A 16-year-old buffer overflow vulnerability, tracked as CVE-2026-97631, affects EDK II open-source code used for UEFI firmware up to edk2-stable202608.

The flaw stems from incorrect size checks in IPv4 and IPv6 network-boot code when copying error messages, allowing code execution during network boot before the operating system and Secure Boot load.

Affected packages include distributions from Red Hat, SUSE, and Debian.

https://en.hacks.gr/sfalma-sto-edk-ii-mporei-na-epitrepsei-ektelesi-kodika-prin-fortothei-to-leitoyrgiko-systima/

#UEFI #Firmware #EDKII #Debian

🚨🇺🇸 Critical 16-year-old EDK II flaw enables code execution before Secure Boot

A critical buffer overflow in TianoCore EDK II, the open-source foundation used to build much of the world’s UEFI firmware, can allow an unauthenticated attacker to run code before the operating system loads.

Tracked as CVE-2026-97631, the vulnerability carries a CVSS score of 9.5 and has existed in the code since November 2010.
⠀
The flaw resides in the PXE network-boot driver, which copies incoming ICMP error messages into a fixed 504-byte buffer without properly limiting their size.
⠀
An attacker who can reach a machine while it is booting over the network can send a crafted ICMP message that:

• Crashes the firmware and prevents the operating system from loading
• Executes attacker-controlled code in the pre-boot environment
• Runs before Secure Boot and measured-boot protections evaluate the operating system
⠀
Reliable code execution requires knowledge of the target’s firmware build. Systems that boot exclusively from local storage are not exposed through this attack path.
⠀
An upstream fix was merged into EDK II on October 15, but no stable EDK II release currently includes it. Server and motherboard vendors must integrate the patch and distribute BIOS or UEFI updates to customers.

Source: https://github.com/tianocore/edk2/security/advisories/GHSA-99cj-7hg9-mp4m

EDK2 PXE Flaw (CVE-2026-97631): Find What You Run https://cloudsleuth.io/blog/edk2-pxe-flaw-cve-2026-97631-find-what-you-run/

UEFI Firmware Exposes Servers to Code Execution Before Secure Boot

A 16-year-old vulnerability in EDK II's UEFI firmware, known as CVE-2026-97631, leaves servers exposed to code execution before Secure Boot even kicks in, allowing attackers to interfere with or run code on machines during network boot. This flaw can be triggered by a simple 504-byte overflow in the PXE driver, enabling malicious code to…

https://osintsights.com/uefi-firmware-exposes-servers-to-code-execution-before-secure-boot?utm_source=mastodon&utm_medium=social

#UefiFirmware #EdkIi #Cve202697631 #BufferOverflow #PxeBoot

🚨 BREAKING: CRITICAL 9.5/10 UEFI FIRMWARE VULNERABILITY COULD LET HACKERS EXECUTE CODE BEFORE THE OS EVEN LOADS.

CVE-2026-97631 exposes a 16-year-old flaw in TianoCore EDK II, a foundational component of the UEFI firmware ecosystem.

🔴 HERE'S WHAT WE KNOW:

➜ CVSS 9.5: Critical buffer overflow in the UEFI PXE network-boot code.

➜ PRE-OS ATTACK: Crafted ICMP error packets could trigger memory corruption before OS security tools start.

➜ SECURITY BYPASS POTENTIAL: Secure Boot doesn't prevent runtime exploitation of vulnerable, signed firmware code.

➜ 16 YEARS UNDISCOVERED: The flaw affects IPv4 and IPv6 ICMP error handlers.

⚠️ THE BIG PROBLEM: Upstream fixes are available, but affected systems still need firmware updates from their manufacturers.

🛡️ Disable unnecessary PXE boot, isolate provisioning networks, and check for vendor patches.

🔗 Full breakdown: https://thecybersecguru.com/news/cve-2026-97631-edk2-pxe-uefi-vulnerability/

#CyberSecurity #UEFI #FirmwareSecurity

CVE-2026-97631: How a 16-Year-Old EDK II PXE Bug Exposes UEFI Firmware Before the OS Loads

https://thecybersecguru.com/news/cve-2026-97631-edk2-pxe-uefi-vulnerability/

🚨🇺🇸 Critical 16-year-old EDK II flaw enables code execution before Secure Boot

A critical buffer overflow in TianoCore EDK II, the open-source foundation used to build much of the world’s UEFI firmware, can allow an unauthenticated attacker to run code before the operating system loads.

Tracked as CVE-2026-97631, the vulnerability carries a CVSS score of 9.5 and has existed in the code since November 2010.
⠀
The flaw resides in the PXE network-boot driver, which copies incoming ICMP error messages into a fixed 504-byte buffer without properly limiting their size.
⠀
An attacker who can reach a machine while it is booting over the network can send a crafted ICMP message that:

• Crashes the firmware and prevents the operating system from loading
• Executes attacker-controlled code in the pre-boot environment
• Runs before Secure Boot and measured-boot protections evaluate the operating system
⠀
Reliable code execution requires knowledge of the target’s firmware build. Systems that boot exclusively from local storage are not exposed through this attack path.
⠀
An upstream fix was merged into EDK II on October 15, but no stable EDK II release currently includes it. Server and motherboard vendors must integrate the patch and distribute BIOS or UEFI updates to customers.

Source: https://github.com/tianocore/edk2/security/advisories/GHSA-99cj-7hg9-mp4m

EDK2 PXE Flaw (CVE-2026-97631): Find What You Run https://cloudsleuth.io/blog/edk2-pxe-flaw-cve-2026-97631-find-what-you-run/

CVE-2026-97631: How a 16-Year-Old EDK II PXE Bug Exposes UEFI Firmware Before the OS Loads

https://thecybersecguru.com/news/cve-2026-97631-edk2-pxe-uefi-vulnerability/

🧐😱🫣
Critical UEFI Firmware Flaw
CVE-2026-97631

CVE-2026-97631

pls stop

🏆 New Achievement! Boot Sequence Interrupted — WIPE INCOMING!

PHASE ONE MECHANICS ACTIVE. CVE-2026-97631 has spawned in TianoCore EDK II, the open-source UEFI codebase baked into firmware by most of the world's server vendors and cloud providers. Severity: 9.5 out of 10. The exploit hits an ICMP component — a memory-corruption flaw that lets attackers execute malicious code BEFORE the operating system loads. Before Secure Boot. Before TPM. (1/3)

Code-execution flaw in UEFI firmware affects most servers on planet Earth

CVE-2026-97631 doesn’t affect home and small office users, or any other users who boot their devices solely from…
#NewsBeep #News #US #USA #UnitedStates #UnitedStatesOfAmerica #Technology
https://www.newsbeep.com/us/896879/

🔴 CVE-2026-90717 - Critical (9.1)

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.2...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90717/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59185 - High (8.5)

identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `POST /v1/workspaces/:workspace_id/projects/:project_id/github/connect/complete` endpoint in `internal/api/router.go` accepts `i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59185/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59185 - High (8.5)

identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on `POST /v1/workspaces/:workspace_id/projects/:project_id/github/connect/complete` endpoint in `internal/api/router.go` accepts `i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59185/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59172 - High (7.8)

Joker is a small Clojure interpreter, linter and formatter written in Go. Prior to 1.8.2, `joker --lint ` walks upward from the linted file to locate a `.jokerd/` directory and executes matching `linter.*` files before linting. Those files contain...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59172/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59172 - High (7.8)

Joker is a small Clojure interpreter, linter and formatter written in Go. Prior to 1.8.2, `joker --lint ` walks upward from the linted file to locate a `.jokerd/` directory and executes matching `linter.*` files before linting. Those files contain...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59172/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

Bulletin ID: 2026-153-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/28/2026 08:30 AM PDT
Description:
AWS SDK for pandas (awswrangler) is an open-source Python library that integrates pandas wi...

https://aws.amazon.com/security/security-bulletins/rss/2026-153-aws/

#aws #security

CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

Bulletin ID: 2026-153-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/28/2026 08:30 AM PDT
Description:
AWS SDK for pandas (awswrangler) is an open-source Python library that integrates pandas wi...

https://aws.amazon.com/security/security-bulletins/rss/2026-153-aws/

#aws #security

CVE-2026-118344 (CRITICAL): Google Chrome before 156.0.8078.73 is vulnerable to a use-after-free in Layout, allowing remote code execution inside the sandbox. Update now. https://radar.offseq.com/threat/cve-2026-118344-use-after-free-in-google-chrome-1373d02f29569b9e #OffSeq #Chrome #CVE2026118344 #Infosec

Ultimate Member <2.14.0 is vulnerable (CRITICAL, CVSS 9.8) to deserialization of untrusted data (CVE-2026-115968), enabling object injection and possible system takeover. Patch to 2.14.0+ ASAP. https://radar.offseq.com/threat/cve-2026-115968-deserialization-of-untrusted-data-in-ultimate-member-92e650ae59939656 #OffSeq #WordPress #Infosec #Vulnerability

Ultimate Member <2.14.0 is vulnerable (CRITICAL, CVSS 9.8) to deserialization of untrusted data (CVE-2026-115968), enabling object injection and possible system takeover. Patch to 2.14.0+ ASAP. https://radar.offseq.com/threat/cve-2026-115968-deserialization-of-untrusted-data-in-ultimate-member-92e650ae59939656 #OffSeq #WordPress #Infosec #Vulnerability

CVE-2026-67074 | CRITICAL RCE in HCL BigFix AEX 13.0.0.1 (CVSS 9.1) 🛡️ Exploitation allows arbitrary code execution with app privileges. No patch yet — restrict access & monitor. More: https://radar.offseq.com/threat/cve-2026-67074-cwe-94-code-injection-in-hcl-software-bigfix-aex-a5f31975501a4a18 #OffSeq #CVE #RCE #BigFix

CVE-2026-67074 | CRITICAL RCE in HCL BigFix AEX 13.0.0.1 (CVSS 9.1) 🛡️ Exploitation allows arbitrary code execution with app privileges. No patch yet — restrict access & monitor. More: https://radar.offseq.com/threat/cve-2026-67074-cwe-94-code-injection-in-hcl-software-bigfix-aex-a5f31975501a4a18 #OffSeq #CVE #RCE #BigFix

🟠 CVE-2026-59176 - High (7.8)

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functype_version` MCP tool in `functype-mcp-server` accepts an unconstrained `version` string using only `z.string()` validation in `packages/mcp-server/...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59176/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59176 - High (7.8)

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functype_version` MCP tool in `functype-mcp-server` accepts an unconstrained `version` string using only `z.string()` validation in `packages/mcp-server/...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59176/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-114278 - Critical (9.8)

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespace fields from the /exec/init and /exec/config JSON endpoints) into a double-quoted sh -c "echo "..." > ..." invocation without...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114278/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-114278 - Critical (9.8)

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespace fields from the /exec/init and /exec/config JSON endpoints) into a double-quoted sh -c "echo "..." > ..." invocation without...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114278/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-110747 - High (7.5)

ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into an attacker-controlled int and then checks (_inputPtr + len) &lt;= _inputEnd using signed arithmetic. For values near Integer.MAX_VALUE the addition ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110747/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116676 - High (8.8)

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled workspace value from atlantis.yaml into Terraform command argume...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116676/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93520 - High (7.8)

A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in https://x.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93520/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93520 - High (7.8)

A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in https://x.org X server before 2.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93520/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93519 - High (7.8)

A buffer overflow when handling pointer barriers in the XFIXES extension in https://x.org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93519/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93519 - High (7.8)

A buffer overflow when handling pointer barriers in the XFIXES extension in https://x.org X server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93519/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93518 - High (7.8)

An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in https://x.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93518/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93518 - High (7.8)

An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients in https://x.org X server before 21.1.25 and XWayland before 24.1.14 could be exploited for crashes or potential code execution in the X...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93518/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

An MLflow vulnerability, CVE-2026-116690, is exploited in the wild as proof-of-concept code for it and RCE flaw CVE-2026-116692 goes public. Patch now.

#MLflow #AISecurity #MLOps #CVE2026116690 #CVE2026116692 #PoC #ActiveExploitation #RCE

https://securityonline.info/mlflow-vulnerability-exploited-poc/?utm_source=mastodon&utm_medium=jetpack_social

An MLflow vulnerability, CVE-2026-116690, is exploited in the wild as proof-of-concept code for it and RCE flaw CVE-2026-116692 goes public. Patch now.

#MLflow #AISecurity #MLOps #CVE2026116690 #CVE2026116692 #PoC #ActiveExploitation #RCE

https://securityonline.info/mlflow-vulnerability-exploited-poc/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-116692 - Critical (9.8)

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116692/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

An MLflow vulnerability, CVE-2026-116690, is exploited in the wild as proof-of-concept code for it and RCE flaw CVE-2026-116692 goes public. Patch now.

#MLflow #AISecurity #MLOps #CVE2026116690 #CVE2026116692 #PoC #ActiveExploitation #RCE

https://securityonline.info/mlflow-vulnerability-exploited-poc/?utm_source=mastodon&utm_medium=jetpack_social

An MLflow vulnerability, CVE-2026-116690, is exploited in the wild as proof-of-concept code for it and RCE flaw CVE-2026-116692 goes public. Patch now.

#MLflow #AISecurity #MLOps #CVE2026116690 #CVE2026116692 #PoC #ActiveExploitation #RCE

https://securityonline.info/mlflow-vulnerability-exploited-poc/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-110879 - Critical (9.8)

jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declared type or would be rejected as direct type IDs. This bypasses the gen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110879/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-104383: CRITICAL code injection (CWE-94) in EagleCloud Aquila ≤2.6.7.2 Pigeon MFA service. Authenticated remote attackers can execute arbitrary code — full compromise possible. Restrict access & monitor for patches. https://radar.offseq.com/threat/cve-2026-104383-cwe-94-code-injection-in-eaglecloud-aquila-8c9d1a000de0f9b2 #OffSeq #CVE2026 #Vuln #CloudSec

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

#TeamViewer #RCE #PrivilegeEscalation #RemoteAccess #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/teamviewer-vulnerabilities-patched-tv-2026-1011/?utm_source=mastodon&utm_medium=jetpack_social

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

#TeamViewer #RCE #PrivilegeEscalation #RemoteAccess #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/teamviewer-vulnerabilities-patched-tv-2026-1011/?utm_source=mastodon&utm_medium=jetpack_social

WatchGuard fixes 18 Fireware OS vulnerabilities on the Firebox firewall, including critical CVE-2026-103594 (CVSS 9.5). Upgrade to 2026.4 now.

#WatchGuard #Fireware #Firebox #Firewall #CVE2026103594 #CVE202693865 #PatchNow #NetworkSecurity

https://securityonline.info/watchguard-fireware-os-vulnerabilities-2/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-57200 - High (7.5)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, an authenticated attacker with read-only permissions for the `Asterisk REST Interface ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57200/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116662 - High (7.5)

Tanium addressed a compression bomb vulnerability in Enforce.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87086 - High (7.5)

Tanium addressed a denial of service vulnerability in Provision.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86377 - High (7.6)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Out-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86377/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86377 - High (7.6)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Out-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86377/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch 9 critical Adobe vulnerabilities in Adobe Campaign Classic and Connect, including 9.9 CVSS RCE flaws CVE-2026-104351 and CVE-2026-48360.

#Adobe #AdobeCampaign #AdobeConnect #RCE #SQLInjection #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/adobe-vulnerabilities-campaign-classic-connect/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-86396 - High (8.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Impr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86396/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-86400 - Critical (9.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Impr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86400/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92797 - High (8.8)

The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the save_profile_fields() function that uses an isset() condition at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92797/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-84999 | Pie Register Premium <=3.8.4.0 for WordPress: CRITICAL file upload vuln allows unauthenticated remote code execution. Path disclosure eases exploitation. Disable plugin or restrict uploads until patched. https://radar.offseq.com/threat/the-pie-register-premium-plugin-for-wordpress-is-vulnerable-to-unrestricted-file-type-upload-in-all-53fb8a5bfb673cfb #OffSeq #WordPress #CVE202684999

🟠 CVE-2026-116613 - High (7.5)

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atb_shortcode_handler() function fetching an arbitrary post ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116613/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118485 - High (8.1)

Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed (URL-encoded ../) sequences in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118485/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118485 - High (8.1)

Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed (URL-encoded ../) sequences in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118485/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-118477 - Critical (9.8)

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authenticated attacker (free registration available) to execute arbitrary c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118477/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118477 – HIGH severity OS Command Injection in EISGE Kalifast (>=0 <2026.02.1). Authenticated users can run arbitrary commands via ei_git_repo_url. Patch now: 2026061802 🛡️ https://radar.offseq.com/threat/cve-2026-118477-cwe-78-os-command-injection-in-eisge-kalifast-96357c3746a79f11 #OffSeq #infosec #vulnerability #CVE2026118477

🔴 CVE-2026-118477 - Critical (9.8)

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authenticated attacker (free registration available) to execute arbitrary c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118477/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118477 – HIGH severity OS Command Injection in EISGE Kalifast (>=0 <2026.02.1). Authenticated users can run arbitrary commands via ei_git_repo_url. Patch now: 2026061802 🛡️ https://radar.offseq.com/threat/cve-2026-118477-cwe-78-os-command-injection-in-eisge-kalifast-96357c3746a79f11 #OffSeq #infosec #vulnerability #CVE2026118477

🟠 CVE-2026-86378 - High (8.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86378/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86378 - High (8.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86378/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-103780 - Critical (9.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103780/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-103780 - Critical (9.8)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103780/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Dell PowerProtect Data Domain CVE-2026-86397 (CRITICAL, CVSS 9.8): Unauthenticated remote attackers can create privileged accounts — full takeover possible. Patch to 7.13.1.90/8.3.1.50/8.6.1.30/8.9.0.0+. https://radar.offseq.com/threat/cve-2026-86397-cwe-862-missing-authorization-in-dell-powerprotect-data-domain-0bf4a4099bf98dd8 #OffSeq #Dell #Vuln #Infosec

kleor Contact Manager <=9.1.2 suffers CRITICAL (CVSS 9.8) file upload vuln (CVE-2026-109218). Unauthenticated users can exploit trailing dots to upload dangerous files, risking RCE. Harden configs & restrict uploads. https://radar.offseq.com/threat/cve-2026-109218-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-kleor-contact-manager-0a4841efd9c43b5a #OffSeq #WordPress #Infosec

🟠 CVE-2026-111255 - High (7.5)

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 via the upload_image function. This is due to insufficient file type...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-111255/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-1928 - High (8.8)

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.276 via deserialization of untrusted input in the updateMeta REST API endpoint. This m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118008 - High (8.8)

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118008/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Latest cybersecurity reports highlight critical PHP vulnerabilities being actively exploited globally, necessitating emergency patching. CISA confirmed exploitation of the Node2Shell/Brotli flaw (CVE-2026-111497). China-linked groups leveraged a BeyondTrust zero-day (CVE-2026-102764), and AI agents reportedly compromised live websites during testing (Oct 27-28, 2026). In technology, Amazon Business introduced new agentic AI tools. Geopolitically, Israel's elections are heading towards a coalition deadlock.

#Cybersecurity #AnonNews_irc #News

Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability | Wiz Blog #devopsish https://www.wiz.io/blog/cve-2026-111497-brotli-rce-node-js

📰 CISA Adds Exploited Google Brotli and Adobe Commerce Flaws to KEV

📢 CISA adds two actively exploited vulns to its KEV catalog: Node2Shell (CVE-2026-111497) in Google Brotli & a file upload flaw (CVE-2026-48356) in Adobe Commerce. Federal agencies must patch by Nov 10. #PatchNow #CISA #KEV

🔗 https://cyber.netsecops.io/articles/cisa-adds-exploited-google-brotli-and-adobe-commerce-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

I thought 'brotli' was an Indian side-order until I discovered CVE-2026-111497.

(Sorry, I thought that quite funny even if it isn't. /via @jschauma good post at https://www.netmeister.org/blog/defense-ddos.html)

Hackers Exploit Node2Shell Flaw as CISA Urges Emergency Patching

Hackers are actively exploiting a critical vulnerability, CVE-2026-111497, in the Brotli decoder, and CISA is urging immediate action to patch the flaw and prevent potentially disastrous consequences. Unprivileged attackers can exploit this unchecked return value vulnerability to corrupt memory, disclose sensitive data, or even execute arbitrary…

https://osintsights.com/hackers-exploit-node2shell-flaw-as-cisa-urges-emergency-patching?utm_source=mastodon&utm_medium=social

#EmergingThreats #Node2shell #Cve2026111497 #Brotli #Cisa

Latest cybersecurity reports highlight critical PHP vulnerabilities being actively exploited globally, necessitating emergency patching. CISA confirmed exploitation of the Node2Shell/Brotli flaw (CVE-2026-111497). China-linked groups leveraged a BeyondTrust zero-day (CVE-2026-102764), and AI agents reportedly compromised live websites during testing (Oct 27-28, 2026). In technology, Amazon Business introduced new agentic AI tools. Geopolitically, Israel's elections are heading towards a coalition deadlock.

#Cybersecurity #AnonNews_irc #News

Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability | Wiz Blog #devopsish https://www.wiz.io/blog/cve-2026-111497-brotli-rce-node-js

I thought 'brotli' was an Indian side-order until I discovered CVE-2026-111497.

(Sorry, I thought that quite funny even if it isn't. /via @jschauma good post at https://www.netmeister.org/blog/defense-ddos.html)

Broadcom warns of a VMware SDDC Manager vulnerability, CVE-2026-111497 (CVSS 9.8), from the Node.js Brotli vulnerability. Patches pending.

#VMware #Broadcom #SDDCManager #VMwareCloudFoundation #Brotli #CVE2026111497 #NodeJS #RCE

https://securityonline.info/vmware-sddc-manager-vulnerability-cve-2026-111497/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft released emergency updates for a severe Microsoft .NET Brotli vulnerability. Learn how to patch CVE-2026-111497 and secure your applications now.

#Microsoft #DotNet #Brotli #Cybersecurity #Imperva

https://dailytechnow.com/microsoft-dotnet-brotli-vulnerability/

POV: you just finished patching PHP2Shell

then node and python get one too

broccoli2shell, CVE-2026-111497, CVSS 9.2, an out-of-bounds write in google's brotli decoder. reported by openai's codex security

node 22.23.4 / 24.22.1 / 26.12.1
python Brotli 1.2.1, brotlicffi 1.2.1.0
then restart and rebuild images

https://github.com/advisories/GHSA-9v8h-qqgm-4m35

#InfoSec #NodeJS #Python #CVE

CISA KEV catalog adds actively exploited Magento flaw CVE-2026-48356 and Brotli vulnerability CVE-2026-111497. Patch before November 10.

#CISA #KEV #Magento #AdobeCommerce #Brotli #CVE202648356 #CVE2026111497 #ActiveExploitation

https://securityonline.info/cisa-kev-magento-brotli-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1027] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-111497 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- Name: Google Brotli Unchecked Return Value Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Brotli
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111497

⚠️ CVE-2026-48356 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48356)
- Name: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://www.adobe.com/trust/security/products/commerce/apsb26-73.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48356

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261027 #cisa20261027 #cve_2026_111497 #cve_2026_48356 #cve2026111497 #cve202648356

CISA has added the Brotli vulnerability to the KEV list. While evidence of successful exploitation outside labs is scarce, we have detection opportunities in our thread.

https://ifin.network/t/cve-2026-111497-brotli-out-of-bounds-write-impacts-node-python/929

#ThreatIntel

CVE ID: CVE-2026-111497
Vendor: Google
Product: Brotli
Date Added: 2026-10-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-111497

CISA adds node2shell (broccoli2shell?) CVE-2026-111497 (Google Brotli Unchecked Return Value) and Adobe Commerce/Magento unrestricted file upload CVE-2026-48356 to the KEV Catalog:

https://www.cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog

#CISA #KEV #node2shell #broccoli2shell #brotli #Adobe #magento #CVE

Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected. #devopsish https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

You probably got into #cybersecurity because no two days look the same. This month is taking that a little too literally. 😅

So, yes, we created another new free scanner, this time for #HTTP2Shell: https://pentest-tools.com/network-vulnerability-scanning/http2shell-scanner

▶️ that's the same Brotli bug as #Node2Shell (aka CVE-2026-111497)
▶️ with a slightly wider blast radius
▶️ and with one element no external scanner can see.

We included a diagram of both inbound and outbound paths, fixed versions for every ecosystem, and temporary controls if you can’t patch today.

If this week has you running on coffee and advisories, you’re in good company. Know someone patching right now? Send them the link: https://pentest-tools.com/network-vulnerability-scanning/http2shell-scanner

#offensivesecurity #vulnerabilitymanagement #ethicalhacking

CVE-2026-11497 having a bit of an identity crisis…

- Imperva coined the initial term, “Node2Shell” (https://www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/)
- Aikido tried to turn it into “HTTP2Shell” (https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497)
- Not satisfied with either of those, someone came up with “Broccoli2Shell” 🥦 (https://broccoli2shell.com)
- And now, super late to the game, humorless Tenable has decided to label it “Brotli2Shell” (https://www.tenable.com/blog/brotli2shell-frequently-asked-questions-for-google-brotli-decoder-cve-2026-111497)

Same vuln, 4 different names (so far). Yeesh…

@schenklklopfer

Traefik benutzt meines Wissens das "crypto/tls"-Paket von go, und diese TLS-Implementierung kann wohl noch keine komprimierten Zertifikate:

https://github.com/golang/go/issues/42967

Daher würde ich davon ausgehen, dass Traefik nicht betroffen ist von CVE-2026-111497.

SANS Stormcast Tuesday, October 27th, 2026: Apple Patches 304 Vulnerabilities Incl. Exploited CoreGraphics Flaw; Threat Hunting in DShield SIEM with ELK; .NET and PHP Brotli Fixes (CVE-2026-111497)
https://isc.sans.edu/podcastdetail/10152

Palo Alto confirms PAN-OS Brotli vulnerability CVE-2026-111497, a CVSS 9.2 buffer overflow in PAN-OS 12.2, 12.1 and 11.2. Install the hotfixes now.

#PaloAltoNetworks #PANOS #Brotli #CVE2026111497 #BufferOverflow #Firewall #PrismaCloud #CyberSecurity

https://securityonline.info/pan-os-brotli-vulnerability-cve-2026-111497/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-111497 now haunts Google's Brotli decoder — embedded across Node.js, .NET, Visual Studio, PowerShell, and Python packages — enabling out-of-bounds writes that Imperva confirmed can achieve code execution on Node.js 24.22.0 for Linux arm64.

Microsoft, Node.js, and two Python package maintainers have since issued patches. PHP rebuilt its Windows packages too. Rapid7 sees no wild exploitation yet, but the proof-of-concept exists. (2/3)

🔥 Node2Shell vulnerability scanner 'NodeGuard' unveiled

We are releasing NodeGuard, a free inspection service for Node2Shell (CVE-2026-111497). By simply entering the service URL, you can quickly check the likelihood of exposure and immediately see the results and recommended actions.

👉 Go to NodeGuard: https://nodejsguard.io

📌 How to use NodeGuard

• After entering the service URL to be inspected, check the assessment results and recommended actions displayed on the screen

• Domains, subdomains: If there are multiple API endpoints, check each one

• After patching, check again using the same URL to see if the action addressed the vulnerability

*Please use only for services you own and manage directly.

If you need to inspect internal network services or deployment/worker environments that cannot be accessed from outside, please leave a message on the NodeGuard page.

#Nodejs #Node2Shell #CVE2026111497 #NodeGuard #Xint

CW: CVE-2026-111497 — Brotli sérülékenység

Kritikus (CVSS 9.2) memóriahiba a Google Brotli dekóderben (érint: Brotli 1.0.3–1.2.0). Távoli kódfuttatás, adatkiszivárgás és DoS lehetséges. Javítások: Brotli 1.2.1; Node.js 22.23.4/24.22.1/26.12.1; Bun 1.4.4; brotli/brotlicffi 1.2.1. Ha nem tudsz frissíteni: tiltsd a br dekódolást, újraindítás szükséges. #CVE #Brotli #Security #NodeJS #Python https://linuxmint.hu/hir/2026/10/http2shell-kritikus-serulekenyseg-fenyegeti-a-brotli-tomoritest-hasznalo-alkalmazasokat

Oh, interesting:

git https remote (git-remote-https) may be vulnerable to the #brotli RCE (CVE-2026-111497), if built with brotli-enabled libcurl. I'm guessing updating libbrotli would fix that, but that seems like a neat, little attack vector that flies under the radar.

Palo finally published an advisory outlining impact from CVE-2026-111497 in brotli.

https://security.paloaltonetworks.com/CVE-2026-111497

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. Brotli is commonly used by many HTTP-based applications including Node.js.

Most importantly:

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls that have inspection of Brotli compressed traffic and TLS/SSL decryption enabled on the dataplane. There is no impact on the Management interface (web or API) of the PAN-OS devices.

Too much coffee, too may CVEs, not enough sleep? Same, tbh. 👉 To bring you this free #Node2Shell scanner, our team worked through the weekend too.

While you scan your target for CVE-2026-111497 (also called #HTTP2Shell), you can also dig into:

☑️ how our active detection works
☑️ what each scan result tells you
☑️ why version-based detection is not enough
☑️ what attackers can do with this vulnerability
☑️ why we're offering this free scanner (and others).

And, before you can scroll twice, you'll have a report like this one ready to share.

Know a colleague, friend, or fellow #infosec or IT who could use this free scanner? Share the URL with them: https://pentest-tools.com/network-vulnerability-scanning/node2shell-scanner

#ethicalhacking #offensivesecurity #vulnerabilitymanagement

PHP has rebuilt official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a memory corruption vulnerability in the Brotli compression library.

The issue can be reached via the cURL extension when automatic HTTP response decompression is enabled.

Affected packages include versions 8.5.12-1, 8.4.27-1, 8.3.36-1, and 8.2.35-1, incorporating Brotli 1.2.1.

Windows users are advised to update from the official downloads page.

https://en.hacks.gr/nea-paketa-php-gia-ta-windows-diorthonoyn-sovaro-provlima-asfaleias/

#PHP #Brotli #Windows #cURL

🚨 PHP releases new Windows builds to fix critical HTTP2Shell vulnerability

The PHP team has rebuilt its supported Windows packages with Brotli 1.2.1, addressing CVE-2026-111497, an out-of-bounds write flaw that can potentially lead to remote code execution.
⠀
In PHP’s Windows builds, the vulnerable Brotli decoder can be reached through the cURL extension when automatic HTTP response decompression is enabled.

This cURL feature is disabled by default, but applications and HTTP client libraries can turn it on.
⠀
Updated builds:

• PHP 8.5.12-1
• PHP 8.4.27-1
• PHP 8.3.36-1
• PHP 8.2.35-1
⠀
The “-1” suffix indicates that the Windows packages were rebuilt with updated dependencies. The PHP source and runtime version numbers remain unchanged.

This is separate from the PHP2Shell flaws patched on October 21.

Source: https://www.php.net/archive/2026.php

New.

"As of October 26, 2026, Rapid7 is not aware of exploitation in the wild, and CVE-2026-111497 is not listed in CISA's Known Exploited Vulnerabilities catalog. However, given the vulnerability's potential to disclose memory or enable remote code execution (RCE), Rapid7 recommends that organizations prioritize remediation."

Rapid7: CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder https://www.rapid7.com/blog/post/etr-cve-2026-111497-critical-out-of-bounds-write-in-the-node-js-brotli-decoder/ @Rapid7Official #infosec #vulnerability #JavaScript #threatresearch

🚨 Crimeflare releases emergency WAF rules for critical Brotli vulnerability

Crimeflare has added two detection rules for CVE-2026-111497 to its Managed Ruleset, targeting Brotli-encoded request bodies and the Next.js image optimization endpoint.
⠀
The vulnerability is an out-of-bounds write in the Brotli decoder. Malformed compressed input can corrupt process memory, potentially causing crashes, memory disclosure or remote code execution.

It affects software that uses vulnerable Brotli versions, including supported Node.js 22.x, 24.x and 26.x releases.
⠀
Crimeflare’s new rules are enabled by default in Log mode. They provide visibility into matching requests but do not block them unless customers change the action.

Crimeflare warns that blocking the Next.js rule may disrupt image delivery and recommends reviewing matches before enabling enforcement.
⠀
Node.js users should update to:

• 22.23.4
• 24.22.1
• 26.12.1

The WAF rules are an additional mitigation, not a replacement for patching.

Source: https://developers.cloudflare.com/changelog/post/2026-10-25-emergency-waf-release

🚨 Microsoft issues emergency .NET updates after earlier patches failed to fully fix two vulnerabilities

Microsoft says its October 13 updates did not completely address CVE-2026-102870 and CVE-2026-70197, prompting new out-of-band security releases for .NET 8, 9, 10 and 11.
⠀
CVE-2026-102870 is a high-severity remote code execution flaw in the Blazor WebAssembly debugger.

Attacker-controlled data from a debugged application could escape a generated C# string and execute code on a developer’s computer when they evaluate an expression. The vulnerability has a CVSS score of 8.8 and requires user interaction.
⠀
The emergency updates also address:

• CVE-2026-70197, a SocketAsyncEventArgs memory corruption flaw
• CVE-2026-111497, a Brotli decoder out-of-bounds write
• CVE-2026-114148, a Linux source-build tarball ownership issue
⠀
Microsoft warns that updating the shared .NET runtime alone is not enough to fix the Blazor vulnerability when affected NuGet packages are referenced directly.

Developers should update Microsoft.AspNetCore.Components.WebAssembly.Server and DevServer to patched releases, including version 10.0.14 for .NET 10 projects.

Source: https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates

📣 Updated PHP Windows builds are now available:

- PHP 8.2.35-1
- PHP 8.3.36-1
- PHP 8.4.27-1
- PHP 8.5.12-1

‼️ These builds include Brotli 1.2.1 to fix CVE-2026-111497, an out-of-bounds write in Brotli decompression. This vulnerability is in the bundled Brotli library, not PHP code.

📝 Read more: https://www.php.net/archive/2026.php#2026-10-26-1

#PHP #Windows #Release #Security #CVE

GNU mtools ≤4.0.49 has a medium severity flaw (CVE-2026-118384): out-of-bounds write in parse_vses (vfat.c) via missing minimum check (CWE-839). Local attackers can impact integrity & availability. Patch status pending — avoid untrusted inputs. https://radar.offseq.com/threat/cve-2026-118384-cwe-839-numeric-range-comparison-without-minimum-check-in-gnu-mtools-d3d2f31aa39cf7f4 #OffSeq #Vuln #GNU

🔴 CVE-2026-106013 - Critical (9.8)

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verify_twitter_callback function because after ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-106013/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-106013 (CRITICAL): Jupiter X Core ≤4.61.0 allows authentication bypass via Twitter/X login handler — attackers can access WP admin as app owner. Disable Twitter/X login or the plugin until fixed. https://radar.offseq.com/threat/cve-2026-106013-cwe-287-improper-authentication-in-artbees-jupiter-x-core-324b257972296553 #OffSeq #WordPress #CVE2026_106013 #Infosec

Chrome security update 156.0.8078.73 fixes 52 flaws, including critical Chrome vulnerabilities like sandbox escape CVE-2026-118306. Update now.

#Chrome #GoogleChrome #Chrome156 #BrowserSecurity #CVE2026118306 #SecurityUpdate #PatchNow #Vulnerability

https://securityonline.info/chrome-security-update-156-0-8078-73/?utm_source=mastodon&utm_medium=jetpack_social

Auth bypasses are so hot right now.

https://nvd.nist.gov/vuln/detail/cve-2026-112352

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random identifier or integrity protection. Attackers can guess default account names such as Admin or sftp_user and submit a forged username cookie to satisfy the login check in checkLogin (libwebcmn.so) and networkDiag.cgi, chaining into root command execution.

📰 CISA Adds Exploited Google Brotli and Adobe Commerce Flaws to KEV

📢 CISA adds two actively exploited vulns to its KEV catalog: Node2Shell (CVE-2026-111497) in Google Brotli & a file upload flaw (CVE-2026-48356) in Adobe Commerce. Federal agencies must patch by Nov 10. #PatchNow #CISA #KEV

🔗 https://cyber.netsecops.io/articles/cisa-adds-exploited-google-brotli-and-adobe-commerce-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

🏆 New Achievement! Cart Before The Hearse!

Step right up, online merchants! For only the low, low price of ignoring CVE-2026-48356, attackers are now offering a full remote code execution package for your Adobe Commerce or Magento store — hundreds of shops already redecorated, free of charge. CISA has slapped a patch deadline of November 10, 2026 on this critical file upload flaw, which lets uninvited guests take over your store like a haunted Best Buy. (1/3)

Adobe Commerce and Magento Under Active Attacks via Critical File Upload Flaw

CISA reports active exploitation of Adobe Commerce and Magento critical file upload vulnerability (CVE-2026-48356) that allows remote code execution. CISA has mandated a patch deadline of November 10, 2026, after reports showed hundreds of e-commerce sites were compromised.

**If you run Adobe Commerce or Magento, update to the latest patched version immediately. This flaw is actively exploited to take over online stores. Before patching, check your CMS blocks for unfamiliar or suspicious code; if you find any, treat the store as already hacked, then clean it and reset all admin passwords and sessions.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/adobe-commerce-and-magento-under-active-attacks-via-critical-file-upload-flaw-r-i-3-3-i/gD2P6Ple2L

CISA KEV catalog adds actively exploited Magento flaw CVE-2026-48356 and Brotli vulnerability CVE-2026-111497. Patch before November 10.

#CISA #KEV #Magento #AdobeCommerce #Brotli #CVE202648356 #CVE2026111497 #ActiveExploitation

https://securityonline.info/cisa-kev-magento-brotli-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1027] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-111497 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- Name: Google Brotli Unchecked Return Value Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Brotli
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111497

⚠️ CVE-2026-48356 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48356)
- Name: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://www.adobe.com/trust/security/products/commerce/apsb26-73.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48356

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261027 #cisa20261027 #cve_2026_111497 #cve_2026_48356 #cve2026111497 #cve202648356

CVE ID: CVE-2026-48356
Vendor: Adobe
Product: Commerce and Magento
Date Added: 2026-10-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-48356

CISA adds node2shell (broccoli2shell?) CVE-2026-111497 (Google Brotli Unchecked Return Value) and Adobe Commerce/Magento unrestricted file upload CVE-2026-48356 to the KEV Catalog:

https://www.cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog

#CISA #KEV #node2shell #broccoli2shell #brotli #Adobe #magento #CVE

HIGH severity: 953 Magento stores infected by loader malware since July 2025 🛒 Loader uses visitor fingerprinting and exploits CVE-2026-48356 & CVE-2025-54236. Inspect for rogue admin accounts, backdoors, and patch now. https://radar.offseq.com/threat/953-online-stores-infected-in-long-lasting-malware-campaign-884b9644d42ac663 #OffSeq #Magento #Malware

🟠 CVE-2026-85898 - High (8.8)

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-83831 - High (8.8)

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-83831/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116688 - High (8.1)

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can be reached while CKEditor processes incoming s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116682 - High (8.6)

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling in backend/pkg/indexing/indexingFiles.go resolves symbolic links through GetRealPath without confirming that the resolved ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116682/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88812 - High (7.8)

A double free in XKB SetGeometryin https://x.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88812/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Adobe has released security updates addressing multiple vulnerabilities in Adobe Campaign Classic affecting versions 7.4.4 build 9402 and earlier on Windows and Linux.

The fixes resolve issues that could lead to privilege escalation and code execution.

Additionally, Adobe resolved a code injection flaw in Adobe Connect Desktop and Mobile, tracked as CVE-2026-48360 with a CVSS score of 9.6.

Adobe reports no known in-the-w…

https://en.hacks.gr/i-adobe-diorthonei-sovara-kena-asfaleias-se-adobe-campaign-classic-kai-adobe-connect/

#Adobe #CampaignClassic #Vulnerability #Patch

Patch 9 critical Adobe vulnerabilities in Adobe Campaign Classic and Connect, including 9.9 CVSS RCE flaws CVE-2026-104351 and CVE-2026-48360.

#Adobe #AdobeCampaign #AdobeConnect #RCE #SQLInjection #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/adobe-vulnerabilities-campaign-classic-connect/?utm_source=mastodon&utm_medium=jetpack_social

CISA warns of EPICS Base vulnerabilities in the industrial control system toolkit, led by critical RCE flaw CVE-2026-114595. Update to 7.0.11.

#EPICS #ICS #IndustrialControlSystem #CISA #CVE2026114595 #RCE #OTSecurity #Vulnerability

https://meterpreter.org/epics-base-vulnerabilities-cve-2026-114595/?utm_source=mastodon&utm_medium=jetpack_social

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Veeam Backup & Replication 13 (CVE-2026-108142) : une faille critique exploitable sans authentification https://www.it-connect.fr/veeam-backup-replication-13-faille-critique-cve-2026-108142/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Veeam

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

#Veeam #VeeamONE #BackupSecurity #CVE2026108142 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/veeam-vulnerabilities-backup-replication-veeam-one/?utm_source=mastodon&utm_medium=jetpack_social

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

#Veeam #VeeamONE #BackupSecurity #CVE2026108142 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/veeam-vulnerabilities-backup-replication-veeam-one/?utm_source=mastodon&utm_medium=jetpack_social

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

🟠 CVE-2026-92377 - High (7.8)

Improper access control in the Patch
Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC res...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92377/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update to TeamViewer 15.83 to patch three high-severity TeamViewer vulnerabilities: CVE-2026-92372, CVE-2026-111585, and CVE-2026-92374.

#TeamViewer #RCE #PrivilegeEscalation #RemoteAccess #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/teamviewer-vulnerabilities-patched-tv-2026-1011/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-92372 - High (8.8)

An out-of-bounds write vulnerability in the
screen-image decoder of TeamViewer Full Client for Linux and macOS prior to
version 15.83 allows a remote attacker to execute arbitrary code by supplying
crafted screen-image data during a remote-control...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92372/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92376 - High (7.8)

Improper authentication in the
inter-process communication (IPC) mechanism of TeamViewer Remote Management
Monitoring for Windows prior to version 26.10.1 allows a local authenticated
attacker with low privileges to impersonate the IPC broker and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92376/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Reset the "days since hardcoded JWT SECRET" timer.

https://nvd.nist.gov/vuln/detail/cve-2026-117564

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonating any user ID or claiming the admin role for full administrative access.

Patch CVE-2026-110720 now. This 9.9 CVSS consul-k8s vulnerability enables a cross-namespace authorization bypass in ACL binding rules.

#HashiCorp #Consul #Kubernetes #CVE2026110720 #CloudSecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/hashicorp-consul-k8s-vulnerability-cve-2026-110720/?utm_source=mastodon&utm_medium=jetpack_social

Supermicro BMC vulnerabilities hit 392 boards. Critical IPMI flaw CVE-2026-18450 (CVSS 9.8) lets attackers run commands. Update BMC firmware now.

#Supermicro #BMC #IPMI #CVE202618450 #FirmwareSecurity #runZero #Vulnerability

https://securityonline.info/supermicro-bmc-vulnerabilities-ipmi/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-18450 - Critical (9.8)

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18450/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65220 - High (8.8)

A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-117602 - High (8.4)

Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature. A rogue...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117602/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-117604 - High (7.5)

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profiler data via a loopback REMOTE_ADDR fallback. Behind a same-host reverse...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117604/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New advisories. You'll need to log into Broadcom for details.

CRITICAL: Broadcom Output Management Web Viewer 12.1 Vulnerabilities in Apache Tomcat https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Fortinet:

Medium-severity: CVE-2026-106174: Improper Locking Allows Unauthenticated DoS of FortiOS HTTPS Management Interface https://app.opencve.io/cve/CVE-2026-106174 #Fortinet

Adobe:

Note: Adobe doesn't allow you to bail out of data-theft if you're not a subscriber.

Security updates available for Substance 3D Painter | APSB26-178 https://www.adobe.com/trust/security/products/substance3d-painter/apsb26-178.html

Security update available for Adobe Campaign Classic | APSB26-162 https://www.adobe.com/trust/security/products/campaign/apsb26-162.html

Creative Cloud https://www.adobe.com/trust/security/products/creative-cloud/apsb26-135.html

Connect: https://www.adobe.com/trust/security/products/connect/apsb26-182.html #Adobe

Dell:

CRITICAL, affecting multiple CVEs: Security Update for Dell Integrated Data Protection Appliance Software 2.7.9 Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000524348/dsa-2026-474-security-update-for-dell-integrated-data-protection-appliance-software-2-7-9-vulnerabilities

Yesterday:

High-severity: Security Update for Multiple Dell Client Platform BIOS Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000502180/dsa-2026-373 #Dell #VMWare #vulnerability #infosec

🟠 CVE-2026-106174 - High (7.5)

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-106174/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116837 - High (8.8)

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116837/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-116839: HIGH severity CSRF vuln in Ubiquiti airMAX M (<6.3.26). Exploitation allows unauthorized changes & DoS if an authenticated user visits a malicious page. Upgrade to 6.3.26+ ASAP. https://radar.offseq.com/threat/cve-2026-116839-cwe-352-cross-site-request-forgery-csrf-in-ubiquiti-inc-airmax-m-384ff83bdd5089b1 #OffSeq #CSRF #Ubiquiti

NVIDIA security update fixes NeMo Agent Toolkit vulnerability CVE-2026-65145 (CVSS 10.0) plus TensorRT-LLM and PhysX flaws. Update to 1.9.0 now.

#NVIDIA #NeMoAgentToolkit #TensorRTLLM #PhysX #CVE202665145 #AISecurity #SecurityUpdate #Vulnerability

https://securityonline.info/nemo-agent-toolkit-vulnerability-cve-2026-65145/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-82117: CRITICAL (CVSS 9.8) in Hitachi HiRDB Server v10 (<10-12-01) – authentication bypass via spoofing. Full system compromise possible. Update to 10-12-01 ASAP. https://radar.offseq.com/threat/cve-2026-82117-cwe-290-authentication-bypass-by-spoofing-in-hitachi-hirdb-server-version-10-8e50efd369906f3e #OffSeq #CVE202682117 #Infosec #Patch

🟠 CVE-2026-75891 - High (8.8)

The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and including, 6.2.5 via deserialization of untrusted input through the 'get-single-symbol' branch of the kirki_post_apis() AJAX d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75891/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

HIGH severity in Kirki WordPress plugin (≤6.2.5): CVE-2026-75891 enables privilege escalation via deserialization of untrusted data. Authenticated users can overwrite admin passwords. Restrict plugin use or disable until patched. https://radar.offseq.com/threat/cve-2026-75891-cwe-502-deserialization-of-untrusted-data-in-themeum-kirki-freeform-page-builder-e6faae58108b3cd9 #OffSeq #WordPress #Vuln

If you're using Python & authlib for a custom autosign solution, you should upgrade ASAP because you may be vulnerable to an authentication bypass in authlib. https://www.cve.org/CVERecord?id=CVE-2026-96760

You. Had. One. Job.

https://nvd.nist.gov/vuln/detail/cve-2026-96760

Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and without requiring a cryptographic key.

CVE-2026-115216 – Eclipse ioFog Operator (3.8.0 – <3.9.2) has CRITICAL improper TLS cert validation (CWE-295), allowing attackers to intercept OAuth secrets & admin passwords. Upgrade to 3.9.2 to mitigate. https://radar.offseq.com/threat/cve-2026-115216-cwe-295-improper-certificate-validation-in-eclipse-foundation-eclipse-iofog-e8964354e78c9553 #OffSeq #CVE2026115216 #Eclipse #TLS #infosec

CVE-2026-92885: Qode Membership plugin (≤2.0.6.2) suffers a CRITICAL auth bypass (CVSS 9.8). Typo in Facebook OAuth check lets attackers hijack any WordPress account — including admins. Remove or restrict plugin use now. https://radar.offseq.com/threat/cve-2026-92885-cwe-287-improper-authentication-in-qode-themes-qode-membership-038e4dcfed22c95b #OffSeq #WordPress #Vuln

🟠 CVE-2026-18449 - High (7.5)

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18449/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-111820: HIGH severity stored XSS in Analytics Insights – Google Analytics Dashboard for WordPress (≤6.3.12). Unauthenticated attackers can inject scripts via Page Title. Restrict input, await vendor patch. Details: https://radar.offseq.com/threat/cve-2026-111820-cwe-79-cross-site-scripting-in-deconf-analytics-insights-google-analytics-dashboard-9c2c2541b7ce4cd6 #OffSeq #XSS #WordPress

🟠 CVE-2026-116843 - High (8.8)

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116843/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116836 - High (8.8)

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116836/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116816 - High (7.8)

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose negative pa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116816/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update your #iPhone, #iPad, #Apple Safari, and everything else #Webkit *right now*

https://support.apple.com/en-us/149227
https://www.cve.org/CVERecord?id=CVE-2026-112623

OpenPanel <3.0.0 HIGH severity info disclosure (CVE-2026-116819): Read-level users can access integration secrets (Slack tokens, webhooks) due to missing redaction. Upgrade to 3.0.0+ and restrict access. https://radar.offseq.com/threat/openpanel-before-300-contains-an-information-disclosure-vulnerability-that-allows-read-level-project-1754d084c1108896 #OffSeq #vuln #OpenPanel #CVESecurity

Apple Patches Exploited CoreGraphics Flaw and Hundreds of Vulnerabilities in October 2026 Security Update

On October 26, 2026, Apple released security updates across iOS, iPadOS, macOS, tvOS, watchOS, visionOS and Safari, patching several hundred vulnerabilities concentrated in WebKit, the kernel, ImageIO and CoreStorage. The fixes include WebKit code-execution and sandbox-escape flaws, a Remote Management remote code execution bug, and many privilege-escalation issues, plus the most urgent one: CVE-2026-86950 in CoreGraphics, which was exploited in targeted attacks and makes updating to iOS 18.7.11 critical for owners of older iPhones.

**If you use any Apple device (iPhone, iPad, Mac, Apple Watch, Apple TV or Vision Pro), update it now. The current versions are iOS/iPadOS 27.2, 26.7.2 or 18.7.11, macOS Golden Gate 27.2, Tahoe 26.7.2 or Sequoia 15.8.2, tvOS/watchOS/visionOS 27.2, and Safari 27.2. If you still use an iPhone XS, XS Max or XR, install iOS 18.7.11 first: it fixes a flaw that has been exploited in targeted attacks. Until you've updated, be extra careful about unfamiliar websites, files, images and fonts from strangers, and connecting to unknown file-sharing or Screen Sharing servers.**
#cybersecurity #infosec #advisory #databreach
https://beyondmachines.net/event_details/apple-addressed-329-unique-b-security-b-vulnerabilities-across-today-s-updates-9to5mac-y-u-w-g-y/gD2P6Ple2L

Apple's iOS 18.7.11 fixes CVE-2026-86950, a CoreGraphics zero-day exploited in the wild, on older iPhones and iPads. Update now.

#Apple #iOS #ZeroDay #CVE202686950 #CoreGraphics #ExploitedInTheWild #iPhone #CyberSecurity

https://securityonline.info/coregraphics-zero-day-cve-2026-86950-ios-18/?utm_source=mastodon&utm_medium=jetpack_social

📣 EMERGENCY UPDATE 📣

Apple pushed additional updates for a zero-day that may have been actively exploited.

🐛 CVE-2026-86950 (CoreGraphics) additional patches:
- iOS and iPadOS 18.7.11

#apple #cybersecurity #infosec #security #ios

Details and PoC exploit code are out for CVE-2026-115905, a critical 10.0 CVSS Rust zip crate vulnerability. Upgrade to version 9.0.5 immediately.

#Rust #ZipCrate #CVE2026115905 #PoC #RCE #Cybersecurity #Vulnerability #InfoSec

https://meterpreter.org/rust-zip-crate-vulnerability-poc-disclosed/?utm_source=mastodon&utm_medium=jetpack_social

🚨 Security update: Routinator 0.15.3 is now available.

This release fixes several security issues. These security fixes primarily fix some cases where someone could make Routinator exit or become unavailable. They have been assigned CVE-2026-72752 till -72758.

https://community.nlnetlabs.nl/t/routinator-0-15-3-until-it-ends-there-is-no-end-released/3496

JFC

https://nvd.nist.gov/vuln/detail/cve-2026-112346

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.

PHP "php2shell" (CVE-2026-109618/109619) is in CISA KEV and under attack: no-login code execution on PHP web servers. That includes the web UI on OPNsense, pfSense and Unraid, and PHP apps on Synology and QNAP. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 (or the vendor update), then restart PHP.

Also: Nextcloud's built-in Collabora CODE app (CVE-2026-110447), update to 26.4.303.

This week's issue:
https://patchorpass.beehiiv.com/p/patchorpass-2-php-php2shell-exploit-patch-now-plus-nextcloud-collabora?utm_source=mastodon&utm_medium=social&utm_campaign=issue-2

#infosec #homelab #selfhosted #nextcloud

PHP "php2shell" (CVE-2026-109618/109619) is in CISA KEV and under attack: no-login code execution on PHP web servers. That includes the web UI on OPNsense, pfSense and Unraid, and PHP apps on Synology and QNAP. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 (or the vendor update), then restart PHP.

Also: Nextcloud's built-in Collabora CODE app (CVE-2026-110447), update to 26.4.303.

This week's issue:
https://patchorpass.beehiiv.com/p/patchorpass-2-php-php2shell-exploit-patch-now-plus-nextcloud-collabora?utm_source=mastodon&utm_medium=social&utm_campaign=issue-2

#infosec #homelab #selfhosted #nextcloud

Wasmtime Patches Critical Sandbox Escape Flaws in Cranelift Compiler

Wasmtime fixed two critical vulnerabilities (CVE-2026-115889 and CVE-2026-115893) that allow malicious WebAssembly modules to escape their sandboxes and execute arbitrary code on host systems. The flaws affect the Cranelift compiler and require immediate updates to Wasmtime 50.0.0 or other patched versions.

**If you use Wasmtime (directly, inside your own apps, or through tools like Spin), update ASAP to version 36.0.19, 48.0.7, 49.0.4 or 50.0.0, rebuild any applications that include it, and update Spin to 4.2.4. If you're still on the 24.x line, there is no patch, so upgrade to a supported version. If possible don't run WebAssembly code from sources you don't fully trust.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/wasmtime-patches-critical-sandbox-escape-flaws-in-cranelift-compiler-8-z-h-v-8/gD2P6Ple2L

🚨 Two critical Wasmtime flaws could allow malicious WebAssembly modules to escape the runtime sandbox

Both vulnerabilities affect Cranelift, Wasmtime’s default compiler, and carry CVSS scores of 9.9.
⠀
CVE-2026-115889 affects all processor architectures and can trigger silent compiler errors that generate incorrect machine code.

CVE-2026-115893 affects ARM64 systems and can cause large br_table instructions to jump to the wrong code location.
⠀
Exploitation requires a vulnerable Wasmtime instance to compile an attacker-controlled WebAssembly module. Services that accept and execute untrusted customer modules face the greatest risk.

Fixed versions:

• Wasmtime 36.0.19
• Wasmtime 48.0.7
• Wasmtime 49.0.4
• Wasmtime 50.0.0 or later

No exploitation in the wild has been reported.

Sources: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-897f-g5gm-fmxm

https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-mghf-wjfp-p5xm

Upgrade to #Mautic 7.2.2 to fix critical Mautic vulnerabilities, including 9.9 #CVSS #RCE flaw CVE-2026-115188, CVE-2026-115189, and SQL injection bugs.

#PHP #SQLInjection #OpenSource #Cybersecurity #Vulnerability #InfoSec #CVE #OSS

Upgrade to Mautic 7.2.2 to fix critical Mautic vulnerabilities, including 9.9 CVSS RCE flaw CVE-2026-115188, CVE-2026-115189, and SQL injection bugs.

#Mautic #RCE #SQLInjection #PHPObjectInjection #OpenSource #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/mautic-vulnerabilities-rce-sqli-patched-7-2-2/?utm_source=mastodon&utm_medium=jetpack_social

Go ../ more MCP bullshit.

https://nvd.nist.gov/vuln/detail/cve-2026-93328

sev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber

Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.

New advisory from Fortinet for a critical vulnerability.

CRITICAL: CVE-2026-107656: an authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox https://app.opencve.io/cve/CVE-2026-107656

Yesterday:

CRITICAL: CVE-2026-21643: FortiClientEMS 7.4.4 SQL Injection Enabling Unauthenticated Remote Code Execution https://app.opencve.io/cve/CVE-2026-21643 #Fortinet
-----

Dell:

High-severity, affecting multiple CVEs: Security Update for Multiple Dell Client Platform BIOS Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000502180/dsa-2026-373

Security Update for Dell Client Platform BIOS for Multiple AMI BIOS Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000516289/dsa-2026-230-security-update-for-dell-client-platform-bios-for-multiple-ami-bios-vulnerabilities

Security Update for Dell PowerScale OneFS Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000505684/dsa-2026-360-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities #Dell #infosec #vulnerability

CVE-2026-116237: CRITICAL CRLF injection in Oray Pugongying X5 Pro 7.6.1 (Dnsmasq). Remote attackers can exploit public PoC; no vendor patch. Apply network filtering & monitor for updates. https://radar.offseq.com/threat/cve-2026-116237-crlf-injection-in-oray-pugongying-x5-pro-52f065cc5bfd9b94 #OffSeq #CVE2026116237 #Vuln #Infosec

🚨 Microsoft issues emergency .NET updates after earlier patches failed to fully fix two vulnerabilities

Microsoft says its October 13 updates did not completely address CVE-2026-102870 and CVE-2026-70197, prompting new out-of-band security releases for .NET 8, 9, 10 and 11.
⠀
CVE-2026-102870 is a high-severity remote code execution flaw in the Blazor WebAssembly debugger.

Attacker-controlled data from a debugged application could escape a generated C# string and execute code on a developer’s computer when they evaluate an expression. The vulnerability has a CVSS score of 8.8 and requires user interaction.
⠀
The emergency updates also address:

• CVE-2026-70197, a SocketAsyncEventArgs memory corruption flaw
• CVE-2026-111497, a Brotli decoder out-of-bounds write
• CVE-2026-114148, a Linux source-build tarball ownership issue
⠀
Microsoft warns that updating the shared .NET runtime alone is not enough to fix the Blazor vulnerability when affected NuGet packages are referenced directly.

Developers should update Microsoft.AspNetCore.Components.WebAssembly.Server and DevServer to patched releases, including version 10.0.14 for .NET 10 projects.

Source: https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates

Wasmtime Patches Critical Sandbox Escape Flaws in Cranelift Compiler

Wasmtime fixed two critical vulnerabilities (CVE-2026-115889 and CVE-2026-115893) that allow malicious WebAssembly modules to escape their sandboxes and execute arbitrary code on host systems. The flaws affect the Cranelift compiler and require immediate updates to Wasmtime 50.0.0 or other patched versions.

**If you use Wasmtime (directly, inside your own apps, or through tools like Spin), update ASAP to version 36.0.19, 48.0.7, 49.0.4 or 50.0.0, rebuild any applications that include it, and update Spin to 4.2.4. If you're still on the 24.x line, there is no patch, so upgrade to a supported version. If possible don't run WebAssembly code from sources you don't fully trust.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/wasmtime-patches-critical-sandbox-escape-flaws-in-cranelift-compiler-8-z-h-v-8/gD2P6Ple2L

🚨 Two critical Wasmtime flaws could allow malicious WebAssembly modules to escape the runtime sandbox

Both vulnerabilities affect Cranelift, Wasmtime’s default compiler, and carry CVSS scores of 9.9.
⠀
CVE-2026-115889 affects all processor architectures and can trigger silent compiler errors that generate incorrect machine code.

CVE-2026-115893 affects ARM64 systems and can cause large br_table instructions to jump to the wrong code location.
⠀
Exploitation requires a vulnerable Wasmtime instance to compile an attacker-controlled WebAssembly module. Services that accept and execute untrusted customer modules face the greatest risk.

Fixed versions:

• Wasmtime 36.0.19
• Wasmtime 48.0.7
• Wasmtime 49.0.4
• Wasmtime 50.0.0 or later

No exploitation in the wild has been reported.

Sources: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-897f-g5gm-fmxm

https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-mghf-wjfp-p5xm

Body-parser vulnerability CVE-2026-111181 (CVSS 7.5) enables Express denial of service with one request. Upgrade to body-parser 2.4.0 or 1.20.9.

#Express #NodeJS #bodyparser #CVE2026111181 #DoS #JavaScript #npm #WebSecurity

https://securityonline.info/body-parser-vulnerability-cve-2026-111181/?utm_source=mastodon&utm_medium=jetpack_social

Rapid7 disclosed 17 Zimbra Collaboration Suite flaws, including CVE-2026-10632 and CVE-2026-93640, allowing XSS and root privilege escalation.

#Zimbra #Rapid7 #EmailSecurity #PrivilegeEscalation #XSS #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/zimbra-collaboration-suite-vulnerabilities-rapid7/?utm_source=mastodon&utm_medium=jetpack_social

Rapid7 disclosed 17 Zimbra Collaboration Suite flaws, including CVE-2026-10632 and CVE-2026-93640, allowing XSS and root privilege escalation.

#Zimbra #Rapid7 #EmailSecurity #PrivilegeEscalation #XSS #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/zimbra-collaboration-suite-vulnerabilities-rapid7/?utm_source=mastodon&utm_medium=jetpack_social

Better than what?

https://nvd.nist.gov/vuln/detail/cve-2026-114607

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in social or Generic OAuth provider, and use account.storeStateStrategy set to database can accept an OAuth sign-in state value as a Magic Link token. These settings can cause Magic Link verification records and OAuth state to resolve to the same stored identifier, allowing an unauthenticated attacker to start OAuth sign-in for a known email address and redeem the returned state through Magic Link without controlling the mailbox or completing the provider callback. The attacker can obtain a normal session for an existing user, or create an account incorrectly marked as email verified when sign-up is enabled. This issue is fixed in version 1.7.7.

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Hackers exploit YOOtheme Pro vulnerability CVE-2026-102785 (CVSS 10) for remote code execution, dropping webshells. Update to 5.0.53 now.

#YOOtheme #YOOthemePro #CVE2026102785 #RCE #Webshell #Joomla #WordPress #Unit42 #ActiveExploitation

https://securityonline.info/yootheme-pro-vulnerability-cve-2026-102785-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

🚨🇺🇸 Hackers begin targeting critical Oracle E-Business Suite flaw

Threat actors are scanning for systems vulnerable to CVE-2026-101767, a critical unauthenticated SQL injection flaw in Oracle E-Business Suite that can be chained to remote code execution.
⠀
The vulnerability carries a CVSS score of 9.8 and affects E-Business Suite versions 12.2.3 through 12.2.15.
⠀
An attacker with HTTP access to the Thin Client Framework servlet can execute SQL with the privileges of the APPS database user and then run operating-system commands as the EBS application account.
⠀
Depending on the deployment, compromised systems may expose financial, payroll, human resources and procurement information.
⠀
Defused recorded exploratory exploitation attempts against its Oracle EBS decoys on October 27, one week after Oracle released patches. Shadowserver currently tracks more than 670 internet-exposed EBS instances, although it is unknown how many remain vulnerable.
⠀
Oracle has not classified the flaw as actively exploited, and successful compromises have not been publicly confirmed.

Administrators should immediately apply Oracle’s October 2026 Critical Patch Update. If patching is delayed, restrict the EBS web tier to trusted networks and remove /OA_HTML/AppsTCFServer from the URL firewall allowlist.

Source: https://www.oracle.com/security-alerts/cpuoct2026.html

The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) in the Oracle Application Object Library of Oracle E-Business Suite. It was patched by Oracle last week as part of its Critical Patch Update. https://thehackernews.com/2026/10/hackers-target-critical-oracle-e.html

Hackers Probe Oracle EBS Flaw Days After Security Patch

Just days after Oracle patched a critical vulnerability in its E-Business Suite, hackers are probing for weaknesses, exploiting the CVE-2026-101767 flaw that could lead to remote code execution. This alarming development highlights the urgent need for robust security measures to protect against such attacks.

https://osintsights.com/hackers-probe-oracle-ebs-flaw-days-after-security-patch?utm_source=mastodon&utm_medium=social

#OracleEbs #Cve2026101767 #SqlInjection #RemoteCodeExecution #SupplyChain

Hackers Probe Internet for Unpatched Oracle Flaw

Hackers are actively searching for unpatched Oracle systems vulnerable to a critical flaw, known as CVE-2026-101767, that could let them take control with just a few clicks. This gaping security hole allows unauthenticated attackers with basic network access to wreak havoc on Oracle E-Business Suite systems.

https://osintsights.com/hackers-probe-internet-for-unpatched-oracle-flaw?utm_source=mastodon&utm_medium=social

#Cve2026101767 #OracleEbusinessSuite #UnpatchedVulnerability #EmergingThreats #ApplicationObjectLibrary

🚨🇺🇸 Hackers begin targeting critical Oracle E-Business Suite flaw

Threat actors are scanning for systems vulnerable to CVE-2026-101767, a critical unauthenticated SQL injection flaw in Oracle E-Business Suite that can be chained to remote code execution.
⠀
The vulnerability carries a CVSS score of 9.8 and affects E-Business Suite versions 12.2.3 through 12.2.15.
⠀
An attacker with HTTP access to the Thin Client Framework servlet can execute SQL with the privileges of the APPS database user and then run operating-system commands as the EBS application account.
⠀
Depending on the deployment, compromised systems may expose financial, payroll, human resources and procurement information.
⠀
Defused recorded exploratory exploitation attempts against its Oracle EBS decoys on October 27, one week after Oracle released patches. Shadowserver currently tracks more than 670 internet-exposed EBS instances, although it is unknown how many remain vulnerable.
⠀
Oracle has not classified the flaw as actively exploited, and successful compromises have not been publicly confirmed.

Administrators should immediately apply Oracle’s October 2026 Critical Patch Update. If patching is delayed, restrict the EBS web tier to trusted networks and remove /OA_HTML/AppsTCFServer from the URL firewall allowlist.

Source: https://www.oracle.com/security-alerts/cpuoct2026.html

The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) in the Oracle Application Object Library of Oracle E-Business Suite. It was patched by Oracle last week as part of its Critical Patch Update. https://thehackernews.com/2026/10/hackers-target-critical-oracle-e.html

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

CW: CVE-2026-113380 — Signalben használt RingRTC híváslezárás megkerülhető: az FSM eseménysorát eláraszthatja a támadó, így a bontás jelzése elsikkad; mikrofon/kamera aktív maradhat. PoC nyilvános, javítva RingRTC 2.27.0 (2026-09-04). Érdemes frissíteni. https://linuxmint.hu/hir/2026/10/a-signal-egy-hibaja-miatt-nem-lehetett-megszakitani-a-csalo-hivasokat #Signal #CVE #Security #WebRTC #OpenSource

🚨 Microsoft issues emergency .NET updates after earlier patches failed to fully fix two vulnerabilities

Microsoft says its October 13 updates did not completely address CVE-2026-102870 and CVE-2026-70197, prompting new out-of-band security releases for .NET 8, 9, 10 and 11.
⠀
CVE-2026-102870 is a high-severity remote code execution flaw in the Blazor WebAssembly debugger.

Attacker-controlled data from a debugged application could escape a generated C# string and execute code on a developer’s computer when they evaluate an expression. The vulnerability has a CVSS score of 8.8 and requires user interaction.
⠀
The emergency updates also address:

• CVE-2026-70197, a SocketAsyncEventArgs memory corruption flaw
• CVE-2026-111497, a Brotli decoder out-of-bounds write
• CVE-2026-114148, a Linux source-build tarball ownership issue
⠀
Microsoft warns that updating the shared .NET runtime alone is not enough to fix the Blazor vulnerability when affected NuGet packages are referenced directly.

Developers should update Microsoft.AspNetCore.Components.WebAssembly.Server and DevServer to patched releases, including version 10.0.14 for .NET 10 projects.

Source: https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates

Latest cybersecurity reports highlight critical PHP vulnerabilities being actively exploited globally, necessitating emergency patching. CISA confirmed exploitation of the Node2Shell/Brotli flaw (CVE-2026-111497). China-linked groups leveraged a BeyondTrust zero-day (CVE-2026-102764), and AI agents reportedly compromised live websites during testing (Oct 27-28, 2026). In technology, Amazon Business introduced new agentic AI tools. Geopolitically, Israel's elections are heading towards a coalition deadlock.

#Cybersecurity #AnonNews_irc #News

Latest cybersecurity reports highlight critical PHP vulnerabilities being actively exploited globally, necessitating emergency patching. CISA confirmed exploitation of the Node2Shell/Brotli flaw (CVE-2026-111497). China-linked groups leveraged a BeyondTrust zero-day (CVE-2026-102764), and AI agents reportedly compromised live websites during testing (Oct 27-28, 2026). In technology, Amazon Business introduced new agentic AI tools. Geopolitically, Israel's elections are heading towards a coalition deadlock.

#Cybersecurity #AnonNews_irc #News

PoC and full details are public for the Linux nf_tables vulnerability CVE-2026-23111. The kernelCTF exploit gains root and escapes containers. Patch now.

#Linux #LinuxKernel #nf_tables #Netfilter #CVE202623111 #kernelCTF #PoC #PrivilegeEscalation #ContainerEscape

https://securityonline.info/linux-nf-tables-vulnerability-cve-2026-23111-poc/?utm_source=mastodon&utm_medium=jetpack_social

Anthropic published research in which an unreleased model, Claude Mythos Preview, chained flaws across Chrome, Safari, Android, Windows, and Linux, and no live attack used the chains. Its macOS Chrome chain used four linked flaws to reach one-click remote code execution from a default browser. Google patched 62 Chrome CVEs, all rated high or above, and Microsoft fixed Windows CVE-2026-33096. #Android #AI #CyberSecurity

📰 Citrix Zero-Days and Oracle PeopleSoft Flaw Under Active Exploit

🚨 CRITICAL THREAT: Two Citrix zero-days (CVE-2026-88771, CVE-2026-88772) and an Oracle PeopleSoft flaw (CVE-2026-35273) are under active exploitation for RCE. CISA KEV updated. Patch immediately! #CyberSecurity #ZeroDay #CVE #PatchNow

🔗 https://cyber.netsecops.io/articles/citrix-zero-days-and-oracle-peoplesoft-flaw-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

📰 Citrix Zero-Days and Oracle PeopleSoft Flaw Under Active Exploit

🚨 CRITICAL THREAT: Two Citrix zero-days (CVE-2026-88771, CVE-2026-88772) and an Oracle PeopleSoft flaw (CVE-2026-35273) are under active exploitation for RCE. CISA KEV updated. Patch immediately! #CyberSecurity #ZeroDay #CVE #PatchNow

🔗 https://cyber.netsecops.io/articles/citrix-zero-days-and-oracle-peoplesoft-flaw-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

CVE-2026-93991 Argo Workflows authz bypass (CVSS 7.7): negated namespace selectors in ListArchivedWorkflows leak archived workflows from all namespaces, exposing args and params. Patch under review, so restrict list perms and monitor now. https://www.valtersit.com/cve/CVE-2026-93991/

CVE-2026-92965: TikTok WordPress plugin before 1.4.2 lacks authorization on sign-in code redemption, letting any visitor trigger ad-platform code redemption with site credentials. CVSS 3.7. Patch to 1.4.2 now. #CVE #infosec #WordPress https://www.valtersit.com/cve/CVE-2026-92965/

CVE-2026-93972: SQLi in SourceCodester Online Reviewer Management System 1.0, courseID param, CVSS 7.3, exploit public, no patch known. Update or isolate now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-93972/

CVE-2026-94057: Exim SMTP smuggling lets crafted data after a DATA rejection spoof messages. CVSS 4. Patch under review, so update immediately. #CVE #infosec https://www.valtersit.com/cve/CVE-2026-94057/

PoC and details are public for CVE-2026-84568, a macOS autofs vulnerability enabling root code execution, and a Gatekeeper bypass. Update macOS now.

#macOS #Apple #CVE202684568 #CVE202684570 #Gatekeeper #autofs #PoC #CyberSecurity

https://securityonline.info/macos-autofs-vulnerability-cve-2026-84568-poc/?utm_source=mastodon&utm_medium=jetpack_social

Authenticator от Microsoft сливал ваши токены авторизации в сервисах Microsoft вообще любым приложениям, которые их запрашивали. Скорее всего, сторонние приложения этим не особо грешили, но с помощью тестовой приложухи исследователям удалось зайти в чужую почту, отредактировать календарь, написать сообщения в Teams и даже изменить ключи доступа в самом аутентификаторе. Уязвимость получила оценку в 8.6 и вроде бы уже закрыта.

🔗 • https://helpnetsecurity.com/2026/10/27/microsoft-authenticator-vulnerability-patchedcve-2026-80097
🔗 • https://cve.org/CVERecord?id=CVE-2026-80097