🟠 CVE-2026-82155 - High (7.8)

Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82155/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-76506 - High (7.6)

A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.

This vulnerabili...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76506/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco has three advisories today.

New, medium-severity: CVE-2026-76506: Cisco UCS Central Software Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucs-rce-LzHSFRDQ

Here are the others: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #infosec #Cisco #vulnerability

🔴 CVE-2026-120931 - Critical (9.6)

Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120931/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Zyxel fixed CVE-2026-107441 on GS1900 switches. A LAN-side CGI flaw could allow unauthenticated OS command execution. Check the exact model and install its 2.90 firmware patch.

This is separate from CVE-2026-7273, exploited in September; no exploitation of 107441 is confirmed.

https://community.zyxel.com/en/discussion/34523/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches

#Cybersecurity #Infosec #NetworkSecurity

Zyxel fixed CVE-2026-107441 on GS1900 switches. A LAN-side CGI flaw could allow unauthenticated OS command execution. Check the exact model and install its 2.90 firmware patch.

This is separate from CVE-2026-7273, exploited in September; no exploitation of 107441 is confirmed.

https://community.zyxel.com/en/discussion/34523/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches

#Cybersecurity #Infosec #NetworkSecurity

The vulnerability, tracked as CVE-2026-107441, is an out-of-bounds write flaw in the switches' web management interface that allows an unauthenticated attacker with network access to execute operating system commands using specially crafted HTTP requests. https://www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/

Binarly believes that Chinese threat actor Red Heron was exploiting a different Zyxel GS1900 vulnerability than CVE-2026-7273, and its patch remained ineffective. They assess that CVE-2026-107441, a pre-auth RCE vulnerability, was exploited in the wild as a zero-day.

https://www.binarly.io/blog/zyxel-gs1900-rce-cve-2026-107441

#china #redheron #cyberespionage #threatintel #eitw #zeroday #IOC

Zyxel GS1900 zero-day CVE-2026-107441 was exploited in the wild and bypasses the CVE-2026-7273 patch. Install the October 22 firmware now.

#Zyxel #GS1900 #ZeroDay #CVE2026107441 #CVE20267273 #ExploitedInTheWild #NetworkSecurity #PatchNow

https://securityonline.info/zyxel-gs1900-zero-day-cve-2026-107441/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-107441 - High (8.8)

An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107441/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA has officially added CVE-2024-27834 to its Known Exploited Vulnerabilities catalog.

The vulnerability affects Apple operating systems and concerns an authorization bypass mechanism.

Patches for this issue were released by Apple in May 2024.

Reports suggest the flaw is linked to activity by the APT29 group, which has utilized compromised websites and SEO tracking services to facilitate attacks.

Federal agencies are required t…

https://en.hacks.gr/proeidopoiisi-tis-cisa-gia-epitheseis-poy-ypokleptoyn-prosopika-dedomena-apo-syskeyes-apple/

#Apple #CVE_2024_27834 #APT29 #CISA

CISA added Apple WebKit CVE-2024-27834 to KEV on Nov 4 based on exploitation evidence. The pointer-authentication bypass requires prior arbitrary read/write access; it is not standalone web RCE. Apple fixed it in May 2024. Check outdated Apple devices in your fleet. CISA has not identified the attack campaign.

https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog

#Cybersecurity #Infosec #Apple #KEV

🚨 NEW on CISA KEV — exploited in the wild

🛡 Apple Multiple Products
Apple Multiple Products Improper Authentication Vulnerability
CVE: CVE-2024-27834 · patch by 2026-11-18
📈 EPSS 0.6% exploitation probability

Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.

🔗 https://ninjasignal.ninja/intel/cve/CVE-2024-27834
#cybersecurity #KEV #CVE #infosec

CISA added Apple WebKit CVE-2024-27834 to KEV on Nov 4 based on exploitation evidence. The pointer-authentication bypass requires prior arbitrary read/write access; it is not standalone web RCE. Apple fixed it in May 2024. Check outdated Apple devices in your fleet. CISA has not identified the attack campaign.

https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog

#Cybersecurity #Infosec #Apple #KEV

CVE ID: CVE-2024-27834
Vendor: Apple
Product: Multiple Products
Date Added: 2026-11-04
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2024-27834

One of the vulnerabilities mentioned, CVE-2024-27834 is not on the KEV yet. :thinking:

Update your Linux systems now to fix CVE-2026-109518, a critical APT package manager flaw that lets on-path attackers run arbitrary code as root.

#Linux #Debian #Ubuntu #Cybersecurity #InfoSec

https://securityonline.info/apt-package-manager-cve-2026-109518-root-flaw/?utm_source=mastodon&utm_medium=jetpack_social

#infosec #vulnerability #security

CVE-2026-109518 APT vulnerability fixes available | Ubuntu

https://ubuntu.com/blog/apt-vulnerability-fixes-available

CW: biztonsági hír — Megjelent az apt 3.3.6: javítja a CVE-2026-109518 letöltésellenőrzés megkerülését (célfájlok kizárólagos megnyitása). Két memóriakezelési javítás (deb parser: hiányzó Version elutasítása; workLess comparator) + tesztek és teljesítményjavítások. Jelenleg Debian Unstable-en; Stable/Ubuntu ritkán veszi át. https://linuxmint.hu/hir/2026/11/megjelent-az-apt-336-fontos-biztonsagi-javitassal-a-letoltesellenorzes-megkerulese-ellen #APT #Debian #CVE2026-109518 #Security #Linux

Update your Linux systems now to fix CVE-2026-109518, a critical APT package manager flaw that lets on-path attackers run arbitrary code as root.

#Linux #Debian #Ubuntu #Cybersecurity #InfoSec

https://securityonline.info/apt-package-manager-cve-2026-109518-root-flaw/?utm_source=mastodon&utm_medium=jetpack_social

Vulnerabilità critica in APT: attacco MITM permette l’esecuzione di codice come Root su Debian e Ubuntu
#Ubuntu #debian #CVE
Scoperta una grave vulnerabilità in APT (CVE-2026-109518) che colpisce Debian e Ubuntu. Un attacco Man-In-The-Middle permette di sostituire pacchetti legittimi ed eseguire codice arbitrario come root durante gli aggiornamenti. Ecco come funziona la falla e come aggiornare subito i tuoi sistemi.

https://www.marcosbox.com/2026/11/04/vulnerabilita-critica-apt-debian-ubuntu-cve-2026-109518/

@sicurezza @linux

A security flaw tracked as CVE-2026-109518 affects APT, the package manager for Debian and Ubuntu.

An attacker positioned to alter HTTP traffic can trick APT during failed download retries into swapping a checked package for a malicious one, achieving root code execution.

Debian and Ubuntu published advisories and fixed builds on November 4, 2026.

Systems using default download retry settings on recent distributions are exposed, and users…

https://en.hacks.gr/keno-asfaleias-se-debian-kai-ubuntu-afinei-perithoria-gia-paremvoles-stis-enimeroseis/

#Debian #Ubuntu #Linux #APT

Debian's Nov 4 DSA-6607-1 fixes APT CVE-2026-109518. With manipulated HTTP downloads and redirects/retries, an on-path attacker could replace a verified package and execute code as root. Debian 13 (trixie) is fixed in apt 3.0.4. Check your distro's advisory and install its security update; exploitation in the wild is not confirmed.

https://lists.debian.org/debian-security-announce/2026/msg00526.html

#Cybersecurity #Infosec #Linux #PatchManagement

Une faille dans APT permet de modifier un paquet après sa vérification de sécurité.

CVE-2026-109518 : un attaquant sur le réseau peut exploiter la reprise des téléchargements HTTP pour exécuter du code en root.

Corrigé dans APT 3.0.4 sur Debian 13

https://www.phoronix.com/news/Debian-APT-MITM-RCE

CVE-2026-109518: APT Download Verification Bypass Explained

https://thecybersecguru.com/news/cve-2026-109518-apt-download-verification-bypass/

CVSS 4.0 scores APT flaw CVE-2026-109518 at 7.7. A man-in-the-middle attacker or malicious mirror can intercept a package download and replace it with code that runs as root, exploiting the default retry of failed HTTP downloads in Debian 12 and Ubuntu 22.04. Vendor advisories confirm fixes across multiple releases, including long-term support, and note HTTPS sources aren't exposed. #CyberSecurity #Technology

The #Debian APT security update fixes "Download verification bypass" CVE-2026-109518:

"On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges. The vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration"

https://www.cve.org/CVERecord?id=CVE-2026-109518

Obviously any Debian based distribution using APT can be affected as well and should install updates as soon as they become available.

The vulnerability description doesn't mention this explicitly but if your system doesn't have Emudhra certificates purged, they can be vulnerable even when using HTTPS sources.

#CVE_2026_109518 #infosec #cybersecurity

"APT can merge two different package downloads after an HTTP redirect gives them the same URI. Improper file handling when resuming an HTTP download allows a man-in-the-middle attacker to replace a package after verification, resulting in the execution of arbitrary code as root." CVE-2026-109518

Oh, I want to know the details of how this "verification" of a partially downloaded file succeeded.

Anyway, make sure you update your apt, which could be MitM'd, using apt.

https://lists.debian.org/debian-security-announce/2026/msg00526.html

🟠 CVE-2026-80335 - High (7.6)

In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code exe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-80335/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-122992: CRITICAL integer underflow in dstarCallsignToAPRS (G4KLX & F4FXL DStarGateway <7b75de6). Remote DoS possible, CVSS 9.2. No patch — restrict access & monitor updates. https://radar.offseq.com/threat/in-g4klx-dstargateway-and-f4fxl-dstargateway-before-7b75de6-dstarcallsigntoaprs-in-aprsutilscpp-has-an-7a56517465ac4a02 #OffSeq #Infosec #HamRadio #CVE2026122992

CVE-2026-122992: CRITICAL integer underflow in dstarCallsignToAPRS (G4KLX & F4FXL DStarGateway <7b75de6). Remote DoS possible, CVSS 9.2. No patch — restrict access & monitor updates. https://radar.offseq.com/threat/in-g4klx-dstargateway-and-f4fxl-dstargateway-before-7b75de6-dstarcallsigntoaprs-in-aprsutilscpp-has-an-7a56517465ac4a02 #OffSeq #Infosec #HamRadio #CVE2026122992

CVE-2026-122313 (CRITICAL): Kyverno v1.17.0 – 1.19.1 allows privilege escalation via lack of namespace checks in NamespacedMutatingPolicy. Attackers can modify cluster-wide resources. Patch by upgrading to v1.19.2. https://radar.offseq.com/threat/cve-2026-122313-improper-privilege-management-in-kyverno-2b25fa97ddd30181 #OffSeq #Kyverno #CVE2026122313

CVE-2026-122313 (CRITICAL): Kyverno v1.17.0 – 1.19.1 allows privilege escalation via lack of namespace checks in NamespacedMutatingPolicy. Attackers can modify cluster-wide resources. Patch by upgrading to v1.19.2. https://radar.offseq.com/threat/cve-2026-122313-improper-privilege-management-in-kyverno-2b25fa97ddd30181 #OffSeq #Kyverno #CVE2026122313

Kyverno 1.16.0 – 1.19.1: CRITICAL (CVSS 9.9) vuln (CVE-2026-122311) lets attackers escape namespace via resource.get()/post() and take over clusters. Upgrade to v1.19.2+ now! https://radar.offseq.com/threat/kyverno-from-1160-before-1192-fails-to-validate-path-segments-in-the-resource-argument-of-resourceget-ad2085e40b330a10 #OffSeq #Kyverno #Kubernetes #CVE2026122311

Kyverno 1.16.0 – 1.19.1: CRITICAL (CVSS 9.9) vuln (CVE-2026-122311) lets attackers escape namespace via resource.get()/post() and take over clusters. Upgrade to v1.19.2+ now! https://radar.offseq.com/threat/kyverno-from-1160-before-1192-fails-to-validate-path-segments-in-the-resource-argument-of-resourceget-ad2085e40b330a10 #OffSeq #Kyverno #Kubernetes #CVE2026122311

🟠 CVE-2026-122299 - High (8.8)

Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit resolves a duplicate tree header to the last occurrence instead of the first, diverging from core git's resolution behavior, while Poetry 2.5...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122299/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-122299 - High (8.8)

Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit resolves a duplicate tree header to the last occurrence instead of the first, diverging from core git's resolution behavior, while Poetry 2.5...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122299/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-54384 - Critical (9.8)

VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a full session for a victim's account by submitting a linked Google or Facebook account identifier to the POST /front/login...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54384/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-54384 - Critical (9.8)

VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a full session for a victim's account by submitting a linked Google or Facebook account identifier to the POST /front/login...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54384/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54381 - High (7.5)

VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthenticated attackers to list and download stored files without authentication. Attackers can enumerate the publicly accessible bucket...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54381/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54381 - High (7.5)

VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthenticated attackers to list and download stored files without authentication. Attackers can enumerate the publicly accessible bucket...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54381/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-122051 | Edimax BR-6208AC v1.32 is affected by a CRITICAL command injection vuln in /goform/mp — remote code execution possible without auth. Exploit is public, no patch. Isolate or replace vulnerable devices. https://radar.offseq.com/threat/a-flaw-has-been-found-in-edimax-br-6208ac-132-cve-2026-122051-18cd449922d0575f #OffSeq #CVE2026122051 #IoTSecurity

🔴 CVE-2026-122051 - Critical (10)

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been pu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122051/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-122051: CRITICAL command injection (CVSS 10) in Edimax BR-6208AC v1.32 enables remote, unauthenticated code execution via /goform/mp. Exploit is public, no patch available. Restrict network access & monitor devices. https://radar.offseq.com/threat/cve-2026-122051-command-injection-in-edimax-br-6208ac-722ad11edef6a006 #OffSeq #CVE2026122051 #IoT

CVE-2026-122051 | Edimax BR-6208AC v1.32 is affected by a CRITICAL command injection vuln in /goform/mp — remote code execution possible without auth. Exploit is public, no patch. Isolate or replace vulnerable devices. https://radar.offseq.com/threat/a-flaw-has-been-found-in-edimax-br-6208ac-132-cve-2026-122051-18cd449922d0575f #OffSeq #CVE2026122051 #IoTSecurity

🔴 CVE-2026-122051 - Critical (10)

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been pu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122051/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-122051: CRITICAL command injection (CVSS 10) in Edimax BR-6208AC v1.32 enables remote, unauthenticated code execution via /goform/mp. Exploit is public, no patch available. Restrict network access & monitor devices. https://radar.offseq.com/threat/cve-2026-122051-command-injection-in-edimax-br-6208ac-722ad11edef6a006 #OffSeq #CVE2026122051 #IoT

🟠 CVE-2026-62662 - High (7.7)

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 1.11.0 until 2.10.0, createTokenFromClientCredentials in backend/internal/service/oidc_service.go accepts the client-controlled resource paramete...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62662 - High (7.7)

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 1.11.0 until 2.10.0, createTokenFromClientCredentials in backend/internal/service/oidc_service.go accepts the client-controlled resource paramete...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54382 - High (7.7)

VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated attackers to perform s3:PutObject operations across the entire shared bucket instead of being restricte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54382/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54382 - High (7.7)

VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated attackers to perform s3:PutObject operations across the entire shared bucket instead of being restricte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54382/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-115770 - Critical (9.6)

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.2.0 until 2.12.0, SendEmailVerification uses the token model in backend/internal/model/email_verification_token.go to bind an email-verificatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-115770/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-115770 - Critical (9.6)

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.2.0 until 2.12.0, SendEmailVerification uses the token model in backend/internal/model/email_verification_token.go to bind an email-verificatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-115770/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Yuxi CVE-2026-97693 affects execution-capable Docker sandboxes in versions 0.6.0.beta1 up to, but not including, 0.7.1. A low-privileged user can reach other tenants' sandbox APIs, files and secrets. Shared services may also be exposed, especially with unchanged default credentials.

Upgrade to 0.7.1+ and separately rotate persisted defaults. No known exploitation in the wild.

https://github.com/xerrors/Yuxi/security/advisories/GHSA-qpm5-6332-9445

#Cybersecurity #Infosec #AISecurity #AppSec

🔴 CVE-2026-97693 - Critical (9.9)

Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there is insufficient isolation between execution-capable Docker sandboxes and trusted application services. A lo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97693/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Yuxi CVE-2026-97693 affects execution-capable Docker sandboxes in versions 0.6.0.beta1 up to, but not including, 0.7.1. A low-privileged user can reach other tenants' sandbox APIs, files and secrets. Shared services may also be exposed, especially with unchanged default credentials.

Upgrade to 0.7.1+ and separately rotate persisted defaults. No known exploitation in the wild.

https://github.com/xerrors/Yuxi/security/advisories/GHSA-qpm5-6332-9445

#Cybersecurity #Infosec #AISecurity #AppSec

🔴 CVE-2026-97693 - Critical (9.9)

Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there is insufficient isolation between execution-capable Docker sandboxes and trusted application services. A lo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97693/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-57567 - High (8.6)

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. In affected desktop Tauri builds prior to 0.11.10, the apps/readest-app/src-tauri/src/transfer_file.rs commands downloa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57567/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55367 - High (7.5)

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 4212ce114506a073505fd389db16ad2ba4e582a0, a client could send an incomplete CONNECT-UDP Capsule with an excessively large declared length, causing H2O to keep buff...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55367/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55367 - High (7.5)

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 4212ce114506a073505fd389db16ad2ba4e582a0, a client could send an incomplete CONNECT-UDP Capsule with an excessively large declared length, causing H2O to keep buff...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55367/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Attackers exploit the GPUStack authentication bypass CVE-2026-102895 in the wild. Update to 2.2.2 now to fix this flaw and CVE-2026-102894.

#GPUStack #AISecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/gpustack-authentication-bypass-cve-2026-102895-exploited/?utm_source=mastodon&utm_medium=jetpack_social

GPUStack CVE-2026-102894: a forged SAML response can give an unauthenticated network user an admin session on versions 0.7.1–2.2.1, even if SAML SSO isn't configured. Fixed in 2.2.2.

Upgrade, or temporarily block /auth/saml/callback at your ingress. The vendor advisory does not report active exploitation.

https://github.com/gpustack/gpustack/security/advisories/GHSA-62m9-f875-rqw6

#Cybersecurity #Infosec #IdentitySecurity #AISecurity

Attackers exploit the GPUStack authentication bypass CVE-2026-102895 in the wild. Update to 2.2.2 now to fix this flaw and CVE-2026-102894.

#GPUStack #AISecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/gpustack-authentication-bypass-cve-2026-102895-exploited/?utm_source=mastodon&utm_medium=jetpack_social

GPUStack CVE-2026-102894: a forged SAML response can give an unauthenticated network user an admin session on versions 0.7.1–2.2.1, even if SAML SSO isn't configured. Fixed in 2.2.2.

Upgrade, or temporarily block /auth/saml/callback at your ingress. The vendor advisory does not report active exploitation.

https://github.com/gpustack/gpustack/security/advisories/GHSA-62m9-f875-rqw6

#Cybersecurity #Infosec #IdentitySecurity #AISecurity

🔴 CVE-2026-122006 - Critical (9.8)

The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g., reading secret_key_base) because the ImageMagick analyzer runs when a file is attached, and th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122006/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-121930 - Critical (9.1)

A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the function system of the file apply.cgi of the component Ping Diagnostic. This manipulation of the argument ping_ip causes os command injection. The attack can be...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121930/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-121931 - Critical (9.1)

A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Such manipulation of the argument traceroute_ip leads to os c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121931/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-122120 - Critical (9)

In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122120/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82033 - High (8.4)

DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication vulnerability in its web profile HTTP and WebSocket RPC control plane, allowing any local process, including those running as a different O...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82033/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120554 - High (8.8)

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.5.11 This is due to a non-atomic multi-option write sequence in the `ACUI_Cron::save_settings()` function,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120554/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119749 - High (7.5)

The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulnerability that allows unauthenticated attackers to bypass payment processing by submitting a negative item quantity on a public payment form. Attackers can ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119749/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-121962 - High (8.1)

FreeRDP before 3.32.2 contains a heap buffer overflow in transport_default_read_pdu when handling partial Early User Authorization reads during PROTOCOL_HYBRID_EX CredSSP. A malicious RDP server can split the four-byte EUA result into short reads ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121962/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-121945 - High (7.6)

CoopCycle coopcycle-web before 6.20.1 contains a broken access control vulnerability that allows any courier to read and modify every incident because Incident operations only check ROLE_COURIER. Attackers can enumerate sequential incident ids and...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121945/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-121932 - Critical (10)

A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system of the file /wizard/apply.cgi. Performing a manipulation of the argument ping_ip/traceroute_ip results in os command injection. The attack may be initiated ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121932/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-121729 - High (8.3)

emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys. Attackers can mint a global live API key accepted by /v...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121729/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-113780 - Critical (9.3)

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.5.5 until 5.5.6, 6.0.4, and 6.1.1, the esp_tee trap entry in esp_tee_vectors_plic.S and esp_tee_vectors_clic.S saves a caller-controlled register frame through the REE...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-113780/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Xenbleed: Xen Guest to Dom0 Escape

Xen의 grant-copy 캐시에서 권한 검사에 필요한 주소 모드를 누락한 취약점이 발견됐다. 공격자는 Xen 게스트의 커널 권한을 확보한 뒤 다른 도메인과 관리 도메인 dom0의 메모리를 읽고 쓸 수 있으며, 연구진은 XenServer 9에서 dom0 커널 코드 실행을 시연했다. 재현된 공격은 CVE-2026-102704를 이용하며, 함께 수정된 CVE-2026-102703은 별도의 캐시 검증 결함이다. Xen 4.6 이후 버전이 영향을 받으며, 운영자는 XSA-523에 포함된 패치를 적용해야 한다.

https://codeant.ai/security-research/xenbleed-a-grant-copy-cache-bug-that-reaches-dom0-memory

#xen #security #hypervisor #vmescape #cve

Xenbleed: Xen Guest to Dom0 Escape

Xen의 grant-copy 캐시에서 권한 검사에 필요한 주소 모드를 누락한 취약점이 발견됐다. 공격자는 Xen 게스트의 커널 권한을 확보한 뒤 다른 도메인과 관리 도메인 dom0의 메모리를 읽고 쓸 수 있으며, 연구진은 XenServer 9에서 dom0 커널 코드 실행을 시연했다. 재현된 공격은 CVE-2026-102704를 이용하며, 함께 수정된 CVE-2026-102703은 별도의 캐시 검증 결함이다. Xen 4.6 이후 버전이 영향을 받으며, 운영자는 XSA-523에 포함된 패치를 적용해야 한다.

https://codeant.ai/security-research/xenbleed-a-grant-copy-cache-bug-that-reaches-dom0-memory

#xen #security #hypervisor #vmescape #cve

Xen's XSA-523 (Nov 3) affects versions 4.6+, allowing a malicious guest to read/write memory of other domains, including Dom0 (CVE-2026-102703/102704). The project says there's no known mitigation: patch affected hosts or apply downstream vendor fixes. No confirmed in-the-wild exploitation was cited.

https://xenbits.xen.org/xsa/advisory-523.html

#Cybersecurity #Infosec #Virtualization #PatchManagement

🟠 CVE-2026-121964 - High (7.5)

FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD Gateway RPC client, where rpc_client_recv_fragment writes BIND_ACK and ALTER_CONTEXT_RESP fragments into a persistent PDU stream after checking only total capacity rather than r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121964/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-121966 - High (8.7)

Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth subrequests (and, in 3.7, Ingress NGINX auth-url requests) through an auth-server connection pool shared by all clients, exposing connection-bound NTLM or Negotiate authentication....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Chrome security update: Chrome 157 fixes 213 flaws, including critical bugs CVE-2026-121156 in Dawn and CVE-2026-121035 in Prerender. Update now.

#Chrome #GoogleChrome #Chrome157 #CVE2026121156 #BrowserSecurity #UseAfterFree #PatchNow #Vulnerability

https://securityonline.info/chrome-157-security-update/?utm_source=mastodon&utm_medium=jetpack_social

35 Apache vulnerabilities fixed, including Apache ZooKeeper flaws CVE-2026-115448 and CVE-2026-100252, plus OpenOffice, ActiveMQ and Juneau bugs.

#Apache #ZooKeeper #OpenOffice #ActiveMQ #Juneau #CVE2026115448 #PatchNow #Vulnerability

https://securityonline.info/apache-vulnerabilities-zookeeper-openoffice-activemq/?utm_source=mastodon&utm_medium=jetpack_social

35 Apache vulnerabilities fixed, including Apache ZooKeeper flaws CVE-2026-115448 and CVE-2026-100252, plus OpenOffice, ActiveMQ and Juneau bugs.

#Apache #ZooKeeper #OpenOffice #ActiveMQ #Juneau #CVE2026115448 #PatchNow #Vulnerability

https://securityonline.info/apache-vulnerabilities-zookeeper-openoffice-activemq/?utm_source=mastodon&utm_medium=jetpack_social

Update WatchGuard AuthPoint Gateway to version 7.6.0 now to fix CVE-2026-121639, CVE-2026-121638, and two other critical authentication flaws.

#WatchGuard #AuthPoint #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/watchguard-authpoint-gateway-flaws-patched/?utm_source=mastodon&utm_medium=jetpack_social

Update WatchGuard AuthPoint Gateway to version 7.6.0 now to fix CVE-2026-121639, CVE-2026-121638, and two other critical authentication flaws.

#WatchGuard #AuthPoint #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/watchguard-authpoint-gateway-flaws-patched/?utm_source=mastodon&utm_medium=jetpack_social

CRITICAL: CVE-2026-121939 in David-Crty Databasement (<1.10.9) allows auth bypass via OIDC email spoofing. Attackers can impersonate users — even super-admins. Upgrade to 1.10.9+ ASAP. https://radar.offseq.com/threat/cve-2026-121939-authentication-bypass-by-spoofing-in-david-crty-databasement-40e4fb539c2e9726 #OffSeq #Vuln #OIDC #Infosec

🔴 CVE-2026-65555 - Critical (9.8)

Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65555/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Rsync 3.5.2 megjelent — javítja a CVE-2026-119741 túlzott ellenőrzőösszeg-terhelését, jobb kezelés megszakadt --append/--inplace átvitelekhez, sparse/ismétlődő adatok illesztésén javít, új --nice és --delay-symlinks opciók, daemon verem- és hardlink-problémák javítva. Részletek: https://linuxmint.hu/hir/2026/11/megjelent-az-rsync-352-biztonsagi-res-javitva-megszakadt-atvitelek-tovabbfejlesztve
#Rsync #Linux #OpenSource #security #CVE-2026-119741

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

CVE-2026-76955: HIGH severity buffer overflow in Zyxel NWA110AX (≤7.12[ABTG.0]C0) allows LAN-based privilege escalation and device compromise. No patch yet — limit LAN access & monitor for abuse. https://radar.offseq.com/threat/a-buffer-overflow-vulnerability-in-the-zdpwtp-binary-in-zyxel-nwa110ax-firmware-versions-through-ef14a731cb981018 #OffSeq #Zyxel #Vulnerability

🟠 CVE-2026-76955 - High (8.8)

A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate privileges on an affected device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76955/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

The November 2026 Android security update fixes 216 flaws, including zero-click remote code execution bugs CVE-2026-58868 and CVE-2026-58936.

#Android #AndroidSecurity #CVE202658868 #ZeroClick #RCE #MediaTek #PatchNow #MobileSecurity

https://securityonline.info/android-security-update-november-2026/?utm_source=mastodon&utm_medium=jetpack_social

Install the latest Docker Desktop security update to patch two critical Docker Desktop vulnerabilities, including container escape flaw CVE-2026-112917.

#Docker #DockerDesktop #ContainerSecurity #WSL2 #CVE2026112917 #LinuxKernel #InfoSec #Cybersecurity

https://meterpreter.org/docker-desktop-vulnerabilities-cve-2026-112917/?utm_source=mastodon&utm_medium=jetpack_social

SEPPmail Secure Email Gateway <15.1.1 has a CRITICAL vuln (CVE-2026-114425, CVSS 9.2): unauthenticated attackers can manipulate root files via LFT metadata. Upgrade to 15.1.1+ ASAP. https://radar.offseq.com/threat/seppmail-secure-email-gateway-before-1511-trusts-a-file-path-supplied-in-externally-provided-large-cve-23d98aca35204d0f #OffSeq #Vuln #CVE2026114425 #EmailSecurity

CVE-2026-114425 (CRITICAL, CVSS 9.2) impacts SEPPmail SEG <15.1.1: Unauth attackers can exploit LFT attachment metadata to manipulate file paths, causing root-level file disclosure, move, or deletion. Upgrade to 15.1.1 now. https://radar.offseq.com/threat/cve-2026-114425-cwe-73-external-control-of-file-name-or-path-in-seppmail-ag-seppmail-secure-email-4984600ec6698196 #OffSeq #InfoSec #CVE2026114425

CISA Adds Actively Exploited WordPress Core Race Condition to KEV Catalog

CISA has warned of an actively exploited race condition in WordPress Core (CVE-2026-119977) that allows unauthenticated attackers to execute remote code during the software update window. Site owners must update to WordPress 7.1.4 or the latest patched version for their specific release branch to prevent server takeover.

**If you run WordPress, update to version 7.1.4 (or your version's latest security release) right away, and ask your host to block web access to the `wp-content/upgrade/` and `wp-content/upgrade-temp-backup/` folders. Then check your logs for requests to `wp-admin/setup-config.php`, and if you find any, have your site checked for a break-in.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-adds-actively-exploited-wordpress-core-race-condition-to-kev-catalog-o-8-l-e-g/gD2P6Ple2L

Ivanti Connect Secure needs a second patch. CVE-2026-111357/118527 (CISA KEV) chain to unauth root. If you installed the Oct 13 fix, patch again. CISA/Rapid7 name 25.1.1.3 or 22.8R2.6; confirm on Ivanti's advisory, then hunt for compromise.

Also: Linux Fragnesia (CVE-2026-46300), GitLab CVE-2026-97229 and WordPress CVE-2026-119977 (update to 7.1.4).

https://patchorpass.beehiiv.com/?utm_source=mastodon&utm_medium=social&utm_campaign=issue-3

#infosec #vpn #linux #homelab

CVE-2026-119977: WordPress Core RCE Flaw Exploited During Software Upgrades
#CVE_2026_119977 #WordPress
https://socprime.com/blog/cve-2026-119977-wordpress-core-rce-flaw-exploited-during-software-upgrades/

CISA added WordPress Core CVE-2026-119977 to KEV on Nov. 3. A weakness in web-accessible staging paths during core upgrades could allow unauthenticated code execution in that window.

Confirm WordPress 7.1.4 or a fixed branch release, and check logs around recent core updates.

https://www.cisa.gov/news-events/alerts/2026/11/03/cisa-adds-one-known-exploited-vulnerability-catalog

#Cybersecurity #Infosec #WordPress #PatchManagement

CVE ID: CVE-2026-119977
Vendor: WordPress
Product: WordPress Core
Date Added: 2026-11-03
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-119977

35 Apache vulnerabilities fixed, including Apache ZooKeeper flaws CVE-2026-115448 and CVE-2026-100252, plus OpenOffice, ActiveMQ and Juneau bugs.

#Apache #ZooKeeper #OpenOffice #ActiveMQ #Juneau #CVE2026115448 #PatchNow #Vulnerability

https://securityonline.info/apache-vulnerabilities-zookeeper-openoffice-activemq/?utm_source=mastodon&utm_medium=jetpack_social

35 Apache vulnerabilities fixed, including Apache ZooKeeper flaws CVE-2026-115448 and CVE-2026-100252, plus OpenOffice, ActiveMQ and Juneau bugs.

#Apache #ZooKeeper #OpenOffice #ActiveMQ #Juneau #CVE2026115448 #PatchNow #Vulnerability

https://securityonline.info/apache-vulnerabilities-zookeeper-openoffice-activemq/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-110022 - High (8.4)

The PFI plugin framework deploys executable assemblies (DLLs) from a signed plugin package into the local plugin repository and loads them via reflection, but the deployment routine processes archive entries that were never covered by the signatur...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110022/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 New CSAF advisory published

VDE-2026-121
Phoenix Contact: GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software
CVE-2026-110021, CVE-2026-110022, CVE-2026-110935

GSDX SignatureValue verification, signed plug-in validation bypass and path…

HTML: https://certvde.com/en/advisories/VDE-2026-121
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-121.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-121
Phoenix Contact: GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software
CVE-2026-110021, CVE-2026-110022, CVE-2026-110935

GSDX SignatureValue verification, signed plug-in validation bypass and path…

HTML: https://certvde.com/en/advisories/VDE-2026-121
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-121.json

#OT #Advisory

🟠 CVE-2026-110935 - High (8.4)

The PFI plugin framework deployment routine does not validate path components when extracting archive entries to the local plugin repository. Archive entries containing relative path segments such as '..' are not rejected, allowing an unauthentica...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110935/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 New CSAF advisory published

VDE-2026-121
Phoenix Contact: GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software
CVE-2026-110021, CVE-2026-110022, CVE-2026-110935

GSDX SignatureValue verification, signed plug-in validation bypass and path…

HTML: https://certvde.com/en/advisories/VDE-2026-121
CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-121.json

#OT #Advisory

ESET found DNS hijacking redirecting Sogou Input Method's insecure HTTP traffic, leading its own components to run DarkVigil malware. Tencent fixed CVE-2026-120422 in v16.10 on Oct 30. The interception point remains unknown. Inventory affected Windows endpoints and update.

https://www.welivesecurity.com/en/eset-research/slippynunchucks-hijacks-sogou-input-methods-brand-promotion-mechanism-to-distribute-malware/

#Cybersecurity #Infosec #EndpointSecurity #ThreatIntel

CVE-2026-54851: Reflected XSS in Contact Form by WPForms (Awesomemotive) – HIGH severity. Affects versions <2.0.3.1. Patch available. Exploit allows script execution in user browsers. Upgrade ASAP. https://radar.offseq.com/threat/cve-2026-54851-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-57b578e8d7699861 #OffSeq #WordPress #XSS #Infosec

🟠 CVE-2026-79405 - High (7.5)

In Modem Firmware, there is a possible system crash due to improper input validation of dedicated PUCCH configuration. This could lead to remote denial of service with no additional execution privileges needed.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79405/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77691 - High (8.1)

ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77691/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 Critical SolarWinds Dameware Flaw Could Allow Attackers to Compromise Remote Systems, CVE-2026-28336

SolarWinds has disclosed a critical command injection vulnerability in Dameware, its remote administration software, carrying a near-maximum CVSS score of 9.9.

The vulnerability could allow authenticated attackers with low-level privileges to execute malicious commands and potentially take control of remotely managed systems.

Given Dameware's role in enterprise IT administration, successful exploitation could put sensitive systems and the data they handle at risk.

CVE-2026-28336 | Critical

• CVSS: 9.9
• Type: Command injection
• Attack vector: Network
• Privileges required: Low
• User interaction: None
• Impact: Potential compromise of remotely controlled hosts

Affected Systems

• Affected: SolarWinds Dameware 2026.3 and earlier
• Fixed: Dameware 2026.3.1
• PoC: No public exploit identified
• Exploitation: No confirmed in-the-wild attacks

SolarWinds recommends that administrators upgrade to version 2026.3.1 to address the vulnerability.

Source: https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28336

SolarWinds Dameware 2026.3.1 fixes Dameware command injection flaw CVE-2026-28336 (CVSS 9.9), plus a buffer overflow and DLL hijacking bug.

#SolarWinds #Dameware #CVE202628336 #CommandInjection #RemoteSupport #CVSS #PatchNow #Vulnerability

https://securityonline.info/dameware-command-injection-cve-2026-28336/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-28336 - Critical (9.9)

SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28336/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-28327 - High (8.2)

SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28327/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-121615 - Critical (10)

A vulnerability was determined in Linksys E5600 1.1.0.26. Affected is an unknown function of the file /cgi-bin/mesh_login.cgi of the component Login Handler. Executing a manipulation can lead to improper authentication. The attack can be launched ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121615/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-121802 - Critical (9.1)

@better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), because it signs a caller-supplied state value without checking whether that value had been issued by the serv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121802/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-121802: @better-auth/expo <1.7.16 exposes a CRITICAL flaw (CVSS 9.1) allowing unauthenticated account takeover via unvalidated state parameter. Patch to 1.7.16+ & rotate app secret. Full details: https://radar.offseq.com/threat/better-authexpo-before-1716-allows-certain-account-takeover-outcomes-eg-unauthenticated-changes-of-any-d78028297fe6a8c7 #OffSeq #vulnerability #CVE2026121802 #infosec

CVE-2026-121802: CRITICAL origin validation error in better-auth Better Auth (<1.7.16). Attackers can change user emails & take over accounts. Patch to 1.7.16+ and rotate secrets. CVSS 9.1. https://radar.offseq.com/threat/cve-2026-121802-cwe-346-origin-validation-error-in-better-auth-better-auth-f3bb93b4283e0f22 #OffSeq #Vuln #CVE2026121802 #infosec

🟠 CVE-2026-121617 - High (7.5)

A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the function init_multipart of the file /cgi-bin/upload_fw.cgi of the component Header Parser. The manipulation results in out-of-bounds write. The attack may...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121617/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-121609 - Critical (10)

A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue affects the function Home of the file /etc/init.d/mpt of the component Boot Script. The manipulation leads to hard-coded credentials. Remote exploitation of t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121609/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-121607 – CRITICAL OS command injection in Qihoo 360 D603-2 (6.4.0 – 6.4.9). Remote code execution possible; public exploit exists. No patch available — immediate isolation and network restrictions advised. https://radar.offseq.com/threat/cve-2026-121607-os-command-injection-in-qihoo-360-d603-2-a508182fff399655 #OffSeq #CVE2026121607 #IoTSecurity

TOTOLINK A950RG 4.1.2cu.5268_B20221104 hit by CRITICAL stack buffer overflow (CVE-2026-121599, CVSS 9.9). Exploitable via /cgi-bin/cstecgi.cgi — remote code execution possible. No patch yet; isolate devices. Public exploit out. https://radar.offseq.com/threat/a-vulnerability-was-detected-in-totolink-a950rg-412cu5268b20221104-cve-2026-121599-0480ccfef47e062b #OffSeq #CVE #IoTSecurity

Chrome security update: Chrome 157 fixes 213 flaws, including critical bugs CVE-2026-121156 in Dawn and CVE-2026-121035 in Prerender. Update now.

#Chrome #GoogleChrome #Chrome157 #CVE2026121156 #BrowserSecurity #UseAfterFree #PatchNow #Vulnerability

https://securityonline.info/chrome-157-security-update/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-92189 (CRITICAL, CVSS 9.8) hits Quest Foglight for Databases 8.2.0 – unauthenticated RCE via writeTopologySectionToFile path control. SYSTEM-level risk. Prioritize patching & restrict access. https://radar.offseq.com/threat/cve-2026-92189-cwe-73-external-control-of-file-name-or-path-in-quest-foglight-for-databases-bde4420456a8b3bd #OffSeq #Vuln #Quest #RCE

🟠 CVE-2026-121727 - High (7.5)

Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass http_body_max by sending more body bytes than declared. Attackers can send oversized first segments over ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121727/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-121731 - High (8.8)

RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, including parents, to inject SQL via the unquoted period_id parameter in StudentSummary.php. Attackers can supply payloads without single qu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121731/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116650 - High (7.5)

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116651 - High (7.5)

Tanium addressed an unauthorized code execution vulnerability in Threat Response.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116651/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-82158 - Critical (9)

Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82158/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-95747 - High (7.5)

A privilege escalation vulnerability exists in the SSH interface of HPE Networking Fabric Composer which could allow an authenticated low-privileged attacker to exceed their authorized level of access, if certain preconditions outside of the attac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95747/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Puppet Server RCE CVE-2026-115731 (CVSS 9.4) now has a public proof-of-concept exploit. Update OpenVox and Puppet Enterprise to patched versions.

#Puppet #OpenVox #CVE2026115731 #CVE2026115732 #RCE #PoC #DevOps #PatchNow

https://securityonline.info/puppet-server-rce-cve-2026-115731-poc/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-89292 | Eclipse Mnestix Browser (v1.6.0 – <2.3.0): CRITICAL bug allows unauthenticated extraction of backend API keys 🗝️. Restrict access, monitor for patch info. No known exploit in wild. https://radar.offseq.com/threat/in-eclipse-mnestix-browser-versions-160-up-until-but-excluding-230-it-was-possible-for-an-0d3db4ce36b8acbe #OffSeq #CVE202689292 #infosec

SonicWall's Nov 3 advisory covers two flaws in EOL GMS 9.5.2 and earlier: unauthenticated file read (CVE-2026-109593) and authenticated SQL injection (CVE-2026-109594). No patch is planned. Inventory legacy GMS, restrict management access and plan replacement. Exploitation isn't confirmed.

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019

#Cybersecurity #Infosec #SonicWall #MSP

🚨 Critical SonicWall GMS Vulnerability Exposes Internal Files Without Authentication, CVE-2026-109593

SonicWall has disclosed two security vulnerabilities in its Global Management System (GMS), including a critical flaw that allows attackers to access sensitive internal files without credentials or user interaction.

The second vulnerability could allow authenticated attackers to exploit SQL injection and potentially access or modify information stored in the GMS database.

CVE-2026-109593 | Critical

• CVSS: 9.1
• Unauthenticated access to internal files
• No privileges or user interaction required

CVE-2026-109594 | Medium

• CVSS: 6.8
• Authenticated SQL injection
• Potential database access or modification

Affected Systems:

• SonicWall GMS 9.5.2 and earlier
• Windows and Linux deployments
• No security patch available, as GMS has reached end-of-life

There is currently no identified public PoC or confirmed exploitation in the wild.

Source: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019

Endor Labs researcher Peyton Kennedy discovered a vulnerability in Docker Sandboxes (CVE-2026-103916) that lets AI coding agents bypass file access restrictions to read or modify cloud credentials and SSH keys.

Sandbox isolation is only as strong as every path between an agent and the system it’s isolated from.

Learn More: www.endorlabs.com/learn/docker-sandboxes-vulnerability-lets-ai-agents-access-sensitive-files-outside-their-sandbox-cve-2026-103916

HPE Fabric Composer vulnerabilities: 46 flaws fixed, including hardcoded password bug CVE-2026-95731 (CVSS 9.8). Upgrade to 7.4.1 or 7.3.5.

#HPE #ArubaNetworking #FabricComposer #CVE202695731 #HardcodedCredentials #DataCenter #PatchNow #Vulnerability

https://securityonline.info/hpe-fabric-composer-vulnerabilities-2/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-95746 - High (7.5)

An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95746/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-4052 (CRITICAL): WSO2 API Manager (4.1.0 – 4.6.0, <1.8.8) has missing authorization — self-registered users can access System REST APIs if Identity Server is a Resident Key Manager. Upgrade to 1.8.8. https://radar.offseq.com/threat/cve-2026-4052-cwe-862-missing-authorization-in-wso2-wso2-api-manager-d1eaf36f3e90a714 #OffSeq #CVE #WSO2 #APIsecurity

🔴 CVE-2026-4052 - Critical (9.8)

This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16900 - High (7.5)

Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted reg...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16900/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

🟠 CVE-2026-28335 - High (8.4)

SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28335/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SonicWall's Nov 3 advisory covers two flaws in EOL GMS 9.5.2 and earlier: unauthenticated file read (CVE-2026-109593) and authenticated SQL injection (CVE-2026-109594). No patch is planned. Inventory legacy GMS, restrict management access and plan replacement. Exploitation isn't confirmed.

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019

#Cybersecurity #Infosec #SonicWall #MSP

🚨 Critical SonicWall GMS Vulnerability Exposes Internal Files Without Authentication, CVE-2026-109593

SonicWall has disclosed two security vulnerabilities in its Global Management System (GMS), including a critical flaw that allows attackers to access sensitive internal files without credentials or user interaction.

The second vulnerability could allow authenticated attackers to exploit SQL injection and potentially access or modify information stored in the GMS database.

CVE-2026-109593 | Critical

• CVSS: 9.1
• Unauthenticated access to internal files
• No privileges or user interaction required

CVE-2026-109594 | Medium

• CVSS: 6.8
• Authenticated SQL injection
• Potential database access or modification

Affected Systems:

• SonicWall GMS 9.5.2 and earlier
• Windows and Linux deployments
• No security patch available, as GMS has reached end-of-life

There is currently no identified public PoC or confirmed exploitation in the wild.

Source: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0019

The SonicWall GMS vulnerabilities patch notice details two critical SonicWall GMS vulnerabilities. Migrate EOL systems to Network Security Manager now.

#SonicWall #SonicWallGMS #CVE2026109593 #CVE2026109594 #NetworkSecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/sonicwall-gms-vulnerabilities-cve-2026-109593/?utm_source=mastodon&utm_medium=jetpack_social

SQLi in RunZero.

https://www.runzero.com/advisories/runzero-search-sqli-cve-2026-110265/

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-118527 – Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Strategic C-Suite briefing on CVE-2026-118527 for Ivanti Connect Secure, providing risk impact assessments, compliance alignment, and executive mitigation protocols....

https://thecybermind.co/pfmw

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-118527 – Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Actionable threat intelligence and multi-SIEM detection queries for CVE-2026-118527, featuring complete technical execution and hardening guidelines...

https://thecybermind.co/5pzs

Arista fixed critical Arista security vulnerabilities CVE-2026-111497 and CVE-2026-98432 that allow unauthenticated remote code execution. Update now.

#Arista #VeloCloud #LinuxKernel #RCE #CVE2026111497 #CVE202698432 #Cybersecurity #InfoSec

https://securityonline.info/arista-security-vulnerabilities-rce-flaws/?utm_source=mastodon&utm_medium=jetpack_social

Update Control Web Panel to version 1.29 now to patch CVE-2026-73695, CVE-2026-73696, and eight other flaws allowing unauthenticated root RCE.

#ControlWebPanel #CWP #Linux #Cybersecurity #InfoSec

https://securityonline.info/control-web-panel-cve-2026-73695-root-rce/?utm_source=mastodon&utm_medium=jetpack_social

Update Control Web Panel to version 1.29 now to patch CVE-2026-73695, CVE-2026-73696, and eight other flaws allowing unauthenticated root RCE.

#ControlWebPanel #CWP #Linux #Cybersecurity #InfoSec

https://securityonline.info/control-web-panel-cve-2026-73695-root-rce/?utm_source=mastodon&utm_medium=jetpack_social

🚨 Rapid Response: Critical Control Web Panel command injection (CVE-2026-77876, CVSS 9.8).

Censys identified 443,734 Internet-exposed web properties running CWP. Versions cannot be confirmed, so not all are necessarily vulnerable.

Read the full advisory for additional details and queries: https://censys.com/advisory/cve-2026-77876/

#Cybersecurity #CensysARC #Vulnerability #CVE202677876 #CommandInjection #ControlWebPanel #AttackSurfaceManagement #ThreatIntelligence #VulnerabilityManagement #WebHosting

Technical details and a macOS revisiond vulnerability PoC exploit for CVE-2026-112487 are public, allowing root elevation. Update macOS immediately.

#macOS #Apple #CVE2026112487 #PoC #PrivilegeEscalation #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/macos-revisiond-vulnerability-poc-cve-2026-112487/?utm_source=mastodon&utm_medium=jetpack_social

🚨 Critical zero-click Android RCE patched; CVE-2026-58868

A heap buffer overflow in Android’s Framework component could allow remote code execution without additional privileges or user interaction.

The flaw resides in the onOutputReceived function within FrameDecoder.cpp, where an out-of-bounds write can occur while processing media frames.

• Severity: Critical
• CVSS: Not yet assigned
• Affected: Android 14, 15, 16, 16 QPR2 and 17
• Fixed: Security patch level 2026-11-01 or later
• PoC: No public exploit identified
• Exploitation: No confirmed in-the-wild attacks

Administrators should aim for the 2026-11-05 patch level or later, which includes this fix and the remaining November security updates for kernel and hardware components.

Source: https://source.android.com/docs/security/bulletin/2026/2026-11-01

The November 2026 Android security update fixes 216 flaws, including zero-click remote code execution bugs CVE-2026-58868 and CVE-2026-58936.

#Android #AndroidSecurity #CVE202658868 #ZeroClick #RCE #MediaTek #PatchNow #MobileSecurity

https://securityonline.info/android-security-update-november-2026/?utm_source=mastodon&utm_medium=jetpack_social

CW: kritikus Android sebezhetőség (CVE-2026-58882)

Egy speciálisan összeállított SMS összeomlaszthatja a híváskezelőt, megszakítva hívásokat — akár segélyhívásokat is. Javítást Google kiadta júliusban biztonsági előzetesekben; novemberi bulletinben szerepel. Frissítsd, ahol elérhető.

https://linuxmint.hu/hir/2026/11/halalos-sms-bug-benithatja-az-androidot-de-hamarosan-erkezik-a-javitas

#Android #CVE2026-58882 #Security #OpenSource

Update Control Web Panel to version 1.29 now to patch CVE-2026-73695, CVE-2026-73696, and eight other flaws allowing unauthenticated root RCE.

#ControlWebPanel #CWP #Linux #Cybersecurity #InfoSec

https://securityonline.info/control-web-panel-cve-2026-73695-root-rce/?utm_source=mastodon&utm_medium=jetpack_social

Update Control Web Panel to version 1.29 now to patch CVE-2026-73695, CVE-2026-73696, and eight other flaws allowing unauthenticated root RCE.

#ControlWebPanel #CWP #Linux #Cybersecurity #InfoSec

https://securityonline.info/control-web-panel-cve-2026-73695-root-rce/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-99247 | HIGH severity in Linux kernel 5.19: Kernel may crash (NULL pointer dereference) during early boot if tracing is disabled & trace buffer allocation fails. Patch available — apply ASAP to prevent boot failures. https://radar.offseq.com/threat/cve-2026-99247-tracing-do-not-initialize-tracefs-work-if-tracing-is-disabled-in-linux-kernel-11ff73f18055537a #OffSeq #Linux #Kernel #Vuln

🟠 CVE-2026-121022 - High (8.1)

Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121022/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

🔴 CVE-2026-13594 - Critical (9.1)

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-13594/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

@GrapheneOS Hi, I updated and saw that my pixel 10 pro now has kernel 6.18.38. [CVE-2026-98432](https://nvd.nist.gov/vuln/detail/cve-2026-98432) mentions that only kernels > v6.18.56 are patched. Is the current kernel vulnerable? If so, anything we can to mitigate until a patch will arrive?

🚨🐛 SIGINT // Cybersecurity Watch — 2026-11-05
CVE-2026-98432, a CVSS 9.8 Linux kernel TCP RCE, is patched by Red Hat, but Ubuntu fixes are still in -proposed, leaving exposed servers to mitigate manually.
https://thehackernews.com/2026/11/red-hat-patches-98-rated-linux-tcp-rce.html
#CVE #Linux #Ubuntu #InfoSec

@GrapheneOS Hi, I updated and saw that my pixel 10 pro now has kernel 6.18.38. [CVE-2026-98432](https://nvd.nist.gov/vuln/detail/cve-2026-98432) mentions that only kernels > v6.18.56 are patched. Is the current kernel vulnerable? If so, anything we can to mitigate until a patch will arrive?

Kernel security reboots for CVE-2026-98432, a different flaw from last week's Fragnesia reboots: Friday, Nov 13, 10:00 AM–1:00 PM PST (18:00–21:00 UTC). Many OSL-hosted project sites and lists will each be down for a few minutes, once. Our FTP mirrors reboot one at a time, so ftp.osuosl.org stays up. Details: https://status.osuosl.org/pages/maintenance/526712bf10cd4e587b000014/6aeb9bf5b435fe0422769f92

Kernel security reboots for CVE-2026-98432, a different flaw from last week's Fragnesia reboots: Thursday, Nov 12, 11:00 AM–3:00 PM PST (19:00–23:00 UTC). Our GitLab CI runners reboot one per architecture at a time, so jobs may queue or need a retry, and git.osuosl.org and a few other OSL services are down a few minutes each. Details: https://status.osuosl.org/pages/maintenance/526712bf10cd4e587b000014/6aeb9bd7f7bb4b038d276f4d

I should know never to update the cluster computing class server mid-semester. However I felt like I shouldn't ignore CVE-2026-98432

so of course now I ran some updates and not only does the NVIDIA driver refuse to build but also slurm/MPI pmix support is broken. sigh

I guess I could just make them do the rest of the assignments on the raspberry pi-cluster instead

CVE-2026-98432 & Synology Linux Kernel Branch 3.10 [NOT AFFECTED / STRUCTURALLY IMMUNE !]

https://www.synoforum.com/threads/cve-2026-98432-synology-linux-kernel-branch-3-10-not-affected-structurally-immune.16480/

#synoforum #synology #NAS

@rl_dane

Well, the latest biggie was a kernel one, CVE-2026-98432. Debian fixed it within 24 hours, whereas Ubuntu still has it in it's 'proposed' branch. Seeing you have the 'stock' Debian kernel, you're good 😅
@r1w1s1

CVE-2026-98432 & Synology Linux Kernel Branch 3.10 NOT AFFECTED / STRUCTURALLY IMMUNE

https://www.synoforum.com/threads/cve-2026-98432-synology-linux-kernel-branch-3-10-not-affected-structurally-immune.16480/

#synoforum #synology #NAS

rpm -q --changelog kernel-uek | grep -i "CVE-2026-98432"

For anybody assessing risk from CVE-2026-98432, this is good from @malwaretech

tl;dr is basically likely a few million devices are vulnerable, some scanning, no sign of exploitation and no exploits available, development likely in the realms of nation state.

My POV - don't panic, calmly patch.

https://www.linkedin.com/posts/malwaretech_update-on-the-98-cvss-tcpip-rce-in-the-share-7523273340598411264-3rlv/

Ubuntu Server Is Cooked | CVE-2026-98432

https://watch.linuxrenaissance.com/w/3ouqDZgMNFM7M6czupnUWz

Ubuntu lässt sich ewig Zeit mit dem Patch für den Linux Kernel RCE CVE. Wer manuell installieren will: https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

CVE-2026-98432 means that setting

net.mptcp.enabled = 0

in /etc/sysctl.conf is a very good idea. Then reboot to quash any existing sockets.

If you missed these releases yesterday:

Red Hat: CRITICAL: RHSB-2026-016 Use-after-free - kernel IPv4 (CVE-2026-98432) https://access.redhat.com/security/vulnerabilities/RHSB-2026-016

Canonical: Fixes available in -proposed pocket for CVE-2026-98432 https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

More:

The Hacker News: Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing https://thehackernews.com/2026/11/red-hat-patches-98-rated-linux-tcp-rce.html @thehackernews #infosec #vulnerability #Ubuntu #Linux

@malwaretech I was wondering when the patched Ubuntu kernels would be out. TL;DR - the fixes are available now in the -proposed pocket, and will make it into the regular updates when testing is complete.

https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

Ubuntu continues to work on the the fix for CVE-2026-98432.

a critical use-after-free vulnerability in the Linux kernel's IPv4 TCP connection handling code (CVSS 9.8 score)

Debian released the fix on Oct 16.

https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

#Security

Critical Kernel Flaw CVE-2026-98432: How to Patch #Ubuntu #Linux

https://www.ubuntufree.com/linux-kernel-cve-2026-98432-ubuntu-fix/

https://chalmovsky.com/posts/wtf-ubuntu
CVE-2026-98432 is a critical (CVSS 9.8) bug in the Linux kernel's TCP code. It's been there since 2016, so virtually every Linux server on the planet has it, and it can be hit remotely. Anthropic says it built a working exploit that gets root on a server. A total takeover.

Debian patched it on October 16. Ubuntu still doesn't have a patch more than two weeks later. Every supported release, LTS included, is listed as "Vulnerable". #security #offrehcked

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks

Link: https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432
Discussion: https://news.ycombinator.com/item?id=50341462

Ubuntu still hasn't released a patch for the Linux 0day RCE in almost three weeks.

https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432

#Linux #Security #ubuntu #zeroday

Ubuntu puts fixes for CVE-2026-98432, a Linux kernel TCP flaw rated CVSS 9.8, in the proposed pocket for 22.04 LTS and newer. Older releases wait.

#CVE202698432 #LinuxKernel #Ubuntu #TCP #RCE #MPTCP #PatchNow #LinuxSecurity

https://securityonline.info/cve-2026-98432-ubuntu-proposed-fix/?utm_source=mastodon&utm_medium=jetpack_social

Noone should blame Ubuntu for not fixing CVE-2026-98432. They actually have had a solution for a decade. Just roll back to 14.04 LTS.

Update on the 9.8 CVSS TCP/IP RCE in the Linux kernel (CVE-2026-98432): we've detected what appears to be a threat actor activity scanning the entire internet for exposed affected systems. Our own scanning also suggests that the number of potential targets is high, therefore there is an increased likelihood of threat actors attempting to develop exploits for the vulnerability.

while CVE-2026-98432 is believed to require MPTCP to be enabled in the kernel, as well as a listening app/service which binds an MPTCP socket, which many have suggested should be rare, several kernels including Debian enable MPTCP by default.

Additionally, Go 1.24+ binds MPTCP sockets by default if the option is enabled in the kernel, so anything built on top of Go (including Caddy) will create the required MPTCP listener.

The mitigation of setting net.mptcp.enabled=0 disabled MPTCP, but does not apply to existing sockets, so any applications that have bound MPTCP sockets need to be restarted, otherwise the system remains exploitable.

You can check if your server is running any MPTCP listeners with the following command: sudo ss -Mlnp

On 2026-10-30 our preliminary internet-wide scan of port 443 confirmed that there are approximately 2,102,043 servers that are successfully reachable via an MPTCP connection. A deeper scan which attempts to connect to each endpoint on port 443 and negotiate a full TLS connection with MPTCP enabled returned about 762,774 systems.

Neither scan can confirm that these are unpatched kernels, just total exposure, but it's a lot more systems than expected. Since a valid HTTP connection is not required to exploit the vulnerability, the total attack surface is likely closer to the 2.1 million number than the 763k one.

As of today (2026-11-02), we've picked up several residential proxies and VPNs scanning the internet on port 443 using MPTCP-enabled connections. Since regular scanners do not negotiate MPTCP by default, and no data is being sent to the HTTP server over 443, we strongly suspect this activity is scanning for CVE-2026-98432 specifically. The use of residential proxies and RU-based VPN servers suggests that this is likely threat actor scanning, rather than security researchers.

Currently there are no known publicly available remote code execution exploits, but there are several denial of service proof-of-concepts floating around. This code gives threat actors a starting point to begin attempting to weaponize the vulnerability. Building exploits for the vulnerability is reported to be extremely difficult, but several state-sponsored threat actors likely have the resources required to succeed.

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432

Arista fixed critical Arista security vulnerabilities CVE-2026-111497 and CVE-2026-98432 that allow unauthenticated remote code execution. Update now.

#Arista #VeloCloud #LinuxKernel #RCE #CVE2026111497 #CVE202698432 #Cybersecurity #InfoSec

https://securityonline.info/arista-security-vulnerabilities-rce-flaws/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-77800 - High (7.7)

ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant for another service provider.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77800/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Advanced Custom Fields: Extended PRO for WordPress affected by CRITICAL code injection (CVE-2026-120534, CVSS 9.8). All versions ≤0.9.2.6 vulnerable via render_field. Immediate review and mitigation advised. https://radar.offseq.com/threat/the-advanced-custom-fields-extended-pro-plugin-for-wordpress-is-vulnerable-to-limited-code-injection-721e7bd7c6236973 #OffSeq #WordPress #CVE2026120534

CVE-2026-120534 | CRITICAL vuln (CVSS 9.8) in ACF Extended PRO ≤0.9.2.6 allows unauthenticated code injection via render_field. Prevent by disabling 'shortcode_preview' & ensuring OpenSSL is present. Patch status pending. https://radar.offseq.com/threat/cve-2026-120534-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-acf-extended-advanced-24aed413b4a5b6e4 #OffSeq #WordPress #Vuln

🟠 CVE-2026-120577 - High (8.1)

The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFile function in all versions up to, and including, 1.6.2. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120577/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120833 - High (7.8)

labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that passes any file with a .p or .pickle extension to pandas.read_pickle based on the extension alone. Attackers who supply a crafte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120833/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-86596 | s2Member plugin <=260927 has a CRITICAL RCE bug. Auth'd users (custom-level+) can execute arbitrary PHP via 'item_name' in email templates. No confirmed patch — restrict or disable plugin now. https://radar.offseq.com/threat/the-s2member-plugin-for-wordpress-is-vulnerable-to-remote-code-execution-in-all-versions-up-to-and-2c20f20d9eb4970a #OffSeq #WordPress #RCE #CVE202686596

The INFINITT PACS vulnerabilities patch fixes two INFINITT PACS vulnerabilities, stopping code execution and privilege escalation on hospital servers.

#INFINITT #PACS #HealthcareSecurity #MedicalImaging #CVE202616305 #CVE202616306 #Cybersecurity #InfoSec

https://securityonline.info/infinitt-pacs-vulnerabilities-cve-2026-16305/?utm_source=mastodon&utm_medium=jetpack_social

Barracuda warns two appliance flaws could be chained for root access. CVE-2026-116606 affects ESG authorization controls; CVE-2026-111560 allows command injection across several products. The vendor says admin-interface access is required and does not report confirmed exploitation.

Verify patches and restrict management access.

https://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection

#Cybersecurity #Infosec #PatchManagement #NetworkSecurity

SANS Stormcast Tuesday, November 3rd, 2026: Multipath TCP (MPTCP) Detection; BTCPay Server 2.4.1 Hot Wallet Thefts; Barracuda ESG Flaws (CVE-2026-116606, CVE-2026-111560); Synology DSM Ransomware
https://isc.sans.edu/podcastdetail/10162

Barracuda warns two appliance flaws could be chained for root access. CVE-2026-116606 affects ESG authorization controls; CVE-2026-111560 allows command injection across several products. The vendor says admin-interface access is required and does not report confirmed exploitation.

Verify patches and restrict management access.

https://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection

#Cybersecurity #Infosec #PatchManagement #NetworkSecurity

SANS Stormcast Tuesday, November 3rd, 2026: Multipath TCP (MPTCP) Detection; BTCPay Server 2.4.1 Hot Wallet Thefts; Barracuda ESG Flaws (CVE-2026-116606, CVE-2026-111560); Synology DSM Ransomware
https://isc.sans.edu/podcastdetail/10162

Ivanti Connect Secure needs a second patch. CVE-2026-111357/118527 (CISA KEV) chain to unauth root. If you installed the Oct 13 fix, patch again. CISA/Rapid7 name 25.1.1.3 or 22.8R2.6; confirm on Ivanti's advisory, then hunt for compromise.

Also: Linux Fragnesia (CVE-2026-46300), GitLab CVE-2026-97229 and WordPress CVE-2026-119977 (update to 7.1.4).

https://patchorpass.beehiiv.com/?utm_source=mastodon&utm_medium=social&utm_campaign=issue-3

#infosec #vpn #linux #homelab

The ASF patched Apache security vulnerabilities with new Apache security fixes for Syncope, Arrow, and Fineract, including critical flaw CVE-2026-64618.

#Apache #ApacheSyncope #ApacheFineract #ApacheArrow #SQLInjection #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/apache-security-vulnerabilities-syncope-fineract/?utm_source=mastodon&utm_medium=jetpack_social

Apply the new Gitea vulnerabilities patch to resolve 18 Gitea vulnerabilities, including XSS flaw CVE-2026-113429 and token leak bug CVE-2026-112887.

#Gitea #DevOps #Git #Cybersecurity #CVE2026113429 #AppSec #Vulnerability #InfoSec

https://meterpreter.org/gitea-vulnerabilities-patch-28-3-0/?utm_source=mastodon&utm_medium=jetpack_social

Drupal Commerce maintainers received two reports of fraudulent-order attempts tied to access bypass CVE-2026-118539. They have not identified broader scripted abuse.

Admins: update Commerce Core to 3.3.13 or 8.x-2.41 and reconcile recent orders against payments. Look for unexpected prices, discounts and unpaid orders. Patching won't undo bad orders.

https://www.centarro.io/blog/update-drupal-commerce-sites-exploit-observed-wild

#Cybersecurity #Infosec #Drupal #PatchManagement

Veeam Patches Critical Remote Code Execution Flaws in Management Pack for MS System Center

Veeam has patched three vulnerabilities in its Management Pack for Microsoft System Center, including a critical unauthenticated remote code execution flaw (CVE-2023-22793). These bugs allow attackers to take control of monitoring servers and potentially move laterally through virtualization environments.

**If you use Veeam Management Pack for Microsoft System Center version 9.x, upgrade to version 13.1.0.334 ASAP. These flaws let attackers take full control of your monitoring server. If you're on a build older than 9a (9.1.0.3107), update to 9a first, then upgrade to 13.1.0.334, since Veeam won't release a separate fix for 9.x.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/veeam-patches-critical-remote-code-execution-flaws-in-management-pack-for-ms-system-center-7-n-b-d-i/gD2P6Ple2L

Ivanti Connect Secure needs a second patch. CVE-2026-111357/118527 (CISA KEV) chain to unauth root. If you installed the Oct 13 fix, patch again. CISA/Rapid7 name 25.1.1.3 or 22.8R2.6; confirm on Ivanti's advisory, then hunt for compromise.

Also: Linux Fragnesia (CVE-2026-46300), GitLab CVE-2026-97229 and WordPress CVE-2026-119977 (update to 7.1.4).

https://patchorpass.beehiiv.com/?utm_source=mastodon&utm_medium=social&utm_campaign=issue-3

#infosec #vpn #linux #homelab

⚠️ CRITICAL: Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

Two critical RCE and authentication bypass flaws in Langflow 1.0.0-1.12.8 allow unauthenticated attackers to execute arbitrary code on vulnerable servers. A Metasploit module is already public for CVE-2026-93680. Default superuser auto-login in v1.12.8 makes exploitation trivial.

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

Ivanti Connect Secure needs a second patch. CVE-2026-111357/118527 (CISA KEV) chain to unauth root. If you installed the Oct 13 fix, patch again. CISA/Rapid7 name 25.1.1.3 or 22.8R2.6; confirm on Ivanti's advisory, then hunt for compromise.

Also: Linux Fragnesia (CVE-2026-46300), GitLab CVE-2026-97229 and WordPress CVE-2026-119977 (update to 7.1.4).

https://patchorpass.beehiiv.com/?utm_source=mastodon&utm_medium=social&utm_campaign=issue-3

#infosec #vpn #linux #homelab

🚨 A Linux kernel vhost flaw can let a local attacker cross virtualization boundaries and escalate privileges; CVE-2026-74580

PoC: https://github.com/YounesHfa/CVE-2026-74580

The vulnerability stems from stale vring metadata caching in the kernel’s vhost subsystem.

Reconfiguring a vring while a device IOTLB is attached can lead to out-of-bounds memory access and host kernel memory corruption.

Details

CVSS: 8.8 High
Impact: Local privilege escalation / host kernel compromise
Affected: Multiple Linux kernel versions using vulnerable vhost implementations
Fixed: Vendor-specific patched kernel releases are available

The exploit repository demonstrates the issue against multiple RHEL 9 and RHEL 10 kernel builds and includes automated checks for vulnerable kernel versions and required vhost device permissions.

🚨 A Linux kernel vhost flaw can let a local attacker cross virtualization boundaries and escalate privileges; CVE-2026-74580

PoC: https://github.com/YounesHfa/CVE-2026-74580