radar.offseq.com/threat/the-uncanny-toolkit-for-learndash-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-in-4518772708010c6f #OffSeq #WordPress #Infosec

##

thehackerwire@mastodon.social at 2026-10-31T12:31:10.000Z ##

🔴 CVE-2026-119096 - Critical (9.8)

The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the `email` parameter of the `uo_login_action()` function. This is due to a parser-differential flaw in which...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119096/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-103882
(9.1 CRITICAL)

EPSS: 0.79%

updated 2026-10-31T09:31:25

3 posts

The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the post_delete_assessment_file_by_id function in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files on the se

offseq@infosec.exchange at 2026-10-31T12:30:33.000Z ##

Acadlix LMS WordPress plugin ≤1.1.9 is affected by CRITICAL CVE-2026-103882: arbitrary file deletion due to weak path validation & nonce checks. Leads to potential RCE. No patch — restrict access/disable plugin. https://radar.offseq.com/threat/the-acadlix-lms-ai-quiz-maker-online-exam-course-plugin-for-wordpress-plugin-for-wordpress-is-ed3b7965b634be4e #OffSeq #WordPress #CVE2026103882 #Infosec

##

updated 2026-10-31T09:31:20

2 posts

The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpbs_action_ajax_calendar_remove_note() function in versions up to, and including, 2.1.0.5 This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary calendar notes belonging to any calendar.

updated 2026-10-31T04:18:22.247000

1 posts

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

secdb@infosec.exchange at 2026-11-02T09:41:39.000Z ##

📈 CVE Published in last 7 days (2026-10-26 - 2026-10-26)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 254
- High: 1007
- Medium: 1185
- Low: 189
- None: 1033

Status:
- : 23
- Analyzed: 151
- Awaiting Analysis: 1116
- Deferred: 1572
- Modified: 5
- Received: 408
- Rejected: 217
- Undergoing Analysis: 176

CISA KEVs:
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 459
- GitHub, Inc.: 389
- Mozilla Corporation: 343
- Apple Inc.: 328
- Patchstack: 251
- Wordfence: 204
- VulDB: 165
- kernel.org: 129
- WPScan: 109
- Drupal.org: 106

Top Affected Products:
- UNKNOWN: 3324
- Google Chrome: 72
- Langflow: 33
- Microsoft Edge Chromium: 16
- Apple Macos: 14
- Semantic-mediawiki Semantic Mediawiki: 14
- Vllm: 8
- Mtrudel Bandit: 8
- Openpanel: 7
- Elastic Cloud Enterprise: 7

#JetBrains #IntelliJIDEA #Cybersecurity #Vulnerability #eMudhra #InfoSec #AppSec

##

CVE-2026-118696
(8.0 HIGH)

EPSS: 0.27%

updated 2026-10-31T04:18:17.340000

1 posts

In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5,

DailyCyberSecurity@infosec.exchange at 2026-10-31T08:40:18.000Z ##

Install the latest JetBrains security update to fix critical JetBrains IDE vulnerabilities CVE-2026-118697 and CVE-2026-118696 affecting trusted certificates.

https://securityonline.info/jetbrains-ide-vulnerabilities-emudhra-certificates-patched/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-112816
(0 None)

EPSS: 0.30%

updated 2026-10-31T04:18:16.660000

6 posts

Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate chain.

3 repos

https://github.com/dehasoft-tr/cve-2026-112816

https://github.com/foxcornlab/lxd-scanner

https://github.com/MrNarsus/cve-2026-112816-poc

DailyCyberSecurity@infosec.exchange at 2026-11-02T00:37:29.000Z ##

Canonical fixes LXD vulnerability CVE-2026-112816 (CVSS 10) in LXD and MicroCloud, letting attackers impersonate trusted TLS clients. Update now.

#LXD #MicroCloud #Canonical #Ubuntu #CVE2026112816 #TLS #Containers #PatchNow

https://securityonline.info/lxd-vulnerability-cve-2026-112816/?utm_source=mastodon&utm_medium=jetpack_social

##

guru@thecybersecguru.com at 2026-11-01T17:57:25.000Z ##

CVE-2026-112816 Explained: The LXD and MicroCloud Authentication Bypass That Scored a Perfect CVSS 10.0

CVE-2026-112816 is a CVSS 10.0 LXD and MicroCloud authentication bypass. Learn how the PeerCertificates loop works, affected versions, and how to patch

https://thecybersecguru.com/exploits/cve-2026-112816-lxd-microcloud-authentication-bypass/

##

DarkWebInformer@infosec.exchange at 2026-11-01T17:19:45.000Z ##

🚨 Critical LXD and MicroCloud authentication bypass rated CVSS 10.0

CVE-2026-112816 allows an unauthenticated attacker to impersonate a trusted TLS client using only its public certificate, potentially gaining full access to clusters, virtual machines and the host as root.
⠀
The attacker must be able to reach the HTTPS API and obtain the public certificate of an existing trusted client.
⠀
• CVSS: 10.0
• Affected: LXD 4.0.14, 5.0.10, 5.21.8 and 6.9
• Fixed: LXD 4.0.15, 5.0.11, 5.21.9 and 6.10.1
• MicroCloud fixes: 2.1.5 and 3.4.1
• Active exploitation: Not reported
• Public exploit: None reported
⠀
Administrators should update immediately and restrict access to the HTTPS API.

##

linuxmint_hun@mastodon.social at 2026-11-01T11:12:13.000Z ##

CW: biztonsági hír — CVE-2026-112816 (CVSS 10.0). LXD/MicroCloud mutual TLS-validáció hibája lehetővé teszi megbízhatónak tűnő kliens megszemélyesítését privát kulcs nélkül. Érintett: LXD 4.0.14, 5.0.10, 5.21.8, 6.9. Javított snapek: lxd 6.10.1/5.21.9/5.0.11/4.0.15, microcloud 3.4.1/2.1.5. Frissítsétek vagy szűkítsétek a hálózati API-hozzáférést. #Linux #LXD #MicroCloud #CVE #security
https://linuxmint.hu/hir/2026/11/cvss-100-s-lxd-microcloud-sebezhetoseg-a-tamadok-privat-kulcs-nelkul-is

##

appinn@pullopen.xyz at 2026-10-31T06:17:05.000Z ##

『Ubuntu LXD 爆出满分 10.0 高危漏洞，无需密码即可接管虚拟机｜CVE-2026-112816』
10 月 30 日，Canonical（Ubuntu 背后的公司）披露了一项严重安全漏洞 CVE-2026-112816，CVSS 4.0 评分高达 10.0 分，达到最高危险等级。该漏洞影响 Ca
……
阅读全文： :sys_link: https://www.appinn.com/cve-2026-112816/

#小众软件

##

technotenshi@infosec.exchange at 2026-10-31T04:21:25.000Z ##

Canonical's LXD and MicroCloud had a critical authentication bypass (CVE-2026-112816, CVSS 10.0). An attacker who can reach the HTTPS API and has a trusted client's public certificate can authenticate as that client by placing it in the certificate chain. Canonical says the result can be root on the host, depending on the victim's privileges. Fixed in LXD 6.10.1, 5.21.9, 5.0.11 and 4.0.15, and MicroCloud 3.4.1 and 2.1.5.

https://www.cve.org/CVERecord?id=CVE-2026-112816

#LXD #Cybersecurity

##

CVE-2026-111357
(7.0 HIGH)

EPSS: 0.53%

updated 2026-10-31T04:18:16.040000

3 posts

Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.

sans_isc@infosec.exchange at 2026-11-02T02:00:57.000Z ##

SANS Stormcast Monday, November 2nd, 2026: OneNote Bulk Extraction; Trojanized Claude Code Extension in Cursor Marketplace; Ivanti Connect Secure Zero-Days (CVE-2026-111357); Android SMS of Death
https://isc.sans.edu/podcastdetail/10160

##

beyondmachines1@infosec.exchange at 2026-10-31T17:01:04.000Z ##

CISA Flags Two Exploited Ivanti Connect Secure Flaws That Give Attackers Root Access

CISA has added Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527, and CVE-2026-104935) to its KEV catalog following reports of active exploitation. These flaws allow attackers to chain exploits to gain root access, upload malicious files, and compromise entire enterprise networks.

**If you run Ivanti Connect Secure VPN, upgrade right away to version 25.1.1.3 or 22.8R2. Attackers are chaining three flaws to take full control of the appliance, and older builds are still exposed even if you patched earlier in October. Treat any internet-facing appliance as possibly already compromised: after upgrading, change all passwords, API tokens and certificates stored on or reachable from the VPN, and check your Active Directory for suspicious accounts.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-flags-two-exploited-ivanti-connect-secure-flaws-that-give-attackers-root-access-k-d-m-s-l/gD2P6Ple2L

##

DarkWebInformer@infosec.exchange at 2026-10-31T16:22:14.000Z ##

🚨 Attackers chain three Ivanti Connect Secure flaws for unauthenticated root access

A previously unknown threat actor tracked as UTA0576 exploited three vulnerabilities to compromise fully patched Ivanti Connect Secure VPN appliances and execute commands as root without authentication.
⠀
• CVE-2026-104935: Authentication bypass and RCE - CVSS 8.6
• CVE-2026-111357: Privilege escalation - CVSS 8.8
• CVE-2026-118527: Predictable identifier allowing controlled file uploads - CVSS 4.3
• Affected: ICS 25.1.1.2 and earlier, and 22.8R2.5 and earlier
• Fixed: ICS 25.1.1.3 and 22.8R2.6
⠀
The actor extracted VPN and Active Directory credentials, searched for LAPS passwords and BitLocker recovery keys, conducted password spraying and deleted evidence from system logs.

CISA has added all three vulnerabilities to its Known Exploited Vulnerabilities catalog.

Source: https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/

##

CVE-2026-101214
(7.2 HIGH)

EPSS: 2.83%

updated 2026-10-31T04:18:15.677000

1 posts

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

secdb@infosec.exchange at 2026-11-02T09:41:39.000Z ##

📈 CVE Published in last 7 days (2026-10-26 - 2026-10-26)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 254
- High: 1007
- Medium: 1185
- Low: 189
- None: 1033

Status:
- : 23
- Analyzed: 151
- Awaiting Analysis: 1116
- Deferred: 1572
- Modified: 5
- Received: 408
- Rejected: 217
- Undergoing Analysis: 176

CISA KEVs:
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 459
- GitHub, Inc.: 389
- Mozilla Corporation: 343
- Apple Inc.: 328
- Patchstack: 251
- Wordfence: 204
- VulDB: 165
- kernel.org: 129
- WPScan: 109
- Drupal.org: 106

Top Affected Products:
- UNKNOWN: 3324
- Google Chrome: 72
- Langflow: 33
- Microsoft Edge Chromium: 16
- Apple Macos: 14
- Semantic-mediawiki Semantic Mediawiki: 14
- Vllm: 8
- Mtrudel Bandit: 8
- Openpanel: 7
- Elastic Cloud Enterprise: 7

https://github.com/foxcornlab/gitlab-onigmo-scanner

##

CVE-2026-97229
(10.0 CRITICAL)

EPSS: 27.30%

updated 2026-10-31T00:31:32

3 posts

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.

6 repos

https://github.com/Noshadi-sec/CVE-2026-97229

https://github.com/murat-levi/gitlab-rce-toolkit

https://github.com/AmpedWasTaken/CVE-2026-97229-GitLab-CI-CD-Regex-Compiler-RCE

https://github.com/jburgess-r7/CVE-2026-97229-PoC

https://github.com/gandli/cve-2026-97229-lab

secdb@infosec.exchange at 2026-11-01T01:06:24.000Z ##

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116861/

##

thecybermind@infosec.exchange at 2026-10-31T08:54:31.000Z ##

updated 2026-10-30T21:32:48

2 posts

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted string, but not inside a double-quoted identifier, where it treated the next double quote as closing the identifier. psql's \copy parser applies the connect

DailyCyberSecurity@infosec.exchange at 2026-11-02T01:05:43.000Z ##

The PostgreSQL project resolved 15 critical pgAdmin 4 vulnerabilities in version 9.19, fixing command injection flaw CVE-2026-116241 and credential leaks.

EPSS: 0.34%

updated 2026-10-30T21:32:23

1 posts

Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.

thehackerwire@mastodon.social at 2026-11-01T21:45:52.000Z ##

🟠 CVE-2026-116861 - High (7.5)

Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-116244
(8.2 HIGH)

EPSS: 0.28%

updated 2026-10-30T21:32:22

1 posts

updated 2026-10-30T19:23:25.493000

1 posts

OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that opnsense-update evaluates with eval, and can also disable package signature verification through sed injection.

secdb@infosec.exchange at 2026-11-02T09:41:39.000Z ##

updated 2026-10-30T19:14:38.697000

1 posts

phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to remove two-factor authentication by posting the 2fa key to /config/set. Attackers holding a hijacked session can submit key=2fa with a null JSON value to SetConfigController, stripping 2FA so later logins require only the MySQL password.

jbaggs@infosec.exchange at 2026-10-31T17:46:17.000Z ##

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

##

CVE-2026-119562
(4.2 MEDIUM)

EPSS: 0.18%

updated 2026-10-30T19:14:38.697000

1 posts

phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supplying unescaped col_extra and col_attribute values to /database/central-columns. Attackers can inject SQL into pma__central_columns INSERT and UPDATE queries run with controluser privileges, reading or modifying other users' configuration-storage data.

jbaggs@infosec.exchange at 2026-10-31T17:46:17.000Z ##

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

##

CVE-2026-119428
(3.7 LOW)

EPSS: 0.31%

updated 2026-10-30T19:14:38.697000

1 posts

phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound connections via setup/validate.php, which lacks the setup-disabled guard. Attackers can POST attacker-chosen host and port values reaching Validator::testDBConnection() to open MySQL-protocol connections and probe internal ports using returned error messages.

jbaggs@infosec.exchange at 2026-10-31T17:46:17.000Z ##

Welp...

phpMyAdmin -- Multiple vulnerabilities, no fix available

```Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were published on 2026-10-30. The most severe of them, an authentication bypass, is in the WebAuthn second factor: assertion signatures are never verified against the stored public keys, so an attacker who already has the MySQL credentials of a victim can skip the second factor.

The others are a server-side request forgery in setup/validate.php, which needs no authentication at all and can be used to probe internal hosts and ports; the removal of two- factor authentication without re-authentication; SQL injection in Central Columns and in the Designer, both running with controluser privileges; stored cross-site scripting in the Designer history; and a missing cross-site request forgery token.

There is no fixed release. The phpMyAdmin project has published neither a security announcement nor a new version, and only the request forgery has a fix in the development branch so far.```

CVE-2026-119427
CVE-2026-119428
CVE-2026-119429
CVE-2026-119561
CVE-2026-119562
CVE-2026-119563```

#php #vulnerability

EPSS: 0.32%

updated 2026-10-30T18:32:47

1 posts

Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers can submit JavaScript to /api/v1/node-custom-function that writes a file into the mammoth package via LocalFileStore and requires it, escaping vm2 as the Flowise process user.

thehackerwire@mastodon.social at 2026-11-02T01:05:16.000Z ##

🟠 CVE-2026-119978 - High (8.5)

Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers can submit JavaScript to /api/v1/node-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119978/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-119777
(7.8 HIGH)

EPSS: 0.19%

updated 2026-10-30T18:32:47

1 posts

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to execute code in the context of the affected application.

thehackerwire@mastodon.social at 2026-11-02T01:05:07.000Z ##

🟠 CVE-2026-119777 - High (7.8)

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker coul...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119777/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-93680
(9.8 CRITICAL)

EPSS: 2.18%

updated 2026-10-30T18:18:20.320000

2 posts

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.

1 repos

https://github.com/rmhowe425/POC-CVE-2026-93680

cyberseckyle at 2026-11-02T15:30:20.593Z ##

IBM disclosed critical Langflow OSS flaws affecting versions 1.0.0–1.12.8, including authentication bypass (CVE-2026-93680) and unauthenticated remote code execution (CVE-2026-110186). Both carry CVSS 9.8.

Upgrade to 1.13.0, checking exposed AI agent/MCP endpoints. IBM lists no interim workaround; back up persistent data before updating.

https://www.ibm.com/support/pages/security-bulletin-langflow-oss-affected-multiple-vulnerabilities-2

https://www.ibm.com/support/pages/security-bulletin-langflow-oss-affected-multiple-vulnerabilities-2

##

cyberseckyle@infosec.exchange at 2026-11-02T15:30:20.000Z ##

IBM disclosed critical Langflow OSS flaws affecting versions 1.0.0–1.12.8, including authentication bypass (CVE-2026-93680) and unauthenticated remote code execution (CVE-2026-110186). Both carry CVSS 9.8.

Upgrade to 1.13.0, checking exposed AI agent/MCP endpoints. IBM lists no interim workaround; back up persistent data before updating.

https://www.ibm.com/support/pages/security-bulletin-langflow-oss-affected-multiple-vulnerabilities-2

##

CVE-2026-110186
(9.8 CRITICAL)

EPSS: 0.62%

updated 2026-10-30T18:17:19.793000

2 posts

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.

cyberseckyle at 2026-11-02T15:30:20.593Z ##

IBM disclosed critical Langflow OSS flaws affecting versions 1.0.0–1.12.8, including authentication bypass (CVE-2026-93680) and unauthenticated remote code execution (CVE-2026-110186). Both carry CVSS 9.8.

Upgrade to 1.13.0, checking exposed AI agent/MCP endpoints. IBM lists no interim workaround; back up persistent data before updating.

https://www.ibm.com/support/pages/security-bulletin-langflow-oss-affected-multiple-vulnerabilities-2

##

cyberseckyle@infosec.exchange at 2026-11-02T15:30:20.000Z ##

IBM disclosed critical Langflow OSS flaws affecting versions 1.0.0–1.12.8, including authentication bypass (CVE-2026-93680) and unauthenticated remote code execution (CVE-2026-110186). Both carry CVSS 9.8.

Upgrade to 1.13.0, checking exposed AI agent/MCP endpoints. IBM lists no interim workaround; back up persistent data before updating.

##

CVE-2026-31419
(7.8 HIGH)

EPSS: 0.13%

secdb@infosec.exchange at 2026-11-02T09:41:39.000Z ##

📈 CVE Published in last 7 days (2026-10-26 - 2026-10-26)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 254
- High: 1007
- Medium: 1185
- Low: 189
- None: 1033

Status:
- : 23
- Analyzed: 151
- Awaiting Analysis: 1116
- Deferred: 1572
- Modified: 5
- Received: 408
- Rejected: 217
- Undergoing Analysis: 176

CISA KEVs:
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 459
- GitHub, Inc.: 389
- Mozilla Corporation: 343
- Apple Inc.: 328
- Patchstack: 251
- Wordfence: 204
- VulDB: 165
- kernel.org: 129
- WPScan: 109
- Drupal.org: 106

Top Affected Products:
- UNKNOWN: 3324
- Google Chrome: 72
- Langflow: 33
- Microsoft Edge Chromium: 16
- Apple Macos: 14
- Semantic-mediawiki Semantic Mediawiki: 14
- Vllm: 8
- Mtrudel Bandit: 8
- Openpanel: 7
- Elastic Cloud Enterprise: 7

##

CVE-2026-86395
(7.2 HIGH)

EPSS: 2.19%

updated 2026-10-30T04:18:26.680000

1 posts

Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with rem

secdb@infosec.exchange at 2026-11-02T09:41:39.000Z ##

📈 CVE Published in last 7 days (2026-10-26 - 2026-10-26)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 254
- High: 1007
- Medium: 1185
- Low: 189
- None: 1033

Status:
- : 23
- Analyzed: 151
- Awaiting Analysis: 1116
- Deferred: 1572
- Modified: 5
- Received: 408
- Rejected: 217
- Undergoing Analysis: 176

CISA KEVs:
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 459
- GitHub, Inc.: 389
- Mozilla Corporation: 343
- Apple Inc.: 328
- Patchstack: 251
- Wordfence: 204
- VulDB: 165
- kernel.org: 129
- WPScan: 109
- Drupal.org: 106

Top Affected Products:
- UNKNOWN: 3324
- Google Chrome: 72
- Langflow: 33
- Microsoft Edge Chromium: 16
- Apple Macos: 14
- Semantic-mediawiki Semantic Mediawiki: 14
- Vllm: 8
- Mtrudel Bandit: 8
- Openpanel: 7
- Elastic Cloud Enterprise: 7

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62264/

##

CVE-2026-62264
(7.5 HIGH)

EPSS: 0.45%

updated 2026-10-29T16:34:38

1 posts

### Impact When `@sylphx/pdf-reader-mcp` is run as an HTTP server (`MCP_TRANSPORT=http`), it reads the `MCP_API_KEY` environment variable and logs `API key authentication enabled (X-API-Key header)` at startup, but it never validated the `X-API-Key` header on incoming requests. The key was read into a variable and never enforced on the request path. As a result, the `/mcp` endpoint accepted **un

thehackerwire@mastodon.social at 2026-11-01T11:16:21.000Z ##

🟠 CVE-2026-62264 - High (7.5)

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when `MCP_TRANSPORT=http` enables the opt-in HTTP server, `@sylphx/pdf-reader-mcp` reads `MCP_API_KEY` and logs that `X-API-Ke...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-111497(CVSS UNKNOWN)

EPSS: 82.64%

updated 2026-10-29T14:33:41

3 posts

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli librari

91 repos

https://github.com/tal7aouy/node2shell-scanner

https://github.com/fbuff-tools/http2shell-checker

https://github.com/AdapptOnAzure/cve-2026-111497-mitigation

https://github.com/mnk-works/cve-2026-111497-rce-checker

https://github.com/TheFool-TAROT/CVE-2026-111497-brotli-pwn

https://github.com/pt-act/node2shell-cve-2026-111497

https://github.com/amier-ge/Node2Shell

https://github.com/Ghost-Bx1/Node2Shell-CVE-2026-111497

https://github.com/timosar/woff2shell

https://github.com/apaonum/brotli-cve-check

https://github.com/CompleteTech-Security/http2shell-check

https://github.com/queso/formbricks-patched

https://github.com/RedSideSecurity/node2shell

https://github.com/The-DevOps-Daily/node-runtime-audit

https://github.com/thebarel/CVE-2026-111497

https://github.com/ikow/brotli2crash

https://github.com/akaihigurashi/brotli2scan

https://github.com/TahuCryptsi/node-brotli-check

https://github.com/adachis/pillow-patched-brotli

https://github.com/ionsec/node2shell-detector

https://github.com/trailofbits/brotli-checker

https://github.com/tc4dy/CVE-2026-111497-Toolkit

https://github.com/AmanSin001/node-brotli-check

https://github.com/WASD258-jpg/dsh-hardening

https://github.com/datmt/vulcheck

https://github.com/assetnote/node2shell-scanner

https://github.com/Saturate/CVE-2026-111497

https://github.com/hayupisama/quarkus-brotli-audit

https://github.com/axisops/CVE-2026-111497

https://github.com/tikarammardi/CVE-2026-111497

https://github.com/Sami-AlEsh/nodejs-security-check

https://github.com/fortbridge/cve-2026-111497-wordpress-pingback-brotli

https://github.com/incu-tech/october-cyber-family

https://github.com/dimasma0305/CVE-2026-111497-POC

https://github.com/lushinshang/cve-2026-111497-http2shell-guide

https://github.com/hypnguyen1209/CVE-2026-111497

https://github.com/CaterMaoZi/CVE-2026-111497-POC

https://github.com/shivrajem/node2shell-detect

https://github.com/bastet-ai/brotli-firing-range

https://github.com/GlobularOne/HTTP2Shell-PoC

https://github.com/dansaurabh/brotli2shell_Hunter

https://github.com/avatarnewyork/brotli-check

https://github.com/malikad778/php2shell-guard

https://github.com/fieldse/http2shell-checker

https://github.com/upeul/vulnpocalypse-2026-10-response

https://github.com/ZeroHackOrg/node2shell-poc

https://github.com/lesterlam/node2shell

https://github.com/mehmet-emir-eroglu/NODE2SHELL

https://github.com/hkoeck/node2shell-status

https://github.com/caveeroo/cve-2026-111497-wordpress-poc

https://github.com/Charlie-Netdevops/node-hostcheck

https://github.com/foxcornlab/node2shell-inventory-scanner

https://github.com/gik2927/CVE-2026-111497-DOS-

https://github.com/TahuCryptsi/brotli-distro-check

https://github.com/SYM01/cve-2026-111497

https://github.com/ChriSec7/CVE-2026-111497-POC

https://github.com/syrex1013/CVE-2026-111497-node2shell

https://github.com/Ghost-Bx1/DotNet-HTTP2Shell-CVE-2026-111497

https://github.com/sakai-sktech/brotli-check

https://github.com/yavuzsemih/brotli-secfix

https://github.com/AdapptOnAzure/CVE-2026-111497-DotNetBrotliScan

https://github.com/Sumit0x00/node2shell

https://github.com/Blackman99/lotstamp

https://github.com/Nucklear/CVE-2026-111497-working

https://github.com/Quaerendir/node2shell-audit

https://github.com/Nyamort/brotli-pingback-lab

https://github.com/Arkango/CVE-2026-111497

https://github.com/Sable-Research/brotli-decoder-overflow

https://github.com/amier-ge/node2shell-checker

https://github.com/duytien241/nodejs-CVE-2026-111497

https://github.com/ks-labs/brotli-patch

https://github.com/Secragon/node2shell-radar

https://github.com/CodeDotJS/pwn.pied

https://github.com/googlesky/CVE-2026-111497

https://github.com/miracle438/node2shell-two-stage

https://github.com/depuschm/brotli-k8s-scan

https://github.com/paulmann/CVE-2026-111497

https://github.com/esskslifetech/PROTECTION2Shell

https://github.com/s1ko/poc-cve-2026-111497

https://github.com/atiilla/CVE-2026-111497-Node2Shell

https://github.com/w116tjb/CVE-2026-111497_nodejs_hash_lookup

https://github.com/tani2shell/node2shell-lab

https://github.com/CompleteTech-Security/node2shell-check

https://github.com/FranklinF25/http2shell

https://github.com/jeffschafer/Bigfix-NodeJS-Vulnerability-Scanner-Content-CVE-2026-111497

https://github.com/hadayalab-web/pandemic-fortress-advisories

https://github.com/suominen/CVE-2026-111497

https://github.com/mahumadad/CVE-2026-111497-assessment

https://github.com/EQSTLab/CVE-2026-111497

https://github.com/fuzheado/n2s-buildpack-probe

https://github.com/0xBlackash/CVE-2026-111497

_r_netsec@infosec.exchange at 2026-11-02T09:33:21.000Z ##

WordPress pingback and Brotli RCE https://fortbridge.co.uk/research/cve-2026-111497-wordpress-pingback-rce-reproduction/

##

DailyCyberSecurity@infosec.exchange at 2026-11-02T01:35:42.000Z ##

Brotli vulnerability CVE-2026-111497 affected products list: fixes for Node.js, .NET, Envoy, PAN-OS and distros, plus VMware and others still unpatched.

#Brotli #CVE2026111497 #NodeJS #DotNET #VMware #PatchNow #CISAKEV #Vulnerability

https://securityonline.info/brotli-vulnerability-affected-products/?utm_source=mastodon&utm_medium=jetpack_social

##

secdb@infosec.exchange at 2026-11-01T01:06:24.000Z ##

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

##

CVE-2026-21589
(7.5 HIGH)

EPSS: 99.48%

updated 2026-10-29T13:17:09.847000

2 posts

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledg

https://github.com/murrez/CVE-2026-21589

13 repos

https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit

https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589

https://github.com/aduli198/CVE-2026-21589

https://github.com/BimBoxH4/CVE-2026-21589

https://github.com/rxsklife/CVE-2026-21589

https://github.com/ynsmroztas/AtlasSniper

https://github.com/CompleteTech-Security/atlassian-cve-2026-21589-check

https://github.com/gotr00t0day/CVE-2026-21589

https://github.com/webserverdude/f5_CVE-2026-21589_mitigation

https://github.com/renzi25031469/CVE-2026-21589

https://github.com/0xBlackash/CVE-2026-21589

https://github.com/MarcusProgram/CVE-2026-21589

threatnoir@infosec.exchange at 2026-11-01T20:05:16.000Z ##

⚠️ CRITICAL: 2026-015: Critical Vulnerability in Multiple Atlassian Products

Atlassian released a critical advisory for CVE-2026-21589 affecting Bitbucket, Confluence, and Jira Data Center. Unauthenticated attackers can access arbitrary files if they know the exact path. Internet-exposed instances are at immediate risk.

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

##

secdb@infosec.exchange at 2026-11-01T01:06:24.000Z ##

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

https://github.com/porcumarcooo/THM-CVE-2026-46300-Fragnesia-Exploit

##

CVE-2026-46300
(7.8 HIGH)

EPSS: 16.13%

updated 2026-10-28T21:31:49

5 posts

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by

20 repos

https://github.com/ExploitEoom/CVE-2026-46300

https://github.com/azilRababe/CVE-2026-46300

https://github.com/1neptune/Fragnesia

https://github.com/HORKimhab/CVE-2026-46300

https://github.com/cumakurt/linuxpi

https://github.com/BenedictEjepu/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Walkthrough

https://github.com/First-John/cve_2026_frag_family_fix

https://github.com/foxcornlab/fragnesia-scanner

https://github.com/0xBlackash/CVE-2026-46300

https://github.com/Koshmare-Blossom/Fragnesia-go

https://github.com/Sentebale/CVE-2026-46300

https://github.com/MadExploits/CVE-2026-46300

https://github.com/Kentox493/CVE-2026-46300_Fragnesia

https://github.com/nonameuserosint-hue/Fragnesia-go

https://github.com/AzDevops143/FRAGNESIA-Charan-cve-2026-46300

https://github.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag

https://github.com/BenedictEjepu/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project

https://github.com/Maxime288/Fragnesia-CVE-2026-46300

https://github.com/clearhandreview/panos-php2shell-defense

katchwreck@mastodon.social at 2026-11-02T05:15:19.000Z ##

`According to Dream, the crooks chained PHP2Shell with Fragnesia, a local privilege escalation flaw that allows unprivileged users to obtain root access. It was disclosed in mid-May this year and is tracked as CVE-2026-46300.` https://tech.yahoo.com/cybersecurity/articles/chinese-hackers-build-php2shell-exploit-160500909.html

##

beyondmachines1@infosec.exchange at 2026-10-31T20:01:05.000Z ##

CISA Adds Fragnesia Linux Kernel Flaw to KEV Catalog Following PHP2Shell Chain Reports

CISA added the Fragnesia Linux kernel flaw (CVE-2026-46300) to its KEV catalog after reports of it being chained with PHP2Shell for remote root access. The vulnerability allows local users to overwrite in-memory system files to gain full administrative control.

**Make sure all industrial devices, especially Siemens SIMATIC S7-1500 CPUs, and your PAN-OS management interfaces are cut off from the internet and can only be reached from trusted networks. Then install the patched Linux kernel and reboot, and update PHP to 8.5.12 or 8.4.27. If you can't update, block the esp4 and esp6 kernel modules until you can.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/cisa-adds-fragnesia-linux-kernel-flaw-to-kev-catalog-following-php2shell-chain-reports-4-2-r-u-z/gD2P6Ple2L

##

thecybermind@infosec.exchange at 2026-10-31T13:05:34.000Z ##

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-46300 – Linux Kernel Missing Initialization of a Variable Vulnerability

An executive-level strategic brief analyzing CVE-2026-46300 for CEOs and Boards, focusing on kernel security governance, supply chain vetting, and enterprise risk mitigation....

https://thecybermind.co/l9re

##

thecybermind@infosec.exchange at 2026-10-31T12:14:05.000Z ##

(CISA TS+SOC) The Cyber Mind TSUITE Report: CVE-2026-46300 – Linux Kernel Missing Initialization of a Variable Vulnerability

An exhaustive technical breakdown of CVE-2026-46300 targeting the Linux Kernel XFRM subsystem, complete with multi-vendor SIEM detection logic, namespace monitoring, and hardening controls....

https://thecybermind.co/d7a8

##

youranonnewsirc@nerdculture.de at 2026-10-31T10:26:25.000Z ##

Latest: G20 'family photo' cancelled as nations boycotted Russia (Oct 31). Iran escalated Strait of Hormuz tensions with mine deployments (Oct 30). In tech, AI spending concerns impacted major stocks like Alphabet and Intel. Cybersecurity: CISA warned of active Linux kernel (CVE-2026-46300) and PHP2Shell vulnerability exploits.

#AnonNews_irc #Cybersecurity #News

##

CVE-2026-46560
(7.5 HIGH)

EPSS: 0.19%

updated 2026-10-28T15:20:07

1 posts

## Summary **Description** An Improper Verification of Cryptographic Signature (CWE-347) issue in OpenAM's RADIUS authentication module allows an unauthenticated network attacker to spoof an Access-Accept response and obtain an OpenAM session for any RADIUS username, without knowing the configured shared secret. This affects OpenAM Community Edition through version 16.0.6 and was patched in vers

thehackerwire@mastodon.social at 2026-11-01T12:46:10.000Z ##

🟠 CVE-2026-46560 - High (7.5)

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module opens an unconnected datagram socket and trusts the first UDP datagram received on the client source port. The receive path does ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-46560/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-112351
(8.8 HIGH)

EPSS: 2.68%

updated 2026-10-28T14:41:48.527000

1 posts

Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated remote attacker with any web account to execute arbitrary commands as root by injecting shell metacharacters into the ipAddr or dnsAddr parameters. Attackers can bypass the incomplete character denylist from the prior CVE-2021-36380 fix using URL-encoded newlin

secdb@infosec.exchange at 2026-11-02T09:41:39.000Z ##

📈 CVE Published in last 7 days (2026-10-26 - 2026-10-26)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 254
- High: 1007
- Medium: 1185
- Low: 189
- None: 1033

Status:
- : 23
- Analyzed: 151
- Awaiting Analysis: 1116
- Deferred: 1572
- Modified: 5
- Received: 408
- Rejected: 217
- Undergoing Analysis: 176

CISA KEVs:
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 459
- GitHub, Inc.: 389
- Mozilla Corporation: 343
- Apple Inc.: 328
- Patchstack: 251
- Wordfence: 204
- VulDB: 165
- kernel.org: 129
- WPScan: 109
- Drupal.org: 106

Top Affected Products:
- UNKNOWN: 3324
- Google Chrome: 72
- Langflow: 33
- Microsoft Edge Chromium: 16
- Apple Macos: 14
- Semantic-mediawiki Semantic Mediawiki: 14
- Vllm: 8
- Mtrudel Bandit: 8
- Openpanel: 7
- Elastic Cloud Enterprise: 7

##

CVE-2026-86394
(7.2 HIGH)

EPSS: 2.19%

updated 2026-10-28T12:30:42

1 posts

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could

secdb@infosec.exchange at 2026-11-02T09:41:39.000Z ##

📈 CVE Published in last 7 days (2026-10-26 - 2026-10-26)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 254
- High: 1007
- Medium: 1185
- Low: 189
- None: 1033

Status:
- : 23
- Analyzed: 151
- Awaiting Analysis: 1116
- Deferred: 1572
- Modified: 5
- Received: 408
- Rejected: 217
- Undergoing Analysis: 176

CISA KEVs:
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 459
- GitHub, Inc.: 389
- Mozilla Corporation: 343
- Apple Inc.: 328
- Patchstack: 251
- Wordfence: 204
- VulDB: 165
- kernel.org: 129
- WPScan: 109
- Drupal.org: 106

Top Affected Products:
- UNKNOWN: 3324
- Google Chrome: 72
- Langflow: 33
- Microsoft Edge Chromium: 16
- Apple Macos: 14
- Semantic-mediawiki Semantic Mediawiki: 14
- Vllm: 8
- Mtrudel Bandit: 8
- Openpanel: 7
- Elastic Cloud Enterprise: 7

##

CVE-2026-86379
(7.2 HIGH)

EPSS: 2.83%

updated 2026-10-28T12:30:37

1 posts

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with r

secdb@infosec.exchange at 2026-11-02T09:41:39.000Z ##

📈 CVE Published in last 7 days (2026-10-26 - 2026-10-26)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 254
- High: 1007
- Medium: 1185
- Low: 189
- None: 1033

Status:
- : 23
- Analyzed: 151
- Awaiting Analysis: 1116
- Deferred: 1572
- Modified: 5
- Received: 408
- Rejected: 217
- Undergoing Analysis: 176

CISA KEVs:
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 459
- GitHub, Inc.: 389
- Mozilla Corporation: 343
- Apple Inc.: 328
- Patchstack: 251
- Wordfence: 204
- VulDB: 165
- kernel.org: 129
- WPScan: 109
- Drupal.org: 106

Top Affected Products:
- UNKNOWN: 3324
- Google Chrome: 72
- Langflow: 33
- Microsoft Edge Chromium: 16
- Apple Macos: 14
- Semantic-mediawiki Semantic Mediawiki: 14
- Vllm: 8
- Mtrudel Bandit: 8
- Openpanel: 7
- Elastic Cloud Enterprise: 7

##

CVE-2026-116505
(9.1 CRITICAL)

EPSS: 2.74%

updated 2026-10-26T21:36:32

1 posts

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched remotely. The exploit has been made public and could be used.

secdb@infosec.exchange at 2026-11-02T09:41:39.000Z ##

📈 CVE Published in last 7 days (2026-10-26 - 2026-10-26)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 254
- High: 1007
- Medium: 1185
- Low: 189
- None: 1033

Status:
- : 23
- Analyzed: 151
- Awaiting Analysis: 1116
- Deferred: 1572
- Modified: 5
- Received: 408
- Rejected: 217
- Undergoing Analysis: 176

CISA KEVs:
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 459
- GitHub, Inc.: 389
- Mozilla Corporation: 343
- Apple Inc.: 328
- Patchstack: 251
- Wordfence: 204
- VulDB: 165
- kernel.org: 129
- WPScan: 109
- Drupal.org: 106

Top Affected Products:
- UNKNOWN: 3324
- Google Chrome: 72
- Langflow: 33
- Microsoft Edge Chromium: 16
- Apple Macos: 14
- Semantic-mediawiki Semantic Mediawiki: 14
- Vllm: 8
- Mtrudel Bandit: 8
- Openpanel: 7
- Elastic Cloud Enterprise: 7

##

CVE-2026-116485
(9.8 CRITICAL)

EPSS: 2.35%

updated 2026-10-26T18:41:21.450000

1 posts

danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMIN_TOKEN is unset. Attackers can send POST requests to /api/env/set, /api/env/add, or /api/env/del to set ADMIN_TOKEN, lock out operators, redirect OTHER_SERVER or PROXY_URL for SSRF, and trigger redeployment.

secdb@infosec.exchange at 2026-11-02T09:41:39.000Z ##

📈 CVE Published in last 7 days (2026-10-26 - 2026-10-26)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 254
- High: 1007
- Medium: 1185
- Low: 189
- None: 1033

Status:
- : 23
- Analyzed: 151
- Awaiting Analysis: 1116
- Deferred: 1572
- Modified: 5
- Received: 408
- Rejected: 217
- Undergoing Analysis: 176

CISA KEVs:
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 459
- GitHub, Inc.: 389
- Mozilla Corporation: 343
- Apple Inc.: 328
- Patchstack: 251
- Wordfence: 204
- VulDB: 165
- kernel.org: 129
- WPScan: 109
- Drupal.org: 106

Top Affected Products:
- UNKNOWN: 3324
- Google Chrome: 72
- Langflow: 33
- Microsoft Edge Chromium: 16
- Apple Macos: 14
- Semantic-mediawiki Semantic Mediawiki: 14
- Vllm: 8
- Mtrudel Bandit: 8
- Openpanel: 7
- Elastic Cloud Enterprise: 7

##

CVE-2026-110447
(9.8 CRITICAL)

EPSS: 73.31%

updated 2026-10-26T18:32:46

1 posts

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Coll

https://github.com/maxprog-svg/CVE-2026-110447

5 repos

https://github.com/CyRouteWolf/cve-2026-110447-poc

https://github.com/sstrobl-osm/php2shell-tools

https://github.com/adriyansyah-mf/cve-2026-110447

https://github.com/Iceman2050/cve-2026-110447-checker

secdb@infosec.exchange at 2026-11-01T01:06:24.000Z ##

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

##

CVE-2026-105134
(10.0 CRITICAL)

EPSS: 81.76%

updated 2026-10-26T18:06:57.930000

1 posts

A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 9.15.2.70 an

https://github.com/horizon3ai/AhsayCBS-Auth-Bypass-RCE

2 repos

https://github.com/RayanAlmulhim/CVE-2026-105134-lab

secdb@infosec.exchange at 2026-11-01T01:06:24.000Z ##

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

https://github.com/horizon3ai/AhsayCBS-Auth-Bypass-RCE

##

CVE-2026-105133
(7.3 HIGH)

EPSS: 79.47%

updated 2026-10-26T15:35:27

1 posts

A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 10.3.4 is able to mitigate thi

1 repos

secdb@infosec.exchange at 2026-11-01T01:06:24.000Z ##

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

https://github.com/maxprog-svg/CVE-2026-102764

##

CVE-2026-102764
(9.8 CRITICAL)

EPSS: 18.95%

updated 2026-10-16T21:32:46

1 posts

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

3 repos

https://github.com/CompleteTech-Security/beyondtrust-remote-support-cve-2026-102764-check

https://github.com/Worthes/CVE-2026-102764-Proof-of-concept

DailyCyberSecurity@infosec.exchange at 2026-11-02T00:18:24.000Z ##

Exploited BeyondTrust Remote Support vulnerability CVE-2026-102764 now has full details and a public Metasploit module. Apply BT26-05-RS now.

#BeyondTrust #RemoteSupport #CVE2026102764 #RCE #Metasploit #Rapid7 #ActiveExploitation #UNC5221

https://securityonline.info/beyondtrust-remote-support-cve-2026-102764-metasploit/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-59774
(9.8 CRITICAL)

EPSS: 28.31%

updated 2026-10-15T04:18:24.663000

1 posts

Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files include app.ini and its INTERNAL_TOKEN, the attacker can chain the disclosure with internal logger acces

https://github.com/FlowerWitch/CVE-2026-59774_docker

3 repos

https://github.com/asvorg/CVE-2026-59774-poc

https://github.com/Ly0kha/CVE-2026-59774

secdb@infosec.exchange at 2026-11-01T01:06:24.000Z ##

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62847/

##

CVE-2026-23279
(5.5 MEDIUM)

EPSS: 0.14%

updated 2026-10-15T02:18:46.597000

1 posts

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() In mesh_rx_csa_frame(), elems->mesh_chansw_params_ie is dereferenced at lines 1638 and 1642 without a prior NULL check: ifmsh->chsw_ttl = elems->mesh_chansw_params_ie->mesh_ttl; ... pre_value = le16_to_cpu(elems->mesh_chansw_params_ie->mesh_pre_valu

neanderfunk@nrw.social at 2026-11-01T04:16:54.000Z ##

Unsere ältesten Router mit 32 MB Arbeitsspeicher erhalten (doch) noch einmal ein Update, und der Neanderfunk hat ein zweites Standbein:
* batman-adv 2024.3 statt 2019.2
* Sparsameres Multicast, sobald alle Router einer Domain aktuell sind
* Neuer Supernode bei Freie Netze Südhessen, dort Weg ins Internet nicht über den Freifunk Rheinland
* Sicherheitslücken im WLAN-Mesh geschlossen (CVE-2026-23279)
Mehr im Blog: https://neanderfunk.de/update-fuer-unsere-aeltesten-router-neues-batman-adv-und-ein-zweites-standbein/
#Freifunk #Neanderfunk #Gluon #NRW

##

CVE-2026-62847
(8.2 HIGH)

EPSS: 0.15%

updated 2026-10-14T19:24:55

1 posts

## Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory (`Path.GetTempPath()`, i.e. `/tmp`), and previously-generated artifacts were trusted based on the presence of a sentinel/`.completed` marke

thehackerwire@mastodon.social at 2026-10-31T23:30:51.000Z ##

🟠 CVE-2026-62847 - High (8.2)

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and embedded he...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-104935
(8.6 HIGH)

EPSS: 86.77%

updated 2026-10-13T18:30:50

3 posts

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

5 repos

https://github.com/0x45dd/ivanti-cve-2026-104935-check

https://github.com/ApexBreach/CVE-2026-104935-Proof-of-concept

https://github.com/maxprog-svg/CVE-2026-104935

https://github.com/Bluefire-Redteam-Cybersecurity/bluefire-ivanti-ics-guard

https://github.com/CompleteTech-Security/ivanti-connect-secure-cve-2026-104935-check

secdb@infosec.exchange at 2026-11-01T01:06:24.000Z ##

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

Source: https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/

##

beyondmachines1@infosec.exchange at 2026-10-31T17:01:04.000Z ##

CISA Flags Two Exploited Ivanti Connect Secure Flaws That Give Attackers Root Access

CISA has added Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527, and CVE-2026-104935) to its KEV catalog following reports of active exploitation. These flaws allow attackers to chain exploits to gain root access, upload malicious files, and compromise entire enterprise networks.

**If you run Ivanti Connect Secure VPN, upgrade right away to version 25.1.1.3 or 22.8R2. Attackers are chaining three flaws to take full control of the appliance, and older builds are still exposed even if you patched earlier in October. Treat any internet-facing appliance as possibly already compromised: after upgrading, change all passwords, API tokens and certificates stored on or reachable from the VPN, and check your Active Directory for suspicious accounts.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-flags-two-exploited-ivanti-connect-secure-flaws-that-give-attackers-root-access-k-d-m-s-l/gD2P6Ple2L

##

DarkWebInformer@infosec.exchange at 2026-10-31T16:22:14.000Z ##

🚨 Attackers chain three Ivanti Connect Secure flaws for unauthenticated root access

A previously unknown threat actor tracked as UTA0576 exploited three vulnerabilities to compromise fully patched Ivanti Connect Secure VPN appliances and execute commands as root without authentication.
⠀
• CVE-2026-104935: Authentication bypass and RCE - CVSS 8.6
• CVE-2026-111357: Privilege escalation - CVSS 8.8
• CVE-2026-118527: Predictable identifier allowing controlled file uploads - CVSS 4.3
• Affected: ICS 25.1.1.2 and earlier, and 22.8R2.5 and earlier
• Fixed: ICS 25.1.1.3 and 22.8R2.6
⠀
The actor extracted VPN and Active Directory credentials, searched for LAPS passwords and BitLocker recovery keys, conducted password spraying and deleted evidence from system logs.

CISA has added all three vulnerabilities to its Known Exploited Vulnerabilities catalog.

##

CVE-2026-106378
(8.3 HIGH)

EPSS: 0.32%

updated 2026-10-07T13:45:31.323000

1 posts

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

1 repos

https://github.com/leisureprog/CVE-2026-106378

DarkWebInformer@infosec.exchange at 2026-10-31T19:17:32.000Z ##

🚨 Chrome macOS GPU sandbox escape enables code execution outside the browser; CVE-2026-106378

Security researchers discovered that Chrome’s sandboxed GPU process could communicate with macOS WindowServer and inject keyboard input into the desktop.
⠀
The public proof of concept opens Spotlight, types “Calculator” and launches the application outside Chrome’s sandbox. The same technique could potentially open Terminal and execute commands.
⠀
The vulnerability is not a standalone one-click exploit. An attacker must first compromise a Chrome renderer or GPU process before using the flaw to escape the sandbox.
⠀
Key details:

• CVSS: 8.3 (CISA-ADP)
• Chromium severity: Medium
• Affected: Chrome for macOS before 155.0.8059.39
• Fixed: Chrome 155.0.8059.39 and later
• Public PoC: Available
• Active exploitation: Not reported

Technical analysis: https://pwn.ai/blog/chrome-escape

##

CVE-2026-63646
(0 None)

EPSS: 0.66%

updated 2026-09-24T19:39:45.600000

1 posts

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, GET /mcp/form/config/{formKey} calls McpController.getMcpField without authentication because ShiroFilter.addPublicPathFilters marks /mcp/** as anonymous and the controller has no permission annotation. An unauthenticated caller can obtain field names, types, required fl

hugovalters@mastodon.social at 2026-11-02T15:50:01.000Z ##

CVE-2026-63646 CordysCRM: unauthenticated /mcp/form/config/{formKey} exposure reveals CRM field schemas; CVSS 5.3. Patch 1.7.2 is under review - restrict /mcp/** access now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-63646/

##

CVE-2026-44756
(10.0 CRITICAL)

EPSS: 1.40%

updated 2026-09-22T21:17:30.593000

1 posts

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. Successful exploitation may have a high impact on the confidentiality, integrity, and availabil

threatnoir@infosec.exchange at 2026-11-01T16:05:12.000Z ##

updated 2026-09-14T20:58:48.430000

1 posts

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized entityKey and opEvent parameters. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.7, from 4.1.0-M0 through

EUVD_Bot@mastodon.social at 2026-11-02T14:01:06.000Z ##

🚨 EUVD-2026-115155

📊 Score: n/a
📦 Product: Apache Syncope, Apache Syncope, Apache Syncope
🏢 Vendor: Apache Software Foundation
📅 Updated: 2026-11-02

📝 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Syncope.

This CVE covers an incomplete fix for CVE-2026-77051: an administrator with adequate entitle...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115155

#cybersecurity #infosec #euvd #cve #vulnerability

##

CVE-2026-58240
(9.8 CRITICAL)

EPSS: 0.53%

updated 2026-09-08T03:31:11

1 posts

SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unauthorized component and potentially perform unauthorized actions within the application environment, resulting in a high impact on the confide

threatnoir@infosec.exchange at 2026-11-01T16:05:12.000Z ##

⚠️ CRITICAL: 2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

SAP released patches for two critical unauthenticated remote code execution vulnerabilities in SAP Kernel and NetWeaver Message Server (CVE-2026-44756 and CVE-2026-58240). Any unpatched SAP system is exploitable without credentials, giving attackers full OS command execution and complete system com…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

##

CVE-2026-69836
(10.0 CRITICAL)

EPSS: 1.84%

updated 2026-08-21T00:31:31

1 posts

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

2 repos

https://github.com/HORKimhab/CVE-2026-69836

https://github.com/sentinel-aidefense/CVE-2026-69836-EXP

_r_netsec@infosec.exchange at 2026-11-01T15:33:21.000Z ##

Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide https://doit4everyone.github.io/mvc-nlpd-m365/aitm-cookie-hijacking/

##

CVE-2026-42069
(6.5 MEDIUM)

EPSS: 0.23%

updated 2026-07-24T21:10:00.143000

1 posts

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, read access to site, user and role information is not gated by permissions. This issue has been patched in versions 4.9.0 and 5.4.0.

xssfox@cloudisland.nz at 2026-10-31T23:03:41.000Z ##

Patch is out. It has been assigned CVE-2026-42069 (also known as 99xssballoons)

##

CVE-2026-9843
(8.1 HIGH)

EPSS: 1.04%

updated 2026-06-20T03:32:36

15 posts

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the view_page function in all versions up to, and including, 1.5.1. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is dele

45 repos

https://github.com/brett6320/fix_CVE-2026-98432

https://github.com/mahdi-salmanzade/CVE-2026-98432

https://github.com/marcelofmatos/cve-2026-98432-check

https://github.com/matthew-hollick/mitigate-cve-2026-98432

https://github.com/tiendungdev/cve-2026-98432-guard

https://github.com/antonyantony/cve-2026-98432-nft

https://github.com/paulwouters/block_cve_2026_98432

https://github.com/illuscapital/CVE-2026-98432

https://github.com/thiscitze/cve-2026-98432-root-shell

https://github.com/ZombiePm/cve-2026-98432-mitigation

https://github.com/Alucard0x1/cve-2026-98432

https://github.com/0xSpuddy/cve-2026-98432-check

https://github.com/MikkoAbudo/CVE-2026-98432-POC

https://github.com/AronWang001/linux-cve-2026-98432-fix

https://github.com/akamai/cve-2026-98432-validation-mitigation

https://github.com/davetha/cve-2026-98432

https://github.com/nfodor/cve-2026-98432-nft-mitigation

https://github.com/suominen/CVE-2026-98432

https://github.com/polikhronidi/cve-2026-98432-ubuntu-backport

https://github.com/nsrg-fmlorg/kpatch-cve-2026-98432

https://github.com/tc4dy/CVE-2026-98432-PoC-Exploit

https://github.com/bitwire-it/Probe-CVE-2026-98432

https://github.com/xen0bit/netprobe-cve-2026-98432

https://github.com/axisops/CVE-2026-98432

https://github.com/maxottovon/CVE-2026-98432-scan

https://github.com/typhoon1217/cve-2026-98432-mitigation

https://github.com/fetus-hina/cve-2026-98432-mitigation-rpm

https://github.com/BigBIueWhale/cve-2026-98432-kernel-upgrade

https://github.com/al4n4n/CVE-2026-98432

https://github.com/johnhsb/linux-tcp-uaf-cve-2026-98432

https://github.com/H1z3-br0/CVE-2026-98432

https://github.com/sevaepsteyn/cve-2026-98432-ebpf

https://github.com/alvaroguzmancode/cve-2026-98432

https://github.com/fbuff-tools/cve-2026-98432-checker

https://github.com/Quaerendir/cve-2026-98432-audit

https://github.com/scriptzteam/Paranoid-CVE-2026-98432

https://github.com/Mervent/cve-2026-98432

https://github.com/soroushneshati/cve-2026-98432-ubuntu-mitigation

https://github.com/Ghost-Bx1/cve-2026-98432-linux-tcp-uaf

https://github.com/ndeet/cve-2026-98432

https://github.com/xxhjkl/cve-2026-98432-check

https://github.com/Omniversetr/omnicheck_CVE-2026-98432

https://github.com/googlesky/CVE-2026-98432

https://github.com/medandevsec/cve-2026-98432-ubuntu-analisis

https://github.com/knneth/cve-2026-98432-dkms

besendorf@chaos.social at 2026-11-02T06:36:35.000Z ##

Ubuntu is shitty software and backporting is flawed
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

##

0x3e4@cyberplace.social at 2026-11-01T22:19:27.000Z ##

what the heck?

CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. Ubuntu and RHEL haven't shipped a fixed kernel yet.

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

##

CuratedHackerNews@mastodon.social at 2026-11-01T19:40:03.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

##

ericfreyss@mastodon.social at 2026-11-01T18:16:36.000Z ##

Linux's October 2026 TCP Use-After-Free: CVE-2026-98432 — Atlas
-> mptcp
-> IPv4 packets with options

##

hn500@social.lansky.name at 2026-11-01T09:30:13.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

##

raul@mastodon.in4matics.cat at 2026-11-01T07:20:09.000Z ##

Si portes Linux, això et toca avui: CVE-2026-98432, use-after-free a l'handshake TCP IPv4, CVSS 9.8. S'arriba per xarxa, abans de qualsevol autenticació.

✅ Debian, SUSE, Oracle UEK, Amazon: pedaç llest
❌ Ubuntu (totes) i RHEL 8/9/10: encara res

🔎 uname -r · ss -Mlnp #Linux #CVE #seguretat
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

##

technotenshi@infosec.exchange at 2026-11-01T06:45:08.000Z ##

Linux kernel CVE-2026-98432 is a use-after-free in the IPv4 TCP handshake that a remote, unauthenticated peer can reach. Upstream is fixed, but Ubuntu's tracker still lists its kernels as vulnerable and Red Hat lists RHEL 8, 9 and 10 as affected. Anthropic says Claude built a root exploit for servers with a multipath TCP listener, which Go 1.24+ enables by default. The Go team says the bug is not specific to MPTCP.

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

#LinuxKernel #InfoSec

##

MrNuclearMonster@mastodon.social at 2026-11-01T06:03:04.000Z ##

ioquake3.org will be offline for a bit. Ubuntu hasn’t patched this yet https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

This includes all services (irc relay, directory server) as this looks severe and I don’t have time right now to look into it more.

##

hnbest@mastodon.social at 2026-11-01T01:00:02.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

##

hn250@social.lansky.name at 2026-10-31T23:25:11.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

##

newsycombinator@framapiaf.org at 2026-10-31T21:00:49.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Comments: https://news.ycombinator.com/item?id=50319143

##

hn100@social.lansky.name at 2026-10-31T20:50:10.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

##

hn50@social.lansky.name at 2026-10-31T20:20:09.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

##

CuratedHackerNews@mastodon.social at 2026-10-31T19:49:04.000Z ##

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf