🟠 CVE-2026-65668 - High (8.8)

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65668/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65668 - High (8.8)

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65668/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-65667 - Critical (10)

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65667/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-65667 - Critical (10)

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65667/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62918 - High (7.5)

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62918/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62918 - High (7.5)

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62918/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62896 - Critical (9.6)

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62896/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62896 - Critical (9.6)

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62896/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-62873 (CRITICAL, CVSS 9.8) affects Microsoft 365 Admin Center: Improper cryptographic signature checks allow privilege escalation over the network. Microsoft has issued a fix — confirm your environment is patched. https://radar.offseq.com/threat/cve-2026-62873-cwe-347-improper-verification-of-cryptographic-signature-in-microsoft-microsoft-365-5fad3518811d36c2 #OffSeq #Microsoft365 #Vuln

🔴 CVE-2026-62873 - Critical (9.8)

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62873/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-62873 (CRITICAL, CVSS 9.8) affects Microsoft 365 Admin Center: Improper cryptographic signature checks allow privilege escalation over the network. Microsoft has issued a fix — confirm your environment is patched. https://radar.offseq.com/threat/cve-2026-62873-cwe-347-improper-verification-of-cryptographic-signature-in-microsoft-microsoft-365-5fad3518811d36c2 #OffSeq #Microsoft365 #Vuln

🔴 CVE-2026-62873 - Critical (9.8)

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62873/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59118 - Critical (9.3)

Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59118/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59118 - Critical (9.3)

Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59118/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59115 - Critical (9.9)

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59115/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59115 - Critical (9.9)

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59115/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70636 - High (7.5)

Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentication middleware defined in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70636 - High (7.5)

Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentication middleware defined in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8325 - High (7.8)

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8325/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8325 - High (7.8)

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8325/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Apple Fixes Critical macOS Screen Sharing Flaw That Could Let Attackers Bypass Authentication + Video

Introduction: A Hidden Door Into Mac Systems Has Been Closed Apple has quietly released important security updates for multiple generations of macOS after discovering a serious vulnerability affecting the built-in Screen Sharing feature. The flaw, tracked as CVE-2026-65400, could potentially allow an attacker connected to the same network to authenticate into Screen…

https://undercodenews.com/apple-fixes-critical-macos-screen-sharing-flaw-that-could-let-attackers-bypass-authentication-video/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-3430 - High (8.6)

The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when the abandoned cart email is managed by creative mail.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3430/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-3430 - High (8.6)

The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when the abandoned cart email is managed by creative mail.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3430/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SCTPhantom: An 18-Year-Old SCTP Asconf Transport Use-After-Free

SCTPhantom(CVE-2026-64564)은 Linux 커널 SCTP의 Dynamic Address Reconfiguration(ASCONF) 처리에서 발생하는 18년 된 use-after-free 취약점이다. 조작된 주소 파라미터와 순차적인 DEL-IP 작업으로 제거된 `sctp_transport` 포인터가 `primary_path`·`active_path`에 남아, 이후 `SCTP_STATUS` 같은 소켓 작업에서 해제된 객체를 역참조할 수 있다. 연구진은 이를 kmalloc 재할당, 커널 주소 누출, 4바이트 임의 커널 읽기, KASLR...

https://matrix.tencent.com/en/2026/08/06/sctphantom-CVE-2026-64564

SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free https://lobste.rs/s/wdnet3 #linux #security #vibecoding
https://matrix.tencent.com/en/2026/08/06/sctphantom-CVE-2026-64564

#Debian stable has a fix now: linux-image-6.12.101+deb13-amd64

- sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)

#CVE_2026_64564

SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free https://lobste.rs/s/wdnet3 #linux #security #vibecoding
https://matrix.tencent.com/en/2026/08/06/sctphantom-CVE-2026-64564

#Debian stable has a fix now: linux-image-6.12.101+deb13-amd64

- sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)

#CVE_2026_64564

Yet another linux LPE to root. "CVE-2026-64564: Linux SCTP ASCONF transport UAF leading to local privilege escalation and container escape"

https://www.openwall.com/lists/oss-security/2026/08/06/3

#CVE_2026_64564 #infosec #cybersecurity

Critical SSRF (CVE-2026-70332) in Microsoft SharePoint Online (CVSS 9.6) lets attackers send unauthorized network requests. Patch ASAP with the official fix: https://radar.offseq.com/threat/cve-2026-70332-cwe-918-server-side-request-forgery-ssrf-in-microsoft-microsoft-sharepoint-online-34600d2dd5541b7c #OffSeq #InfoSec #Microsoft #SSRF #CloudSecurity

🔴 CVE-2026-70332 - Critical (9.6)

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70332/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical SSRF (CVE-2026-70332) in Microsoft SharePoint Online (CVSS 9.6) lets attackers send unauthorized network requests. Patch ASAP with the official fix: https://radar.offseq.com/threat/cve-2026-70332-cwe-918-server-side-request-forgery-ssrf-in-microsoft-microsoft-sharepoint-online-34600d2dd5541b7c #OffSeq #InfoSec #Microsoft #SSRF #CloudSecurity

🔴 CVE-2026-70332 - Critical (9.6)

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70332/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-68823 - Critical (9.1)

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68823/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-68823 - Critical (9.1)

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68823/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-63508 - Critical (10)

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63508/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-63508 - Critical (10)

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63508/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62836 - High (8.7)

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62836/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62836 - High (8.7)

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62836/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62830 - Critical (9.9)

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62830/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62830 - Critical (9.9)

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62830/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-7406 - High (7.8)

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7406/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-7406 - High (7.8)

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7406/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71316 - High (7.5)

Nuxt is an open-source web development framework for Vue.js. From 4.4.0 until 4.5.1, runtime cache:nuxt:payload entries for //_payload.json can be returned before route middleware and page guards because import.meta.prerender is not enforced, disc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71316/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70638 - High (7.8)

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multiplies sizeof(llama_seq_id) by an attacker-controlled n_seq_max parameter without overflow validati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70638/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70638 - High (7.8)

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multiplies sizeof(llama_seq_id) by an attacker-controlled n_seq_max parameter without overflow validati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70638/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-70615 - Critical (9.9)

boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorized_keys file by supplying a percen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70615/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Simple Flatpak sandbox escape through pipewire:
1. Missing auth 2. Insecure default module loader

Vulns like these do not exist because devs lack the capability to look for them, but they lack the capacity.

I predict this class of issue will soon™️ cease to exist. LLM harnesses like the one used by Johann are getting productized at scale currently. The question is just how cheap can we make them and how quickly can we get them into CI pipelines.
https://embracethered.com/blog/posts/2026/pipewire-flatpak-linux-sandbox-escape-cve-2026-5674/

#AI #LLM #InfoSec

🟠 CVE-2026-53985 - High (7.5)

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53985/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53985 - High (7.5)

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53985/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-48088 | CRITICAL in open-reception appointment-booking-software <1.0.4: Missing authorization on crypto key API lets attackers decrypt appointments & disrupt flows. Patch to 1.0.4 now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe2ecc
#OffSeq #CVE202648088 #Vuln #AppSec

CVE-2026-48088 | CRITICAL in open-reception appointment-booking-software <1.0.4: Missing authorization on crypto key API lets attackers decrypt appointments & disrupt flows. Patch to 1.0.4 now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe2ecc
#OffSeq #CVE202648088 #Vuln #AppSec

🟠 CVE-2026-43622 - High (7.8)

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() deallocates it using the C++ delete operator, causing heap metadata co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-43622 - High (7.8)

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() deallocates it using the C++ delete operator, causing heap metadata co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA Reports Active Exploitation of Apache Tomcat RCE Vulnerability

CISA reports active exploitation of an Apache Tomcat vulnerability (CVE-2026-34486) to its KEV catalog after Chinese threat actors exploited a fail-open logic error in the EncryptInterceptor to achieve remote code execution.

**If you run Apache Tomcat with clustering enabled, upgrade ASAP to 9.0.117, 10.1.54, or 11.0.21 This flaw is being actively exploited and can give attackers full remote code execution on every node in the cluster. If you can't patch, make sure your cluster traffic ports are not reachable from the internet, check `server.xml` and `context.xml` to confirm EncryptInterceptor is active with no custom interceptors overriding it, and turn off plain HTTP in favour of HTTPS only.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-reports-active-exploitation-of-apache-tomcat-rce-vulnerability-t-a-b-r-8/gD2P6Ple2L

🚨 CISA KEV ALERT: CVE-2026-34486 exposes Apache Tomcat installations to EncryptInterceptor bypasses and data interception. Active exploitation confirmed. Get the forensic breakdown, Splunk/KQL/Chronicle detection queries, and hardening steps: https://thecybermind.co/it1p

Top-of-the-Line LinkedIn Post

🚨 [CISA-2026:0804] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-18556 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18556)
- Name: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: N-able
- Product: N-central
- Notes: https://uptime.n-able.com/ ; https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-18556

⚠️ CVE-2026-34486 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34486)
- Name: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Apache
- Product: Tomcat
- Notes: https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34486

⚠️ CVE-2026-9198 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9198)
- Name: IBM Langflow Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: IBM
- Product: Langflow
- Notes: https://www.ibm.com/support/pages/node/7278927 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-9198

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260804 #cisa20260804 #cve_2026_18556 #cve_2026_34486 #cve_2026_9198 #cve202618556 #cve202634486 #cve20269198

CVE ID: CVE-2026-34486
Vendor: Apache
Product: Tomcat
Date Added: 2026-08-04
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34486

🟠 CVE-2026-18359 - High (8.5)

Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to make the server issue arbitrary HTTP requests to internal hosts, including the cloud instance metada...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18359/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18359 - High (8.5)

Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to make the server issue arbitrary HTTP requests to internal hosts, including the cloud instance metada...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18359/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18258 - High (8.8)

Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via prim...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18258/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18258 - High (8.8)

Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via prim...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18258/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15991 - High (8.8)

The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible for authenticated attackers, with subscriber-l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15991/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71488 - High (7.5)

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71488/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71488 - High (7.5)

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71488/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17624 - High (8.5)

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17624/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17633 - High (8.5)

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17633/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8446 - High (7.5)

IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol (MCP) composer endpoint when mcp_composer_enabled=true (default) and projects are configured with auth_type=oauth .

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8446/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9077 - High (8.5)

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9077/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8478 - High (8.8)

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8478/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24084 - High (7.5)

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24084/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9196 - High (8.1)

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Python co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9196/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53977 - High (7.5)

OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authenti...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53977/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53977 - High (7.5)

OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authenti...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53977/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71312 - High (8)

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71312/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66712 - High (7.5)

Unauthenticated Broken Access Control in Simple Membership &lt;= 4.7.8 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66712/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66710 - High (8.1)

Unauthenticated Local File Inclusion in e2pdf &lt;= 1.32.40 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66710/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66447 - Critical (9.3)

Unauthenticated SQL Injection in WordPress File Upload &lt;= 5.1.7 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66447/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66447 - Critical (9.3)

Unauthenticated SQL Injection in WordPress File Upload &lt;= 5.1.7 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66447/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18953 - High (8.6)

Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18953/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15459 - High (8.1)

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.0. On sites not yet connected to the WPMU DEV Hub — the default state after installation — the site API key that keys ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15459/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

PoC exploit code is public for CVE-2026-20200, a Cisco IMC argument injection flaw enabling root RCE. CVSS 8.8. Patch details inside.

#Cisco #RCE #CVE #InfoSec #CyberSecurity

https://securityonline.info/cisco-imc-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

📰 Cisco Patches Critical IMC Flaw (CVE-2026-20200) with Public PoC

Cisco patches critical root-level RCE flaw (CVE-2026-20200) in its IMC server management software. A public PoC exploit is available, making attacks imminent. Unauthenticated attackers can take over UCS servers. Patch now! #Cisco #Vulnerability #PoC

🔗 https://cyber.netsecops.io/articles/cisco-patches-critical-root-level-imc-flaw-with-public-poc/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

🏆 New Achievement! Root Access: Now Available In Select Markets While Supplies Last!

TERMS AND CONDITIONS APPLY. Cisco IMC (CVE-2026-20200) is now eligible for the Root Prize Draw, in which any authenticated remote attacker — even one with low privileges, congratulations to them — may submit crafted inputs to the web-based management interface for a chance to execute arbitrary commands as root on your rack server. (1/3)

PoC exploit code is public for CVE-2026-20200, a Cisco IMC argument injection flaw enabling root RCE. CVSS 8.8. Patch details inside.

#Cisco #RCE #CVE #InfoSec #CyberSecurity

https://securityonline.info/cisco-imc-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🏆 New Achievement! Root Access: Now Available In Select Markets While Supplies Last!

TERMS AND CONDITIONS APPLY. Cisco IMC (CVE-2026-20200) is now eligible for the Root Prize Draw, in which any authenticated remote attacker — even one with low privileges, congratulations to them — may submit crafted inputs to the web-based management interface for a chance to execute arbitrary commands as root on your rack server. (1/3)

🔴 CVE-2026-20310 - Critical (9.1)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20310/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20313 - High (7.7)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20313/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco IOS XE vulnerability CVE-2026-20272 hits CVSS 9.8 and CVE-2026-20267 scores 9.0. Cisco urges customers to patch now.

#Cisco #IOSXE #CVE202620272 #CVE202620267 #CyberSecurity #NetworkSecurity

https://securityonline.info/cisco-ios-xe-cve-2026-20272/?utm_source=mastodon&utm_medium=jetpack_social

Cisco IOS XE vulnerability CVE-2026-20272 hits CVSS 9.8 and CVE-2026-20267 scores 9.0. Cisco urges customers to patch now.

#Cisco #IOSXE #CVE202620272 #CVE202620267 #CyberSecurity #NetworkSecurity

https://securityonline.info/cisco-ios-xe-cve-2026-20272/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-66665 - Critical (10)

Unauthenticated Arbitrary File Upload in Type Hub &lt;= 2.0.6 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66665/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66665 - Critical (10)

Unauthenticated Arbitrary File Upload in Type Hub &lt;= 2.0.6 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66665/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66709 - Critical (9.1)

Shop manager Remote Code Execution (RCE) in CTX Feed &lt;= 6.6.42 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66709/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66709 - Critical (9.1)

Shop manager Remote Code Execution (RCE) in CTX Feed &lt;= 6.6.42 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66709/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66708 - High (8.2)

Unauthenticated Broken Access Control in Total Upkeep &lt;= 1.17.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66708/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66708 - High (8.2)

Unauthenticated Broken Access Control in Total Upkeep &lt;= 1.17.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66708/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67261 - Critical (9.8)

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67261/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67261 - Critical (9.8)

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67261/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-65520 - Unpatched SQLi in WP OAuth Server <=6.2.0. CVSS 9.3. Unauthenticated attackers can exploit. Update immediately. #CVE #WordPress #infosec

https://www.valtersit.com/cve/CVE-2026-65520/

🔴 CVE-2026-65575 - Critical (9.8)

Unauthenticated PHP Object Injection in Accalia &lt;= 1.5.3 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65575/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-65575 - Critical PHP Object Injection in Accalia <= 1.5.3. Unauthenticated RCE possible. CVSS 9.8. No patch yet. Harden now and monitor. #CVE #infosec #Accalia

https://www.valtersit.com/cve/CVE-2026-65575/

🔴 CVE-2026-65575 - Critical (9.8)

Unauthenticated PHP Object Injection in Accalia &lt;= 1.5.3 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65575/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66662 - Critical (9.8)

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps &lt;= 3.29.10 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66662 - Critical (9.8)

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps &lt;= 3.29.10 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-65577 - Critical unauthenticated PHP object injection in Advice <=1.18.0. CVSS 9.8. No patch yet. Disable or isolate immediately. #CVE #infosec #cybersecurity

https://www.valtersit.com/cve/CVE-2026-65577/

CVE-2026-66733: HIGH severity vuln in Eukaryot sonic3air ≤26.03.28.0. Crafted UDP packets can force unbounded memory allocation, crashing the server (DoS, no RCE). Patch unconfirmed — check vendor. https://radar.offseq.com/threat/cve-2026-66733-memory-allocation-with-excessive-size-value-in-eukaryot-sonic3air-4d6f914f9dea29a1 #OffSeq #Vuln #DoS #sonic3air

CVE-2026-1728 | CRITICAL: WSO2 API Manager (v4.0.0 – 4.6.0) has an improper privilege management flaw. Low-privileged user tokens can access admin REST APIs — possible admin account takeover. Patch status unknown. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-1728-cwe-269-improper-privilege-management-in-wso2-wso2-api-manager-fea4a27d18a06e70 #OffSeq #WSO2 #Vuln

🟠 CVE-2026-70646 - High (7.5)

aiosend is a synchronous and asynchronous Crypto Pay API client. Pror to version 3.0.7, `WebhookHandler.feed_update()` deserializes the entire request body before verifying the HMAC signature. This allows an unauthenticated attacker to force expen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70646/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-69111 - High (7.5)

Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69111/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71321 - High (7.5)

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, the internal island renderer endpoint `/__nuxt_island/...` decodes and hashes attacker-controlled JSON body input with destr and ohash before validati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71321/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71320 - High (8.1)

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /__nuxt_island/ props into a dynamic component when `vue.runtimeCompiler: true` is enabled, causing temp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71320/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71314 - High (7.5)

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforToArray and , to trigger unbounded SSR memory allocation until MAX_VFOR_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71314/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67869 - High (7.5)

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input arguments against runtime-resolved InputArguments metadata

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67869/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WSO2 Universal Gateway v4.5.0 & 4.6.0 affected by CRITICAL CVE-2026-5430 (CVSS 10.0). Improper JWT validation enables account takeover. No patch yet — apply compensating controls. https://radar.offseq.com/threat/cve-2026-5430-cwe-347-improper-validation-of-certificate-with-host-mismatch-in-wso2-wso2-universal-f913080655427dd8 #OffSeq #WSO2 #JWT #Vulnerability

📰 JetBrains Patches Critical Unauthenticated RCE Flaw in TeamCity

🚨 CRITICAL ALERT: JetBrains patches CVE-2026-63077, a 9.8 CVSS unauthenticated RCE in TeamCity On-Premises. All versions affected. Exploit allows full server takeover. Upgrade immediately to prevent supply chain attacks! #TeamCity #CI/CD #CyberSecurity

🔗 https://cyber.netsecops.io/articles/jetbrains-patches-critical-unauthenticated-rce-flaw-cve-2026-63077-in-teamcity/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild https://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild https://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html

🚨 CSUITE THREAT ADVISORY: CISA confirms active exploitation of CVE-2026-63077 in JetBrains TeamCity. Unauthenticated RCE threatens core build pipelines & supply chain integrity. Get the executive governance, risk management, and compliance brief now: https://thecybermind.co/jvee

TeamCity vulnerability CVE-2026-63077 enables unauthenticated remote code execution. CISA added it to the KEV catalog amid active exploitation.

#TeamCity #CVE202663077 #RCE #CISA #KEV #CyberSecurity

https://securityonline.info/teamcity-cve-2026-63077-rce/?utm_source=mastodon&utm_medium=jetpack_social

🚨 CISA KEV ALERT: CVE-2026-63077 exposes JetBrains TeamCity servers to unauthenticated RCE via untrusted deserialization. Active exploitation confirmed. Get the forensic breakdown, CrowdStrike CQL detection logic, and CI/CD hardening steps: https://thecybermind.co/oapr

🚨 [CISA-2026:0805] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-63077 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63077)
- Name: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: JetBrains
- Product: TeamCity
- Notes: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/; https://www.jetbrains.com/privacy-security/issues-fixed/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-63077

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260805 #cisa20260805 #cve_2026_63077 #cve202663077

CVE ID: CVE-2026-63077
Vendor: JetBrains
Product: TeamCity
Date Added: 2026-08-05
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-63077

SUSE Rancher CVE-2026-44945 (CRITICAL, CVSS 9.1): Privilege escalation flaw lets authenticated users with default global role gain full admin on Rancher & clusters. Restrict access & monitor pending patch. https://radar.offseq.com/threat/cve-2026-44945-cwe-441-unintended-proxy-or-intermediary-confused-deputy-in-suse-rancher-9a7358d4ec1c0d9c #OffSeq #infosec #CVE202644945 #Kubernetes

🟠 CVE-2026-18485 - High (7.8)

There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.  This may allow a local, authenticated user to escalate privileges and execute arbitrary code.  This vulnerability affects NI-PAL 26.3.1 and p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18485/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67863 - High (7.5)

In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UA_Subscription_localPublish continues to use the current UA_Notification after a callback invokes UA_Server_deleteMonitoredIte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67863/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70432 - High (8.8)

A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70432/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-70426 - Critical (9)

In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, the JEP-200 class filter is not applied to classes resolved via a fallback path in the Remoting deserializa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70426/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical Jenkins vulnerability CVE-2026-70426 lets attackers bypass the JEP-200 filter and run code on the controller. Patch now.
#Jenkins #CVE202670426 #RCE #DevSecOps #Deserialization #CyberSecurity

https://securityonline.info/jenkins-cve-2026-70426-rce/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-70431 - High (8.8)

Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70431/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-34966 - High (7.6)

Gitea prior to 1.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to bypass SSRF protections by exploiting HTTP fetch operations in migration and OAuth avatar code paths that use Go's default http.Get w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17632 - High (8.8)

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17632/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18411 - High (8.1)

The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth range can leverage this weakness to issue unauthorized commands to the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18411/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17583 - High (8.4)

The affected

Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17583/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70617 - High (8.1)

Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without member...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70617/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8183 - High (7.7)

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote attacker to traverse directories on the system. An attacker could send a s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8183/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8182 - High (8.8)

IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8182/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9201 - High (8.8)

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to truste...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9201/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Nuxt DevTools <3.3.1 is affected by CVE-2026-71319 (CRITICAL). Unauthenticated Vite HMR WebSocket RPC lets attackers execute arbitrary code via updateOptions() & openInEditor(). Patch to 3.3.1 ASAP. https://radar.offseq.com/threat/cve-2026-71319-cwe-94-improper-control-of-generation-of-code-code-injection-in-nuxt-devtools-d2e93c140a0d8a9f #OffSeq #NuxtJS #CVE202671319 #infosec

🔴 CVE-2026-71319 - Critical (9.6)

Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (development mode only) exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel h...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71319/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71315 - High (8.2)

Nuxt is an open-source web development framework for Vue.js. From 3.21.7 until 3.21.10 and 4.5.1, mixed-case routeRules keys can fail to match case-folded lookups when router.options.sensitive is false and drop appMiddleware authorization gates. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71315/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Eclipse Milo (0.6.0 – 1.1.4) faces a CRITICAL flaw (CVE-2026-60007): error messages in username-token RSA PKCS#1 v1.5 handling enable padding oracle attacks, risking password compromise. Patch status unclear. https://radar.offseq.com/threat/cve-2026-60007-cwe-204-in-eclipse-foundation-eclipse-milo-bf23a775f0392e71 #OffSeq #EclipseMilo #Vuln #Infosec

FlowiseAI Flowise (<3.1.3) has a CRITICAL vuln (CVE-2026-70478): unauthenticated POST endpoint leaks refreshed OAuth tokens if credential ID is known. Upgrade to 3.1.3+ ASAP. https://radar.offseq.com/threat/cve-2026-70478-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-flowiseai-flowise-2c912baff770743c #OffSeq #CVE202670478 #OAuth #infosec

PraisonAI <4.6.40 is affected by CVE-2026-48168 (CRITICAL, CVSS 10): Missing authorization lets attackers exploit GitHub Actions, execute arbitrary shell commands, and compromise repos. Patch to 4.6.40! https://radar.offseq.com/threat/cve-2026-48168-cwe-862-missing-authorization-in-mervinpraison-praisonai-b6d133d881efd541 #OffSeq #CVE202648168 #SecDevOps

🔴 CVE-2026-48168 - Critical (10)

PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude GitHub Actions workflow is vulnerable to command injection because it embeds an attacker-controlled pull request branch name into a Bash run: block without qu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48168/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

pgAdmin 4 RCE Flaw Leads Three Critical Fixes in Version 9.17

http://securityonline.info/pgadmin-4-rce-flaw-cve-2026-17566/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-67861 - High (7.5)

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the UA_Client_getRemoteDataTypes component

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67861/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20312 - High (8.8)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20312/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco SD-WAN vulnerability CVE-2026-20303 and CVE-2026-20304 reach CVSS 9.9. Cisco urges Catalyst SD-WAN customers to patch now.
#Cisco #SDWAN #CVE202620303 #CVE202620304 #CyberSecurity #NetworkSecurity

https://securityonline.info/cisco-sd-wan-cve-2026-20303/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-20301 - High (8.6)

A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20301/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco SD-WAN vulnerability CVE-2026-20303 and CVE-2026-20304 reach CVSS 9.9. Cisco urges Catalyst SD-WAN customers to patch now.
#Cisco #SDWAN #CVE202620303 #CVE202620304 #CyberSecurity #NetworkSecurity

https://securityonline.info/cisco-sd-wan-cve-2026-20303/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-45537 - Critical (9.1)

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function concatenates multiple URI components (protocol, username, domain, port, params) into a fixed 1024-byte gl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45537/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71289 (CRITICAL, CVSS 9.8): NASA-AMMOS ANMS exposes amp-manager REST API w/ no auth. Remote attackers can control system & disrupt ops. Restrict access, avoid default configs, check vendor for patches. https://radar.offseq.com/threat/cve-2026-71289-cwe-306-in-nasa-ammos-anms-e9bcfd162464d056 #OffSeq #CVE #NASA #Infosec

🟠 CVE-2026-71287 - High (8.8)

Cacti's sanitize_sql_column() (lib/functions.php) sanitizes user-supplied ORDER BY column names using the regex `preg_replace('/[^a-zA-Z0-9_().]/', '', $column)`. Because this allowlist retains letters, digits, underscore, parentheses, and dot (in...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71287/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71285 - High (8.1)

Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo `siteId` value as a bare, unquoted JavaScript expression inside a block rendered on every public status page: `_paq.push(['set...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71285/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

@ben For CVE-2026-71269:
• The CVE record was assigned and published by the relevant CNA
• Our platform reflects NVD data as-is, with no modifications
• We have no authority to retract or alter CVE records

🟠 CVE-2026-67859 - High (7.5)

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67859/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18897 - High (8.8)

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18897/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71294 - High (7.6)

Cotonti CMS's Comments plugin deserializes user-supplied data without restricting the classes that may be instantiated. In plugins/comments/controllers/actions/CreateAction.php, a `ci` POST parameter obtained via `cot_import('ci', 'P', 'TXT')` (tr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71294/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67857 - High (7.5)

open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() in src/client/ua_client_connect.c.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67857/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MaxSite CMS 0.78 is vulnerable (CVE-2026-70554, CRITICAL): PHP object injection via maxsite_comuser cookie enables unauthenticated RCE. No patch available. Restrict access, deploy WAF, and monitor activity. https://radar.offseq.com/threat/cve-2026-70554-deserialization-of-untrusted-data-in-maxsite-maxsite-cms-e8db7f34d62a5e30 #OffSeq #Vuln #CMS #PHP #RCE

🟠 CVE-2026-70486 - High (8.2)

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, the terminal file-preview serveUrl iframe branch always granted allow-same-origin together with allow-scripts for HTML files served from...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70486/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

FlowiseAI Flowise <3.1.3 is affected by CRITICAL CVE-2026-70477 (code injection, CVSS 9.5). Exploitation via CSV Agent node allows arbitrary Python execution. Patch to 3.1.3+ ASAP. https://radar.offseq.com/threat/cve-2026-70477-cwe-94-improper-control-of-generation-of-code-code-injection-in-flowiseai-flowise-52ff32a90a84fd22 #OffSeq #Infosec #CVE #AppSec

🟠 CVE-2026-67858 - High (7.5)

Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled through the MDNSD backend. An unauthenticated remote attacker can send a RegisterServer or RegisterServer2 requ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67858/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-66747: a Zbtlink router backdoor named ENDLESSDOORS gives unauthenticated remote code execution as root. No fix exists. CVSS 9.8.

#Zbtlink #RouterBackdoor #CVE #IoT #CyberSecurity

https://securityonline.info/zbtlink-router-backdoor/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-66747: a Zbtlink router backdoor named ENDLESSDOORS gives unauthenticated remote code execution as root. No fix exists. CVSS 9.8.

#Zbtlink #RouterBackdoor #CVE #IoT #CyberSecurity

https://securityonline.info/zbtlink-router-backdoor/?utm_source=mastodon&utm_medium=jetpack_social

Today, VulnCheck is disclosing #ENDLESSDOORS, a phone-home implant CTO @albinolobster discovered in Zbtlink routers. ENDLESSDOORS starts automatically, runs with root privileges, and attempts to connect to command-and-control infrastructure roughly every 35 seconds. The backdoor ships by default across 20+ Zbtlink router models, which are white-labeled and sold on popular retail sites including Amazon, AliExpress, and Alibaba.

The implant and server implement no encryption or verification, meaning anyone along the network path can hijack the client-server communication and obtain a root shell on the device, regardless of the router's network position.

The VulnCheck CNA has assigned CVE-2026-66747 to track backdoored firmware versions; our blog also has guidance for defenders, including affected firmware images, hashes, network indicators, a YARA rule, and network signatures (Suricata / Snort).

https://www.vulncheck.com/blog/zbt-endlessdoors

🟠 CVE-2026-18895 - High (8.8)

A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18895/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71214: NASA-AMMOS plandev sequencing-server has a CRITICAL vuln (CVSS 9.8) — unauthenticated users can inject commands by spoofing session roles or using whitelisted endpoints. Patch urgently. More: https://radar.offseq.com/threat/cve-2026-71214-cwe-306-missing-authentication-for-critical-function-in-nasa-ammos-plandev-sequencing-a69c1ea44211854b #OffSeq #Vuln #NASA #CyberSec #CVSS

CVE-2026-71254: CRITICAL out-of-bounds write in debevv nanoMODBUS (≤v1.23.0). Unauthenticated FC 0x14 requests can cause memory corruption, leading to DoS or RCE — especially on embedded targets. Patch/mitigate now. https://radar.offseq.com/threat/cve-2026-71254-cwe-787-in-debevv-nanomodbus-649361bc8788d305 #OffSeq #CVE #ICS #infosec

CVE-2026-4431: CRITICAL vuln in Easy Post Submission ≤2.3.0 for WordPress. Missing auth lets unauthenticated attackers modify or unpublish any post via AJAX. No patch yet — disable plugin if possible. https://radar.offseq.com/threat/cve-2026-4431-cwe-862-missing-authorization-in-themeruby-easy-post-submission-frontend-posting-guest-a356c334d549556e #OffSeq #WordPress #Vuln #CVE20264431

Kadence Memberships (stellarwp) ≤4.0.0 suffers CRITICAL vuln (CVE-2026-9273, CVSS 9.3): attackers can hijack any account by poisoning password reset links. Restrict reset features & monitor for patches. https://radar.offseq.com/threat/cve-2026-9273-cwe-640-weak-password-recovery-mechanism-for-forgotten-password-in-stellarwp-membership-10c6cffc948a3c97 #OffSeq #WordPress #Vuln #Security

🟠 CVE-2026-18898 - High (8.8)

A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument timestart results in stack-based buffer overflow. The attack can be l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Actively Exploited IBM Langflow Vulnerability Allows Unauthenticated Remote Code Execution

IBM Langflow OSS injection vulnerability (CVE-2026-9198)is actively exploited. CISA has added the flaw to its Known Exploited Vulnerabilities catalog and requires immediate patching/

**If you run IBM Langflow OSS (versions 1.0.0 through 1.10.0), update to version 1.10.1 or later immediately. Attackers are already using this flaw to take over servers. If you can't update immediately, take the Langflow instance off the internet, and check your logs for unexpected superuser tokens or odd Python code being run.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/actively-exploited-ibm-langflow-vulnerability-allows-unauthenticated-remote-code-execution-1-k-n-g-e/gD2P6Ple2L

🚨 CISA KEV ALERT: CVE-2026-9198 identifies a critical unauthenticated code injection flaw in IBM Langflow allowing full RCE on default deployments. Active exploitation confirmed. Get the execution mechanics, CrowdStrike CQL detection, and compensating controls now: https://thecybermind.co/fi0v

🚨 [CISA-2026:0804] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-18556 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18556)
- Name: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: N-able
- Product: N-central
- Notes: https://uptime.n-able.com/ ; https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-18556

⚠️ CVE-2026-34486 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34486)
- Name: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Apache
- Product: Tomcat
- Notes: https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34486

⚠️ CVE-2026-9198 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9198)
- Name: IBM Langflow Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: IBM
- Product: Langflow
- Notes: https://www.ibm.com/support/pages/node/7278927 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-9198

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260804 #cisa20260804 #cve_2026_18556 #cve_2026_34486 #cve_2026_9198 #cve202618556 #cve202634486 #cve20269198

CVE ID: CVE-2026-9198
Vendor: IBM
Product: Langflow
Date Added: 2026-08-04
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-9198

CVE-2026-6837 - Post-auth command injection in Zyxel WAX650S export-cgi. Admin RCE. CVSS 7.2. Unpatched - restrict admin access now. #CVE #Zyxel #infosec

https://www.valtersit.com/cve/CVE-2026-6837/

Veeam Patches Critical Credential Theft and RCE Flaws in Service Provider Console

Veeam patched four vulnerabilities in its Service Provider Console, including critical flaws (CVE-2026-58073 and CVE-2026-58072) that allow unauthenticated credential theft and remote code execution.

**If you run Veeam Service Provider Console version 9.2.1.33875 or any earlier version 9 build, upgrade to version 9.3.0.35057 ASAP. These flaws let attackers take over the console that controls all of your customers' backups. Make sure to lock down the management portal so it's only reachable from a small list of trusted IP addresses, not the open internet.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/veeam-patches-critical-credential-theft-and-rce-flaws-in-service-provider-console-y-k-8-e-6/gD2P6Ple2L

A high-severity Django vulnerability, CVE-2026-15307, can enable remote code execution through spatial lookups. Update to Django 6.0.8 or 5.2.17 now.

#Django #DjangoSecurity #CVE202615307 #RCE #RemoteCodeExecution #Vulnerability #Python #WebSecurity #InfoSec #CyberSecurity

https://securityonline.info/django-vulnerability-cve-2026-15307-rce/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-70619 - High (8.8)

Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70619/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-70553: CRITICAL RCE in MaxSite CMS 105.2 (CVSS 9.3). Attackers can inject PHP via POST to the install endpoint, gaining persistent code exec as www-data. Restrict endpoint & monitor traffic until patched. Details: https://radar.offseq.com/threat/cve-2026-70553-improper-control-of-generation-of-code-code-injection-in-maxsite-maxsite-cms-5161bdfb2e6804e9 #OffSeq #CVE #websecurity #RCE

🔴 CVE-2026-70553 - Critical (9.8)

MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arbitrary PHP code into the application configuration file by submitting crafted POST requests to the install endpoint after installation is...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70553/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CISA KEV ALERT: CVE-2026-18556 exposes N-able N-central installations to authentication bypass via alternate channel paths. Active exploitation confirmed. Get the forensic breakdown, Splunk/KQL/Chronicle detection logic, and hardening guidance now: https://thecybermind.co/radr

🚨 [CISA-2026:0804] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0804)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-18556 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18556)
- Name: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: N-able
- Product: N-central
- Notes: https://uptime.n-able.com/ ; https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-18556

⚠️ CVE-2026-34486 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34486)
- Name: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Apache
- Product: Tomcat
- Notes: https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34486

⚠️ CVE-2026-9198 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9198)
- Name: IBM Langflow Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: IBM
- Product: Langflow
- Notes: https://www.ibm.com/support/pages/node/7278927 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-9198

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260804 #cisa20260804 #cve_2026_18556 #cve_2026_34486 #cve_2026_9198 #cve202618556 #cve202634486 #cve20269198

CVE ID: CVE-2026-18556
Vendor: N-able
Product: N-central
Date Added: 2026-08-04
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-18556

CISA added this vulnerability to the catalogue yesterday, if you missed it:

CVE-2026-18577: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-18577

Arctic Wolf: CVE-2026-18556 / CVE-2026-18577: N-able N-central Authentication Bypass Vulnerabilities Require Immediate Patching https://arcticwolf.com/resources/blog/cve-2026-18556-cve-2026-18577/ #infosec #vulnerability #CISA

🔴 CVE-2026-69703 - Critical (9.8)

Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espace_admin/controleur/ that allows unauthenticated attackers to bypass session-based authentication guards by sending raw HTTP requests that ignore redi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69703/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49435 - Critical (9.8)

Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitrary code with administrative privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49435/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70482 - High (8.1)

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENABLE_OAUTH_TOKEN_EXCHANGE=True, /oauth/{provider}/token/exchange accepts a raw provider access token and validates it by calling ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70482/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

NVIDIA Dynamo Code Execution Flaw CVE-2026-24254 CVSS 9.8

https://securityonline.info/nvidia-dynamo-code-execution-flaw/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-18830 - Issue with Amazon Bedrock AgentCore harness – Insufficient Input Validation

Bulletin ID: 2026-073-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/04/2026 10:00 AM PDT
Description:
We have identified CVE-2026-18830 in the Amazon Bedrock AgentCore harness InvokeHarness API...

https://aws.amazon.com/security/security-bulletins/rss/2026-073-aws/

#aws #security

A critical Veeam ONE vulnerability, CVE-2026-64633, allows remote unauthenticated code execution at CVSS 10.0. Update to build 13.1.0.7034 now.

#Veeam #VeeamONE #CVE202664633 #RCE #RemoteCodeExecution #Vulnerability #CVSS10 #PatchNow #CyberSecurity #InfoSec

https://securityonline.info/veeam-one-cve-2026-64633-rce/?utm_source=mastodon&utm_medium=jetpack_social

Veeam Patches Critical Credential Theft and RCE Flaws in Service Provider Console

Veeam patched four vulnerabilities in its Service Provider Console, including critical flaws (CVE-2026-58073 and CVE-2026-58072) that allow unauthenticated credential theft and remote code execution.

**If you run Veeam Service Provider Console version 9.2.1.33875 or any earlier version 9 build, upgrade to version 9.3.0.35057 ASAP. These flaws let attackers take over the console that controls all of your customers' backups. Make sure to lock down the management portal so it's only reachable from a small list of trusted IP addresses, not the open internet.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/veeam-patches-critical-credential-theft-and-rce-flaws-in-service-provider-console-y-k-8-e-6/gD2P6Ple2L

A critical Veeam Service Provider Console flaw lets attackers steal agent credentials, while a second enables remote code execution. Update to 9.3 now.

#Veeam #VSPC #ServiceProviderConsole #CVE202658073 #RCE #RemoteCodeExecution #Vulnerability #MSP #CyberSecurity #InfoSec

https://securityonline.info/veeam-vspc-cve-2026-58073/?utm_source=mastodon&utm_medium=jetpack_social