🟠 CVE-2026-9011 - High (7.5)

The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65. This is due to the plugin not properly verifying that a user is authorized to perfor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9011/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9018 - High (8.8)

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the `easyel_handle_register()` function. This is due to the `wp_ajax_nopriv_e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9018/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-4834 - High (7.5)

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4834/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CVE-2026-34908 (CVSS 10.0): Ubiquiti UniFi OS Server has a critical improper access control flaw, allowing unauthenticated remote compromise. No patch yet — restrict network access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-34908-cwe-284-improper-access-control-gen-70db5de1 #OffSeq #UniFi #Vuln #BlueTeam

🔴 CVE-2026-34908 - Critical (10)

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34908/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

After a wave of Linux LPEs being disclosed over the past weeks, we now have one in FreeBSD, this one with a special name of "FatGid" or CVE-2026-45250

https://fatgid.io/

🟠 CVE-2026-45250 - High (7.8)

The setcred(2) system call is only available to privileged users. However, before the privilege level of the caller is checked, the user-supplied list of supplementary groups is copied into a fixed-size kernel stack buffer without first validatin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45250/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CRITICAL: CVE-2026-9264 in Trimble SketchUp 2026 allows RCE & file exfiltration via malicious SKP files (Dynamic Components, IE11 browser). No patch yet. Avoid untrusted SKP files. More: https://radar.offseq.com/threat/cve-2026-9264-cwe-94-improper-control-of-generatio-9d9e29a0 #OffSeq #SketchUp #Vuln #InfoSec

🟠 CVE-2026-34911 - High (7.7)

A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to obtain sensitive information.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34911/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CVE-2026-34910: CRITICAL improper input validation in Ubiquiti UniFi OS Server allows unauthenticated command injection (CVSS 10.0). No patch yet. Restrict network access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-34910-cwe-20-improper-input-validation-in-54cb0e00 #OffSeq #Vuln #Ubiquiti #Infosec

🔴 CVE-2026-34910 - Critical (10)

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34910/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 CRITICAL: CVE-2026-34909 - Path Traversal in Ubiquiti UniFi OS Server (CVSS 10). Allows arbitrary file access & manipulation. No patch yet — restrict access & monitor! Details: https://radar.offseq.com/threat/cve-2026-34909-cwe-22-path-traversal-in-ubiquiti-i-4d93b8c5 #OffSeq #UniFi #Vuln #BlueTeam

🔴 CVE-2026-34909 - Critical (10)

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34909/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-33000 - Critical (9.1)

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33000/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CVE-2026-33000 (CVSS 9.1): Ubiquiti UniFi OS Server has a critical improper input validation flaw. High-privileged attackers on the network can execute command injection. Mitigation steps not published yet. Stay tuned: https://radar.offseq.com/threat/cve-2026-33000-cwe-20-improper-input-validation-in-983d26ac #OffSeq #Infosec #UniFiOS

🔴 CVE-2026-6960 - Critical (9.8)

The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'bookingpress_validate_submitted_booking_form_func' function in all versions up to, and including, 5.6. This makes it poss...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6960/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CRITICAL: CVE-2026-6960 in BookingPress Appointment Booking Pro (≤5.6) allows unauthenticated file uploads — risk of RCE! Remove signature fields & monitor uploads. No patch yet — stay vigilant. https://radar.offseq.com/threat/cve-2026-6960-cwe-434-unrestricted-upload-of-file--eb314579 #OffSeq #WordPress #Vulnerability #CyberAlert

🚩 HIGH severity: CVE-2026-46473 in Authen::TOTP (<0.1.1, Perl) — secrets generated with rand are predictable, weakening TOTP security. Upgrade to 0.1.1+ when possible. More: https://radar.offseq.com/threat/cve-2026-46473-cwe-331-insufficient-entropy-in-tch-3d3628d8 #OffSeq #Vulnerability #Perl #MFA #CVE202646473

🟠 CVE-2026-46473 - High (7.5)

Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand.

Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-46473/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47102 - High (8.8)

LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47102/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47101 - High (8.8)

LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes field is stored without verifying that the specified routes fall wit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47101/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47114 - High (8.8)

IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote attackers to execute arbitrary commands by supplying malicious mpv_-prefixed query parameters through the iina://open custom URL scheme handler. Attacker...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47114/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-34926.

Security Week: TrendAI Patches Apex One Zero-Day Exploited in the Wild https://www.securityweek.com/trendai-patches-apex-one-zero-day-exploited-in-the-wild/ @SecurityWeek #infosec #vulnerability

Trend Micro Patches Actively Exploited Directory Traversal in Apex One

Trend Micro patched eight vulnerabilities in Apex One and Vision One, including a directory traversal flaw (CVE-2026-34926) that is exploited in the wild to inject malicious code into security agents.

**If you're using Trend Micro Apex One (on-premise) or Vision One, you are under attack. Immediately update to the patched versions (SP1 CP Build 18012 / SP1 Build 17079 for on-premise, or agent build 14.0.20731+ for cloud) since one of its flaws is actively exploited to push malware through your own security tools. Even if the exploited flaw requires authentication, obviously that is not difficult to obtain for hackers.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/trend-micro-patches-actively-exploited-directory-traversal-in-apex-one-r-u-9-l-z/gD2P6Ple2L

🚨 [CISA-2026:0521] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0521)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-34291 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-34291)
- Name: Langflow Origin Validation Error Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Langflow
- Product: Langflow
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/langflow-ai/langflow ; https://github.com/langflow-ai/langflow/releases/tag/v1.9.3; https://github.com/langflow-ai/langflow/issues/11465#event-25774545848 ; https://nvd.nist.gov/vuln/detail/CVE-2025-34291

⚠️ CVE-2026-34926 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34926)
- Name: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Trend Micro
- Product: Apex One
- Notes: https://success.trendmicro.com/en-US/solution/KA-0023430 ; https://nvd.nist.gov/vuln/detail/CVE-2026-34926

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260521 #cisa20260521 #cve_2025_34291 #cve_2026_34926 #cve202534291 #cve202634926

CVE ID: CVE-2026-34926
Vendor: Trend Micro
Product: Apex One
Date Added: 2026-05-21
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34926

EITW ../ in Trend Micro Apex One. :brdAlert:

https://success.trendmicro.com/en-US/solution/KA-0023430

CVE-2026-34926

TrendAI has released updates to Apex One (on-premise), Apex One as a Service and Vision One - Standard Endpoint Protection (SEP) to resolve multiple vulnerabilities.

🚨 [CISA-2026:0521] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0521)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2025-34291 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-34291)
- Name: Langflow Origin Validation Error Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Langflow
- Product: Langflow
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/langflow-ai/langflow ; https://github.com/langflow-ai/langflow/releases/tag/v1.9.3; https://github.com/langflow-ai/langflow/issues/11465#event-25774545848 ; https://nvd.nist.gov/vuln/detail/CVE-2025-34291

⚠️ CVE-2026-34926 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-34926)
- Name: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Trend Micro
- Product: Apex One
- Notes: https://success.trendmicro.com/en-US/solution/KA-0023430 ; https://nvd.nist.gov/vuln/detail/CVE-2026-34926

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260521 #cisa20260521 #cve_2025_34291 #cve_2026_34926 #cve202534291 #cve202634926

CVE ID: CVE-2025-34291
Vendor: Langflow
Product: Langflow
Date Added: 2026-05-21
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2025-34291

🟠 CVE-2026-24217 - High (8.8)

NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24217/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CRITICAL: CVE-2026-48207 in Apache Fory <1.0.0 — Deserialization flaw in PyFory ReduceSerializer bypasses DeserializationPolicy, risking RCE if strict mode is off. Upgrade to 1.0.0+ ASAP! https://radar.offseq.com/threat/cve-2026-48207-cwe-502-deserialization-of-untruste-97a80f2c #OffSeq #CVE202648207 #Vulnerability #ApacheFory

🔴 CVE-2026-48207 - Critical (9.8)

Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass documented DeserializationPolicy validation hooks during reduce-state restoration and global-name resolution. An application is vulnerable if it deseri...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48207/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9089 - High (8.8)

The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations. This issue is addressed in Automate 2026.5.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9089/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CRITICAL: Open ISES Tickets <3.44.2 has hardcoded MySQL creds in loader.php (CVE-2026-48241), exposing DBs to attack if reachable. Restrict file & DB access, rotate creds now. No official fix yet. https://radar.offseq.com/threat/cve-2026-48241-use-of-hard-coded-credentials-in-op-e794805b #OffSeq #Vulnerability #MySQL #AppSec

🟠 CVE-2026-48241 - High (8.1)

Open ISES Tickets before 3.44.2 contains hardcoded MySQL database credentials in loader.php (a public-facing database utility) that are committed to the source repository. Any actor with access to the public source tree (or an unauthenticated atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48235 - High (8.2)

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in incs/remotes.inc.php where latitude, longitude, callsign, mph, altitude, and timestamp values parsed from external GPS tracking service XML/JSON responses (InstaMapper and G...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48235/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CRITICAL: CVE-2026-48242 in Open ISES Tickets <3.44.2 — Hardcoded MySQL creds in public code could enable unauthorized DB access. No patch yet. Rotate creds & review deployments immediately. https://radar.offseq.com/threat/cve-2026-48242-use-of-hard-coded-credentials-in-op-348559d8 #OffSeq #Vulnerability #InfoSec #CVE202648242

🟠 CVE-2026-45251 - High (7.8)

A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descriptor. Because the blocked thread does not hold a reference to the underlying object, this closure may result in the object being freed...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45251/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45253 - High (8.4)

ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls. As a result, a user with the ability to debug a process may trigger arbitrary code execution in the kernel, even if the target proc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45253/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45255 - High (7.5)

When bsdinstall or bsdconfig are prompted to scan for nearby Wi-Fi networks, they build up a list of network names and use bsddialog(1) to prompt the user to select a network. This is implemented using a shell script, and the code which handled n...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45255/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8632 - High (7.8)

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8632/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-8631 - Critical (9.8)

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8631/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44925 - High (8.8)

Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clicking a malicious HTML link, which triggers unintended modifications on VIOM web app...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44925/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47373 - High (7.5)

Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks.

These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47373/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-47372 - Critical (9.1)

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts.

These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47372/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

🟠 CVE-2026-2740 - High (8.4)

Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote code execution in the agent machines due to the bug in the 3rd party dependency.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2740/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-24218 - High (8.1)

NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cryptographic identifiers across all similarly pro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24218/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-13479 - High (7.5)

Authorization bypass through User-Controlled key vulnerability in PosCube Hardware Software and Consulting Ltd. QR Menu allows Exploitation of Trusted Identifiers.

This issue affects QR Menu: through 21052026. NOTE: The vendor was contacted earl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-13479/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Drupal Critical SQL Injection Vulnerability Under Active Exploitation as CISA Issues Urgent Warning + Video

Introduction A newly disclosed security flaw in Drupal Core has rapidly escalated into a major cybersecurity concern after active exploitation attempts were detected worldwide only days after disclosure. The vulnerability, tracked as CVE-2026-9082, has now been officially added to the U.S. Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited…

https://undercodenews.com/drupal-critical-sql-injection-vulnerability-under-active-exploitation-as-cisa-issues-urgent-warning-video/?utm_source=mastodon&utm_medium=jetpack_social

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

CVE-2026-9082: Critical Drupal Core SQL Injection Vulnerability | Tenable® #devopsish https://www.tenable.com/blog/cve-2026-9082-highly-critical-sql-injection-vulnerability-in-drupal-core-sa-core-2026-004

@apz LOL very timely, just on that note, say hello to CVE-2026-9082
Not that I would trust Drupal or any other modern or ancient CMS any longer than I could throw it.

Drupal Critical SQL Injection Flaw Actively Exploited

Drupal is urging immediate updates to patch CVE-2026-9082, an SQL injection vulnerability in the database abstraction API that is exploited in the wild. The flaw allows unauthenticated attackers to perform remote code execution and data theft on sites using PostgreSQL.

**If you run Drupal, update to the latest version immediately because hackers are already using this flaw to take over websites. Even if you do not use PostgreSQL, the update fixes other hidden security holes in the software's building blocks like Symfony and Twig.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/drupal-critical-sql-injection-flaw-actively-exploited-y-u-f-p-q/gD2P6Ple2L

🔍 Drupal Core SQL Injection Vulnerability Added to KEV Catalog

📝 Drupal Core CVE-2026-9082 exploited, poses significant risk to federal networks.

https://www.cisa.gov/news-events/alerts/2026/05/22/cisa-adds-one-known-exploited-vulnerability-catalog

📰 Alerts

#CVE #ZeroDay

🚨 [CISA-2026:0522] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0522)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-9082 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- Name: Drupal Core SQL Injection Vulnerability
- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Drupal
- Product: Core
- Notes: https://www.drupal.org/sa-core-2026-004 ; https://nvd.nist.gov/vuln/detail/CVE-2026-9082

#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260522 #cisa20260522 #cve_2026_9082 #cve20269082

CVE ID: CVE-2026-9082
Vendor: Drupal
Product: Core
Date Added: 2026-05-22
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-9082

Keys to the Kingdom: Anonymous SQL Injection in Drupal Core (CVE-2026-9082) https://slcyber.io/research-center/keys-to-the-kingdom-anonymous-sql-injection-in-drupal-core-cve-2026-9082/

Drupal Sites Targeted in SQL Injection Attacks

Drupal sites are under attack as SQL injection exploits are now being detected in the wild, taking advantage of a vulnerability that can be triggered without authentication. This critical flaw, CVE-2026-9082, allows attackers to execute arbitrary SQL and potentially run remote code, putting sites that use PostgreSQL at risk.

https://osintsights.com/drupal-sites-targeted-in-sql-injection-attacks?utm_source=mastodon&utm_medium=social

#SqlInjection #Drupal #Cve20269082 #EmergingThreats #ArbitraryCodeExecution

Faille Drupal critique : injection SQL via PostgreSQL (CVE-2026-9082)

👉 https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0629/

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

🟠 CVE-2026-9157 - High (8.4)

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion.

This issue affects Web Fax: from 3.0 before 3.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9157/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44052 - High (7.5)

Netatalk 2.1.0 through 4.4.2 inserts LDAP simple-bind passwords into log output in cleartext, which allows an attacker with access to the log files to obtain LDAP credentials.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44051 - High (8.1)

An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read arbitrary files or overwrite arbitrary files via attacker-controlled symlink creation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44051/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-44050 - Critical (9.9)

A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause a denial of service.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44050/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44049 - High (7.5)

An out-of-bounds write due to improper null termination in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service via crafted character data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44049/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44048 - High (8.8)

A stack-based buffer overflow via UCS-2 type confusion in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44048/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44062 - High (7.5)

A missing output length bounds check in pull_charset_flags() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service via crafted character set data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44062/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44055 - High (7.5)

A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44055/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-5118 - Critical (9.8)

The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2. This is due to the plugin accepting a user-controlled 'role' parameter from POST data during user registration without valida...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5118/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71217 - High (7.8)

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71217/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71216 - High (7.8)

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71216/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71214 - High (7.8)

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71214/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

🔴 CVE-2025-71211 - Critical (9.8)

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71211/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71213 - High (7.8)

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71213/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71212 - High (7.8)

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71212/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-71211 - Critical (9.8)

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71211/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2025-71210 - Critical (9.8)

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.

Please note: although this vulnerability carries a technical critical CVSS rat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71210/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-34930 - High (7.8)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism.

Please note: an ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34930/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-34930 - High (7.8)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different process protection mechanism.

Please note: an ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34930/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-34929 - High (7.8)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism.

Please ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34929/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-34928 - High (7.8)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism.

Please not...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-34927 - High (7.8)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34927/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-34929 - High (7.8)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism.

Please ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34929/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-34928 - High (7.8)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism.

Please not...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34928/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45206 - High (7.8)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism.

Pl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45206/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45207 - High (7.8)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism.

Pl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45207/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45206 - High (7.8)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism.

Pl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45206/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45207 - High (7.8)

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism.

Pl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45207/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45208 - High (7.8)

A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45208/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Local Root Privilege Escalation and Credential Disclosure in the Linux Kernel https://blog.qualys.com/vulnerabilities-threat-research/2026/05/20/cve-2026-46333-local-root-privilege-escalation-and-credential-disclosure-in-the-linux-kernel-ptrace-path

Researchers disclosed CVE-2026-46333, a Linux kernel flaw present since 2016 that enables local users to access sensitive files and execute commands as root. 🐧
Qualys said Debian, Fedora and Ubuntu default installs are affected, while admins are urged to patch kernels and rotate exposed SSH keys. 🔑

🔗 https://thehackernews.com/2026/05/9-year-old-linux-kernel-flaw-enables.html

#TechNews #Linux #Kernel #CVE202646333 #CVE #Cybersecurity #Qualys #Ubuntu #Debian #Fedora #OpenSource #FOSS #Security #Exploit #Infosec #SysAdmin #Privacy #SSH #Admin

Linux fans, please tell me you have updated your machine for "CVE-2026-46333: Local Root Privilege Escalation and Credential Disclosure in the Linux Kernel ptrace Path", right… right!?

I have no words.

---
9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros

https://thehackernews.com/2026/05/9-year-old-linux-kernel-flaw-enables.html?m=1

> CVE-2026-46333 is a nine-year Linux kernel improper privilege management flaw introduced in November 2016 with a CVSS score of 5.5.

#Qualys #Security #Advisory

Logic bug in the #Linux kernel's __ptrace_may_access() function
(CVE-2026-46333)

https://cdn2.qualys.com/advisory/2026/05/20/cve-2026-46333-ptrace.txt

🔴 CVE-2026-5433 - Critical (9.1)

Honeywell Control
Network Module (CNM) contains command injection vulnerability
in the web interface. An attacker could exploit this vulnerability via command
delimiters, potentially resulting in Remote Code Execution (RCE).

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5433/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44068 - High (7.6)

Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to write to files outside the intended metadata namespace via crafted EA names.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44068/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44060 - High (7.5)

An integer underflow in dsi_writeinit() in Netatalk 1.5.0 through 4.4.2 allows a remote unauthenticated attacker to cause a denial of service via a crafted DSI write request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44060/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44047 - High (8.8)

An SQL injection vulnerability in the MySQL CNID backend in Netatalk 3.1.0 through 4.4.2 allows a remote authenticated attacker to obtain unauthorized access to data, modify data, or cause a denial of service.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44047/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

LiteSpeed cPanel Plugin Zero-Day Exploited for Root Access

LiteSpeed Technologies patched a critical, actively exploited vulnerability (CVE-2026-48172, CVSS 10.0) in its cPanel plugin that allows any user to run scripts with root privileges. Attackers are currently using this flaw to gain full control over web hosting servers.

**If you use LiteSpeed on cPanel immediately upgrade to LiteSpeed WHM Plugin version 5.3.1.0 (which includes the patched cPanel plugin v2.4.7) or temporarily uninstall the user-end plugin to prevent a complete server takeover. Run the grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null command, block suspicious IPs, and audit your system. If you can't update right away, uninstall the user-end plugin to prevent a total server takeover.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/litespeed-cpanel-plugin-zero-day-exploited-for-root-access-6-l-t-k-n/gD2P6Ple2L

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

https://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html

Read on HackerWorkspace: https://hackerworkspace.com/article/litespeed-cpanel-plugin-cve-2026-48172-exploited-to-run-scripts-as-root

#cybersecurity #vulnerability #exploit

🔴 CVE-2026-42960 - Critical (10)

NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section. Promiscuous RRSets that complement DNS replies in the authority section can be used to trick Unbound to cache such ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42960/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42959 - High (7.5)

NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies. When Unbound constructs chase-reply messages for validation, the code us...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42959/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-42944 - High (7.5)

NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet. The relevant options ('nsid', 'answe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-42944/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-41292 - High (7.5)

NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options. An adversary sending queries with too many EDNS options can hold Unbound threads hostage...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41292/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-33278 - Critical (9.8)

NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying a data structure and erroneously overwriting a d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33278/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44926 - High (8.8)

InfoScale CmdServer before 7.4.2 mishandles access control.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44926/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

Microsoft Patches Actively Exploited Defender Vulnerabilities Affecting Enterprise Systems

Microsoft has confirmed active exploitation of two security vulnerabilities in its security ecosystem, identified as CVE-2026-41091 and...

🔗️ [Thecyberexpress] https://link.is.it/oRM68F

Microsoft Patches Actively Exploited Defender Vulnerabilities

Microsoft and CISA confirmed active exploitation of vulnerabilities in Microsoft Defender, including a privilege escalation flaw (CVE-2026-41091) and a denial-of-service bug (CVE-2026-45498).

**Check that your Microsoft Defender engine version is 1.1.26040.8 or higher to ensure you are protected against these active exploits. While updates are usually automatic, manual verification is necessary for critical systems to confirm the patches were applied.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/microsoft-patches-actively-exploited-defender-vulnerabilities-0-b-g-y-f/gD2P6Ple2L

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

Microsoft Patches Actively Exploited Defender Vulnerabilities

Microsoft and CISA confirmed active exploitation of vulnerabilities in Microsoft Defender, including a privilege escalation flaw (CVE-2026-41091) and a denial-of-service bug (CVE-2026-45498).

**Check that your Microsoft Defender engine version is 1.1.26040.8 or higher to ensure you are protected against these active exploits. While updates are usually automatic, manual verification is necessary for critical systems to confirm the patches were applied.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/microsoft-patches-actively-exploited-defender-vulnerabilities-0-b-g-y-f/gD2P6Ple2L

Cisco Secure Workload Flaw CVE-2026-20223 Gets Maximum CVSS 10 Rating

Cisco has released security updates to fix a critical vulnerability, tracked as CVE-2026-20223, affecting its Cisco Secure Workload platform. The

🔗️ [Thecyberexpress] https://link.is.it/oVchv5

New Nightmare Eclipse account is at https://gitlab.com/nightmare-eclipse

"You defame me in public with your CVE-2026-45585 advisory even though you literally deleted the Microsoft account I used to report bugs to you with and I got zero pennies from doing so and I still happily did like an idiot.

Now you take the courtesy to flag my github account and wipe it out of the public, just like that ?

Mark this date July 14th, I will make sure your bones are shattered that day."
#threatintel

YellowKey: BitLocker Bypass or Backdoor

YellowKey, tracked as CVE-2026-45585, is a public BitLocker bypass that abuses WinRE/recovery-path behavior to expose a protected volume without the Windows password, recovery key, or AES cracking.

At the time of this post, the author’s GitHub and original YellowKey repo appear to be down.

Read more: https://forum.hashpwn.net/post/13339

#BitLocker #YellowKey #CVE202645585 #CyberSecurity #InfoSec #WindowsSecurity #TPM #FullDiskEncryption #hack #exploit #news #hashpwn

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

📈 CVE Published in last 7 days (2026-05-18 - 2026-05-25)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs: 962

Severity:
- Critical: 85
- High: 252
- Medium: 316
- Low: 63
- None: 246

Status:
- : 213
- Analyzed: 170
- Awaiting Analysis: 62
- Deferred: 309
- Modified: 24
- Received: 103
- Rejected: 5
- Undergoing Analysis: 76

Top CNAs:
- N/A: 213
- VulnCheck: 86
- Wordfence: 71
- GitHub, Inc.: 59
- ConcreteCMS: 41
- MITRE: 37
- securin: 33
- Mozilla Corporation: 32
- Mattermost, Inc.: 24
- Apache Software Foundation: 22

Top Affected Products:
- UNKNOWN: 746
- Mozilla Firefox: 32
- Mozilla Thunderbird: 29
- Mattermost Server: 17
- Apache Ofbiz: 17
- Google Chrome: 16
- Nlnetlabs Unbound: 10
- Nvidia Triton Inference Server: 8
- Freebsd: 7
- Samba Rsync: 6

Top EPSS Score:
- CVE-2026-9082 - 12.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9082)
- CVE-2026-41091 - 5.22 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)
- CVE-2026-45498 - 3.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)
- CVE-2026-2740 - 1.25 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-2740)
- CVE-2026-8774 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8774)
- CVE-2026-8777 - 1.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8777)
- CVE-2026-9102 - 0.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-9102)
- CVE-2026-26978 - 0.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-26978)
- CVE-2026-36829 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-36829)
- CVE-2025-71211 - 0.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2025-71211)

Microsoft Exchange-Server Zero-Day Angriffe

Der Exchange-Server von Microsoft (MS) ist die zentrale Schaltstelle für sämtliche organisatorischen Aufgaben im MS-Biotop: E-Mails, Kalender, Kontakte. Im Normalfall wird mit Outlook auf den Exchange-Server zugegrriffen. Outlook hat eine besonders "komfortable" Erweiterung namens Outlook Web Access (OWA). Die ermöglicht es einem Angreifer, durch eine präparierte E-Mail die Sicherheitslücke CVE-2026-42897 im Exchange-Server auszunutzen. Das Opfer muss die Mail nur in OWA öffnen. Die Lücke wird bereits für Angriffe ausgenutzt. Bisher gibt es keinen Flicken gegen diese Sicherheitslücke. Was

https://www.pc-fluesterer.info/wordpress/2026/05/25/microsoft-exchange-server-zero-day-angriffe/

#Empfehlung #Hintergrund #Warnung #0day #cybercrime #Microsoft #office #outlook #sicherheit #unplugMicrosoft #UnplugTrump #windows

CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox - VoidSec

https://voidsec.com/cve-2026-40369-browser-sandbox-escape/

Read on HackerWorkspace: https://hackerworkspace.com/article/cve-2026-40369-twelve-bytes-to-escape-the-browser-sandbox-voidsec

#cybersecurity #vulnerability #exploit

I thought Palo was part of the Mythos seekrit cabal platform and also had their own advanced AI BS that protected enterprises from everything.

Given that, how does CVE-2026-0265 — an at-scale PAN-OS CAS Authentication Bypass — happen now?

Seems like Mythos isn't all its cracked up to be?

I thought Palo was part of the Mythos seekrit cabal platform and also had their own advanced AI BS that protected enterprises from everything.

Given that, how does CVE-2026-0265 — an at-scale PAN-OS CAS Authentication Bypass — happen now?

Seems like Mythos isn't all its cracked up to be?

@menos @wabetainfo @mysk

This macOS bug made it easy to exfiltrate WhatsApp chats. If it was encrypted , you'd need more tricks to decrypt the data:

https://mysk.blog/2026/05/19/cve-2026-28910/

@menos @wabetainfo @mysk

This macOS bug made it easy to exfiltrate WhatsApp chats. If it was encrypted , you'd need more tricks to decrypt the data:

https://mysk.blog/2026/05/19/cve-2026-28910/

CVE-2026-28910: Breaking macOS App Sandbox Data Containers, TCC, and Hijacking Apps Using Archive Utility https://mysk.blog/2026/05/19/cve-2026-28910/

RE: https://mastodon.social/@wollman/116615093350624840

@distrowatch @kaidenshi @brnrd

<https://vuxml.freebsd.org/freebsd/30bda1c3-369b-11f1-b51c-6dd25bec137b.html> for CVE-2026-1502, one of the five vulnerable ports is deprecated but not yet expired.

295200 – lang/python314: Update to 3.14.5 — <https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295200>

285957 – lang/python312 as default python — <https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=285957>

Cc @dvl

Really feels like @dvl and I are the only people who actually read our #FreeBSD package security alerts, given the apparent complete lack of urgency on the part of anyone else to fix the two-months-outstanding lang/python* CVEs like CVE-2026-1502.

CVE-2026-34474: Pre-auth #credential disclosure in #ZTE #H298A / #H108N via #ETHCheat...The short version: an ETHCheat branch returns credential-bearing #HTML before #authentication. The captured fields include the #admin #password, WLAN PSK, and ESSID, and a companion wizard #endpoint #exposes serial data.

#cybersecurity #cybersec #security #exploited

@simontatham Oh, excellent! Now the patch management system I have at work will stop moaning about CVE-2026-4115.

How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102) https://securelist.com/exiftool-compromise-mac/119866/

Na CONFidence 2026 Michał kończy właśnie opowieść o krytycznych lukach, które umożliwiały zalogowanie się na konto dowolnego obywatela w wielu kluczowych systemach administracji publicznej, a @zaufanatrzeciastrona opublikowała przed chwilą cykl artykułów jego autorstwa, dokładnie wyjaśniający problem. Zdecydowanie polecam (zarwałam noc, żeby je na czas skorygować ;-))

👉 Zdalne wykonanie kodu w SzafirHost – [CVE-2026-26928] [Badanie e-podpisów, cz. 1] – https://zaufanatrzeciastrona.pl/post/zdalne-wykonanie-kodu-w-szafirhost-cve-2026-26928-badanie-e-podpisow-cz-1/
👉 Hakowanie e-Sądu YubiKeyem – [Badanie e-podpisów, cz. 2] – https://zaufanatrzeciastrona.pl/post/hakowanie-e-sadu-yubikeyem-badanie-e-podpisow-cz-2/
👉 Ominięcie uwierzytelniania w ZUS-ie i systemach e-Zdrowia, czyli o krok od cyberchaosu – [CVE-2026-9058] [Badanie e-podpisów, cz. 3] – https://zaufanatrzeciastrona.pl/post/ominiecie-uwierzytelniania-w-zus-ie-i-systemach-e-zdrowia-czyli-o-krok-od-cyberchaosu-cve-2026-9058-badanie-e-podpisow-cz-3/
👉 Podsumowanie: Krytyczna podatność umożliwiająca całkowite ominięcie logowania w ZUS-ie, e-Sądzie i systemach e-Zdrowia – https://zaufanatrzeciastrona.pl/post/podsumowanie-krytyczna-podatnosc-umozliwiajaca-calkowite-ominiecie-logowania-w-zus-ie-e-sadzie-i-systemach-e-zdrowia/

#cyberbezpieczenstwo #cybersecurity #confidence

Michał odkrył sposób na logowanie jako dowolny użytkownik do eZUS-u, E-Sądu, eZdrowia i innych rządowych systemów. Poczytajcie, bo to najgrubsze odkrycie tego roku w PL
1. https://zaufanatrzeciastrona.pl/post/zdalne-wykonanie-kodu-w-szafirhost-cve-2026-26928-badanie-e-podpisow-cz-1/
2. https://zaufanatrzeciastrona.pl/post/hakowanie-e-sadu-yubikeyem-badanie-e-podpisow-cz-2/
3. https://zaufanatrzeciastrona.pl/post/ominiecie-uwierzytelniania-w-zus-ie-i-systemach-e-zdrowia-czyli-o-krok-od-cyberchaosu-cve-2026-9058-badanie-e-podpisow-cz-3/
4. https://zaufanatrzeciastrona.pl/post/podsumowanie-krytyczna-podatnosc-umozliwiajaca-calkowite-ominiecie-logowania-w-zus-ie-e-sadzie-i-systemach-e-zdrowia/

Na CONFidence 2026 Michał kończy właśnie opowieść o krytycznych lukach, które umożliwiały zalogowanie się na konto dowolnego obywatela w wielu kluczowych systemach administracji publicznej, a @zaufanatrzeciastrona opublikowała przed chwilą cykl artykułów jego autorstwa, dokładnie wyjaśniający problem. Zdecydowanie polecam (zarwałam noc, żeby je na czas skorygować ;-))

👉 Zdalne wykonanie kodu w SzafirHost – [CVE-2026-26928] [Badanie e-podpisów, cz. 1] – https://zaufanatrzeciastrona.pl/post/zdalne-wykonanie-kodu-w-szafirhost-cve-2026-26928-badanie-e-podpisow-cz-1/
👉 Hakowanie e-Sądu YubiKeyem – [Badanie e-podpisów, cz. 2] – https://zaufanatrzeciastrona.pl/post/hakowanie-e-sadu-yubikeyem-badanie-e-podpisow-cz-2/
👉 Ominięcie uwierzytelniania w ZUS-ie i systemach e-Zdrowia, czyli o krok od cyberchaosu – [CVE-2026-9058] [Badanie e-podpisów, cz. 3] – https://zaufanatrzeciastrona.pl/post/ominiecie-uwierzytelniania-w-zus-ie-i-systemach-e-zdrowia-czyli-o-krok-od-cyberchaosu-cve-2026-9058-badanie-e-podpisow-cz-3/
👉 Podsumowanie: Krytyczna podatność umożliwiająca całkowite ominięcie logowania w ZUS-ie, e-Sądzie i systemach e-Zdrowia – https://zaufanatrzeciastrona.pl/post/podsumowanie-krytyczna-podatnosc-umozliwiajaca-calkowite-ominiecie-logowania-w-zus-ie-e-sadzie-i-systemach-e-zdrowia/

#cyberbezpieczenstwo #cybersecurity #confidence

Michał odkrył sposób na logowanie jako dowolny użytkownik do eZUS-u, E-Sądu, eZdrowia i innych rządowych systemów. Poczytajcie, bo to najgrubsze odkrycie tego roku w PL
1. https://zaufanatrzeciastrona.pl/post/zdalne-wykonanie-kodu-w-szafirhost-cve-2026-26928-badanie-e-podpisow-cz-1/
2. https://zaufanatrzeciastrona.pl/post/hakowanie-e-sadu-yubikeyem-badanie-e-podpisow-cz-2/
3. https://zaufanatrzeciastrona.pl/post/ominiecie-uwierzytelniania-w-zus-ie-i-systemach-e-zdrowia-czyli-o-krok-od-cyberchaosu-cve-2026-9058-badanie-e-podpisow-cz-3/
4. https://zaufanatrzeciastrona.pl/post/podsumowanie-krytyczna-podatnosc-umozliwiajaca-calkowite-ominiecie-logowania-w-zus-ie-e-sadzie-i-systemach-e-zdrowia/

CVE-2013-0422 - Changed to Known Ransomware Status

Oracle JRE Remote Code Execution VulnerabilityVendor: OracleProduct: Java Runtime Environment (JRE)A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.Status changed from Unknown to Known for ransomware campaign usage.Flip detected on: May 21, 2026 at 18:00:35 UTCDate Added to KEV: 2022-05-25View CVE https://nvd.nist.gov/vuln/detail/CVE-2013-0422

Mandiant Exposes KnowledgeDeliver Vulnerability via ViewState Deserialization

A critical vulnerability, CVE-2026-5426, was discovered in KnowledgeDeliver installations, allowing unauthenticated remote code execution across multiple customer sites due to identical ASP.NET machineKey values. This widespread flaw was caused by a standardized web.config with hardcoded keys,…

https://osintsights.com/mandiant-exposes-knowledgedeliver-vulnerability-via-viewstate-deserialization?utm_source=mastodon&utm_medium=social

#ViewstateDeserializationVulnerability #Knowledgedeliver #Cve20265426 #Aspnet #RemoteCodeExecution

CVE-2025-41240 - Critical Supply Chain Attack in Bitnami Helm charts. Kubernetes secrets exposed at predictable path /opt/bitnami/*/secrets within web root. CVSS 10. Unauthenticated access to sensitive credentials via HTTP/S. Patch unknown but immediate action required. #CVE #Kubernetes #infosec

https://www.valtersit.com/cve/CVE-2025-41240/

CVE-2025-58355 - Critical RCE in Soft Serve. SSH API allows arbitrary file write. CVSS 7.7. Fixed in v0.10.0. Update immediately. #CVE #infosec #Git

https://www.valtersit.com/cve/CVE-2025-58355/

SonicWall warned in a security advisory for CVE-2024-12802 that installing the firmware update alone on Gen6 devices does not fully mitigate the vulnerability, and a manual reconfiguration of the LDAP server is required. https://www.bleepingcomputer.com/news/security/hackers-bypass-sonicwall-vpn-mfa-due-to-incomplete-patching/

“Patchato” non significa protetto: attaccanti bypassano l’MFA sui VPN SonicWall Gen6 e raggiungono i file server in 30 minuti

https://insicurezzadigitale.com/patchato-non-significa-protetto-attaccanti-bypassano-lmfa-sui-vpn-sonicwall-gen6-e-raggiungono-i-file-server-in-30-minuti/

Ghost CMS Flaw Exploited to Hijack Over 700 Sites in ClickFix Attacks

Over 700 websites were hijacked in a massive campaign that exploited a critical Ghost CMS vulnerability, turning legitimate pages into gateways for Windows malware. This alarming attack was made possible by CVE-2026-26980, an SQL injection flaw with a near-perfect CVSS score of 9.4.

https://osintsights.com/ghost-cms-flaw-exploited-to-hijack-over-700-sites-in-clickfix-attacks?utm_source=mastodon&utm_medium=social

#GhostCms #Cve202626980 #SqlInjection #Clickfix #WindowsMalware

Ghost CMS SQL Injection Flaw Exploited in Global ClickFix Malware Campaign

A critical SQL injection vulnerability in Ghost CMS (CVE-2026-26980) is being exploited to steal administrative keys and inject malicious 'ClickFix' scripts into over 700 websites. The campaign targets high-profile domains to deliver malware by tricking visitors into running malicious commands in their system terminal.

**If you run a Ghost CMS site, this is urgent. Check your version and update to version 6.19.1 or later. Then rotate all API keys and staff passwords since any credentials from before the patch may already be compromised. Also review your published articles for unauthorized scripts and check API logs for signs of suspicious activity.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/ghost-cms-sql-injection-flaw-exploited-in-global-clickfix-malware-campaign-d-m-c-f-3/gD2P6Ple2L

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

Ghost CMS의 CVE-2026-26980 SQL 인젝션 취약점이 대규모 ClickFix 캠페인에서 악용되어, 공격자가 관리자 API 키를 탈취하고 악성 자바스크립트를 삽입해 방문자를 속이는 공격이 발생했다. 주요 대학과 AI/SaaS 기업 등 700개 이상의 도메인이 영향을 받았으며, 취약점은 6.19.1 버전에서 패치되었으나 많은 사이트가 업데이트하지 않아 피해가 확산되었다. 관리자들은 즉시 최신 버전으로 업그레이드하고 키를 교체하며...

https://www.bleepingcomputer.com/news/security/ghost-cms-sql-injection-flaw-exploited-in-large-scale-clickfix-campaign/

"A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows.

The campaign was discovered by XLab threat intelligence researchers at Chinese cybersecurity company Qianxin, who confirmed impact on more than 700 domains, including university portals, AI/SaaS companies, media outlets, fintech firms, security sites, and personal blogs.

According to the researchers, threat actors planted malicious code on the websites of Harvard University, Oxford University, Auburn University, and DuckDuckGo."

https://www.bleepingcomputer.com/news/security/ghost-cms-sql-injection-flaw-exploited-in-large-scale-clickfix-campaign/

Ghost CMS SQL Injection Flaw Exploited in Global ClickFix Malware Campaign

A critical SQL injection vulnerability in Ghost CMS (CVE-2026-26980) is being exploited to steal administrative keys and inject malicious 'ClickFix' scripts into over 700 websites. The campaign targets high-profile domains to deliver malware by tricking visitors into running malicious commands in their system terminal.

**If you run a Ghost CMS site, this is urgent. Check your version and update to version 6.19.1 or later. Then rotate all API keys and staff passwords since any credentials from before the patch may already be compromised. Also review your published articles for unauthorized scripts and check API logs for signs of suspicious activity.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/ghost-cms-sql-injection-flaw-exploited-in-global-clickfix-malware-campaign-d-m-c-f-3/gD2P6Ple2L

"A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows.

The campaign was discovered by XLab threat intelligence researchers at Chinese cybersecurity company Qianxin, who confirmed impact on more than 700 domains, including university portals, AI/SaaS companies, media outlets, fintech firms, security sites, and personal blogs.

According to the researchers, threat actors planted malicious code on the websites of Harvard University, Oxford University, Auburn University, and DuckDuckGo."

https://www.bleepingcomputer.com/news/security/ghost-cms-sql-injection-flaw-exploited-in-large-scale-clickfix-campaign/

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that...

🔗️ [Bleepingcomputer] https://link.is.it/2YwlcW

XLab researchers show how threat actors exploited CVE-2026-26980 to compromise Ghost CMS, causing numerous websites to become accomplices in ClickFix attacks. https://blog.xlab.qianxin.com/ghost-cms-page-poisoning-cve-2026-26980/

Thanks again! Yeah the read access from the SQL injection allowed exfiltration of admin API keys at which point game over. I don't see any malicious themes or changes to the theme file ... instead it seems like it was the vulnerability descried in https://blog.xlab.qianxin.com/ghost-cms-mass-compromised-via-cve-2026-26980-now-fueling-clickfix-attacks/ (which I don't think had been published yet when I was doing the cleanup, or at least I didn't find it in my searching). Basically the hack edited every posts to put in a script in the "codeinjection_footer" field that brings the payload in from a malware site.

There aren't any obvious signs of LPE exploitation but who knows ... another good argument for spinning up a new instance.

@mildsunrise @JadedBlueEyes @thenexusofprivacy@gotosocial.thenexus.today