#OT #Advisory VDE-2025-056
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware

This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.
#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771

https://certvde.com/en/advisories/vde-2025-056/

#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

#OT #Advisory VDE-2025-056
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware

This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.
#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771

https://certvde.com/en/advisories/vde-2025-056/

#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

#OT #Advisory VDE-2025-056
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware

This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.
#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771

https://certvde.com/en/advisories/vde-2025-056/

#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

#OT #Advisory VDE-2025-056
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware

This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.
#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771

https://certvde.com/en/advisories/vde-2025-056/

#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

#OT #Advisory VDE-2025-056
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware

This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.
#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771

https://certvde.com/en/advisories/vde-2025-056/

#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

#OT #Advisory VDE-2025-056
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware

This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.
#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771

https://certvde.com/en/advisories/vde-2025-056/

#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json

CVE-2026-66659: CRITICAL SQL Injection (CVSS 9.3) in Essekia Tablesome Table ≤1.2.9. Allows unauth’d blind SQLi & data disclosure. No patch yet — monitor vendor updates. https://radar.offseq.com/threat/cve-2026-66659-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-04cbf964b30f2d13 #OffSeq #SQLInjection #Vuln #Infosec

CVE-2026-66659: CRITICAL SQL Injection (CVSS 9.3) in Essekia Tablesome Table ≤1.2.9. Allows unauth’d blind SQLi & data disclosure. No patch yet — monitor vendor updates. https://radar.offseq.com/threat/cve-2026-66659-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-04cbf964b30f2d13 #OffSeq #SQLInjection #Vuln #Infosec

🟠 CVE-2026-64954 - High (8.2)

Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the auth...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64954/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-64954 - High (8.2)

Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the auth...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64954/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-68820: CRITICAL Windows afd.sys zero-day exploited by Lazarus Group for SYSTEM access in defense/aerospace. Patch released 2026-08-11. Prioritize updates & check for ForestTiger/Troy backdoors. https://radar.offseq.com/threat/fresh-windows-zero-day-exploited-in-north-korean-cyberattacks-bbf9980a8328f4c4 #OffSeq #ZeroDay #Windows #Cybersecurity

Check Point researchers look into the latest variant of the Operation Dream Job campaign where the threat actor exploited CVE-2026-68820, a zero-day vulnerability in the Microsoft AFD.sys driver, to deploy a new version of Lazarus’s kernel-mode rootkit FudModule. https://research.checkpoint.com/2026/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack/

🚨 THREAT ALERT: CISA adds CVE-2026-68820 (Windows WinSock AFD Use-After-Free) to the KEV catalog due to active exploitation. Local attackers can elevate privileges to system level. Access our TSUITE brief with CrowdStrike CQL telemetry queries: https://thecybermind.co/jily

#CyberSecurity

「Microsoft 製品の脆弱性対策について(2026年8月)」： #IPA

「 2026年8月12日（日本時間）に Microsoft 製品に関するセキュリティ更新プログラム（月例）が公表されています。
これらの脆弱性を悪用された場合、アプリケーションプログラムが異常終了する、攻撃者によってパソコンを制御される、といった様々な被害が発生するおそれがあります。

この内 CVE-2026-68820 の脆弱性について、Microsoft 社では悪用の事実を確認済みと公表しており、今後被害が拡大するおそれがあるため、至急、セキュリティ更新プログラムを適用してください。 」

https://www.ipa.go.jp/security/security-alert/2026/0812-ms.html

#prattohome

Bugs in MS' Patch Tuesday release and NK's Lazarus has hit one already

Microsoft의 2026년 8월 Patch Tuesday는 421개 취약점을 수정했으며, 그중 Windows WinSock Ancillary Function Driver(afd.sys)의 use-after-free 취약점 CVE-2026-68820은 Lazarus 그룹이 패치 전 실제 공격에 사용한 제로데이다. 로컬 인증 사용자가 경쟁 조건을 유발해 사용자 상호작용 없이 SYSTEM 권한 코드 실행을...

https://www.theregister.com/security/2026/08/11/421-bugs-in-microsofts-patch-tuesday-release-and-the-norks-have-already-attacked-one/5286483

「マイクロソフトは、現在攻撃を受けているWindowsドライバーのゼロデイ脆弱性を含む398件の脆弱性を修正した。 」： #TheHackerNews

「マイクロソフトは火曜日に月例のセキュリティアップデートを公開したが、修正された脆弱性の1つが既に攻撃に悪用されている。

このバグは、ネットワークソケット操作を処理するWindowsカーネルの中核ドライバに存在します。既にマシン上でコードを実行している攻撃者は、このバグを利用してSYSTEM権限に昇格できます。このパッチが最初にリリースされます。

この脆弱性は CVE-2026-68820 （CVSSスコア：7.0）として追跡されており、今月のリリースでマイクロソフトが現在悪用されていると警告している唯一の脆弱性です。悪用は、ドライバーの競合状態をトリガーすることによって行われます。マイクロソフトは、この悪用を行った組織を公表していません。」

https://thehackernews.com/2026/08/microsoft-patches-398-flaws-including.html

#prattohome

Microsoft Plugs Nearly 400 Security Holes

Microsoft가 8월 Patch Tuesday에서 Windows 및 지원 소프트웨어의 취약점 최소 398건을 수정했으며, 이 중 42건은 원격 코드 실행 등으로 이어질 수 있는 Critical 등급이다. 이미 악용 중인 CVE-2026-68820은 거의 모든 Windows 엔드포인트의 소켓 연결에 관여하는 afd.sys의 권한 상승 취약점으로, 초기 침투 후 시스템 장악 체인에 사용될 수 있다. 또한 Windows User Profile Service의 CVE-2026-62832는 공개된 LegacyHive 이슈와 연관 가능성이 있으며 악용 가능성이 높은 것으로...

https://krebsonsecurity.com/2026/08/microsoft-plugs-nearly-400-security-holes/

Lazarus exploited a Windows zero-day (CVE-2026-68820) in Operation Dream Job to hit defense firms with fake job offers and a new backdoor.

#Lazarus #ZeroDay #CVE202668820 #OperationDreamJob #Cybersecurity #DPRK #FudModule #DefenseSector

https://securityonline.info/lazarus-zero-day-dream-job/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft August 2026 Patch Tuesday fixes 421 flaws, including CVE-2026-68820, a WinSock zero-day exploited in the wild, plus two disclosed bugs.

#PatchTuesday #Microsoft #ZeroDay #CVE #WindowsSecurity #InfoSec

https://securityonline.info/microsoft-august-2026-patch-tuesday/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days

Microsoft의 2026년 8월 Patch Tuesday는 총 400개 취약점(치명적 42개 포함)을 수정하며, 원격 코드 실행 110개와 권한 상승 176개가 포함된다. 특히 CVE-2026-68820은 Windows AFD.sys(WinSock Ancillary Function Driver)의 use-after-free 기반 로컬 권한 상승 취약점으로, Lazarus가 FudModule 커널 루트킷 배포에 실제 악용한 정황이 보고됐다. 공개된 Windows...

https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2026-patch-tuesday-fixes-400-flaws-3-zero-days/

CVE-2026-68820: CRITICAL Windows afd.sys zero-day exploited by Lazarus Group for SYSTEM access in defense/aerospace. Patch released 2026-08-11. Prioritize updates & check for ForestTiger/Troy backdoors. https://radar.offseq.com/threat/fresh-windows-zero-day-exploited-in-north-korean-cyberattacks-bbf9980a8328f4c4 #OffSeq #ZeroDay #Windows #Cybersecurity

Check Point researchers look into the latest variant of the Operation Dream Job campaign where the threat actor exploited CVE-2026-68820, a zero-day vulnerability in the Microsoft AFD.sys driver, to deploy a new version of Lazarus’s kernel-mode rootkit FudModule. https://research.checkpoint.com/2026/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack/

🚨 THREAT ALERT: CISA adds CVE-2026-68820 (Windows WinSock AFD Use-After-Free) to the KEV catalog due to active exploitation. Local attackers can elevate privileges to system level. Access our TSUITE brief with CrowdStrike CQL telemetry queries: https://thecybermind.co/jily

#CyberSecurity

「Microsoft 製品の脆弱性対策について(2026年8月)」： #IPA

「 2026年8月12日（日本時間）に Microsoft 製品に関するセキュリティ更新プログラム（月例）が公表されています。
これらの脆弱性を悪用された場合、アプリケーションプログラムが異常終了する、攻撃者によってパソコンを制御される、といった様々な被害が発生するおそれがあります。

この内 CVE-2026-68820 の脆弱性について、Microsoft 社では悪用の事実を確認済みと公表しており、今後被害が拡大するおそれがあるため、至急、セキュリティ更新プログラムを適用してください。 」

https://www.ipa.go.jp/security/security-alert/2026/0812-ms.html

#prattohome

「マイクロソフトは、現在攻撃を受けているWindowsドライバーのゼロデイ脆弱性を含む398件の脆弱性を修正した。 」： #TheHackerNews

「マイクロソフトは火曜日に月例のセキュリティアップデートを公開したが、修正された脆弱性の1つが既に攻撃に悪用されている。

このバグは、ネットワークソケット操作を処理するWindowsカーネルの中核ドライバに存在します。既にマシン上でコードを実行している攻撃者は、このバグを利用してSYSTEM権限に昇格できます。このパッチが最初にリリースされます。

この脆弱性は CVE-2026-68820 （CVSSスコア：7.0）として追跡されており、今月のリリースでマイクロソフトが現在悪用されていると警告している唯一の脆弱性です。悪用は、ドライバーの競合状態をトリガーすることによって行われます。マイクロソフトは、この悪用を行った組織を公表していません。」

https://thehackernews.com/2026/08/microsoft-patches-398-flaws-including.html

#prattohome

Lazarus exploited a Windows zero-day (CVE-2026-68820) in Operation Dream Job to hit defense firms with fake job offers and a new backdoor.

#Lazarus #ZeroDay #CVE202668820 #OperationDreamJob #Cybersecurity #DPRK #FudModule #DefenseSector

https://securityonline.info/lazarus-zero-day-dream-job/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft August 2026 Patch Tuesday fixes 421 flaws, including CVE-2026-68820, a WinSock zero-day exploited in the wild, plus two disclosed bugs.

#PatchTuesday #Microsoft #ZeroDay #CVE #WindowsSecurity #InfoSec

https://securityonline.info/microsoft-august-2026-patch-tuesday/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0811] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0811)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-20349 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20349)
- Name: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20349

⚠️ CVE-2026-68820 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-68820)
- Name: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Windows Ancillary Function Driver for WinSock
- Notes: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-68820 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-68820

⚠️ CVE-2026-72898 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-72898)
- Name: Metabase SQL Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Metabase
- Product: Metabase
- Notes: https://www.metabase.com/blog/security-update ; https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-72898

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260811 #cisa20260811 #cve_2026_20349 #cve_2026_68820 #cve_2026_72898 #cve202620349 #cve202668820 #cve202672898

Microsoft Patch Tuesday August 2026 patches 421 CVEs including CVE-2026-68820, an actively exploited use-after-free in the kernel driver afd.sys that grants SYSTEM-level privileges. Attacks are ongoing and no operational details have been disclosed yet. Prioritize patching on exposed systems.

#PatchTuesday #ZeroDay #VulnerabilityManagement #Microsoft

https://cyberworldops.eu/en/microsoft-fixes-421-vulnerabilities-including-an-exploited-zero-day-in

CVE ID: CVE-2026-68820
Vendor: Microsoft
Product: Windows Ancillary Function Driver for WinSock
Date Added: 2026-08-11
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-68820

SonicWall patched a critical GMS vulnerability, CVE-2026-66147 (CVSS 9.4), enabling unauthenticated remote code execution. Update to 9.5.2 now.

#SonicWall #CVE #RCE #GMS #EmailSecurity #InfoSec

https://securityonline.info/sonicwall-gms-rce-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

SonicWall patched a critical GMS vulnerability, CVE-2026-66147 (CVSS 9.4), enabling unauthenticated remote code execution. Update to 9.5.2 now.

#SonicWall #CVE #RCE #GMS #EmailSecurity #InfoSec

https://securityonline.info/sonicwall-gms-rce-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft Plugs Nearly 400 Security Holes

Microsoft가 8월 Patch Tuesday에서 Windows 및 지원 소프트웨어의 취약점 최소 398건을 수정했으며, 이 중 42건은 원격 코드 실행 등으로 이어질 수 있는 Critical 등급이다. 이미 악용 중인 CVE-2026-68820은 거의 모든 Windows 엔드포인트의 소켓 연결에 관여하는 afd.sys의 권한 상승 취약점으로, 초기 침투 후 시스템 장악 체인에 사용될 수 있다. 또한 Windows User Profile Service의 CVE-2026-62832는 공개된 LegacyHive 이슈와 연관 가능성이 있으며 악용 가능성이 높은 것으로...

https://krebsonsecurity.com/2026/08/microsoft-plugs-nearly-400-security-holes/

Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days

Tag
CVE ID
CVE Title
Severity
.NET
CVE-2026-58641
.NET Elevation of Privilege Vulnerability
Important
.NET
CVE-2026-62901
.NET Denial…
#NewsBeep #News #US #USA #UnitedStates #UnitedStatesOfAmerica #Technology
https://www.newsbeep.com/us/810540/

🟠 CVE-2026-58243 - High (8.8)

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP. Successful exploitation could...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58243/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SAP Issues Emergency-Grade Patch for CVSS 100 Commerce Cloud Flaw That Could Enable Unauthenticated Code Execution + Video

A Critical Warning for SAP Enterprise Customers A maximum-severity vulnerability in SAP Commerce Cloud has put enterprise e-commerce environments under renewed security pressure. The newly identified flaw, tracked as CVE-2026-58231, carries the highest possible CVSS score of 10.0 and could allow an unauthenticated attacker to execute arbitrary code…

https://undercodenews.com/sap-issues-emergency-grade-patch-for-cvss-100-commerce-cloud-flaw-that-could-enable-unauthenticated-code-execution-video/?utm_source=mastodon&utm_medium=jetpack_social

SAP August 2026 Patch Day Fixes Critical Code Injection and Memory Corruption Flaws

SAP's August 2026 Security Patch Day addresses 31 vulnerabilities, including a critical CVSS 10.0 authentication bypass in Commerce Cloud and code injection flaws in Manufacturing Integration and Intelligence. These vulnerabilities allow remote attackers to execute arbitrary commands and gain unauthorized access to internal enterprise systems.

**If you run SAP products, especially Manufacturing Integration and Intelligence (MII) read the advisory in detail. First make sure these systems are isolated from the internet where possible and reachable only from trusted internal networks. Then apply SAP's August 2026 security notes ASAP starting with the critical fixes for Commerce Cloud (CVE-2026-58231) and MII (CVE-2026-44772, CVE-2026-44758), followed by the ABAP Platform patch (CVE-2026-34265).**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/sap-august-2026-patch-day-fixes-critical-code-injection-and-memory-corruption-flaws-p-s-x-p-k/gD2P6Ple2L

SAP August 2026 Patch Day Fixes Critical Code Injection and Memory Corruption Flaws

SAP's August 2026 Security Patch Day addresses 31 vulnerabilities, including a critical CVSS 10.0 authentication bypass in Commerce Cloud and code injection flaws in Manufacturing Integration and Intelligence. These vulnerabilities allow remote attackers to execute arbitrary commands and gain unauthorized access to internal enterprise systems.

**If you run SAP products, especially Manufacturing Integration and Intelligence (MII) read the advisory in detail. First make sure these systems are isolated from the internet where possible and reachable only from trusted internal networks. Then apply SAP's August 2026 security notes ASAP starting with the critical fixes for Commerce Cloud (CVE-2026-58231) and MII (CVE-2026-44772, CVE-2026-44758), followed by the ABAP Platform patch (CVE-2026-34265).**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/sap-august-2026-patch-day-fixes-critical-code-injection-and-memory-corruption-flaws-p-s-x-p-k/gD2P6Ple2L

SAP August 2026 Patch Day fixes CVE-2026-58231 (CVSS 10.0) and code injection RCE flaws scoring 9.9 and 9.8 across Commerce Cloud and NetWeaver.

#SAP #CVE #RCE #PatchTuesday #NetWeaver #InfoSec

http://securityonline.info/sap-august-2026-patch-day/?utm_source=mastodon&utm_medium=jetpack_social

SAP August 2026 Patch Day Fixes Critical Code Injection and Memory Corruption Flaws

SAP's August 2026 Security Patch Day addresses 31 vulnerabilities, including a critical CVSS 10.0 authentication bypass in Commerce Cloud and code injection flaws in Manufacturing Integration and Intelligence. These vulnerabilities allow remote attackers to execute arbitrary commands and gain unauthorized access to internal enterprise systems.

**If you run SAP products, especially Manufacturing Integration and Intelligence (MII) read the advisory in detail. First make sure these systems are isolated from the internet where possible and reachable only from trusted internal networks. Then apply SAP's August 2026 security notes ASAP starting with the critical fixes for Commerce Cloud (CVE-2026-58231) and MII (CVE-2026-44772, CVE-2026-44758), followed by the ABAP Platform patch (CVE-2026-34265).**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/sap-august-2026-patch-day-fixes-critical-code-injection-and-memory-corruption-flaws-p-s-x-p-k/gD2P6Ple2L

SAP August 2026 Patch Day Fixes Critical Code Injection and Memory Corruption Flaws

SAP's August 2026 Security Patch Day addresses 31 vulnerabilities, including a critical CVSS 10.0 authentication bypass in Commerce Cloud and code injection flaws in Manufacturing Integration and Intelligence. These vulnerabilities allow remote attackers to execute arbitrary commands and gain unauthorized access to internal enterprise systems.

**If you run SAP products, especially Manufacturing Integration and Intelligence (MII) read the advisory in detail. First make sure these systems are isolated from the internet where possible and reachable only from trusted internal networks. Then apply SAP's August 2026 security notes ASAP starting with the critical fixes for Commerce Cloud (CVE-2026-58231) and MII (CVE-2026-44772, CVE-2026-44758), followed by the ABAP Platform patch (CVE-2026-34265).**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/sap-august-2026-patch-day-fixes-critical-code-injection-and-memory-corruption-flaws-p-s-x-p-k/gD2P6Ple2L

Time to patch your Kernel...
CVSS v3.0 Base Score: 9,8 / 10

3714806 - [CVE-2026-34265] Memory Corruption vulnerability in Application Server #ABAP for #SAP NetWeaver and ABAP Platform

https://me.sap.com/notes/3714806

🔴 CVE-2026-34265 - Critical (9.8)

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption. This vulnerability could potentially disclose sensitive system information or crash the sy...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34265/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-34265: CRITICAL out-of-bounds write in SAP NetWeaver & ABAP Platform (CVSS 9.8) allows unauthenticated memory corruption. No patch yet — restrict access & monitor SAP advisories for updates. https://radar.offseq.com/threat/cve-2026-34265-cwe-787-out-of-bounds-write-in-sapse-sap-netweaver-and-abap-platform-d60f14fafe8af8b8 #OffSeq #SAP #Vuln #Cybersecurity

Cisco ASA and FTD Flaw Exploited in Wild, Triggers Remote DoS

A high-severity vulnerability in Cisco Secure Firewall ASA and FTD software, known as CVE-2026-20349, is being actively exploited in the wild, allowing attackers to trigger a remote denial-of-service condition with a simple crafted HTTP request. This flaw, with a CVSS score of 8.6, can cause affected devices to reload, leaving networks…

https://osintsights.com/cisco-asa-and-ftd-flaw-exploited-in-wild-triggers-remote-dos?utm_source=mastodon&utm_medium=social

#CiscoAsa #Ftd #Cve202620349 #RemoteDos #VulnerabilityExploitation

🚨 THREAT ALERT: CISA adds CVE-2026-20349 (Cisco ASA/FTD Heap Inspection DoS) to the KEV catalog due to active exploitation. Unauthenticated remote actors can crash perimeter firewalls. Read our full TSUITE brief with SPL, KQL, AQL & Chronicle queries: https://thecybermind.co/jily

#CyberSecurity

Cisco Firewalls Under Pressure: CVE-2026-20349 Exposes a Dangerous Zero-Day Risk While Sandworm-Linked Hackers Weaponize Fake IT Jobs + Video

Introduction: Two Different Attacks, One Bigger Warning Cybersecurity defenders are facing a familiar but increasingly dangerous pattern: attackers do not need to break through every security control if they can find one exposed edge device or convince one trusted employee to install the wrong software. On August 12, 2026, two…

https://undercodenews.com/cisco-firewalls-under-pressure-cve-2026-20349-exposes-a-dangerous-zero-day-risk-while-sandworm-linked-hackers-weaponize-fake-it-jobs-video/?utm_source=mastodon&utm_medium=jetpack_social

Cisco Secure Firewall Under Active Attack: High-Severity CVE-2026-20349 Puts ASA and FTD Devices on Immediate Patch Alert + Video

A New Warning Has Turned a Firewall Bug Into an Active Security Emergency A firewall is supposed to be the wall between an organization and the hostile internet. When that wall can be forced to restart remotely, without authentication, the problem is no longer a theoretical weakness hidden inside a security scanner. It becomes an operational…

https://undercodenews.com/cisco-secure-firewall-under-active-attack-high-severity-cve-2026-20349-puts-asa-and-ftd-devices-on-immediate-patch-alert-video/?utm_source=mastodon&utm_medium=jetpack_social

「Ciscoは、ASAおよびFTD VPNの脆弱性が悪用され、デバイスがクラッシュする可能性があると警告している。 」： #BLEEPINGCOMPUTER

「シスコは、Secure Firewall ASAおよびThreat Defense（FTD）ソフトウェアに存在する深刻なサービス拒否攻撃の脆弱性が、影響を受けるデバイスをリモートからクラッシュさせる攻撃で積極的に悪用されていると警告している。

CVE-2026-20349として追跡されているこの脆弱性は、深刻度スコアが8.6であり、特定のリモートアクセスサービスが有効になっているCisco Secure Firewall Adaptive Security Appliance（ASA）またはSecure Firewall Threat Defense（FTD）ソフトウェアを実行しているデバイスに影響を与えます。

シスコは本日公開したセキュリティ勧告の中で、この脆弱性はHTTPリクエスト処理時のエラーチェックが不十分なことに起因すると述べた。 」

https://www.bleepingcomputer.com/news/security/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices/

#prattohome

Cisco confirms CVE-2026-20349, a Cisco ASA and FTD VPN vulnerability (CVSS 8.6), is exploited in the wild to crash firewalls. Patch now.

#Cisco #CVE #DoS #FirewallSecurity #VPN #InfoSec

https://securityonline.info/cisco-asa-ftd-vpn-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

🚨 THREAT ALERT: CISA adds CVE-2026-20349 (Cisco ASA/FTD Heap Inspection DoS) to the KEV catalog due to active exploitation. Unauthenticated remote actors can crash perimeter firewalls. Read our full TSUITE brief with SPL, KQL, AQL & Chronicle queries: https://thecybermind.co/jily

#CyberSecurity

「Ciscoは、ASAおよびFTD VPNの脆弱性が悪用され、デバイスがクラッシュする可能性があると警告している。 」： #BLEEPINGCOMPUTER

「シスコは、Secure Firewall ASAおよびThreat Defense（FTD）ソフトウェアに存在する深刻なサービス拒否攻撃の脆弱性が、影響を受けるデバイスをリモートからクラッシュさせる攻撃で積極的に悪用されていると警告している。

CVE-2026-20349として追跡されているこの脆弱性は、深刻度スコアが8.6であり、特定のリモートアクセスサービスが有効になっているCisco Secure Firewall Adaptive Security Appliance（ASA）またはSecure Firewall Threat Defense（FTD）ソフトウェアを実行しているデバイスに影響を与えます。

シスコは本日公開したセキュリティ勧告の中で、この脆弱性はHTTPリクエスト処理時のエラーチェックが不十分なことに起因すると述べた。 」

https://www.bleepingcomputer.com/news/security/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices/

#prattohome

Cisco confirms CVE-2026-20349, a Cisco ASA and FTD VPN vulnerability (CVSS 8.6), is exploited in the wild to crash firewalls. Patch now.

#Cisco #CVE #DoS #FirewallSecurity #VPN #InfoSec

https://securityonline.info/cisco-asa-ftd-vpn-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0811] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0811)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-20349 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20349)
- Name: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20349

⚠️ CVE-2026-68820 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-68820)
- Name: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Windows Ancillary Function Driver for WinSock
- Notes: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-68820 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-68820

⚠️ CVE-2026-72898 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-72898)
- Name: Metabase SQL Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Metabase
- Product: Metabase
- Notes: https://www.metabase.com/blog/security-update ; https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-72898

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260811 #cisa20260811 #cve_2026_20349 #cve_2026_68820 #cve_2026_72898 #cve202620349 #cve202668820 #cve202672898

This is being actively exploited. CVE-2026-20349. Patch now. Like right now. #infosec #vpn #cisco #cve
https://www.bleepingcomputer.com/news/security/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices/

CVE ID: CVE-2026-20349
Vendor: Cisco
Product: Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
Date Added: 2026-08-11
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20349

Broadcom has several new advisories that include two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom

CISA:

Industrial vulnerability: Johnson Controls C-CURE 9000 and Victor application server (Update A) https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-01

Blog post: Cyber Storm X: 20 Years of Readiness, Resilience, and Real‑World Impact https://www.cisa.gov/news-events/news/cyber-storm-x-20-years-readiness-resilience-and-real-world-impact #CISA

Cisco:

High-severity: CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF @TalosSecurity #Cisco

Yesterday:

Tenable Research Advisories:

Medium-severity: CVE-2026-12879: Google Cloud Platform (GCP) Apigee Cross-Tenant Data Exfiltration via Confused Deputy https://www.tenable.com/security/research/tra-2026-53 #infosec #Google #vulnerability

🟠 CVE-2026-73122 - High (7.7)

A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a compromised agent from a managed cluster to gain unauthorized access to sensitive information. Specifically,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73122/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73122 - High (7.7)

A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows a compromised agent from a managed cluster to gain unauthorized access to sensitive information. Specifically,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73122/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-6484 - High (8.2)

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6484/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-6484 - High (8.2)

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6484/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-72526 (CRITICAL, CVSS 9.9) in Red Hat Advanced Cluster Management for Kubernetes 2 lets low-priv hub users escalate to cluster-admin on managed clusters. No official fix. Restrict Application creation permissions now. https://radar.offseq.com/threat/cve-2026-72526-unintended-proxy-or-intermediary-confused-deputy-in-red-hat-red-hat-advanced-cluster-d135ff679a7da34d #OffSeq #RedHat #Kubernetes #CVE2026_72526

🔴 CVE-2026-72526 - Critical (9.9)

A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an Application Custom Resource (CR) without proper validation. A tenant with permissions to creat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72526/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-72526 (CRITICAL, CVSS 9.9) in Red Hat Advanced Cluster Management for Kubernetes 2 lets low-priv hub users escalate to cluster-admin on managed clusters. No official fix. Restrict Application creation permissions now. https://radar.offseq.com/threat/cve-2026-72526-unintended-proxy-or-intermediary-confused-deputy-in-red-hat-red-hat-advanced-cluster-d135ff679a7da34d #OffSeq #RedHat #Kubernetes #CVE2026_72526

🔴 CVE-2026-72526 - Critical (9.9)

A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an Application Custom Resource (CR) without proper validation. A tenant with permissions to creat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72526/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-70398 - Critical (9.6)

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a te...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70398/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL CVE-2026-70398 in Red Hat Advanced Cluster Management for Kubernetes 2: Authenticated tenants can redirect bearer tokens via GitOpsCluster controller. No official fix. Restrict privileges & monitor activity. https://radar.offseq.com/threat/cve-2026-70398-unintended-proxy-or-intermediary-confused-deputy-in-red-hat-red-hat-advanced-cluster-3d1f26674efa89dc #OffSeq #Kubernetes #RedHat #CVE202670398

🔴 CVE-2026-70398 - Critical (9.6)

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a te...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70398/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL CVE-2026-70398 in Red Hat Advanced Cluster Management for Kubernetes 2: Authenticated tenants can redirect bearer tokens via GitOpsCluster controller. No official fix. Restrict privileges & monitor activity. https://radar.offseq.com/threat/cve-2026-70398-unintended-proxy-or-intermediary-confused-deputy-in-red-hat-red-hat-advanced-cluster-3d1f26674efa89dc #OffSeq #Kubernetes #RedHat #CVE202670398

🟠 CVE-2026-18961 - High (8.1)

The Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect plugin for WordPress is vulnerable to Authentication Bypass via Unverified Provider Email in all versions up to, and including, 1.4.3. This is due to the pl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18961/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18961 - High (8.1)

The Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect plugin for WordPress is vulnerable to Authentication Bypass via Unverified Provider Email in all versions up to, and including, 1.4.3. This is due to the pl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18961/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Mira Firmware v1.7.1.47 has a CRITICAL auth bug (CVE-2026-68067): login accepts any valid-format password, exposing hormone records. No patch yet; restrict access & monitor accounts. https://radar.offseq.com/threat/cve-2026-68067-cwe-1390-weak-authentication-in-quanovate-tech-inc-operating-as-mira-mira-care-mira-85cdd6a62acb5a46 #OffSeq #Vulnerability #IoTSecurity #CVE202668067

🔴 CVE-2026-68067 - Critical (9.8)

The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud acc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68067/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Mira Firmware v1.7.1.47 has a CRITICAL auth bug (CVE-2026-68067): login accepts any valid-format password, exposing hormone records. No patch yet; restrict access & monitor accounts. https://radar.offseq.com/threat/cve-2026-68067-cwe-1390-weak-authentication-in-quanovate-tech-inc-operating-as-mira-mira-care-mira-85cdd6a62acb5a46 #OffSeq #Vulnerability #IoTSecurity #CVE202668067

🔴 CVE-2026-68067 - Critical (9.8)

The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud acc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68067/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67568 - Critical (9.1)

The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67568/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-67568 (CRITICAL, CVSS 9.3) in Mira Firmware 1.7.1.47: Hard-coded credentials let remote attackers read/write sensitive health data. No patch yet — restrict network access & monitor logs. https://radar.offseq.com/threat/cve-2026-67568-cwe-798-use-of-hard-coded-credentials-in-quanovate-tech-inc-operating-as-mira-mira-care-535c1a595418b62d #OffSeq #CVE202667568 #infosec #medtech #vuln

🔴 CVE-2026-67568 - Critical (9.1)

The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67568/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-67568 (CRITICAL, CVSS 9.3) in Mira Firmware 1.7.1.47: Hard-coded credentials let remote attackers read/write sensitive health data. No patch yet — restrict network access & monitor logs. https://radar.offseq.com/threat/cve-2026-67568-cwe-798-use-of-hard-coded-credentials-in-quanovate-tech-inc-operating-as-mira-mira-care-535c1a595418b62d #OffSeq #CVE202667568 #infosec #medtech #vuln

🟠 CVE-2026-66875 - High (8.8)

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range (approximately 10–30 meters) can silently rebind the device to an attacker-controlled account, extract stored hormone measur...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66875/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66875 - High (8.8)

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range (approximately 10–30 meters) can silently rebind the device to an attacker-controlled account, extract stored hormone measur...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66875/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Google's new Chrome security update patches 5 high-severity use-after-free bugs, including CVE-2026-19556 and CVE-2026-19560. Update now.

#Chrome #Google #UseAfterFree #CVE #BrowserSecurity #PatchNow #Cybersecurity

https://securityonline.info/chrome-use-after-free-update/?utm_source=mastodon&utm_medium=jetpack_social

Google's new Chrome security update patches 5 high-severity use-after-free bugs, including CVE-2026-19556 and CVE-2026-19560. Update now.

#Chrome #Google #UseAfterFree #CVE #BrowserSecurity #PatchNow #Cybersecurity

https://securityonline.info/chrome-use-after-free-update/?utm_source=mastodon&utm_medium=jetpack_social

Google's new Chrome security update patches 5 high-severity use-after-free bugs, including CVE-2026-19556 and CVE-2026-19560. Update now.

#Chrome #Google #UseAfterFree #CVE #BrowserSecurity #PatchNow #Cybersecurity

https://securityonline.info/chrome-use-after-free-update/?utm_source=mastodon&utm_medium=jetpack_social

Google's new Chrome security update patches 5 high-severity use-after-free bugs, including CVE-2026-19556 and CVE-2026-19560. Update now.

#Chrome #Google #UseAfterFree #CVE #BrowserSecurity #PatchNow #Cybersecurity

https://securityonline.info/chrome-use-after-free-update/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-73249 - High (7.5)

calibre is an e-book manager. Prior to 9.12.0, the calibre Content Server endpoint POST /book-update-annotations/{library_id}/{book_id}/{fmt} in src/calibre/srv/books.py omits needs_db_write=True, causing Router.dispatch() to skip ctx.check_for_wr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73249/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73249 - High (7.5)

calibre is an e-book manager. Prior to 9.12.0, the calibre Content Server endpoint POST /book-update-annotations/{library_id}/{book_id}/{fmt} in src/calibre/srv/books.py omits needs_db_write=True, causing Router.dispatch() to skip ctx.check_for_wr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73249/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73247 - High (8.6)

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/core/runners/pebble/functions/HttpFunction.java passes the user-controlled http() uri argument to URI.create() and the server-side...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73247/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73247 - High (8.6)

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/core/runners/pebble/functions/HttpFunction.java passes the user-controlled http() uri argument to URI.create() and the server-side...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73247/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15562 - High (7.5)

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of ser...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15562/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-18948: CRITICAL in RHOAI Feast — unsafe UDF deserialization allows unauth RCE on feature-server. Auth attackers can bypass auth to run code on registry-server. Mitigate by enforcing `auth.type: kubernetes`. https://radar.offseq.com/threat/cve-2026-18948-vulnerability-in-red-hat-red-hat-openshift-ai-rhoai-ae1bc718efe1cce9 #OffSeq #RedHat #CVE #infosec

🔴 CVE-2026-18948 - Critical (9.9)

A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18948/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18951 - High (8.8)

A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit Clus...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18951/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18950 - High (8.8)

A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does not properly validate the `roleRef` field, allowing a user to specify an arbitrary role,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18950/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18947 - High (8.5)

A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental endpoints. By sending a specially crafted request that omits the feature_views field, an attacker can bypass intended permissi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18947/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-16985: Squeeze WP plugin <1.7.12 has a CRITICAL vuln — users with upload_files can upload PHP files, enabling remote code execution. Restrict permissions, monitor uploads, and check for updates. https://radar.offseq.com/threat/cve-2026-16985-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-squeeze-a1de64d348b6591f #OffSeq #WordPress #CVE2026_16985 #infosec

Red Hat JBoss EAP 7 hit by CVE-2026-10579 (CRITICAL, CVSS 9.8): SAML handler flaw lets unauthenticated attackers forge access as any user. Patch available — apply ASAP. Full details: https://radar.offseq.com/threat/cve-2026-10579-vulnerability-in-red-hat-red-hat-jboss-enterprise-application-platform-7-8ca4df02d00ed318 #OffSeq #RedHat #Vuln #CVE202610579

🟠 CVE-2026-73234 - High (7.8)

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, PropertyFileIncluded::Restore() in src/App/PropertyFile.cpp concatenates an attacker-controlled file or data attribute from Document.xml with the document trans...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73234/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73232 - High (7.5)

ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.R...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73232/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73226 - High (8.8)

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73226/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18949 - High (8.8)

A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their privileges...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18949/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days

Tag
CVE ID
CVE Title
Severity
.NET
CVE-2026-58641
.NET Elevation of Privilege Vulnerability
Important
.NET
CVE-2026-62901
.NET Denial…
#NewsBeep #News #US #USA #UnitedStates #UnitedStatesOfAmerica #Technology
https://www.newsbeep.com/us/810540/

CVE-2026-18786: CRITICAL auth bypass in CheckView WP plugin ≤2.0.29. Attackers can exploit REST API via crafted links to perform admin actions if an admin clicks. Restrict plugin REST API & avoid suspicious links. https://radar.offseq.com/threat/cve-2026-18786-cwe-287-improper-authentication-in-checkview-8f35dcb91728f992 #OffSeq #WordPress #CVE202618786

New Episode: SANS Stormcast Wednesday, August 12th, 2026: Microsoft Patch Tuesday; Zoom Vulnerabilities; Mozilla Revokes Key; Rogue Inflight Wifi

Shownotes:

Microsoft Patch Tuesday
https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20August%202026/33236
Zoom Vulnerablities CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415
https://a.security/blog/asecurity-zoomsday
Mozilla Revokes

Transcript

AntennaPod | Anytime Player | Apple Podcasts | Castamatic | CurioCaster | Fountain | gPodder | Overcast | Pocket Casts | Podcast Addict | Podcast Guru | Podnews | Podverse | Truefans

Or Listen right here.

New Episode: SANS Stormcast Wednesday, August 12th, 2026: Microsoft Patch Tuesday; Zoom Vulnerabilities; Mozilla Revokes Key; Rogue Inflight Wifi

Shownotes:

Microsoft Patch Tuesday
https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20August%202026/33236
Zoom Vulnerablities CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415
https://a.security/blog/asecurity-zoomsday
Mozilla Revokes

Transcript

AntennaPod | Anytime Player | Apple Podcasts | Castamatic | CurioCaster | Fountain | gPodder | Overcast | Pocket Casts | Podcast Addict | Podcast Guru | Podnews | Podverse | Truefans

Or Listen right here.

🟠 CVE-2026-56721 - High (8.8)

CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers to overwrite any user's credentials by exploiting a parameter confus...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56721/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67180 - High (8.4)

Google Turbinia allows arbitrary command execution via worker tasks. An attacker with privileges to submit a processing request or influence an evidence path/name obtains code execution on the worker fleet. Fixed on 2026-07-10.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67180/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-13738 (CRITICAL, CVSS 9.2) affects Commvault Cloud CommServe: authorization bypass enables unauthorized command execution. Affects v11.36.0 – 11.46.0. Upgrade all components. https://radar.offseq.com/threat/cve-2026-13738-cwe-863-incorrect-authorization-in-commvault-commvault-cloud-723a8b64e139288c #OffSeq #CVE #CloudSecurity #SysAdmin

🟠 CVE-2026-73079 - High (8.5)

Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API keys issued to tenants are exchanged for upstream requests made with shared provider accounts ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73079/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71217 - High (7.5)

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel` and `len`, which are not properly validated by the server. This improper inp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71217/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New Episode: SANS Stormcast Wednesday, August 12th, 2026: Microsoft Patch Tuesday; Zoom Vulnerabilities; Mozilla Revokes Key; Rogue Inflight Wifi

Shownotes:

Microsoft Patch Tuesday
https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20August%202026/33236
Zoom Vulnerablities CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415
https://a.security/blog/asecurity-zoomsday
Mozilla Revokes

Transcript

AntennaPod | Anytime Player | Apple Podcasts | Castamatic | CurioCaster | Fountain | gPodder | Overcast | Pocket Casts | Podcast Addict | Podcast Guru | Podnews | Podverse | Truefans

Or Listen right here.

Grafana MCP Server hit by CRITICAL SSRF (CVE-2026-19516, CVSS 9.1) via X-Grafana-URL header. Attackers can access internal endpoints and metadata. Restrict access & monitor usage until patch available. https://radar.offseq.com/threat/cve-2026-19516-cwe-918-in-grafana-grafana-mcp-server-3995ac1dff45c6f5 #OffSeq #Grafana #SSRF #Vuln

🟠 CVE-2026-72903 - High (8.1)

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.235, a malicious SFTP server can return a backslash traversal filename through entry.name. In tabby-ssh/src/session/sftp.ts, SFTPSession.readdir() and _makeFile() u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72903/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67179 - High (7.8)

Genkit does not properly validate host request headers. Any host on the developer's network, and any website the developer visits (via DNS rebinding), can reach POST /api/runAction on the Dev UI server (default port 4000) and execute any registere...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67179/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73080 - Critical (9.3)

SeaweedFS is a distributed storage system. Prior to 4.24, VolumeServer.FetchAndWriteNeedle in weed/server/volume_grpc_remote.go fetches a caller-supplied remote endpoint through weed/remote_storage/s3/s3_storage_client.go and writes the response i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73080/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-58115 is a CVSS 10 flaw letting unauthenticated attackers run code on SIMATIC IoT2050 via Node-RED. Siemens urges an immediate update.

#CVE202658115 #Siemens #NodeRED #RCE #SIMATIC #ICS #Cybersecurity

https://securityonline.info/simatic-iot2050-node-red-rce/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-58115 is a CVSS 10 flaw letting unauthenticated attackers run code on SIMATIC IoT2050 via Node-RED. Siemens urges an immediate update.

#CVE202658115 #Siemens #NodeRED #RCE #SIMATIC #ICS #Cybersecurity

https://securityonline.info/simatic-iot2050-node-red-rce/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-18972 (CRITICAL): Rapid7 Velociraptor <0.77.2 lets low-priv users escalate to admin by spoofing 'Grpc-Metadata-USER' header — full account takeover. No patch yet. Restrict GUI access, monitor requests. https://radar.offseq.com/threat/cve-2026-18972-cwe-290-authentication-bypass-by-spoofing-in-rapid7-velociraptor-72ecf6c68bed741e #OffSeq #Velociraptor #CVE202618972

🟠 CVE-2026-72922 - High (8.2)

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.70, AutoGPT's autogpt_platform/backend/backend/api/features/integrations/router.py webhook_ingress_generic rout...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72922/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-72864 - Critical (9.9)

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the local branch of /docker-container-terminal in apps/dokploy/server/wss/docker-container-terminal.ts authenticates with validateRequest but does not authorize the a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72864/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SAP August 2026 Patch Day Fixes Critical Code Injection and Memory Corruption Flaws

SAP's August 2026 Security Patch Day addresses 31 vulnerabilities, including a critical CVSS 10.0 authentication bypass in Commerce Cloud and code injection flaws in Manufacturing Integration and Intelligence. These vulnerabilities allow remote attackers to execute arbitrary commands and gain unauthorized access to internal enterprise systems.

**If you run SAP products, especially Manufacturing Integration and Intelligence (MII) read the advisory in detail. First make sure these systems are isolated from the internet where possible and reachable only from trusted internal networks. Then apply SAP's August 2026 security notes ASAP starting with the critical fixes for Commerce Cloud (CVE-2026-58231) and MII (CVE-2026-44772, CVE-2026-44758), followed by the ABAP Platform patch (CVE-2026-34265).**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/sap-august-2026-patch-day-fixes-critical-code-injection-and-memory-corruption-flaws-p-s-x-p-k/gD2P6Ple2L

SAP August 2026 Patch Day Fixes Critical Code Injection and Memory Corruption Flaws

SAP's August 2026 Security Patch Day addresses 31 vulnerabilities, including a critical CVSS 10.0 authentication bypass in Commerce Cloud and code injection flaws in Manufacturing Integration and Intelligence. These vulnerabilities allow remote attackers to execute arbitrary commands and gain unauthorized access to internal enterprise systems.

**If you run SAP products, especially Manufacturing Integration and Intelligence (MII) read the advisory in detail. First make sure these systems are isolated from the internet where possible and reachable only from trusted internal networks. Then apply SAP's August 2026 security notes ASAP starting with the critical fixes for Commerce Cloud (CVE-2026-58231) and MII (CVE-2026-44772, CVE-2026-44758), followed by the ABAP Platform patch (CVE-2026-34265).**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/sap-august-2026-patch-day-fixes-critical-code-injection-and-memory-corruption-flaws-p-s-x-p-k/gD2P6Ple2L

🔴 CVE-2026-44758 - Critical (9.1)

SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44758/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SAP MII 15.5 is exposed to CRITICAL code injection (CVE-2026-44758, CVSS 9.1). High-privilege users could execute arbitrary OS commands. No patch yet — restrict access & monitor for code injection. https://radar.offseq.com/threat/cve-2026-44758-cwe-94-improper-control-of-generation-of-code-in-sapse-sap-manufacturing-integration-a0b460ddbf734b9d #OffSeq #SAP #Infosec #CVE202644758

🔴 New security advisory:

CVE-2026-46670 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-46670-yeswiki-sql-injection-leaks-all-credentials

by Yazoul AI

#InfoSec #SecurityPatching #HackerNews

🟠 CVE-2026-72693 - High (7.8)

`openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged context. In the documented `kbrequest`/init usage, the ownership test in `authenticate_user()` relies on `stat("/proc//fd/0")`....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72693/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Win Men Intermational Travel Agency Management System has a CRITICAL SQL Injection flaw (CVE-2026-19425, CVSS 9.8). Unauthenticated attackers may fully compromise databases. No patch yet: restrict access & monitor for SQLi. https://radar.offseq.com/threat/cve-2026-19425-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-c590b6d3eb66ff09 #OffSeq #CVE202619425 #SQLInjection #InfoSec

CRITICAL path traversal (CVE-2026-13716, CVSS 9.1) found in Crafty Controller v4.4.0 (Arcadia). Authenticated attackers can upload files to arbitrary paths, risking RCE. Restrict admin/file upload access & monitor activity. Details: https://radar.offseq.com/threat/cve-2026-13716-cwe-35-path-traversal-in-arcadia-technology-llc-crafty-controller-2cdd2d33980b3ceb #OffSeq #Vuln #CVE202613716

🟠 CVE-2026-44763 - High (7.6)

SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44763/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66763 - High (7.9)

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high privileges and local access to the server could retrieve these objects...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66763/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Asus posted an advisory today. Scroll down for the full list:

CVE-2026-8917: Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin https://www.asus.com/security-advisory/

PC Gamer: It's time to update Asus Armoury Crate and several other Asus software tools again, as another high severity security vulnerability has been discovered https://www.pcgamer.com/software/security/its-time-to-update-asus-armoury-crate-and-several-other-asus-software-tools-again-as-another-high-severity-security-vulnerability-has-been-discovered/ #infosec #vulnerability #Asus

🟠 CVE-2026-8718 - High (8.4)

tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8718/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73030 - High (8.1)

unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before validation, allowing ../ sequences to bypass directory containment checks. Attackers ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73030/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-63622 - High (7.8)

A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-72886 - Critical (9.9)

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.2 until 0.29.13, schedule.create and schedule.update in apps/dokploy/server/api/routers/schedule.ts derive serviceId from applicationId or composeId and execute the owner/adm...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72886/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72730 - High (8.7)

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the Rich Text Editor rendered a chat-transcript username as HTML, allowing stored cross-site scripting. This issue is fixed in versions 2026.1.6,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72730/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72689 - High (7.5)

A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read complete contract records via the getDocument Parse cloud function. The function fetches documents us...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72689/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71576 - High (8.5)

A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming CloudEvents on Kafka status topics. A remote attacker, after compromising a managed hub and obtaining its Kafka client certific...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71576/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19381 - High (7.8)

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLib_KSFX.sys of the component Driver. Performing a manipulation results in improper privilege m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19381/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Kingston FURY CTRL RGB Control Software v2.0.65.0 hit by HIGH severity vuln (CVE-2026-19381, CVSS 8.5). Local attackers can escalate privileges via NTIOLib_KSFX.sys. Exploit code is public; no patch yet. Restrict local access, monitor systems. https://radar.offseq.com/threat/cve-2026-19381-improper-privilege-management-in-kingston-fury-ctrl-rgb-control-software-9a62169aad70214d #OffSeq #Vuln #Kingston

🔴 CVE-2026-66738 - Critical (9.8)

SPIP before 4.4.18 contains a code injection vulnerability in SQLite-backed installations. The navigation menu endpoint improperly handles array-typed user input, which bypasses input sanitization and allows the value to break out of an internal q...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66738/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19387 - High (7.6)

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to ca...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19387/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72691 - High (7.5)

An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTER_KEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72691/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-63106 - Critical (9.8)

ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in Pr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63106/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-13206: CRITICAL OS command injection in Zyxel WAH7601 (≤20072026). Remote, unauthenticated code execution possible — no patch yet. Restrict access & monitor vendor updates. Details: https://radar.offseq.com/threat/cve-2026-13206-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-16288f4bcb3de542 #OffSeq #CVE #Zyxel #Vuln #InfoSec

Or this one - does that links actually document the vulnerability?

https://nvd.nist.gov/vuln/detail/CVE-2026-18933

GStreamer gst-plugins-ugly (asfdemux) in Red Hat Enterprise Linux 10 is affected by CVE-2026-19389 (HIGH, CVSS 7.1). Parsing crafted ASF/WMV/WMA files may lead to DoS or info leaks. No patch yet — avoid untrusted media. https://radar.offseq.com/threat/cve-2026-19389-integer-overflow-or-wraparound-in-red-hat-red-hat-enterprise-linux-10-8bd45ea7a574114c #OffSeq #Linux #CVE #GStreamer

CVE-2026-15534: HIGH severity in LEONT perl (≤5.45.1) — Integer overflow in regex engine can cause heap corruption or crashes when large inputs and crafted patterns are processed. Avoid risky patterns until patched. https://radar.offseq.com/threat/cve-2026-15534-cwe-190-integer-overflow-or-wraparound-in-leont-perl-b58a44fbf0b93abe #OffSeq #Perl #Vuln #AppSec

Falha com 18 anos no Linux entrega controlo máximo de administrador. Uma falha de segurança identificada como CVE-2026-64564 permite que utilizadores com acesso local prévio escalarem privilégios até atingirem o estatuto máximo no sistema operativo. 🚨

🔗 https://tugatech.com.pt/t88893-falha-com-18-anos-no-linux-entrega-controlo-maximo-de-administrador

#administrador #controlo #entrega #falha #linux 

CVE-2026-64564: SCTP Flaw Enables Container Escape

https://securityonline.info/sctp-uaf-cve-2026-64564-container-escape/?utm_source=mastodon&utm_medium=jetpack_social

SCTPhantom: 18-Year-Old Linux Kernel Flaw Allows Root Access and Container Escape

A use-after-free vulnerability in the Linux SCTP implementation (CVE-2026-64564) allows local attackers to gain root privileges and escape containers. The flaw has existed since 2008 and affects most major Linux distributions.

**If you run Linux (Debian, Ubuntu, RHEL, Rocky) on servers, containers or workstations, install the latest kernel update from your distribution vendor and reboot. The fix for CVE-2026-64564 only takes effect after the restart. If you don't use SCTP, also switch the module off (add both blacklist sctp and install sctp /bin/false to /etc/modprobe.d/sctp.conf, refresh the initramfs, and confirm with lsmod | grep sctp that nothing comes back).**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/sctphantom-18-year-old-linux-kernel-flaw-allows-root-access-and-container-escape-f-i-j-g-0/gD2P6Ple2L

MSI Radix AXE6600 (firmware v781521) is affected by CVE-2026-71993 (CVSS 9.8): CRITICAL command injection in openvpn via macfilter allows remote root access. Restrict management access & monitor activity. Details: https://radar.offseq.com/threat/msi-radix-axe6600-router-firmware-version-v781521-contains-a-command-injection-vulnerability-in-the-776e96041d2257c7 #OffSeq #Vuln #RouterSecurity #CVE2026_71993

🟠 CVE-2026-5857 - High (8.1)

Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking topic_len against the 64-byte limit, so an over-length topic returns early but leaves the flag set. On the next TCP segment, tc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5857/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Dans la suite de wp2shell, encore une jolie chaîne WordPress : #XSS2Shell — CVE-2026-64638.

Au départ, on a “juste” une Reflected XSS pré-auth sur wp-login.php.

Sauf qu’en la chaînant avec plusieurs briques déjà présentes dans WordPress, on arrive à quelque chose de beaucoup moins sympa :

XSS → contexte admin → Application Password → REST API → upload de plugin → RCE 🐚

⚠️ À noter quand même : ce n’est pas du pre-auth zero-click.
Il faut qu’un admin déjà connecté clique sur un lien contrôlé par l’attaquant.

Encore un bon rappel : une “simple XSS” peut devenir franchement méchante une fois mise dans la bonne chaîne.

🩹 Corrigé dans WordPress 7.0.3.
👇
https://wordpress.org/news/2026/08/wordpress-7-0-3-release/

En cas de doute sur une exploitation passée : petit coup d’œil aux Application Passwords, aux plugins récemment ajoutés et aux fichiers PHP inhabituels.

"XSS2Shell: WordPress Preauth XSS to RCE Chain (CVE-2026-64638)"
👇
https://pwn.ai/blog/xss2shell

#WordPress #XSS2Shell #CyberVeille

Another one of those WordPress pre-auth RCEs

This one's named XSS2Shell, CVE-2026-64638, found with AI, patched in v7.0.3, released on Thursday

https://pwn.ai/blog/xss2shell

🟠 CVE-2026-67687 - High (8.8)

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67687/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New.

CISA: Gunra Ransomware Advisory https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-222a

Cisco:

Advisory for a high-severity vulnerability first published on August 7:

CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 @TalosSecurity #Cisco #infosec #CISA #ransomware #cybercrime #vulnerability

「Cisco社、ClamAVの深刻な脆弱性と公開されているエクスプロイトについて警告 」： #BLEEPINGCOMPUTER

「Ciscoは、Secure Endpoint Connectorに影響を与える2つの深刻な脆弱性について警告を発した。これらの脆弱性により、攻撃者はサービス拒否（DoS）攻撃においてClamAVのスキャンプロセスをクラッシュさせることができる。

これらのセキュリティ上の欠陥（ CVE-2026-20337 および CVE-2026-20338 として追跡）は、マルウェアのファイルスキャンに使用されるオープンソースかつクロスプラットフォームのエンジンであるClamAV（Clam AntiVirus）のZIPアーカイブパーサーで発見されました。

シスコが金曜日に発表した勧告によると、これら2つの脆弱性はそれぞれ不適切な境界チェックとメモリ処理に起因するものであり、認証されていないリモート攻撃者によって悪用される可能性がある。 」

https://www.bleepingcomputer.com/news/security/cisco-warns-of-high-severity-clamav-flaws-with-public-exploits/

#prattohome

「Cisco社、ClamAVの深刻な脆弱性と公開されているエクスプロイトについて警告 」： #BLEEPINGCOMPUTER

「Ciscoは、Secure Endpoint Connectorに影響を与える2つの深刻な脆弱性について警告を発した。これらの脆弱性により、攻撃者はサービス拒否（DoS）攻撃においてClamAVのスキャンプロセスをクラッシュさせることができる。

これらのセキュリティ上の欠陥（ CVE-2026-20337 および CVE-2026-20338 として追跡）は、マルウェアのファイルスキャンに使用されるオープンソースかつクロスプラットフォームのエンジンであるClamAV（Clam AntiVirus）のZIPアーカイブパーサーで発見されました。

シスコが金曜日に発表した勧告によると、これら2つの脆弱性はそれぞれ不適切な境界チェックとメモリ処理に起因するものであり、認証されていないリモート攻撃者によって悪用される可能性がある。 」

https://www.bleepingcomputer.com/news/security/cisco-warns-of-high-severity-clamav-flaws-with-public-exploits/

#prattohome

The security flaws (tracked as CVE-2026-20337 and CVE-2026-20338) were found in the ZIP archive parser of ClamAV (Clam AntiVirus), the open-source and cross-platform engine used to scan files for malware. https://www.bleepingcomputer.com/news/security/cisco-warns-of-high-severity-clamav-flaws-with-public-exploits/

Cisco disclosed seven high-severity vulnerabilities in ClamAV, the open-source antivirus engine used in Secure Endpoint Connector across Windows, macOS, and Linux. Two of the flaws (CVE-2026-20337 and CVE-2026-20338) already have public proof-of-concept exploits, elevating the risk. The vulnerabilities can trigger denial-of-service conditions.

#ClamAV #Cisco #CVE #InfoSec

https://cyberworldops.eu/en/cisco-reports-seven-high-severity-clamav-flaws-two-pocs-available

New.

CISA: Gunra Ransomware Advisory https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-222a

Cisco:

Advisory for a high-severity vulnerability first published on August 7:

CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 @TalosSecurity #Cisco #infosec #CISA #ransomware #cybercrime #vulnerability

「Cisco社、ClamAVの深刻な脆弱性と公開されているエクスプロイトについて警告 」： #BLEEPINGCOMPUTER

「Ciscoは、Secure Endpoint Connectorに影響を与える2つの深刻な脆弱性について警告を発した。これらの脆弱性により、攻撃者はサービス拒否（DoS）攻撃においてClamAVのスキャンプロセスをクラッシュさせることができる。

これらのセキュリティ上の欠陥（ CVE-2026-20337 および CVE-2026-20338 として追跡）は、マルウェアのファイルスキャンに使用されるオープンソースかつクロスプラットフォームのエンジンであるClamAV（Clam AntiVirus）のZIPアーカイブパーサーで発見されました。

シスコが金曜日に発表した勧告によると、これら2つの脆弱性はそれぞれ不適切な境界チェックとメモリ処理に起因するものであり、認証されていないリモート攻撃者によって悪用される可能性がある。 」

https://www.bleepingcomputer.com/news/security/cisco-warns-of-high-severity-clamav-flaws-with-public-exploits/

#prattohome

「Cisco社、ClamAVの深刻な脆弱性と公開されているエクスプロイトについて警告 」： #BLEEPINGCOMPUTER

「Ciscoは、Secure Endpoint Connectorに影響を与える2つの深刻な脆弱性について警告を発した。これらの脆弱性により、攻撃者はサービス拒否（DoS）攻撃においてClamAVのスキャンプロセスをクラッシュさせることができる。

これらのセキュリティ上の欠陥（ CVE-2026-20337 および CVE-2026-20338 として追跡）は、マルウェアのファイルスキャンに使用されるオープンソースかつクロスプラットフォームのエンジンであるClamAV（Clam AntiVirus）のZIPアーカイブパーサーで発見されました。

シスコが金曜日に発表した勧告によると、これら2つの脆弱性はそれぞれ不適切な境界チェックとメモリ処理に起因するものであり、認証されていないリモート攻撃者によって悪用される可能性がある。 」

https://www.bleepingcomputer.com/news/security/cisco-warns-of-high-severity-clamav-flaws-with-public-exploits/

#prattohome

The security flaws (tracked as CVE-2026-20337 and CVE-2026-20338) were found in the ZIP archive parser of ClamAV (Clam AntiVirus), the open-source and cross-platform engine used to scan files for malware. https://www.bleepingcomputer.com/news/security/cisco-warns-of-high-severity-clamav-flaws-with-public-exploits/

Cisco disclosed seven high-severity vulnerabilities in ClamAV, the open-source antivirus engine used in Secure Endpoint Connector across Windows, macOS, and Linux. Two of the flaws (CVE-2026-20337 and CVE-2026-20338) already have public proof-of-concept exploits, elevating the risk. The vulnerabilities can trigger denial-of-service conditions.

#ClamAV #Cisco #CVE #InfoSec

https://cyberworldops.eu/en/cisco-reports-seven-high-severity-clamav-flaws-two-pocs-available

New.

CISA: Gunra Ransomware Advisory https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-222a

Cisco:

Advisory for a high-severity vulnerability first published on August 7:

CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 @TalosSecurity #Cisco #infosec #CISA #ransomware #cybercrime #vulnerability

🟠 CVE-2026-67621 - High (7.6)

Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perform unauthorized document store operations by accessing unprotected mutation endpoints. Attackers holding only view-level permi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67621/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70628 - High (7.8)

FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70628/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last 7 days (2026-08-03 - 2026-08-03)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 278
- High: 722
- Medium: 598
- Low: 162
- None: 112

Status:
- : 16
- Analyzed: 213
- Awaiting Analysis: 104
- Modified: 15
- Received: 1433
- Rejected: 37
- Undergoing Analysis: 54

CISA KEVs:
- CISA-2026:0803 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)
- CISA-2026:0805 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)
- CISA-2026:0804 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)
- CISA-2026:0807 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

Top CNAs:
- GitHub, Inc.: 256
- VulDB: 195
- WPScan: 179
- VulnCheck: 146
- Patchstack: 99
- TuranSec: 89
- Apache Software Foundation: 61
- Wordfence: 60
- MITRE: 57
- kernel.org: 46

Top Affected Products:
- UNKNOWN: 1580
- Google Chrome: 38
- Langflow: 24
- Nvidia Dynamo: 15
- Microsoft Edge Chromium: 14
- Apache Cxf: 12
- Wso2 Api Manager: 10
- Qualcomm Qca6696 Firmware: 9
- Qualcomm Wsa8845 Firmware: 9
- Qualcomm Wsa8840 Firmware: 9

Top EPSS Score:
- CVE-2026-15733 - 3.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-15733)
- CVE-2026-18814 - 2.71 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18814)
- CVE-2026-18686 - 2.61 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18686)
- CVE-2026-70374 - 2.52 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-70374)
- CVE-2026-19034 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19034)
- CVE-2026-19035 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19035)
- CVE-2026-19036 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19036)
- CVE-2026-18900 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18900)
- CVE-2026-18902 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18902)
- CVE-2026-18601 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18601)

#ZEN #SecDB #InfoSec

🚨 CRITICAL THREAT ALERT: CVE-2026-8037 is under active exploitation per CISA KEV. Progress LoadMaster appliances face remote command injection risks. Secure your perimeter with our strategic C-Suite breakdown covering technical indicators, backdoor mechanics, and hardening protocols.
https://thecybermind.co/2j7b

⚠️ CRITICAL: CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability

Progress Kemp LoadMaster has a critical RCE vulnerability (CVE-2026-8037) that allows unauthenticated attackers to execute arbitrary commands. Active exploitation started around June 29. Any organization running affected LoadMaster versions needs to patch immediately or risk full appliance compromi…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

🟠 CVE-2026-67422 - High (7.5)

pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors (caret, tilde, betterem, and magiclink) use regular expressions whose content groups can partition a run...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67422/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67622 - Critical (9.9)

Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67688 - Critical (9.8)

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67689 - Critical (9.8)

SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker to execute arbitrary code via the `field` and `order` parameters in paginated list endpoints

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67689/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5855 - High (7.5)

Contiki-NG's LwM2M TLV parser lwm2m_tlv_read() in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer length argument and reads up to six bytes from the input buffer with no bounds check. The caller in lwm2m-engine.c iterates while th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-53984 - Critical (9.1)

Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vulnerability in the Socket.IO server's database_backup event handler that allows any unauthenticated network peer to wipe or replace the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53984/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53983 - High (8.6)

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outb...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-64665 - High (8.1)

Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, when OAuth login was enabled with a provider that does not guarantee verified email addresses, an unauthenticated attacker could sign in as an exist...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64665/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-10090: Red Hat ACM Privilege Escalation Flaw Grants Cluster-Admin, Rated CVSS 9.9

http://securityonline.info/red-hat-acm-privilege-escalation/?utm_source=mastodon&utm_medium=jetpack_social

📈 CVE Published in last 7 days (2026-08-03 - 2026-08-03)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 278
- High: 722
- Medium: 598
- Low: 162
- None: 112

Status:
- : 16
- Analyzed: 213
- Awaiting Analysis: 104
- Modified: 15
- Received: 1433
- Rejected: 37
- Undergoing Analysis: 54

CISA KEVs:
- CISA-2026:0803 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)
- CISA-2026:0805 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)
- CISA-2026:0804 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)
- CISA-2026:0807 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

Top CNAs:
- GitHub, Inc.: 256
- VulDB: 195
- WPScan: 179
- VulnCheck: 146
- Patchstack: 99
- TuranSec: 89
- Apache Software Foundation: 61
- Wordfence: 60
- MITRE: 57
- kernel.org: 46

Top Affected Products:
- UNKNOWN: 1580
- Google Chrome: 38
- Langflow: 24
- Nvidia Dynamo: 15
- Microsoft Edge Chromium: 14
- Apache Cxf: 12
- Wso2 Api Manager: 10
- Qualcomm Qca6696 Firmware: 9
- Qualcomm Wsa8845 Firmware: 9
- Qualcomm Wsa8840 Firmware: 9

Top EPSS Score:
- CVE-2026-15733 - 3.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-15733)
- CVE-2026-18814 - 2.71 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18814)
- CVE-2026-18686 - 2.61 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18686)
- CVE-2026-70374 - 2.52 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-70374)
- CVE-2026-19034 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19034)
- CVE-2026-19035 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19035)
- CVE-2026-19036 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19036)
- CVE-2026-18900 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18900)
- CVE-2026-18902 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18902)
- CVE-2026-18601 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18601)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-08-03 - 2026-08-03)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 278
- High: 722
- Medium: 598
- Low: 162
- None: 112

Status:
- : 16
- Analyzed: 213
- Awaiting Analysis: 104
- Modified: 15
- Received: 1433
- Rejected: 37
- Undergoing Analysis: 54

CISA KEVs:
- CISA-2026:0803 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)
- CISA-2026:0805 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)
- CISA-2026:0804 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)
- CISA-2026:0807 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

Top CNAs:
- GitHub, Inc.: 256
- VulDB: 195
- WPScan: 179
- VulnCheck: 146
- Patchstack: 99
- TuranSec: 89
- Apache Software Foundation: 61
- Wordfence: 60
- MITRE: 57
- kernel.org: 46

Top Affected Products:
- UNKNOWN: 1580
- Google Chrome: 38
- Langflow: 24
- Nvidia Dynamo: 15
- Microsoft Edge Chromium: 14
- Apache Cxf: 12
- Wso2 Api Manager: 10
- Qualcomm Qca6696 Firmware: 9
- Qualcomm Wsa8845 Firmware: 9
- Qualcomm Wsa8840 Firmware: 9

Top EPSS Score:
- CVE-2026-15733 - 3.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-15733)
- CVE-2026-18814 - 2.71 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18814)
- CVE-2026-18686 - 2.61 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18686)
- CVE-2026-70374 - 2.52 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-70374)
- CVE-2026-19034 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19034)
- CVE-2026-19035 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19035)
- CVE-2026-19036 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19036)
- CVE-2026-18900 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18900)
- CVE-2026-18902 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18902)
- CVE-2026-18601 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18601)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-08-03 - 2026-08-03)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 278
- High: 722
- Medium: 598
- Low: 162
- None: 112

Status:
- : 16
- Analyzed: 213
- Awaiting Analysis: 104
- Modified: 15
- Received: 1433
- Rejected: 37
- Undergoing Analysis: 54

CISA KEVs:
- CISA-2026:0803 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)
- CISA-2026:0805 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)
- CISA-2026:0804 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)
- CISA-2026:0807 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

Top CNAs:
- GitHub, Inc.: 256
- VulDB: 195
- WPScan: 179
- VulnCheck: 146
- Patchstack: 99
- TuranSec: 89
- Apache Software Foundation: 61
- Wordfence: 60
- MITRE: 57
- kernel.org: 46

Top Affected Products:
- UNKNOWN: 1580
- Google Chrome: 38
- Langflow: 24
- Nvidia Dynamo: 15
- Microsoft Edge Chromium: 14
- Apache Cxf: 12
- Wso2 Api Manager: 10
- Qualcomm Qca6696 Firmware: 9
- Qualcomm Wsa8845 Firmware: 9
- Qualcomm Wsa8840 Firmware: 9

Top EPSS Score:
- CVE-2026-15733 - 3.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-15733)
- CVE-2026-18814 - 2.71 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18814)
- CVE-2026-18686 - 2.61 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18686)
- CVE-2026-70374 - 2.52 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-70374)
- CVE-2026-19034 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19034)
- CVE-2026-19035 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19035)
- CVE-2026-19036 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19036)
- CVE-2026-18900 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18900)
- CVE-2026-18902 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18902)
- CVE-2026-18601 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18601)

#ZEN #SecDB #InfoSec

ACTUALLY...

CVE-2026-34966 -> https://github.com/go-gitea/gitea/security/advisories/GHSA-2wm4-vwp6-v7xc -> CVE-2026-59765

... did they double assign without retraction?

motherf... https://nvd.nist.gov/vuln/detail/cve-2026-34966

Why is this a vulncheck CVE, gitea got their own CNA!

A CISA szerint már aktívan kihasználják a TeamCity CVE-2026-63077 távoli kódfuttatási hibáját

https://linuxmint.hu/hir/2026/08/a-cisa-szerint-mar-aktivan-kihasznaljak-a-teamcity-cve-2026-63077-tavoli-kodfuttatasi

CVE-2026-63077: TeamCity RCE Exploited in the Wild

http://securityonline.info/cve-2026-63077-teamcity-rce-exploited/?utm_source=mastodon&utm_medium=jetpack_social

📈 CVE Published in last 7 days (2026-08-03 - 2026-08-03)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 278
- High: 722
- Medium: 598
- Low: 162
- None: 112

Status:
- : 16
- Analyzed: 213
- Awaiting Analysis: 104
- Modified: 15
- Received: 1433
- Rejected: 37
- Undergoing Analysis: 54

CISA KEVs:
- CISA-2026:0803 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)
- CISA-2026:0805 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)
- CISA-2026:0804 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)
- CISA-2026:0807 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

Top CNAs:
- GitHub, Inc.: 256
- VulDB: 195
- WPScan: 179
- VulnCheck: 146
- Patchstack: 99
- TuranSec: 89
- Apache Software Foundation: 61
- Wordfence: 60
- MITRE: 57
- kernel.org: 46

Top Affected Products:
- UNKNOWN: 1580
- Google Chrome: 38
- Langflow: 24
- Nvidia Dynamo: 15
- Microsoft Edge Chromium: 14
- Apache Cxf: 12
- Wso2 Api Manager: 10
- Qualcomm Qca6696 Firmware: 9
- Qualcomm Wsa8845 Firmware: 9
- Qualcomm Wsa8840 Firmware: 9

Top EPSS Score:
- CVE-2026-15733 - 3.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-15733)
- CVE-2026-18814 - 2.71 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18814)
- CVE-2026-18686 - 2.61 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18686)
- CVE-2026-70374 - 2.52 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-70374)
- CVE-2026-19034 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19034)
- CVE-2026-19035 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19035)
- CVE-2026-19036 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19036)
- CVE-2026-18900 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18900)
- CVE-2026-18902 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18902)
- CVE-2026-18601 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18601)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-08-03 - 2026-08-03)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 278
- High: 722
- Medium: 598
- Low: 162
- None: 112

Status:
- : 16
- Analyzed: 213
- Awaiting Analysis: 104
- Modified: 15
- Received: 1433
- Rejected: 37
- Undergoing Analysis: 54

CISA KEVs:
- CISA-2026:0803 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)
- CISA-2026:0805 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)
- CISA-2026:0804 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)
- CISA-2026:0807 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

Top CNAs:
- GitHub, Inc.: 256
- VulDB: 195
- WPScan: 179
- VulnCheck: 146
- Patchstack: 99
- TuranSec: 89
- Apache Software Foundation: 61
- Wordfence: 60
- MITRE: 57
- kernel.org: 46

Top Affected Products:
- UNKNOWN: 1580
- Google Chrome: 38
- Langflow: 24
- Nvidia Dynamo: 15
- Microsoft Edge Chromium: 14
- Apache Cxf: 12
- Wso2 Api Manager: 10
- Qualcomm Qca6696 Firmware: 9
- Qualcomm Wsa8845 Firmware: 9
- Qualcomm Wsa8840 Firmware: 9

Top EPSS Score:
- CVE-2026-15733 - 3.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-15733)
- CVE-2026-18814 - 2.71 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18814)
- CVE-2026-18686 - 2.61 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18686)
- CVE-2026-70374 - 2.52 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-70374)
- CVE-2026-19034 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19034)
- CVE-2026-19035 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19035)
- CVE-2026-19036 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19036)
- CVE-2026-18900 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18900)
- CVE-2026-18902 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18902)
- CVE-2026-18601 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18601)

#ZEN #SecDB #InfoSec

https://nvd.nist.gov/vuln/detail/CVE-2026-71249 like, look at this shit

Like, please read this: https://www.cve.org/ResourcesSupport/AllResources/CNARules#section_5-3_Public_References

And then tell me that this CVE https://nvd.nist.gov/vuln/detail/CVE-2026-55739 is sufficiently documented by the one and only reference https://github.com/crater-invoice-inc/crater , the landing page for a project that has not had a release in 4 years (years before the vulnerability was presumably assigned)

📈 CVE Published in last 7 days (2026-08-03 - 2026-08-03)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 278
- High: 722
- Medium: 598
- Low: 162
- None: 112

Status:
- : 16
- Analyzed: 213
- Awaiting Analysis: 104
- Modified: 15
- Received: 1433
- Rejected: 37
- Undergoing Analysis: 54

CISA KEVs:
- CISA-2026:0803 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0803)
- CISA-2026:0805 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)
- CISA-2026:0804 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)
- CISA-2026:0807 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

Top CNAs:
- GitHub, Inc.: 256
- VulDB: 195
- WPScan: 179
- VulnCheck: 146
- Patchstack: 99
- TuranSec: 89
- Apache Software Foundation: 61
- Wordfence: 60
- MITRE: 57
- kernel.org: 46

Top Affected Products:
- UNKNOWN: 1580
- Google Chrome: 38
- Langflow: 24
- Nvidia Dynamo: 15
- Microsoft Edge Chromium: 14
- Apache Cxf: 12
- Wso2 Api Manager: 10
- Qualcomm Qca6696 Firmware: 9
- Qualcomm Wsa8845 Firmware: 9
- Qualcomm Wsa8840 Firmware: 9

Top EPSS Score:
- CVE-2026-15733 - 3.90 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-15733)
- CVE-2026-18814 - 2.71 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18814)
- CVE-2026-18686 - 2.61 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18686)
- CVE-2026-70374 - 2.52 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-70374)
- CVE-2026-19034 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19034)
- CVE-2026-19035 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19035)
- CVE-2026-19036 - 2.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-19036)
- CVE-2026-18900 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18900)
- CVE-2026-18902 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18902)
- CVE-2026-18601 - 2.38 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18601)