🟠 CVE-2026-12252 - High (7.8)

In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulnerable to untrusted JAR code execution. These cla...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12252/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12252 - High (7.8)

In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulnerable to untrusted JAR code execution. These cla...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12252/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71380 - High (8.8)

The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node to run malicious commands, potentially leading ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71380/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71380 - High (8.8)

The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node to run malicious commands, potentially leading ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71380/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71375 - High (8.1)

picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads using _operator.methodcaller that evade detection and execute arbitr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71375/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71375 - High (8.1)

picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads using _operator.methodcaller that evade detection and execute arbitr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71375/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71373 - High (8.1)

picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle payloads using operator.methodcaller that execute arbitrary co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71373/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71373 - High (8.1)

picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle payloads using operator.methodcaller that execute arbitrary co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71373/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71372 - High (8.1)

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded, bypa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71372/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71372 - High (8.1)

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded, bypa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71372/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71356 - High (8.1)

picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression function calls in pickle files. Attackers can embed undetected code in pickle files that executes remote code when loaded ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71356/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71356 - High (8.1)

picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression function calls in pickle files. Attackers can embed undetected code in pickle files that executes remote code when loaded ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71356/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14605 - High (7.8)

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1c_can.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buff...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14605/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14605 - High (7.8)

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1c_can.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buff...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14605/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-58426 | CRITICAL in Gitea 1.22.0: Ambiguous HMAC signing enables cross-repo artifact reads & cross-task upload tampering. No patch available — restrict access, monitor activity. Details: https://radar.offseq.com/threat/cve-2026-58426-cwe-347-in-gitea-gitea-open-source--93937e1ae55d7b31 #OffSeq #CVE202658426 #Gitea #infosec

CVE-2026-58426 | CRITICAL in Gitea 1.22.0: Ambiguous HMAC signing enables cross-repo artifact reads & cross-task upload tampering. No patch available — restrict access, monitor activity. Details: https://radar.offseq.com/threat/cve-2026-58426-cwe-347-in-gitea-gitea-open-source--93937e1ae55d7b31 #OffSeq #CVE202658426 #Gitea #infosec

CVE-2026-57986 - Use After Free in Microsoft Edge. Unauthorized network RCE. CVSS 7.5. No patch available. Monitor closely. #CVE #MicrosoftEdge #infosec

https://www.valtersit.com/cve/CVE-2026-57986/

CVE-2026-57984 - Use After Free in Microsoft Edge. Unauthorized RCE over network. CVSS 7.5. No patch available. Mitigate now. #CVE #MicrosoftEdge #infosec

https://www.valtersit.com/cve/CVE-2026-57984/

🟠 CVE-2026-14606 - High (7.8)

A security flaw has been discovered in RT-Thread up to 5.0.2. Affected by this issue is the function CAN_Receive in the library bsp/synwit/libraries/SWM341_CSL/CMSIS/DeviceSupport/SWM341.h of the component SWM341 CAN Handler. Performing a manipula...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14606/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14606 - High (7.8)

A security flaw has been discovered in RT-Thread up to 5.0.2. Affected by this issue is the function CAN_Receive in the library bsp/synwit/libraries/SWM341_CSL/CMSIS/DeviceSupport/SWM341.h of the component SWM341 CAN Handler. Performing a manipula...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14606/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Root-Zugriff ist möglich: Exploits zu CVE-2026-46331 (Linux-Kernel) wurden geleakt und betreffen u.a. Debian, Ubuntu & RHEL. Ein Patch ist teils schon drin, Updates fehlen aber noch nicht überall—Admins sollten schnell absichern. 🔧🚨 https://www.golem.de/news/root-zugriff-moeglich-exploits-fuer-gefaehrliche-luecke-im-linux-kernel-geleakt-2606-210283.html #Linux #Security #CVE #SysAdmin

📢 CVE-2026-46331 ' pedit COW ' : élévation de privilèges root dans le noyau Linux
📝 ## 🔍 Contexte

Source : The Hacker News, publiée le 26 juin 2026.
📖 cyberveille : https://cyberveille.ch/posts/2026-06-29-cve-2026-46331-pedit-cow-elevation-de-privileges-root-dans-le-noyau-linux/
🌐 source : https://thehackernews.com/2026/06/new-linux-pedit-cow-exploit-enables.html
#CVE_2026_46331 #IOC #Cyberveille

🟠 CVE-2026-14459 - High (8.8)

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection.

This issue affects pardus-software: from <= ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14459/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14459 - High (8.8)

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection.

This issue affects pardus-software: from <= ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14459/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-49815 - OS Command Injection in Dell PowerProtect Data Domain. CVSS 7.2. High-privilege remote attack. No patch available yet. Monitor and restrict access immediately. #CVE #Dell #infosec

https://www.valtersit.com/cve/CVE-2026-49815/

🟠 CVE-2026-14460 - High (8.8)

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection.

This issue affects pardus-software: from <= 1.0.4 before 1.0.5.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14460/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14460 - High (8.8)

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection.

This issue affects pardus-software: from <= 1.0.4 before 1.0.5.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14460/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

KongHQ mcp-konnect (<1.0.0) has a HIGH severity flaw (CVE-2026-13341, CVSS 7.4) allowing remote prompt injection with risk to confidentiality. No patch — monitor vendor updates. https://radar.offseq.com/threat/cve-2026-13341-cwe-20-improper-input-validation-in-a1d90aa86cfef676 #OffSeq #KongHQ #Infosec #Vulnerability

CVE-2026-13341 - Unauthorized access in Kong Konnect MCP server. Indirect prompt injection could lead to unintended API requests. CVSS 7.4. No patch yet. Monitor and mitigate immediately. #CVE #Kong #infosec

https://www.valtersit.com/cve/CVE-2026-13341/

KongHQ mcp-konnect (<1.0.0) has a HIGH severity flaw (CVE-2026-13341, CVSS 7.4) allowing remote prompt injection with risk to confidentiality. No patch — monitor vendor updates. https://radar.offseq.com/threat/cve-2026-13341-cwe-20-improper-input-validation-in-a1d90aa86cfef676 #OffSeq #KongHQ #Infosec #Vulnerability

CVE-2026-14544: CRITICAL integer overflow in HPLIP (RHEL 10) enables remote code execution or privilege escalation via crafted print data 🖨️. Patch status not confirmed. Stay updated: https://radar.offseq.com/threat/cve-2026-14544-integer-overflow-or-wraparound-in-r-d57463ec7bf8b710 #OffSeq #CVE202614544 #LinuxSecurity

CVE-2026-14544: CRITICAL integer overflow in HPLIP (RHEL 10) enables remote code execution or privilege escalation via crafted print data 🖨️. Patch status not confirmed. Stay updated: https://radar.offseq.com/threat/cve-2026-14544-integer-overflow-or-wraparound-in-r-d57463ec7bf8b710 #OffSeq #CVE202614544 #LinuxSecurity

CRITICAL: CVE-2026-9725 in Printcart Web to Print Product Designer for WooCommerce ≤2.5.2 enables unauthenticated file deletion via path traversal. No patch yet — restrict AJAX endpoints & monitor logs. https://radar.offseq.com/threat/cve-2026-9725-cwe-22-improper-limitation-of-a-path-a96c709af943903a #OffSeq #WordPress #CVE2026_9725 #PathTraversal

🟠 CVE-2026-14432 - High (8.8)

Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14432/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14428 - High (8.3)

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14428/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14426 - High (7.5)

Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14426/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-14424: HIGH severity use-after-free in Chrome (Mac <150.0.7871.46) enables sandbox escape via crafted HTML. Update to 150.0.7871.46+ now. https://radar.offseq.com/threat/cve-2026-14424-use-after-free-in-google-chrome-1a17c58d72224f47 #OffSeq #Chrome #Infosec #Vuln

🔴 CVE-2026-14420 - Critical (9.6)

Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14420/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-14416 - Critical (9.6)

Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14416/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL use-after-free in Chrome ANGLE (CVE-2026-14398) enables remote sandbox escape via crafted HTML. Affected: versions before 150.0.7871.46. Patch ASAP! Details: https://radar.offseq.com/threat/cve-2026-14398-use-after-free-in-google-chrome-da42cd40eed38355 #OffSeq #Chrome #Vuln #CVE202614398

WatchGuard Firebox vulnerabilities include a critical unauthenticated RCE (CVE-2026-13368, CVSS 9.2) plus six more Fireware OS flaws. Patch now.

#WatchGuard #Firebox #CVE202613368 #FirewareOS #CyberSecurity

https://securityonline.info/watchguard-firebox-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-13368 (CRITICAL, CVSS 9.2): WatchGuard Fireware OS LDAP auth flaw in Mobile VPN with IKEv2 allows remote code execution (iked process). Disable affected configs or restrict access until patch. https://radar.offseq.com/threat/cve-2026-13368-cwe-416-use-after-free-in-watchguar-10bc07017e60512c #OffSeq #WatchGuard #CVE202613368 #Infosec

🟠 CVE-2026-54998 - High (8.8)

Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54998/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-45499 - Critical (9.9)

Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45499/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-13768: Gardyn Home Firmware (CRITICAL, CVSS 10) exposes a privileged iothubowner key, enabling attackers to control devices & move laterally on networks. No patch yet. Monitor and segment IoT devices. https://radar.offseq.com/threat/cve-2026-13768-cwe-798-in-gardyn-gardyn-home-firmw-08332214fc38f3ba #OffSeq #IoTSecurity #CVE202613768

🔴 CVE-2026-57100 - Critical (9.9)

Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57100/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-41106 - Critical open redirect in M365 Copilot. Unpatched. CVSS 9.3. Attackers can elevate privileges via URL redirection. Update immediately. #CVE #Microsoft #infosec

https://www.valtersit.com/cve/CVE-2026-41106/

A public PoC is available for CVE-2026-57517, a critical CVSS 9.8 Control Web Panel SQLi flaw allowing unauthenticated remote code execution.

#CVE202657517 #ControlWebPanel #SQLInjection #CyberSecurity #Vulnerability

https://securityonline.info/cve-2026-57517-control-web-panel-sqli/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-58460 - High (7.7)

react-native-receive-sharing-intent contains a path traversal vulnerability that allows a co-resident malicious application to write files outside the intended cache directory by supplying a crafted _display_name value containing dot-dot path comp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58460/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-52830 - Critical (9.4)

fast-mcp-telegram is a Telegram MCP Server. Prior to 0.19.1, fast-mcp-telegram validates HTTP Bearer tokens by joining the raw token string into a session-file path. The verifier rejects the exact reserved token telegram, but it does not reject pa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52830/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59099 - Critical (9.1)

Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers to recover plaintext conversation state by exploiting AES-GCM initialization vector reuse across the server lifetime. Attackers c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59099/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Google Patches Maximum-Severity RCE Vulnerability in Gemini CLI and GitHub Actions

Google patched a maximum-severity RCE vulnerability (CVE-2026-12537) in Gemini CLI and its GitHub Action that allowed attackers to execute host-level commands via malicious workspace configurations. The flaw exploited implicit trust in headless CI/CD environments to steal secrets and compromise build pipelines.

**If you use the Gemini CLI or its GitHub Action in your development pipelines, immediately upgrade to Gemini CLI version 0.39.1 (or 0.40.0-preview.3) and the run-gemini-cli action to version 0.1.22 to patch CVE-2026-12537. Only enable workspace trust for repositories you fully control. Review your automated workflows to make sure they never run shell commands on untrusted inputs.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/google-patches-maximum-severity-rce-vulnerability-in-gemini-cli-and-github-actions-c-g-6-4-g/gD2P6Ple2L

Seven Apache Tomcat vulnerabilities are patched, including an authentication bypass (CVE-2026-55957). Update to a fixed Tomcat release now.

#ApacheTomcat #Tomcat #CVE202655957 #AuthenticationBypass #JNDIRealm #WebServerSecurity #Vulnerability

https://securityonline.info/apache-tomcat-vulnerabilities-cve-2026-55957/?utm_source=mastodon&utm_medium=jetpack_social

A WinRAR vulnerability (CVE-2026-14191) causes a heap overflow via crafted .rev recovery files. Update WinRAR and UnRAR to version 7.23 now.

#WinRAR #UnRAR #CVE202614191 #HeapOverflow #RAR5 #RARLAB #Vulnerability

https://securityonline.info/winrar-vulnerability-cve-2026-14191/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-44941 - High (8.4)

A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a malicious repository to inject or overwrite files in the target system as root.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44941/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14430 - High (8.8)

Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14430/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-58455 - Critical (9.8)

Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit() after an authentication redirect in loader.php combined with u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58455/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Multiple Langflow OSS vulnerabilities, including the critical CVE-2026-10134 flaw, expose servers to code execution. Patch immediately.

#Langflow #Vulnerabilities #CyberSecurity #CVE202610134 #InfoSec

https://securityonline.info/langflow-oss-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Multiple Langflow OSS vulnerabilities, including the critical CVE-2026-10134 flaw, expose servers to code execution. Patch immediately.

#Langflow #Vulnerabilities #CyberSecurity #CVE202610134 #InfoSec

https://securityonline.info/langflow-oss-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-55112 - High (7.5)

A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55112/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-56842 - High (7.5)

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56842/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-56004 - Critical (10)

A shellcode injection in the mercurial handler of the obs tar_scm source service before version 0.12.4 could be used by attackers able to provide a _service file to execute code as the source service or the local user checking out the malicious se...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56004/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-56841 - High (8.8)

A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56841/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

@cR0w ../ spotted!

Summary 7 of 25

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.

CVE-2026-54403

CVE-2026-5524: Divi Form Builder <=5.1.8 has a CRITICAL file upload vuln (CVSS 9.8). Unauth RCE possible via PHP extensions not blocked by .htaccess, esp. on Nginx. Restrict uploads, monitor for patch. https://radar.offseq.com/threat/cve-2026-5524-cwe-434-unrestricted-upload-of-file--ef397843e92862b0 #OffSeq #WordPress #Infosec #CVE2026_5524

CVE-2026-50027: mcp-memory-service (<10.67.1) has a CRITICAL auth bypass in /api/documents/* 🚨. Unauthenticated attackers can read, write, delete memory data. Restrict access or disable endpoints until fixed. https://radar.offseq.com/threat/ghsa-84hp-mqvj-3p8h-mcp-memory-service-missing-aut-09a7b270b55ce238 #OffSeq #CVE202650027 #APIsecurity

🧩 Runzero warnt: Eine KI-gestützte Suche fand eine gefährliche Lücke im FatFs-Treiber. Schon das Anschließen eines USB-Sticks soll genügen, um über CVE-2026-6682 (CVSS 7,6) Schadcode einzuschleusen. Patch derzeit unklar. Angriff auch via manipulierte OTA-Updates möglich. 🔥
https://www.golem.de/news/angriff-per-usb-stick-ki-findet-gefaehrliche-luecke-in-populaerem-fatfs-treiber-2607-210484.html
#Security #IoT #Embedded #USB #CVE #Vulnerability

🧩 Runzero warnt: Eine KI-gestützte Suche fand eine gefährliche Lücke im FatFs-Treiber. Schon das Anschließen eines USB-Sticks soll genügen, um über CVE-2026-6682 (CVSS 7,6) Schadcode einzuschleusen. Patch derzeit unklar. Angriff auch via manipulierte OTA-Updates möglich. 🔥
https://www.golem.de/news/angriff-per-usb-stick-ki-findet-gefaehrliche-luecke-in-populaerem-fatfs-treiber-2607-210484.html
#Security #IoT #Embedded #USB #CVE #Vulnerability

CVE-2026-57683: CRITICAL SQL injection (CVSS 9.3) in Epsiloncool WP Fast Total Search ≤1.80.280 enables unauthenticated exploitation. Patch pending — monitor for fixes and restrict access. https://radar.offseq.com/threat/cve-2026-57683-cwe-89-improper-neutralization-of-s-608880638f90634f #OffSeq #WordPress #Infosec #Vuln

Dissecting and Exploiting Linux LPE Variant: DirtyClone (CVE-2026-43503) - JFrog Security Research #devopsish https://research.jfrog.com/post/dissecting-and-exploiting-linux-lpe-variant-dirtyclone-cve-2026-43503/

DirtyClone Vulnerability Grants Root Access via Linux Kernel Networking Stack

JFrog researchers report DirtyClone (CVE-2026-43503), a high-severity Linux kernel vulnerability that allows local users to gain root privileges by corrupting the system page cache through the networking stack. It's a major risk to multi-tenant cloud and containerized environments.

**Patch your Linux kernel right away: update to your distribution's fixed version (for example, Ubuntu 24.04 needs 6.8.0-124.124 or later) and then reboot, because a patched-but-unrebooted machine is still vulnerable. Confirm with `uname -r`. If you can't patch immediately, reduce the risk by setting `kernel.unprivileged_userns_clone=0` to block the privilege path this attack relies on.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/dirtyclone-vulnerability-grants-root-access-via-linux-kernel-networking-stack-l-r-2-m-8/gD2P6Ple2L

🚨 DirtyClone (CVE-2026-43503)

In the Linux kernel, the following vulnerability has been resolved:

net: skbuff: propagate shared-frag marker through frag-transfer helpers

ℹ️ Additional info on ZEN SecDB https://secdb.nttzen.cloud/updates/9a1828d5-6607-419b-b475-622a6c135aae/dirtyclone-vulnerability

#nttdata #zen #secdb
#infosec #dirtyclone #linux #lpe #cve202643503

‼️ CVE-2026-43503: Python PoC for DirtyClone, a Linux kernel LPE via page-cache corruption exploit

GitHub: https://github.com/entra1337/DirtyClone

Unjamming the Chrome Releases Blog

For the second time in a row, a post by cr0w on Mastodon regarding the Chrome release blog appearing to not render anything resulted in me firing up lynx to show a sub-second load and render, then finally doing something a bit more tangible about the situation.

The 81-Second Wall

The Google Blogger pages load an ancient copy of jQuery (1.11.3, from 2015) synchronously in the <head>, alongside a 53KB widgets.js Blogger framework. Then, posts like this one — https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html — stuff 433 CVE entries into the DOM — 670KB of HTML, 5,045 nodes. The Blogger WidgetManager processes all of that against the DOM using jQuery’s notoriously slow selector engine, and the main thread stays locked for 81 seconds. Nothing else runs. Not even the HTTP request for the DoubleClick tracking pixel queued behind it (because ofc there’s a DoubleClick tracking pixel).

The Safari Navigation Timing API numbers make it embarrassingly concrete:

• responseEnd: 143ms
• domInteractive: 231ms
• domContentLoaded: 81,280ms

That’s 81 seconds between “DOM is ready” and “page is loaded.” All burning prescious CPU cycles with zero network activity during that window.

Why This Matters (Again)

This is the second time I’ve felt compelled to dig into this particular mess. The Chrome Releases page is a real/tangible operational resource — security teams, vulnerability managers, and researchers (somewhat, at least) depend on it for CVE data. When it’s broken, it creates a bottleneck for people who have real jobs to do.

The 433 CVE entries choking the page are exactly what people came to read. But they’re baked into the HTML as rendered text, not exposed as structured data anywhere. So even when the page eventually loads, you’re still scraping HTML to get at anything useful.

unjam

unjam solves that problem. It’s a small CLI that connects to a Blogger page and extracts structured data — both the widget configuration from the _WidgetManager._SetDataContext inline script and the CVE entries from Chrome Release posts — without touching a browser at all.

It’s a single Deno binary for macOS, Linux, and Windows. No dependencies, no configuration overhead, just download and run:

unjam --cve https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html

[
  {
    "issueId": "506558270",
    "issueUrl": "https://issues.chromium.org/issues/506558270",
    "severity": "Critical",
    "cveId": "CVE-2026-13774",
    "description": "Use after free in Extensions.",
    "reporter": "Google",
    "reportedOn": "2026-04-26"
  },
  {
    "issueId": "511766407",
    "issueUrl": "https://issues.chromium.org/issues/511766407",
    "severity": "Critical",
    "cveId": "CVE-2026-13775",
    "description": "Use after free in GPU.",
    "reporter": "Google",
    "reportedOn": "2026-05-10"
  },
  …
]

Getting CVE data from one of these posts used to mean waiting 81 seconds for a browser tab to finish wrestling with jQuery, then hand-scraping HTML. Now it takes about a second and returns clean JSON. The --cve flag parses each entry into structured fields — CVE ID, severity, description, issue tracker URL, reporter, and date reported — ready to pipe into jq, load into a database, or feed into whatever vulnerability management pipeline you’re running.

The tool also handles the general case: any Blogger page carrying the _WidgetManager._SetDataContext inline script can be unwedged with the default mode, which converts the JavaScript object literal into proper JSON. That turned out to be useful enough to bake in as default functionality.

The project’s at https://git.sr.ht/~hrbrmstr/unjam and has pre-built binaries for popular platforms.

I don’t expect this page to stay broken forever…I mean, someone at Google will eventually update the template (right, Anakin? right? Anakin?), and may even quietly drop the DoubleClick pixel (LOL) — but until then, unjam fills the gap cleanly.

🟠 CVE-2026-14431 - High (8.8)

Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14431/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-14423: Type confusion in Chrome (pre-150.0.7871.46) enables sandbox escape via crafted HTML. HIGH severity — update Chrome ASAP to patch. Details: https://radar.offseq.com/threat/cve-2026-14423-type-confusion-in-google-chrome-ebdcbaa0782002d1 #OffSeq #Chrome #Vuln #BrowserSecurity

Use-after-free in Chrome’s ANGLE (CVE-2026-14425, HIGH) allows remote sandbox escape via crafted HTML in versions before 150.0.7871.46. Patch status unclear — update Chrome past this version. More: https://radar.offseq.com/threat/cve-2026-14425-use-after-free-in-google-chrome-d16c7cab93365fc8 #OffSeq #Chrome #Vuln #Infosec

🔴 CVE-2026-14425 - Critical (9.6)

Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14425/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-14417: CRITICAL use-after-free in Chrome’s Dawn (pre-150.0.7871.46). Remote attackers can potentially escape the sandbox — patch ASAP. Details: https://radar.offseq.com/threat/cve-2026-14417-use-after-free-in-google-chrome-b3887b8e713f2d29 #OffSeq #Chrome #CVE202614417 #Infosec

🔴 CVE-2026-14417 - Critical (9.6)

Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14417/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14429 - High (8.3)

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security sever...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14429/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14427 - High (8.3)

Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14427/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-14439: CRITICAL path traversal in Altium Enterprise Server & Altium 365 Git Service. Authenticated users can achieve RCE & cross-tenant data access. Upgrade Altium Server to v8.1.1; cloud already remediated. https://radar.offseq.com/threat/cve-2026-14439-cwe-22-improper-limitation-of-a-pat-19675f7d579c103e #OffSeq #CVE202614439 #infosec #remediation

CVE-2026-14390: Use-after-free in Chrome ANGLE (High severity, ≤150.0.7871.45) can enable sandbox escape via crafted HTML. Update to 150.0.7871.46+ to mitigate. No active exploits reported. https://radar.offseq.com/threat/cve-2026-14390-use-after-free-in-google-chrome-7f7b248bc3c84ce8 #OffSeq #GoogleChrome #Infosec #Vulnerability

🔴 CVE-2026-14419 - Critical (9.6)

Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14419/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-14419: CRITICAL use-after-free in Chrome <150.0.7871.46 (Skia) enables remote sandbox escape via crafted HTML. Patch immediately to prevent code execution outside the browser. https://radar.offseq.com/threat/cve-2026-14419-use-after-free-in-google-chrome-0ddc404b4a28d10f #OffSeq #Chrome #CVE202614419 #Infosec

Apache HttpComponents Core vulnerabilities CVE-2026-54399 and CVE-2026-54428 allow remote denial of service through memory exhaustion. Upgrade now.

#Apache #HttpComponents #DoS #CVE202654399 #CyberSecurity

https://securityonline.info/apache-httpcomponents-core-dos/?utm_source=mastodon&utm_medium=jetpack_social

📢 CISA ajoute CVE-2026-45659 au KEV : RCE activement exploitée dans SharePoint Server
📝 ## 📰 Contexte

Source : SOCRadar, publié le 2 juillet 2026.
📖 cyberveille : https://cyberveille.ch/posts/2026-07-03-cisa-ajoute-cve-2026-45659-au-kev-rce-activement-exploitee-dans-sharepoint-server/
🌐 source : https://socradar.io/blog/cisa-sharepoint-rce-cve-2026-45659/
#CISA_KEV #CVE_2026_45659 #Cyberveille

OpenAI voluntarily limited new AI models at government request on July 2. Cybersecurity threats remain high with critical Citrix Bleed 2 (CVE-2025-5777) and Microsoft SharePoint RCE (CVE-2026-45659) vulnerabilities being actively exploited, as reported on July 2-3. Google, in collaboration with the FBI, disrupted NetNut, a major residential proxy network spanning 2 million devices. Geopolitically, Iran issued warnings to ships regarding unapproved routes in the Strait of Hormuz on July 3.

#AnonNews_irc #Cybersecurity #News

📰 CISA Adds Actively Exploited SharePoint RCE Flaw to KEV Catalog, Mandates Urgent Patching

⚠️ CISA adds high-severity SharePoint RCE flaw (CVE-2026-45659) to its KEV catalog due to active exploitation! Authenticated attackers can execute code. Federal agencies must patch by July 4. #SharePoint #CyberSecurity #PatchNow

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/cisa-warns-active-exploitation-sharepoint-rce-cve-2026-45659/?utm_source=mastodon&utm_…

CISA Reports Active Exploitation of SharePoint RCE Flaw

CISA warned that attackers are exploiting a high-severity SharePoint vulnerability (CVE-2026-45659) that allows authenticated users to run arbitrary code.

**If you run on-premises Microsoft SharePoint Server (Subscription Edition, 2019, or 2016), this is urgent. Your Sharepoint is under attack. Apply Microsoft's security update for CVE-2026-45659 immediately. Prioritize any internet-facing SharePoint instances first, and confirm every server is updated to the latest secure version. If possible, isolate SharePoint from the Internet.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-reports-active-exploitation-of-sharepoint-rce-flaw-a-p-5-o-0/gD2P6Ple2L

OpenAI voluntarily limited new AI models at government request on July 2. Cybersecurity threats remain high with critical Citrix Bleed 2 (CVE-2025-5777) and Microsoft SharePoint RCE (CVE-2026-45659) vulnerabilities being actively exploited, as reported on July 2-3. Google, in collaboration with the FBI, disrupted NetNut, a major residential proxy network spanning 2 million devices. Geopolitically, Iran issued warnings to ships regarding unapproved routes in the Strait of Hormuz on July 3.

#AnonNews_irc #Cybersecurity #News

CISA Reports Active Exploitation of SharePoint RCE Flaw

CISA warned that attackers are exploiting a high-severity SharePoint vulnerability (CVE-2026-45659) that allows authenticated users to run arbitrary code.

**If you run on-premises Microsoft SharePoint Server (Subscription Edition, 2019, or 2016), this is urgent. Your Sharepoint is under attack. Apply Microsoft's security update for CVE-2026-45659 immediately. Prioritize any internet-facing SharePoint instances first, and confirm every server is updated to the latest secure version. If possible, isolate SharePoint from the Internet.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-reports-active-exploitation-of-sharepoint-rce-flaw-a-p-5-o-0/gD2P6Ple2L

DHS Confirms HSIN Breach: Inside the Hack That Hit America’s Homeland Security Coordination Platform Weeks Before the World Cup Final

https://thecybersecguru.com/news/hsin-breach-dhs-sharepoint-hack/

C-Suite Alert: CVE-2026-45659 is actively exploited. CISA BOD 26-04 mandates immediate action. Is your organization compliant? My executive briefing provides the risk assessment and strategic roadmap to secure your SharePoint assets and mitigate enterprise liability. https://thecybermind.co/x3h5
#Governance #InfoSec #SharePoint

CISA flags an actively exploited SharePoint vulnerability (CVE-2026-45659) enabling remote code execution. Patch SharePoint Server 2016 now.

#SharePoint #Microsoft #CVE202645659 #CISAKEV #RCE #ExploitedInTheWild #Vulnerability

https://securityonline.info/sharepoint-vulnerability-cve-2026-45659/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0701] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0701)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-45659 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45659)
- Name: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: SharePoint Server
- Notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-45659

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260701 #cisa20260701 #cve_2026_45659 #cve202645659

CVE ID: CVE-2026-45659
Vendor: Microsoft
Product: SharePoint Server
Date Added: 2026-07-01
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-45659

🔴 CVE-2026-44935 - Critical (9.9)

Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 could be used by owners of one tenant to access fleet credentials of other ten...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44935/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-10539: CRITICAL auth bypass in BMC Control-M/Server (v9.0.20 – 9.0.21.200). Unauthenticated attackers can execute commands. Patch status unconfirmed — monitor vendor. https://radar.offseq.com/threat/cve-2026-10539-cwe-305-authentication-bypass-by-pr-1a4c43a69f0e2740 #OffSeq #CVE202610539 #infosec #vuln

Cisco fixes a Cisco Catalyst Center vulnerability (CVE-2026-20191, CVSS 7.5) and seven ClamAV vulnerabilities causing DoS in Secure Endpoint Connectors.

#Cisco #CatalystCenter #ClamAV #CVE202620191 #CyberSecurity

https://securityonline.info/cisco-catalyst-center-clamav-flaws/?utm_source=mastodon&utm_medium=jetpack_social

Recent NVIDIA security updates address critical vulnerabilities, including CVE-2025-23351. Apply patches to secure your ConnectX and BlueField devices.

#NVIDIA #CyberSecurity #Vulnerability #CVE #InfoSec

https://securityonline.info/nvidia-security-updates-cve/?utm_source=mastodon&utm_medium=jetpack_social

Broadcom has a long list of advisories for a bunch of vulnerabilities, included critical and high-severity holes https://support.broadcom.com/web/ecx/security-advisory

CISA:

Several industrial vulnerabilities have been added https://www.cisa.gov/

Cisco:

Econolite has been tagged for zero-day reports https://talosintelligence.com/vulnerability_info @TalosSecurity

Dell:

- CRITICAL: Security Update for Dell Encryption for Multiple libexpat Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000475690/dsa-2026-268

Two others:

- https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities

- https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities

Nvidia:

There are several advisories today, three of them critical:

CRITICAL:

- CVE-2026-24270: NVIDIA AIStore Framework - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5849

- CVE-2025-23351, CVE-2025-23350: NVIDIA Networking BlueField and ConnectX - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5699

- NVIDIA Megatron Bridge - June 2026, affecting multiple CVEs https://nvidia.custhelp.com/app/answers/detail/a_id/5841

More: https://www.nvidia.com/en-us/product-security/

Yesterday:

Apple:

Several security updates: https://support.apple.com/en-us/100100 #infosec #vulnerability #Apple #Nvidia #Dell #Cisco #CISA #Broadcom

Broadcom has a long list of advisories for a bunch of vulnerabilities, included critical and high-severity holes https://support.broadcom.com/web/ecx/security-advisory

CISA:

Several industrial vulnerabilities have been added https://www.cisa.gov/

Cisco:

Econolite has been tagged for zero-day reports https://talosintelligence.com/vulnerability_info @TalosSecurity

Dell:

- CRITICAL: Security Update for Dell Encryption for Multiple libexpat Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000475690/dsa-2026-268

Two others:

- https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities

- https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities

Nvidia:

There are several advisories today, three of them critical:

CRITICAL:

- CVE-2026-24270: NVIDIA AIStore Framework - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5849

- CVE-2025-23351, CVE-2025-23350: NVIDIA Networking BlueField and ConnectX - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5699

- NVIDIA Megatron Bridge - June 2026, affecting multiple CVEs https://nvidia.custhelp.com/app/answers/detail/a_id/5841

More: https://www.nvidia.com/en-us/product-security/

Yesterday:

Apple:

Several security updates: https://support.apple.com/en-us/100100 #infosec #vulnerability #Apple #Nvidia #Dell #Cisco #CISA #Broadcom

Broadcom has a long list of advisories for a bunch of vulnerabilities, included critical and high-severity holes https://support.broadcom.com/web/ecx/security-advisory

CISA:

Several industrial vulnerabilities have been added https://www.cisa.gov/

Cisco:

Econolite has been tagged for zero-day reports https://talosintelligence.com/vulnerability_info @TalosSecurity

Dell:

- CRITICAL: Security Update for Dell Encryption for Multiple libexpat Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000475690/dsa-2026-268

Two others:

- https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities

- https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities

Nvidia:

There are several advisories today, three of them critical:

CRITICAL:

- CVE-2026-24270: NVIDIA AIStore Framework - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5849

- CVE-2025-23351, CVE-2025-23350: NVIDIA Networking BlueField and ConnectX - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5699

- NVIDIA Megatron Bridge - June 2026, affecting multiple CVEs https://nvidia.custhelp.com/app/answers/detail/a_id/5841

More: https://www.nvidia.com/en-us/product-security/

Yesterday:

Apple:

Several security updates: https://support.apple.com/en-us/100100 #infosec #vulnerability #Apple #Nvidia #Dell #Cisco #CISA #Broadcom

Unjamming the Chrome Releases Blog

For the second time in a row, a post by cr0w on Mastodon regarding the Chrome release blog appearing to not render anything resulted in me firing up lynx to show a sub-second load and render, then finally doing something a bit more tangible about the situation.

The 81-Second Wall

The Google Blogger pages load an ancient copy of jQuery (1.11.3, from 2015) synchronously in the <head>, alongside a 53KB widgets.js Blogger framework. Then, posts like this one — https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html — stuff 433 CVE entries into the DOM — 670KB of HTML, 5,045 nodes. The Blogger WidgetManager processes all of that against the DOM using jQuery’s notoriously slow selector engine, and the main thread stays locked for 81 seconds. Nothing else runs. Not even the HTTP request for the DoubleClick tracking pixel queued behind it (because ofc there’s a DoubleClick tracking pixel).

The Safari Navigation Timing API numbers make it embarrassingly concrete:

• responseEnd: 143ms
• domInteractive: 231ms
• domContentLoaded: 81,280ms

That’s 81 seconds between “DOM is ready” and “page is loaded.” All burning prescious CPU cycles with zero network activity during that window.

Why This Matters (Again)

This is the second time I’ve felt compelled to dig into this particular mess. The Chrome Releases page is a real/tangible operational resource — security teams, vulnerability managers, and researchers (somewhat, at least) depend on it for CVE data. When it’s broken, it creates a bottleneck for people who have real jobs to do.

The 433 CVE entries choking the page are exactly what people came to read. But they’re baked into the HTML as rendered text, not exposed as structured data anywhere. So even when the page eventually loads, you’re still scraping HTML to get at anything useful.

unjam

unjam solves that problem. It’s a small CLI that connects to a Blogger page and extracts structured data — both the widget configuration from the _WidgetManager._SetDataContext inline script and the CVE entries from Chrome Release posts — without touching a browser at all.

It’s a single Deno binary for macOS, Linux, and Windows. No dependencies, no configuration overhead, just download and run:

unjam --cve https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html

[
  {
    "issueId": "506558270",
    "issueUrl": "https://issues.chromium.org/issues/506558270",
    "severity": "Critical",
    "cveId": "CVE-2026-13774",
    "description": "Use after free in Extensions.",
    "reporter": "Google",
    "reportedOn": "2026-04-26"
  },
  {
    "issueId": "511766407",
    "issueUrl": "https://issues.chromium.org/issues/511766407",
    "severity": "Critical",
    "cveId": "CVE-2026-13775",
    "description": "Use after free in GPU.",
    "reporter": "Google",
    "reportedOn": "2026-05-10"
  },
  …
]

Getting CVE data from one of these posts used to mean waiting 81 seconds for a browser tab to finish wrestling with jQuery, then hand-scraping HTML. Now it takes about a second and returns clean JSON. The --cve flag parses each entry into structured fields — CVE ID, severity, description, issue tracker URL, reporter, and date reported — ready to pipe into jq, load into a database, or feed into whatever vulnerability management pipeline you’re running.

The tool also handles the general case: any Blogger page carrying the _WidgetManager._SetDataContext inline script can be unwedged with the default mode, which converts the JavaScript object literal into proper JSON. That turned out to be useful enough to bake in as default functionality.

The project’s at https://git.sr.ht/~hrbrmstr/unjam and has pre-built binaries for popular platforms.

I don’t expect this page to stay broken forever…I mean, someone at Google will eventually update the template (right, Anakin? right? Anakin?), and may even quietly drop the DoubleClick pixel (LOL) — but until then, unjam fills the gap cleanly.

📰 CitrixBleed-Like Flaw (CVE-2026-8451) Exploited Within 24 Hours

New CitrixBleed-like flaw CVE-2026-8451 in NetScaler is being exploited in the wild less than 24 hours after disclosure! The bug can leak sensitive memory. Patch and terminate all sessions NOW. 🚨 #Citrix #NetScaler #CyberSecurity #CVE

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/new-citrixbleed-like-flaw-cve-2026-8451-exploited-within-24-hours-of-disclosure/?utm_source=mastodon&utm_…

Citrix NetScaler vulnerability CVE-2026-8451 is exploited in the wild after a public PoC exposed a pre-auth memory overread. Patch now.

#Citrix #NetScaler #CVE20268451 #CitrixBleed #CyberSecurity

https://securityonline.info/citrix-netscaler-cve-2026-8451/?utm_source=mastodon&utm_medium=jetpack_social

CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/ #bot #cybersecurity #infosec

Citrix has patched a series of bugs this week, including another CitrixBleed-like vulnerability that can allow remote attackers to leak a device's memory and find goodies inside, such as auth or config data.

This impacts NetScaler ADC devices.

https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604

‼️ CVE-2026-8451: Citrix Netscaler overread Detection Artifact Generator Tool

GitHub: https://github.com/watchtowrlabs/watchTowr-vs-Netscaler-CVE-2026-8451

Full writeup: https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/

CVE-2026-8451 is a NetScaler ADC and NetScaler Gateway memory overread flaw caused by insufficient input validation, affecting appliances configured as a SAML Identity Provider.

The risk is sensitive memory disclosure, with researchers showing NetScaler can be tricked into returning process memory that should never leave the appliance.

mum: what impact did you have on the cybersecurity industry?

me: LOGOS

if you have SAML IDP enabled on Netscaler, you want to patch CVE-2026-8451 https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451

This is already being exploited in the wild, one of my honeypots got MFA bypassed with it.

Edit: actually looking at it it looks like the honeypot got owned via a different vuln but you should probably patch this too.

CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) - watchTowr Labs https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/

Six NetScaler vulnerabilities allow denial of service, memory overreads, and an unauthenticated file read. Patch NetScaler ADC and Gateway now.

#NetScaler #NetScalerADC #NetScalerGateway #Citrix #CVE20268451 #DenialOfService #Vulnerability

https://securityonline.info/netscaler-vulnerabilities-cve-2026-8451/?utm_source=mastodon&utm_medium=jetpack_social

Five DCMTK vulnerabilities hit the DICOM toolkit, including a CVSS 9.8 path traversal file write (CVE-2026-50003). Update DCMTK now.

#DCMTK #DICOM #PathTraversal #CVE202650003 #MedicalImaging #ICS #Vulnerability

https://securityonline.info/dcmtk-vulnerabilities-cve-2026-50003/?utm_source=mastodon&utm_medium=jetpack_social

Five DCMTK vulnerabilities hit the DICOM toolkit, including a CVSS 9.8 path traversal file write (CVE-2026-50003). Update DCMTK now.

#DCMTK #DICOM #PathTraversal #CVE202650003 #MedicalImaging #ICS #Vulnerability

https://securityonline.info/dcmtk-vulnerabilities-cve-2026-50003/?utm_source=mastodon&utm_medium=jetpack_social

StoneFly Storage Concentrator (SC & SCVM) faces a CRITICAL vulnerability (CVE-2026-50110): hardcoded, encoded credentials allow potential access to databases & internal services. No patch yet — restrict config file access, increase monitoring. https://radar.offseq.com/threat/cve-2026-50110-cwe-798-use-of-hard-coded-credentia-ae0ab8c00c52fe63 #OffSeq #CVE #infosec

Apache HttpComponents Core vulnerabilities CVE-2026-54399 and CVE-2026-54428 allow remote denial of service through memory exhaustion. Upgrade now.

#Apache #HttpComponents #DoS #CVE202654399 #CyberSecurity

https://securityonline.info/apache-httpcomponents-core-dos/?utm_source=mastodon&utm_medium=jetpack_social

CRITICAL vulnerabilities patched in Adobe ColdFusion (2025/2023) & Campaign Classic (7.4.3 build 9397). Multiple CVSS 10.0 flaws incl. CVE-2026-48286, CVE-2026-48276 – 83. No active exploits, but patch ASAP. https://radar.offseq.com/threat/adobe-patches-critical-coldfusion-campaign-classic-baee08e7ac9d8888 #OffSeq #Adobe #ColdFusion #Vuln

@Andres4NY@social.ridetrans.it https://nvd.nist.gov/vuln/detail/CVE-2025-15666

Congrats to anyone who ever wondered if ‘ass imp’ would show up on a .gov site, I guess.

@aud *stares in CVE-2025-15666*

@aud *stares in CVE-2025-15666*

A GNU gzip vulnerability (CVE-2026-41991) lets a local attacker overwrite files through a gzexe symlink attack. Update to the patched gzip release now.

#GNUgzip #gzip #CVE202641991 #CVE202641992 #gzexe #LinuxSecurity #Vulnerability

https://securityonline.info/gnu-gzip-vulnerability-cve-2026-41991/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-6070: WP-BusinessDirectory plugin (≤4.0.1) has a CRITICAL unauthenticated file deletion flaw (CVSS 9.1). Attackers can delete wp-config.php via path traversal. Restrict endpoint & monitor logs until patched. https://radar.offseq.com/threat/cve-2026-6070-cwe-73-external-control-of-file-name-ae3a571ee4bae8b5 #OffSeq #WordPress #CVE20266070 #infosec

CVE-2026-11387 | SMS Alert – SMS & OTP for WooCommerce <=3.9.5 has a CRITICAL auth flaw (CVSS 9.8): Unauth attackers can take over any WP account if OTP resets & phone numbers are enabled. Disable OTP resets ASAP. https://radar.offseq.com/threat/cve-2026-11387-cwe-287-improper-authentication-in--cb792a6868247a84 #OffSeq #WordPress #Infosec

Two UltraVNC repeater vulnerabilities enable arbitrary code execution (CVE-2026-7840) plus admin access via a hardcoded password. Update now.

#UltraVNC #RemoteAccess #CVE20267839 #CVE20267840 #ArbitraryCodeExecution #BufferOverflow #Vulnerability

https://securityonline.info/ultravnc-repeater-vulnerabilities-cve-2026-7840/?utm_source=mastodon&utm_medium=jetpack_social

No, the libssh2 vulnerability CVE-2026-55200 isn't end of the world.

1. You need to defeat ASLR to successfully exploit it. The PoC works only when you disable ASLR. In most realistic use cases you need additional off-band infoleak from the app using libssh2.
2. You also must somehow convince the victim to connect to your malicious server, OR compromise some existing server to perform the attack.

Calling this a "CRITICAL VULNERABILITY" is dumb.

@bascule libssh2 was the most concerning dependency needed to add cargo to Ubuntu main (lp#1991650).

In 2018 @chrisccoulson reported CVE-2019-3855 through -3863. CVE-2019-3855 is the same bug as today's: a server-controlled packet_length with no upper bound, overflowing the transport read. 1.8.1 added a bounds check. CVE-2026-55200 is the same check missing 7 years later, on the chacha20-poly1305 path. That path is post-KEX, so at least host-key verification gates it (unlike 3855).

🚨 Critical update: A proof-of-concept exploit has been released for a libssh2 vulnerability (CVE-2026-55200, CVSS 9.8). Attackers can abuse oversized SSH “packet_length” to corrupt heap memory. 📌 Patch status varies—check updates now: https://www.heise.de/en/news/Critical-libssh2-vulnerability-Proof-of-concept-exploit-released-11347906.html #CyberSecurity #Vulnerability #libssh2 #CVE

🚨 Kritische libssh2-Lücke: Ein Proof-of-Concept-Exploit wurde veröffentlicht. Ursache: fehlende Begrenzung von „packet_length“ in ssh2_transport_read()—Angreifer können manipulierte SSH-Pakete senden und Speicher auf dem Heap durcheinanderbringen (CVE-2026-55200, CVSS 9.8). Update prüfen: https://www.heise.de/news/Kritische-libssh2-Luecke-Proof-of-Concept-Exploit-veroeffentlicht-11347855.html 🔐 #CyberSecurity #Vulnerability #CVE #SSH #libssh2

Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw https://thehackernews.com/2026/06/public-poc-released-for-critical.html

A critical IBM Db2 RCE flaw (CVE-2026-10109) allows pre-auth code execution. IBM patched it plus two other Db2 bugs. Update 11.5 and 12.1 now.

https://securityonline.info/ibm-db2-rce-cve-2026-10109/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-12243: NLTK 3.9.4 suffers from a HIGH severity path traversal bug — percent-encoded sequences like ..%2f bypass directory checks, allowing arbitrary file reads in NLP apps/Jupyter/CLI. Audit usages & restrict resource loading. https://radar.offseq.com/threat/cve-2026-12243-cwe-22-improper-limitation-of-a-pat-3eae11979fc43a41 #OffSeq #NLTK #Python

A critical CVSS 10 ColdFusion arbitrary code execution flaw (CVE-2026-48282) is actively exploited in the wild. Update immediately to prevent attacks.

#ColdFusion #CVE202648282 #CyberSecurity #Vulnerability #Infosec

https://securityonline.info/coldfusion-arbitrary-code-execution/?utm_source=mastodon&utm_medium=jetpack_social

CRITICAL vulnerabilities patched in Adobe ColdFusion (2025/2023) & Campaign Classic (7.4.3 build 9397). Multiple CVSS 10.0 flaws incl. CVE-2026-48286, CVE-2026-48276 – 83. No active exploits, but patch ASAP. https://radar.offseq.com/threat/adobe-patches-critical-coldfusion-campaign-classic-baee08e7ac9d8888 #OffSeq #Adobe #ColdFusion #Vuln

CVE-2026-50566 (CRITICAL): Fission <1.24.0 allows SecurityContext bypass, letting attackers with Environment CRD access create privileged pods — risking container escape & cluster takeover. Patch to 1.24.0 & tighten RBAC. https://radar.offseq.com/threat/ghsa-m63v-2g9w-2w6v-fission-environment-runtimecon-e24c700c3e6ffd6e #OffSeq #Kubernetes #InfoSec

CVE-2026-50564 (CRITICAL): Fission <1.24.0 lets CRD users deploy privileged pods via unfiltered podSpec, leading to node escape & full compromise. Patch to v1.24.0. Restrict permissions if upgrade not possible. https://radar.offseq.com/threat/ghsa-gx55-f84r-v3r7-fission-environment-crd-podspe-d60bd0900af19d2d #OffSeq #Kubernetes #CVE202650564 #CloudSec

Nine Apache ActiveMQ vulnerabilities allow denial of service and a temporary destination takeover (CVE-2026-54475). Upgrade to 6.2.7 now.

#ApacheActiveMQ #ActiveMQ #CVE202654475 #DenialOfService #OpenWire #STOMP #MessageBroker #Vulnerability

https://securityonline.info/apache-activemq-vulnerabilities-cve-2026-54475/?utm_source=mastodon&utm_medium=jetpack_social

⚠️ CRITICAL: Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts

A critical pre-auth RCE vulnerability (CVE-2026-8037, CVSS 9.6) in Progress Kemp LoadMaster is actively being exploited. The flaw allows unauthenticated attackers to execute arbitrary OS commands via the /accessv2 API endpoint. Any organization running Kemp LoadMaster is at immediate risk.

https://threatnoir.com/focus

#infosec #cybersecurity

Progress Kemp LoadMaster Vulnerability Actively Exploited

Progress Software's Kemp LoadMaster is reportedly actively attacked following the release of a proof-of-concept for a remote code execution flaw (CVE-2026-8037).

**This is now urgent. Make sure all your Kemp LoadMaster appliances are updated to the latest versions immediately, because you are being hacked. If you do not require the management API for daily operations, disable it or isolate it behind a secure VPN so it is reachable only from trusted internal networks.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/progress-kemp-loadmaster-vulnerability-actively-exploited-u-c-i-k-t/gD2P6Ple2L

Kemp LoadMaster RCE Vulnerability Exploited in the Wild After Public PoC Release

#KempLoadMaster #CVE20268037 #RCE #InfoSec #CyberSecurity

https://securityonline.info/kemp-loadmaster-rce-cve-2026-8037/?utm_source=mastodon&utm_medium=jetpack_social

eSentire, from yesterday: Progress Kemp LoadMaster Vulnerability Targeted (CVE-2026-8037) https://www.esentire.com/security-advisories/progress-kemp-loadmaster-vulnerability-targeted-cve-2026-8037 #infosec #vulnerability

📢 CVE-2026-8037 : RCE pré-authentifiée dans Progress Kemp LoadMaster via heap non initialisé
📝 ## 🔍 Contexte

Le 29 juin 2026, watchTowr Labs publie une anal...
📖 cyberveille : https://cyberveille.ch/posts/2026-07-01-cve-2026-8037-rce-pre-authentifiee-dans-progress-kemp-loadmaster-via-heap-non-initialise/
🌐 source : https://labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037
#CVE_2026_8037 #IOC #Cyberveille

⚠️ CRITICAL: Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

Critical unauthenticated RCE in Progress Kemp LoadMaster (CVE-2026-8037) allows attackers to execute arbitrary root commands via API input sanitization bypass. A public proof-of-concept exists. All LoadMaster instances are at risk unless patched immediately.

https://threatnoir.com/focus

#infosec #cybersecurity

WatchTower posted this yesterday, if you missed it:

Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) https://labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037/ #infosec #vulnerability #threatresearch

Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) - watchTowr Labs https://labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037/

CVE-2026-7656 (HIGH, CVSS 8.1) in Zephyr OS: Incorrect IPv6 ND logic lets attackers inject forged router/neighbor messages, risking MITM, redirection, and DoS. Patch pending. Restrict untrusted access, monitor ND. https://radar.offseq.com/threat/cve-2026-7656-always-incorrect-control-flow-implem-8d38cfb126f4b968 #OffSeq #ZephyrOS #CVE20267656

CVE-2026-8402: Eksagate SYSGUARD 6001 (2.0.2 – <6.1.16.0) has a CRITICAL SQL injection (CVSS 9.8). Unsupported by vendor — no fix expected. Isolate or replace affected systems. https://radar.offseq.com/threat/cve-2026-8402-cwe-89-improper-neutralization-of-sp-679f5e5e28b1e119 #OffSeq #CVE20268402 #SQLi #Infosec

CVE-2026-9711: CRITICAL SQL Injection in EventON (Pro) WordPress plugin ≤5.0.11. Unauthenticated attackers can exploit 'search' param if "Enable additional search queries" is enabled. Disable this feature until patched. https://radar.offseq.com/threat/cve-2026-9711-cwe-89-improper-neutralization-of-sp-94cbcb459839c3f2 #OffSeq #WordPress #Vuln

Michael Catanzaro: Single-Click Code Execution Exploit for Evince, Atril, and Xreader

“CVE-2026-46529 is an argument injection vulnerability in Evince, Atril, and Xreader caused by missing shell quoting when composing a command line. The reporter, João Medeiros, has published a GitHub repo for the CVE and a blog post with the story of how he discovered the flaw and developed the exploit. (…)”

#RSSBridge via Planet GNOME

https://blogs.gnome.org/mcatanzaro/2026/05/21/single-click-code-execution-exploit-for-evince-atril-and-xreader/

This is tracked as CVE-2026-48558.

Blackpoint, published yesterday: A Djinn in the Machine: TaskWeaver’s Node.js Intrusion Chain https://blackpointcyber.com/blog/a-djinn-in-the-machine-taskweavers-node-js-intrusion-chain/

More:

Infosecurity-Magazine: Critical SimpleHelp Vulnerability Exploited For Malware Delivery https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/ #infosec #vulnerability #JavaScript #malware

🚨 EXECUTIVE ALERT: CISA has added CVE-2026-48558 (SimpleHelp Bypass) to the KEV matrix. This is a critical governance emergency exposing entire client supply chains to hijacking. Protect your enterprise assets now. Full C-SUITE risk management directives are live: https://thecybermind.co/jily

🚨 CRITICAL RMM ALERT: CISA has added CVE-2026-48558 (SimpleHelp Admin Bypass) to the KEV matrix. Attackers are forging tokens to hijack environments. Lock down your perimeter. Full T-SUITE forensic detection logs, n8n playbooks, and mitigation scripts are live: https://thecybermind.co/jily

CVE-2026-48558, a SimpleHelp authentication bypass, is exploited in the wild to deploy TaskWeaver and Djinn Stealer. CISA added it to KEV. Patch now.

#SimpleHelp #CVE202648558 #InfoStealer #RMMSecurity #ExploitedInTheWild #CyberSecurity

https://securityonline.info/simplehelp-authentication-bypass-exploited/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0629] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0629)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-48558 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48558)
- Name: SimpleHelp Authentication Bypass Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: SimpleHelp
- Product: SimpleHelp
- Notes: https://simple-help.com/security/simplehelp-security-update-2026-05 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48558

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260629 #cisa20260629 #cve_2026_48558 #cve202648558

CVE ID: CVE-2026-48558
Vendor: SimpleHelp
Product: SimpleHelp
Date Added: 2026-06-29
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-48558

CVE-2026-56137 - OS Command Injection in RPG Maker MV/MZ. CVSS 7.8. Loading a malicious save file can execute arbitrary commands. No patch yet. Disable auto-load features. #CVE #infosec #gamedev

https://www.valtersit.com/cve/CVE-2026-56137/

Delta DVP-12SE PLCs face a CRITICAL vulnerability (CVE-2026-12818, CVSS 9.3): unlimited resource allocation in Modbus TCP. No patch yet. Reduce exposure and monitor traffic to mitigate risk. https://radar.offseq.com/threat/cve-2026-12818-cwe-770-allocation-of-resources-wit-5f563298dd2e41a2 #OffSeq #ICS #PLC #Vuln

I love OT shit.

https://nvd.nist.gov/vuln/detail/CVE-2026-12819

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions.

CVE-2026-12819 (CRITICAL, CVSS 9.3) in deltaww DVP-12SE PLC: Modbus TCP service lacks authentication, allowing unauthenticated access to critical PLC functions. Segment networks & restrict access. https://radar.offseq.com/threat/cve-2026-12819-cwe-306-missing-authentication-for--8fd3769bc2b1bbcf #OffSeq #ICS #Vulnerability #PLCsecurity

CVE-2026-12114: Stored XSS in wpmart Team Members plugin <=8.7 (WordPress). MEDIUM severity. Admins on multi-site or with unfiltered_html disabled can inject scripts. Restrict trusted admin access, monitor for patches. https://radar.offseq.com/threat/cve-2026-12114-cwe-79-improper-neutralization-of-i-07f3bfb7aa84d417 #OffSeq #WordPress #XSS

#OT #Advisory VDE-2026-049
Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01

Security advisory for Balluff BNI EGW-720-007-K095 and BAV MA-NC-00025-01 firmware versions prior to 2.4.1. This advisory covers multiple vulnerabilities affecting software components used by the device firmware.
#CVE CVE-2025-68121, CVE-2026-1229, CVE-2025-41115, CVE-2025-15467, CVE-2023-3128, CVE-2022-28660, CVE-2022-26148, CVE-2018-15727, CVE-2020-27846, CVE-2024-9264, CVE-2024-1442, CVE-2022-28391, CVE-2022-24812, CVE-2022-23498, CVE-2022-21703, CVE-2022-31097, CVE-2025-61732, CVE-2025-4674, CVE-2022-29170, CVE-2024-56406

https://certvde.com/en/advisories/vde-2026-049/

#CSAF https://balluff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-049.json

#OT #Advisory VDE-2026-049
Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01

Security advisory for Balluff BNI EGW-720-007-K095 and BAV MA-NC-00025-01 firmware versions prior to 2.4.1. This advisory covers multiple vulnerabilities affecting software components used by the device firmware.
#CVE CVE-2025-68121, CVE-2026-1229, CVE-2025-41115, CVE-2025-15467, CVE-2023-3128, CVE-2022-28660, CVE-2022-26148, CVE-2018-15727, CVE-2020-27846, CVE-2024-9264, CVE-2024-1442, CVE-2022-28391, CVE-2022-24812, CVE-2022-23498, CVE-2022-21703, CVE-2022-31097, CVE-2025-61732, CVE-2025-4674, CVE-2022-29170, CVE-2024-56406

https://certvde.com/en/advisories/vde-2026-049/

#CSAF https://balluff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-049.json

CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF #devopsish https://aws.amazon.com/security/security-bulletins/2026-048-aws/

CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF #devopsish https://aws.amazon.com/security/security-bulletins/2026-048-aws/

CVE-2026-13762/CVE-2026-13763 are not vulnerabilities and shouldn't have been assigned CVEs, fight me

CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF

Bulletin ID: 2026-048-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/29/2026 11:15 PM PDT
Description:
AWS WAF is a web application firewall that monitors the HTTP(S) requests that are forwarded...

https://aws.amazon.com/security/security-bulletins/rss/2026-048-aws/

#aws #security

CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF #devopsish https://aws.amazon.com/security/security-bulletins/2026-048-aws/

CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF #devopsish https://aws.amazon.com/security/security-bulletins/2026-048-aws/

CVE-2026-13762/CVE-2026-13763 are not vulnerabilities and shouldn't have been assigned CVEs, fight me

CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF

Bulletin ID: 2026-048-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/29/2026 11:15 PM PDT
Description:
AWS WAF is a web application firewall that monitors the HTTP(S) requests that are forwarded...

https://aws.amazon.com/security/security-bulletins/rss/2026-048-aws/

#aws #security

TP-Link DHCP Option 66 Unauthenticated RCE (CVE-2026-11834) | mattg.systems https://mattg.systems/posts/cve-2026-11834/

Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.

#Incus #LinuxContainers #ContainerSecurity #CVE #Cybersecurity #Infosec

https://securityonline.info/incus-vulnerabilities-v7-2-0/?utm_source=mastodon&utm_medium=jetpack_social

Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.

#Incus #LinuxContainers #ContainerSecurity #CVE #Cybersecurity #Infosec

https://securityonline.info/incus-vulnerabilities-v7-2-0/?utm_source=mastodon&utm_medium=jetpack_social

Four Fluentd vulnerabilities are fixed in v1.19.3, including a 9.8 RCE (CVE-2026-44024) and SSRF (CVE-2026-44161). Patch now.

#Fluentd #RCE #SSRF #CVE #Cybersecurity #Infosec

https://securityonline.info/fluentd-vulnerabilities-v1-19-3/?utm_source=mastodon&utm_medium=jetpack_social

Ten GeoVision camera vulnerabilities hit GV-LPC2011/2211 models, four rated CVSS 9.8 (CVE-2026-57878). Update to firmware V1.13 now.

#GeoVision #IoTSecurity #CVE #BufferOverflow #Cybersecurity #Infosec

https://securityonline.info/geovision-gv-lpc-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

JetBrains patched a CVSS 10 authentication bypass and two more flaws (CVE-2026-50242). Its tools reach 15M developers. Update JetBrains Hub now.

#JetBrains #AuthenticationBypass #CVE202650242 #JetBrainsHub #GoLand

https://securityonline.info/jetbrains-authentication-bypass/?utm_source=mastodon&utm_medium=jetpack_social

Cacti vulnerabilities in 1.2.30 include pre-auth SQL injection and LFI, both CVSS 9.8 (CVE-2026-39955, CVE-2026-39938). Update to 1.2.31 now.

#Cacti #SQLInjection #LFI #CVE #Cybersecurity #Infosec

https://securityonline.info/cacti-vulnerabilities-1-2-31/?utm_source=mastodon&utm_medium=jetpack_social

Cacti vulnerabilities in 1.2.30 include pre-auth SQL injection and LFI, both CVSS 9.8 (CVE-2026-39955, CVE-2026-39938). Update to 1.2.31 now.

#Cacti #SQLInjection #LFI #CVE #Cybersecurity #Infosec

https://securityonline.info/cacti-vulnerabilities-1-2-31/?utm_source=mastodon&utm_medium=jetpack_social

NLnet Labs patched critical NSD DNS vulnerabilities, including CVE-2026-12244. Update now to protect your multi-tenant secondary DNS deployments.

#NSDDNS #CyberSecurity #Vulnerability #CVE202612244

https://securityonline.info/nsd-dns-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

Cisco confirma exploração ativa de vulnerabilidade nos sistemas Unified CM. A empresa confirmou que agentes maliciosos estão a explorar a vulnerabilidade CVE-2026-20230, que permite ataques de falsificação de pedidos do lado do servidor. 🚨

🔗 https://tugatech.com.pt/t86670-cisco-confirma-exploracao-ativa-de-vulnerabilidade-nos-sistemas-unified-cm

#nos #vulnerabilidade 

New Cisco advisory relating to a June 3 critical vulnerability:

CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW @TalosSecurity #vulnerability #Cisco

📈 CVE Published in last 30 days (2026-06-01 - 2026-07-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 855
- High: 3079
- Medium: 2559
- Low: 534
- None: 684

Status:
- : 344
- Analyzed: 2815
- Awaiting Analysis: 562
- Deferred: 3102
- Modified: 173
- Received: 551
- Rejected: 49
- Undergoing Analysis: 115

CISA KEVs:
- CISA-2026:0601 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0601)
- CISA-2026:0602 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0602)
- CISA-2026:0603 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0603)
- CISA-2026:0605 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0605)
- CISA-2026:0608 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0608)
- CISA-2026:0609 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0609)
- CISA-2026:0611 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0611)
- CISA-2026:0612 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0612)
- CISA-2026:0615 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0615)
- CISA-2026:0616 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0616)
- CISA-2026:0618 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0618)
- CISA-2026:0623 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0623)
- CISA-2026:0625 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0625)
- CISA-2026:0629 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0629)

Top CNAs:
- GitHub, Inc.: 1163
- Patchstack: 731
- VulnCheck: 612
- Chrome: 584
- kernel.org: 514
- VulDB: 468
- N/A: 344
- MITRE: 329
- Wordfence: 256
- Oracle: 242

Top Affected Products:
- UNKNOWN: 4698
- Google Chrome: 583
- Google Android: 118
- Microsoft Windows 11 26h1: 111
- Microsoft Windows Server 2025: 109
- Microsoft Windows 11 24h2: 105
- Microsoft Windows 11 25h2: 105
- Microsoft Windows Server 2022: 104
- Microsoft Windows 11 23h2: 99
- Microsoft Windows 10 22h2: 91

Top EPSS Score:
- CVE-2026-10520 - 98.94 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-10520)
- CVE-2026-35273 - 92.33 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-35273)
- CVE-2026-20253 - 88.17 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20253)
- CVE-2026-48907 - 80.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48907)
- CVE-2026-50751 - 71.05 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-50751)
- CVE-2026-49160 - 48.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-49160)
- CVE-2026-10523 - 47.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-10523)
- CVE-2026-20230 - 41.69 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20230)
- CVE-2026-0826 - 26.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-0826)
- CVE-2026-25089 - 23.39 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-25089)

#ZEN #SecDB #InfoSec

📰 Attackers Actively Exploit Critical Cisco Unified CM Flaw to Deploy Webshells

⚠️ ACTIVE EXPLOITATION: A critical SSRF flaw in Cisco Unified CM (CVE-2026-20230) is being used to drop webshells. Attackers are scanning from Tor. Disable the WebDialer service or patch immediately! #Cisco #CyberAttack #Infosec #SSRF

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/active-exploitation-of-critical-cisco-unified-cm-flaw-begins/?utm_source=mastodon&utm_medium…

A critical Poweradmin host header injection flaw (CVE-2026-54588) lets attackers hijack DNS admin accounts. Update to 4.2.4 or 4.3.3 now.

#Poweradmin #PowerDNS #CVE202654588 #AccountTakeover #CyberSecurity #DNS

https://securityonline.info/poweradmin-host-header-injection/?utm_source=mastodon&utm_medium=jetpack_social

Dell Patches Critical Remote Code Execution Flaws in Wyse Management Suite

Dell addressed two vulnerabilities in its Wyse Management Suite, including a critical remote code execution flaw (CVE-2026-41120) that allows unauthenticated attackers to take over management servers.

**Make sure all your Wyse Management Suite servers and the thin-client devices they manage are isolated from the internet and reachable only from trusted internal networks. Then update Dell Wyse Management Suite to version 5.5 HF1 ASAP.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/dell-patches-critical-remote-code-execution-flaws-in-wyse-management-suite-5-u-x-o-e/gD2P6Ple2L

A critical OpenAM WebAuthn RCE flaw (CVE-2026-45051) allows code execution via Java deserialization. Update OpenAM to 16.1.1 to stay protected.

#OpenAM #WebAuthn #RCE #CVE202645051 #CyberSecurity #InfoSec

https://securityonline.info/openam-webauthn-rce/?utm_source=mastodon&utm_medium=jetpack_social

A ProFTPD ACL bypass (CVE-2026-35025, CVSS 8.6) lets logged-in FTP users reach files in restricted directories. No patch is out yet; use DefaultRoot.

#ProFTPD #CVE202635025 #ACLBypass #FTP #CyberSecurity

https://securityonline.info/proftpd-acl-bypass/?utm_source=mastodon&utm_medium=jetpack_social

A NetComm authentication bypass (CVE-2026-35019, CVSS 9.2) uses a hardcoded AES key to forge admin session cookies. Update to firmware R6B032 now.

#NetComm #RouterSecurity #CyberSecurity #CVE #PatchNow

https://securityonline.info/netcomm-authentication-bypass/?utm_source=mastodon&utm_medium=jetpack_social

The @varonis Threat Labs teams demonstrated that enterprise #AI assistants can be turned into a precision data exfiltration tool via a crafted link. #CVE-2026-42824 AKA #SearchLeak is a huge vulnerability chain in Microsoft 365 Copilot. HT HT @Kiteworks. https://cybersec.kiteworks.com/s/microsoft-365-copilot-searchleak-cve-2026-42824-when-your-ai-assistant-becomes-an-exfiltration-tool-28248

📈 CVE Published in last 30 days (2026-06-01 - 2026-07-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 855
- High: 3079
- Medium: 2559
- Low: 534
- None: 684

Status:
- : 344
- Analyzed: 2815
- Awaiting Analysis: 562
- Deferred: 3102
- Modified: 173
- Received: 551
- Rejected: 49
- Undergoing Analysis: 115

CISA KEVs:
- CISA-2026:0601 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0601)
- CISA-2026:0602 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0602)
- CISA-2026:0603 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0603)
- CISA-2026:0605 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0605)
- CISA-2026:0608 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0608)
- CISA-2026:0609 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0609)
- CISA-2026:0611 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0611)
- CISA-2026:0612 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0612)
- CISA-2026:0615 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0615)
- CISA-2026:0616 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0616)
- CISA-2026:0618 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0618)
- CISA-2026:0623 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0623)
- CISA-2026:0625 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0625)
- CISA-2026:0629 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0629)

Top CNAs:
- GitHub, Inc.: 1163
- Patchstack: 731
- VulnCheck: 612
- Chrome: 584
- kernel.org: 514
- VulDB: 468
- N/A: 344
- MITRE: 329
- Wordfence: 256
- Oracle: 242

Top Affected Products:
- UNKNOWN: 4698
- Google Chrome: 583
- Google Android: 118
- Microsoft Windows 11 26h1: 111
- Microsoft Windows Server 2025: 109
- Microsoft Windows 11 24h2: 105
- Microsoft Windows 11 25h2: 105
- Microsoft Windows Server 2022: 104
- Microsoft Windows 11 23h2: 99
- Microsoft Windows 10 22h2: 91

Top EPSS Score:
- CVE-2026-10520 - 98.94 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-10520)
- CVE-2026-35273 - 92.33 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-35273)
- CVE-2026-20253 - 88.17 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20253)
- CVE-2026-48907 - 80.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48907)
- CVE-2026-50751 - 71.05 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-50751)
- CVE-2026-49160 - 48.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-49160)
- CVE-2026-10523 - 47.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-10523)
- CVE-2026-20230 - 41.69 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20230)
- CVE-2026-0826 - 26.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-0826)
- CVE-2026-25089 - 23.39 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-25089)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 30 days (2026-06-01 - 2026-07-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 855
- High: 3079
- Medium: 2559
- Low: 534
- None: 684

Status:
- : 344
- Analyzed: 2815
- Awaiting Analysis: 562
- Deferred: 3102
- Modified: 173
- Received: 551
- Rejected: 49
- Undergoing Analysis: 115

CISA KEVs:
- CISA-2026:0601 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0601)
- CISA-2026:0602 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0602)
- CISA-2026:0603 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0603)
- CISA-2026:0605 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0605)
- CISA-2026:0608 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0608)
- CISA-2026:0609 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0609)
- CISA-2026:0611 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0611)
- CISA-2026:0612 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0612)
- CISA-2026:0615 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0615)
- CISA-2026:0616 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0616)
- CISA-2026:0618 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0618)
- CISA-2026:0623 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0623)
- CISA-2026:0625 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0625)
- CISA-2026:0629 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0629)

Top CNAs:
- GitHub, Inc.: 1163
- Patchstack: 731
- VulnCheck: 612
- Chrome: 584
- kernel.org: 514
- VulDB: 468
- N/A: 344
- MITRE: 329
- Wordfence: 256
- Oracle: 242

Top Affected Products:
- UNKNOWN: 4698
- Google Chrome: 583
- Google Android: 118
- Microsoft Windows 11 26h1: 111
- Microsoft Windows Server 2025: 109
- Microsoft Windows 11 24h2: 105
- Microsoft Windows 11 25h2: 105
- Microsoft Windows Server 2022: 104
- Microsoft Windows 11 23h2: 99
- Microsoft Windows 10 22h2: 91

Top EPSS Score:
- CVE-2026-10520 - 98.94 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-10520)
- CVE-2026-35273 - 92.33 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-35273)
- CVE-2026-20253 - 88.17 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20253)
- CVE-2026-48907 - 80.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48907)
- CVE-2026-50751 - 71.05 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-50751)
- CVE-2026-49160 - 48.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-49160)
- CVE-2026-10523 - 47.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-10523)
- CVE-2026-20230 - 41.69 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20230)
- CVE-2026-0826 - 26.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-0826)
- CVE-2026-25089 - 23.39 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-25089)

#ZEN #SecDB #InfoSec

Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307 https://lobste.rs/s/uaoe9y #security #web
https://nebusec.ai/research/v8-cve-2026-6307-writeup/

Why patch directives only go so far https://cyberscoop.com/why-security-patching-is-not-enough-cve-2026-50751-op-ed/

📈 CVE Published in last 30 days (2026-06-01 - 2026-07-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 855
- High: 3079
- Medium: 2559
- Low: 534
- None: 684

Status:
- : 344
- Analyzed: 2815
- Awaiting Analysis: 562
- Deferred: 3102
- Modified: 173
- Received: 551
- Rejected: 49
- Undergoing Analysis: 115

CISA KEVs:
- CISA-2026:0601 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0601)
- CISA-2026:0602 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0602)
- CISA-2026:0603 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0603)
- CISA-2026:0605 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0605)
- CISA-2026:0608 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0608)
- CISA-2026:0609 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0609)
- CISA-2026:0611 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0611)
- CISA-2026:0612 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0612)
- CISA-2026:0615 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0615)
- CISA-2026:0616 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0616)
- CISA-2026:0618 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0618)
- CISA-2026:0623 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0623)
- CISA-2026:0625 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0625)
- CISA-2026:0629 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0629)