🟠 CVE-2026-70646 - High (7.5)

aiosend is a synchronous and asynchronous Crypto Pay API client. Pror to version 3.0.7, `WebhookHandler.feed_update()` deserializes the entire request body before verifying the HMAC signature. This allows an unauthenticated attacker to force expen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70646/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free https://lobste.rs/s/wdnet3 #linux #security #vibecoding
https://matrix.tencent.com/en/2026/08/06/sctphantom-CVE-2026-64564

#Debian stable has a fix now: linux-image-6.12.101+deb13-amd64

- sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)

#CVE_2026_64564

Yet another linux LPE to root. "CVE-2026-64564: Linux SCTP ASCONF transport UAF leading to local privilege escalation and container escape"

https://www.openwall.com/lists/oss-security/2026/08/06/3

#CVE_2026_64564 #infosec #cybersecurity

🟠 CVE-2026-56793 - High (7.7)

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56793/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-56793 - High (7.7)

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56793/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52880 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are vulnerable to a remotely triggerable denial of service. Both REST APIs are started with the Gin Engine.Run convenience method, which serv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52880/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52880 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are vulnerable to a remotely triggerable denial of service. Both REST APIs are started with the Gin Engine.Run convenience method, which serv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52880/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52879 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52879/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52879 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52879/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52878 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawD...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52878/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52878 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawD...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52878/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48120 - High (8.6)

Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore.kak` script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Ka...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48120/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48120 - High (8.6)

Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore.kak` script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Ka...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48120/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48026 - High (8.7)

lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI renders markdown files from repository objects withou...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48026/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48026 - High (8.7)

lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI renders markdown files from repository objects withou...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48026/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47249 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.18, the P2P resolver request handling logic is vulnerable to hash-array amplification. A connected peer can send a compressed RequestDataType_HashArrayType direct r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47249/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47249 - High (7.5)

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.18, the P2P resolver request handling logic is vulnerable to hash-array amplification. A connected peer can send a compressed RequestDataType_HashArrayType direct r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47249/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-46409 - Critical (9.6)

OpenYak is a local-first agent runtime for reliable tool-using models, with a desktop workspace built on top. Prior to version 1.1.3, the OpenYak desktop backend binds an HTTP API to `127.0.0.1:` (commonly 19141) without server-side Origin validat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-46409/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-46409 - Critical (9.6)

OpenYak is a local-first agent runtime for reliable tool-using models, with a desktop workspace built on top. Prior to version 1.1.3, the OpenYak desktop backend binds an HTTP API to `127.0.0.1:` (commonly 19141) without server-side Origin validat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-46409/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-48170 (CRITICAL, CVSS 9.1): Prototype pollution in scim-patch <0.9.1 lets attackers alter Object.prototype globally in Node.js. Upgrade to 0.9.1+ or freeze prototypes for mitigation. https://radar.offseq.com/threat/cve-2026-48170-cwe-1321-improperly-controlled-modification-of-object-prototype-attributes-prototype-1a8d5ec623a7b014 #OffSeq #CVE202648170 #NodeJS #InfoSec

🔴 CVE-2026-48170 - Critical (9.1)

`scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollution when applying a SCIM PATCH operation whose `value` object contains a key like `"__proto__.someProp"`. After one such patch,
`Object.prototype.somePr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48170/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-48170 (CRITICAL, CVSS 9.1): Prototype pollution in scim-patch <0.9.1 lets attackers alter Object.prototype globally in Node.js. Upgrade to 0.9.1+ or freeze prototypes for mitigation. https://radar.offseq.com/threat/cve-2026-48170-cwe-1321-improperly-controlled-modification-of-object-prototype-attributes-prototype-1a8d5ec623a7b014 #OffSeq #CVE202648170 #NodeJS #InfoSec

🔴 CVE-2026-48170 - Critical (9.1)

`scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollution when applying a SCIM PATCH operation whose `value` object contains a key like `"__proto__.someProp"`. After one such patch,
`Object.prototype.somePr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48170/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48169 - High (8.8)

PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two authorization failures that together break workspace isolation. The service layer for issues and projects performs global primary-key lookups w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48169/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-48169 - High (8.8)

PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two authorization failures that together break workspace isolation. The service layer for issues and projects performs global primary-key lookups w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48169/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

CVE-2026-9044 is a command injection flaw in TP-Link Archer AXE75 OpenVPN, CVSS 8.5. Update to firmware 1.5.6 Build 20260623 now.

#TPLink #CVE20269044 #CommandInjection #OpenVPN #RouterSecurity #CyberSecurity

http://securityonline.info/cve-2026-9044-tp-link-archer-axe75-command-injection/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-43622 - High (7.8)

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() deallocates it using the C++ delete operator, causing heap metadata co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-43622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-50540 - Critical (9.6)

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated config...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50540/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-50540 - Critical (9.6)

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated config...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50540/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65819 - High (7.5)

gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through De...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65819/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65819 - High (7.5)

gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through De...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65819/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62296 - High (7.5)

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, so a deeply nested text.div narrative triggers unbounded recursion...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62296/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62296 - High (7.5)

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, so a deeply nested text.div narrative triggers unbounded recursion...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62296/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62295 - High (7.5)

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth for arrays or obje...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62295/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62295 - High (7.5)

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth for arrays or obje...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62295/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-61808 - Critical (9.8)

LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read indexed ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61808/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-61808 - Critical (9.8)

LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read indexed ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61808/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67261 - Critical (9.8)

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67261/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL THREAT ALERT: Active exploitation of CVE-2026-8037 in Progress LoadMaster allows unauthenticated RCE via command injection. Securing your perimeter requires immediate SIEM detection updates and access restrictions. Review our full TSUITE analysis: https://thecybermind.co/5yde

🚨 [CISA-2026:0807] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-8037 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8037)
- Name: Progress LoadMaster Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Progress
- Product: LoadMaster
- Notes: https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-8037

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260807 #cisa20260807 #cve_2026_8037 #cve20268037

CVE ID: CVE-2026-8037
Vendor: Progress
Product: LoadMaster
Date Added: 2026-08-07
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-8037

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

CRITICAL THREAT ALERT: Active exploitation of CVE-2026-8037 in Progress LoadMaster allows unauthenticated RCE via command injection. Securing your perimeter requires immediate SIEM detection updates and access restrictions. Review our full TSUITE analysis: https://thecybermind.co/5yde

🚨 [CISA-2026:0807] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0807)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-8037 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-8037)
- Name: Progress LoadMaster Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Progress
- Product: LoadMaster
- Notes: https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-8037

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260807 #cisa20260807 #cve_2026_8037 #cve20268037

CVE ID: CVE-2026-8037
Vendor: Progress
Product: LoadMaster
Date Added: 2026-08-07
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-8037

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

🟠 CVE-2026-7406 - High (7.8)

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7406/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70638 - High (7.8)

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multiplies sizeof(llama_seq_id) by an attacker-controlled n_seq_max parameter without overflow validati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70638/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

🔴 CVE-2026-68823 - Critical (9.1)

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68823/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

CISA has added one vulnerability to the KEV catalogue:

CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA

Cisco:

NEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco

Palo Alto:

CRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288

Microsoft:

Several updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft

Google:

New: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome

Broadcom:

One new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory

Posted yesterday:

Apple security updates https://support.apple.com/en-us/100100 #Apple

AMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD

Dell:

CRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL

🟠 CVE-2026-71488 - High (7.5)

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71488/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70636 - High (7.5)

Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access the OAuth2 credential refresh endpoint by exploiting prefix-based whitelist matching in the authentication middleware defined in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19264 - Critical (9.8)

Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19264/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19264 - Critical (9.8)

Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19264/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

MStore API WordPress plugin (<4.21.0) hit by CRITICAL vuln (CVE-2026-16030): improper phone token checks enable account takeover, incl. admins. Restrict endpoints & monitor logins until patched. https://radar.offseq.com/threat/cve-2026-16030-cwe-287-improper-authentication-in-mstore-api-799def1fc3890a44 #OffSeq #WordPress #CVE2026_16030 #Vuln

🟠 CVE-2026-15816 - High (7.5)

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH opt...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15816/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15816 - High (7.5)

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH opt...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15816/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-62873 (CRITICAL, CVSS 9.8) affects Microsoft 365 Admin Center: Improper cryptographic signature checks allow privilege escalation over the network. Microsoft has issued a fix — confirm your environment is patched. https://radar.offseq.com/threat/cve-2026-62873-cwe-347-improper-verification-of-cryptographic-signature-in-microsoft-microsoft-365-5fad3518811d36c2 #OffSeq #Microsoft365 #Vuln

🔴 CVE-2026-62873 - Critical (9.8)

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62873/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

If you missed these yesterday.

"Three of the issues, CVE-2026-63508, CVE-2026-56162, and CVE-2026-65667, have a maximum severity rating of 10/10."

Security Week: Microsoft, Apple Release Fresh Security Updates https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/ #Microsoft #Apple #infosec #vylnerability #Apple

🔴 CVE-2026-65667 - Critical (10)

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65667/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-50515 - Critical deserialization RCE in Azure Service Bus. Authorized attacker can execute code over network. CVSS 9.9, unpatched. Harden access and monitor now. #CVE #Azure #infosec

https://www.valtersit.com/cve/CVE-2026-50515/

🔴 CVE-2026-62830 - Critical (9.9)

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62830/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

If you missed these yesterday.

"Three of the issues, CVE-2026-63508, CVE-2026-56162, and CVE-2026-65667, have a maximum severity rating of 10/10."

Security Week: Microsoft, Apple Release Fresh Security Updates https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/ #Microsoft #Apple #infosec #vylnerability #Apple

CVE-2026-63508 (CRITICAL, CVSS 10): Microsoft Planetary Computer Pro (GeoCatalog) suffers from missing authentication, enabling remote privilege escalation. Immediate patching recommended. Details: https://radar.offseq.com/threat/cve-2026-63508-cwe-306-missing-authentication-for-critical-function-in-microsoft-microsoft-planetary-431bf04580187f39 #OffSeq #Vuln #Microsoft #Infosec

🔴 CVE-2026-63508 - Critical (10)

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63508/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical SSRF (CVE-2026-70332) in Microsoft SharePoint Online (CVSS 9.6) lets attackers send unauthorized network requests. Patch ASAP with the official fix: https://radar.offseq.com/threat/cve-2026-70332-cwe-918-server-side-request-forgery-ssrf-in-microsoft-microsoft-sharepoint-online-34600d2dd5541b7c #OffSeq #InfoSec #Microsoft #SSRF #CloudSecurity

🔴 CVE-2026-70332 - Critical (9.6)

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70332/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67863 - High (7.5)

In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UA_Subscription_localPublish continues to use the current UA_Notification after a callback invokes UA_Server_deleteMonitoredIte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67863/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-54212: CRITICAL buffer overflow in Tobit TeamDavid Webbox API (≤ Rollout 524). Crafted JSON lets unauthenticated attackers crash servers; RCE possible if combined with other flaws. Restrict API, monitor activity. https://radar.offseq.com/threat/cve-2026-54212-cwe-787-out-of-bounds-write-in-tobit-laboratories-ag-teamdavid-2e946f5b4b7b0ab5 #OffSeq #CVE #bufferOverflow #infosec

Tobit TeamDavid (Webbox ≤ Rollout 524) hit by CRITICAL buffer overflow (CVE-2026-54211). Authenticated attackers can crash servers; possible RCE if stack canary is disclosed. Restrict access & monitor. No patch yet. https://radar.offseq.com/threat/cve-2026-54211-cwe-787-out-of-bounds-write-in-tobit-laboratories-ag-teamdavid-dd683c887b0f0b7a #OffSeq #Vulnerability #InfoSec

CVE-2026-54213: CRITICAL improper access control in Tobit TeamDavid Webbox — public /internalRestart endpoint lets remote attackers trigger persistent DoS by shutting down servers. No patch yet. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-54213-cwe-284-improper-access-control-in-tobit-laboratories-ag-teamdavid-7d00f2efd17d315b #OffSeq #Cybersecurity #Vuln

🟠 CVE-2026-9196 - High (8.1)

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Python co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9196/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🏆 New Achievement! Patch Notes From Hell!

Version 2026.08 changelog: ADDED — Chinese-speaking threat actor manually planting reverse shells on Apache Tomcat servers via CVE-2026-34486, itself an incomplete fix for the 9.8-rated CVE-2026-29146. ADDED — unauthenticated admin account hijacking on N-able's N-central via CVE-2026-18576. ADDED — critical 9.8-rated remote code execution at root on IBM Langflow via CVE-2026-9198. (1/2)

CISA Reports Active Exploitation of Apache Tomcat RCE Vulnerability

CISA reports active exploitation of an Apache Tomcat vulnerability (CVE-2026-34486) to its KEV catalog after Chinese threat actors exploited a fail-open logic error in the EncryptInterceptor to achieve remote code execution.

**If you run Apache Tomcat with clustering enabled, upgrade ASAP to 9.0.117, 10.1.54, or 11.0.21 This flaw is being actively exploited and can give attackers full remote code execution on every node in the cluster. If you can't patch, make sure your cluster traffic ports are not reachable from the internet, check `server.xml` and `context.xml` to confirm EncryptInterceptor is active with no custom interceptors overriding it, and turn off plain HTTP in favour of HTTPS only.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-reports-active-exploitation-of-apache-tomcat-rce-vulnerability-t-a-b-r-8/gD2P6Ple2L

🚨 CISA KEV ALERT: CVE-2026-34486 exposes Apache Tomcat installations to EncryptInterceptor bypasses and data interception. Active exploitation confirmed. Get the forensic breakdown, Splunk/KQL/Chronicle detection queries, and hardening steps: https://thecybermind.co/it1p

Top-of-the-Line LinkedIn Post

🟠 CVE-2026-9169 - High (8.8)

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH en...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9169/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9169 - High (8.8)

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH en...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9169/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71312 - High (8)

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71312/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62918 - High (7.5)

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62918/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62896 - Critical (9.6)

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62896/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65668 - High (8.8)

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65668/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59115 - Critical (9.9)

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59115/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8325 - High (7.8)

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8325/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-62836 - Privilege escalation in Azure SQL Managed Instance via improper endpoint restriction. CVSS 8.7. Unpatched. Restrict network access and monitor. #CVE #Azure #infosec

https://www.valtersit.com/cve/CVE-2026-62836/

🟠 CVE-2026-62836 - High (8.7)

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62836/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-56162 - Critical auth bypass in Azure SQL Database. Privilege escalation over network, CVSS 10. Unpatched - assume exposure. Mitigate immediately. #CVE #Azure #infosec

https://www.valtersit.com/cve/CVE-2026-56162/

If you missed these yesterday.

"Three of the issues, CVE-2026-63508, CVE-2026-56162, and CVE-2026-65667, have a maximum severity rating of 10/10."

Security Week: Microsoft, Apple Release Fresh Security Updates https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/ #Microsoft #Apple #infosec #vylnerability #Apple

🔴 CVE-2026-59118 - Critical (9.3)

Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59118/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66665 - Critical (10)

Unauthenticated Arbitrary File Upload in Type Hub &lt;= 2.0.6 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66665/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-65575 - Critical (9.8)

Unauthenticated PHP Object Injection in Accalia &lt;= 1.5.3 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65575/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53977 - High (7.5)

OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authenti...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53977/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-3430 - High (8.6)

The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when the abandoned cart email is managed by creative mail.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3430/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18427 - High (7.5)

@fastify/static before version 10.1.3 contains an incomplete fix for a previous route guard bypass. The static file handler rejected only parent directory segments, but it did not canonicalize dot segments, duplicate slashes, encoded dots, or back...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18427/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15991 - High (8.8)

The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible for authenticated attackers, with subscriber-l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15991/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Vulnerability in ngx-extended-pdf-viewer (HIGH): Bundled pdf.js exposes XFA (enabled by default), risking JS execution via malicious PDFs (CVE-2026-16633). Update to 29.0.0-rc.3 or disable XFA for mitigation. https://radar.offseq.com/threat/ngx-extended-pdf-viewer-bundles-a-version-of-pdfjs-vulnerable-to-cve-2026-16633-3a7320cdbeb0cda3 #OffSeq #Vulnerability #PDF #Infosec

🟠 CVE-2026-17624 - High (8.5)

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17624/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17633 - High (8.5)

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17633/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8183 - High (7.7)

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote attacker to traverse directories on the system. An attacker could send a s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8183/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9201 - High (8.8)

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to truste...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9201/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53985 - High (7.5)

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53985/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18359 - High (8.5)

Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to make the server issue arbitrary HTTP requests to internal hosts, including the cloud instance metada...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18359/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18258 - High (8.8)

Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via prim...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18258/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66712 - High (7.5)

Unauthenticated Broken Access Control in Simple Membership &lt;= 4.7.8 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66712/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-15459 - High (8.1)

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.0. On sites not yet connected to the WPMU DEV Hub — the default state after installation — the site API key that keys ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15459/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20301 - High (8.6)

A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20301/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-20310 - Critical (9.1)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20310/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco IOS XE vulnerability CVE-2026-20272 hits CVSS 9.8 and CVE-2026-20267 scores 9.0. Cisco urges customers to patch now.

#Cisco #IOSXE #CVE202620272 #CVE202620267 #CyberSecurity #NetworkSecurity

https://securityonline.info/cisco-ios-xe-cve-2026-20272/?utm_source=mastodon&utm_medium=jetpack_social

Cisco SD-WAN vulnerability CVE-2026-20303 and CVE-2026-20304 reach CVSS 9.9. Cisco urges Catalyst SD-WAN customers to patch now.
#Cisco #SDWAN #CVE202620303 #CVE202620304 #CyberSecurity #NetworkSecurity

https://securityonline.info/cisco-sd-wan-cve-2026-20303/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-66709 - Critical (9.1)

Shop manager Remote Code Execution (RCE) in CTX Feed &lt;= 6.6.42 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66709/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66708 - High (8.2)

Unauthenticated Broken Access Control in Total Upkeep &lt;= 1.17.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66708/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66710 - High (8.1)

Unauthenticated Local File Inclusion in e2pdf &lt;= 1.32.40 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66710/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66662 - Critical (9.8)

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps &lt;= 3.29.10 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-66447 - Critical (9.3)

Unauthenticated SQL Injection in WordPress File Upload &lt;= 5.1.7 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66447/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-66733: HIGH severity vuln in Eukaryot sonic3air ≤26.03.28.0. Crafted UDP packets can force unbounded memory allocation, crashing the server (DoS, no RCE). Patch unconfirmed — check vendor. https://radar.offseq.com/threat/cve-2026-66733-memory-allocation-with-excessive-size-value-in-eukaryot-sonic3air-4d6f914f9dea29a1 #OffSeq #Vuln #DoS #sonic3air

WSO2 patched four critical account takeover flaws, including CVE-2026-5430 at CVSS 10 via JWT auth bypass. Details and fixes inside.

#WSO2 #AccountTakeover #CVE #APIsecurity #CyberSecurity

https://securityonline.info/wso2-account-takeover-flaws/?utm_source=mastodon&utm_medium=jetpack_social

WSO2 Universal Gateway v4.5.0 & 4.6.0 affected by CRITICAL CVE-2026-5430 (CVSS 10.0). Improper JWT validation enables account takeover. No patch yet — apply compensating controls. https://radar.offseq.com/threat/cve-2026-5430-cwe-347-improper-validation-of-certificate-with-host-mismatch-in-wso2-wso2-universal-f913080655427dd8 #OffSeq #WSO2 #JWT #Vulnerability

🟠 CVE-2026-71321 - High (7.5)

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, the internal island renderer endpoint `/__nuxt_island/...` decodes and hashes attacker-controlled JSON body input with destr and ohash before validati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71321/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71314 - High (7.5)

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforToArray and , to trigger unbounded SSR memory allocation until MAX_VFOR_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71314/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18411 - High (8.1)

The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth range can leverage this weakness to issue unauthorized commands to the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18411/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67869 - High (7.5)

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input arguments against runtime-resolved InputArguments metadata

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67869/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-1728 | CRITICAL: WSO2 API Manager (v4.0.0 – 4.6.0) has an improper privilege management flaw. Low-privileged user tokens can access admin REST APIs — possible admin account takeover. Patch status unknown. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-1728-cwe-269-improper-privilege-management-in-wso2-wso2-api-manager-fea4a27d18a06e70 #OffSeq #WSO2 #Vuln

SUSE Rancher CVE-2026-44945 (CRITICAL, CVSS 9.1): Privilege escalation flaw lets authenticated users with default global role gain full admin on Rancher & clusters. Restrict access & monitor pending patch. https://radar.offseq.com/threat/cve-2026-44945-cwe-441-unintended-proxy-or-intermediary-confused-deputy-in-suse-rancher-9a7358d4ec1c0d9c #OffSeq #infosec #CVE202644945 #Kubernetes

🟠 CVE-2026-18485 - High (7.8)

There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.  This may allow a local, authenticated user to escalate privileges and execute arbitrary code.  This vulnerability affects NI-PAL 26.3.1 and p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18485/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70432 - High (8.8)

A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70432/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-70426 - Critical (9)

In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, the JEP-200 class filter is not applied to classes resolved via a fallback path in the Remoting deserializa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70426/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Critical Jenkins vulnerability CVE-2026-70426 lets attackers bypass the JEP-200 filter and run code on the controller. Patch now.
#Jenkins #CVE202670426 #RCE #DevSecOps #Deserialization #CyberSecurity

https://securityonline.info/jenkins-cve-2026-70426-rce/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-70431 - High (8.8)

Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70431/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-70615 - Critical (9.9)

boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorized_keys file by supplying a percen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70615/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-34966 - High (7.6)

Gitea prior to 1.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to bypass SSRF protections by exploiting HTTP fetch operations in migration and OAuth avatar code paths that use Go's default http.Get w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34966/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17632 - High (8.8)

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17632/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17583 - High (8.4)

The affected

Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17583/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-69111 - High (7.5)

Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69111/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-70617 - High (8.1)

Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without member...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70617/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8182 - High (8.8)

IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbitrary code on the server without any credentials via 2 HTTP requests.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8182/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8478 - High (8.8)

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8478/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71320 - High (8.1)

Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key through /__nuxt_island/ props into a dynamic component when `vue.runtimeCompiler: true` is enabled, causing temp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71320/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Nuxt DevTools <3.3.1 is affected by CVE-2026-71319 (CRITICAL). Unauthenticated Vite HMR WebSocket RPC lets attackers execute arbitrary code via updateOptions() & openInEditor(). Patch to 3.3.1 ASAP. https://radar.offseq.com/threat/cve-2026-71319-cwe-94-improper-control-of-generation-of-code-code-injection-in-nuxt-devtools-d2e93c140a0d8a9f #OffSeq #NuxtJS #CVE202671319 #infosec

🔴 CVE-2026-71319 - Critical (9.6)

Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (development mode only) exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel h...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71319/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71316 - High (7.5)

Nuxt is an open-source web development framework for Vue.js. From 4.4.0 until 4.5.1, runtime cache:nuxt:payload entries for //_payload.json can be returned before route middleware and page guards because import.meta.prerender is not enforced, disc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71316/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71315 - High (8.2)

Nuxt is an open-source web development framework for Vue.js. From 3.21.7 until 3.21.10 and 4.5.1, mixed-case routeRules keys can fail to match case-folded lookups when router.options.sensitive is false and drop appMiddleware authorization gates. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71315/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔵 THREAT INTELLIGENCE

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

Vulnerability | CRITICAL
CVEs: CVE-2026-63077

A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the...

Full analysis:
https://www.yazoul.net/news/article/cisa-flags-teamcity-cve-2026-63077-rce-flaw-under-active-exploitation-in-the-wil

by Yazoul AI

#CyberSecurity #CVE #SecurityOps

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild https://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html

🚨 CSUITE THREAT ADVISORY: CISA confirms active exploitation of CVE-2026-63077 in JetBrains TeamCity. Unauthenticated RCE threatens core build pipelines & supply chain integrity. Get the executive governance, risk management, and compliance brief now: https://thecybermind.co/jvee

TeamCity vulnerability CVE-2026-63077 enables unauthenticated remote code execution. CISA added it to the KEV catalog amid active exploitation.

#TeamCity #CVE202663077 #RCE #CISA #KEV #CyberSecurity

https://securityonline.info/teamcity-cve-2026-63077-rce/?utm_source=mastodon&utm_medium=jetpack_social

🚨 CISA KEV ALERT: CVE-2026-63077 exposes JetBrains TeamCity servers to unauthenticated RCE via untrusted deserialization. Active exploitation confirmed. Get the forensic breakdown, CrowdStrike CQL detection logic, and CI/CD hardening steps: https://thecybermind.co/oapr

🚨 [CISA-2026:0805] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0805)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-63077 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-63077)
- Name: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: JetBrains
- Product: TeamCity
- Notes: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/; https://www.jetbrains.com/privacy-security/issues-fixed/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-63077

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260805 #cisa20260805 #cve_2026_63077 #cve202663077

CVE ID: CVE-2026-63077
Vendor: JetBrains
Product: TeamCity
Date Added: 2026-08-05
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-63077

🟠 CVE-2026-20313 - High (7.7)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20313/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-20312 - High (8.8)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address mu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20312/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco SD-WAN vulnerability CVE-2026-20303 and CVE-2026-20304 reach CVSS 9.9. Cisco urges Catalyst SD-WAN customers to patch now.
#Cisco #SDWAN #CVE202620303 #CVE202620304 #CyberSecurity #NetworkSecurity

https://securityonline.info/cisco-sd-wan-cve-2026-20303/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-9077 - High (8.5)

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files on the host system.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9077/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco IOS XE vulnerability CVE-2026-20272 hits CVSS 9.8 and CVE-2026-20267 scores 9.0. Cisco urges customers to patch now.

#Cisco #IOSXE #CVE202620272 #CVE202620267 #CyberSecurity #NetworkSecurity

https://securityonline.info/cisco-ios-xe-cve-2026-20272/?utm_source=mastodon&utm_medium=jetpack_social

PoC exploit code is public for CVE-2026-20200, a Cisco IMC argument injection flaw enabling root RCE. CVSS 8.8. Patch details inside.

#Cisco #RCE #CVE #InfoSec #CyberSecurity

https://securityonline.info/cisco-imc-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🏆 New Achievement! Root Access: Now Available In Select Markets While Supplies Last!

TERMS AND CONDITIONS APPLY. Cisco IMC (CVE-2026-20200) is now eligible for the Root Prize Draw, in which any authenticated remote attacker — even one with low privileges, congratulations to them — may submit crafted inputs to the web-based management interface for a chance to execute arbitrary commands as root on your rack server. (1/3)

🟠 CVE-2026-71294 - High (7.6)

Cotonti CMS's Comments plugin deserializes user-supplied data without restricting the classes that may be instantiated. In plugins/comments/controllers/actions/CreateAction.php, a `ci` POST parameter obtained via `cot_import('ci', 'P', 'TXT')` (tr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71294/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71287 - High (8.8)

Cacti's sanitize_sql_column() (lib/functions.php) sanitizes user-supplied ORDER BY column names using the regex `preg_replace('/[^a-zA-Z0-9_().]/', '', $column)`. Because this allowlist retains letters, digits, underscore, parentheses, and dot (in...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71287/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71285 - High (8.1)

Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo `siteId` value as a bare, unquoted JavaScript expression inside a block rendered on every public status page: `_paq.push(['set...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71285/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-4431: CRITICAL vuln in Easy Post Submission ≤2.3.0 for WordPress. Missing auth lets unauthenticated attackers modify or unpublish any post via AJAX. No patch yet — disable plugin if possible. https://radar.offseq.com/threat/cve-2026-4431-cwe-862-missing-authorization-in-themeruby-easy-post-submission-frontend-posting-guest-a356c334d549556e #OffSeq #WordPress #Vuln #CVE20264431

CVE-2026-71289 (CRITICAL, CVSS 9.8): NASA-AMMOS ANMS exposes amp-manager REST API w/ no auth. Remote attackers can control system & disrupt ops. Restrict access, avoid default configs, check vendor for patches. https://radar.offseq.com/threat/cve-2026-71289-cwe-306-in-nasa-ammos-anms-e9bcfd162464d056 #OffSeq #CVE #NASA #Infosec

🏆 New Achievement! Upload In Peace, Active Storage!

We are gathered here today to mourn Active Storage, the earnest, overly-trusting file-handling component of Ruby on Rails, taken from us by CVE-2026-66066, nicknamed "KindaRails2Shell." It lived as it worked: accepting everything without question, like a golden retriever at a buffet. (1/3)

CVE-2026-66747: a Zbtlink router backdoor named ENDLESSDOORS gives unauthenticated remote code execution as root. No fix exists. CVSS 9.8.

#Zbtlink #RouterBackdoor #CVE #IoT #CyberSecurity

https://securityonline.info/zbtlink-router-backdoor/?utm_source=mastodon&utm_medium=jetpack_social

Today, VulnCheck is disclosing #ENDLESSDOORS, a phone-home implant CTO @albinolobster discovered in Zbtlink routers. ENDLESSDOORS starts automatically, runs with root privileges, and attempts to connect to command-and-control infrastructure roughly every 35 seconds. The backdoor ships by default across 20+ Zbtlink router models, which are white-labeled and sold on popular retail sites including Amazon, AliExpress, and Alibaba.

The implant and server implement no encryption or verification, meaning anyone along the network path can hijack the client-server communication and obtain a root shell on the device, regardless of the router's network position.

The VulnCheck CNA has assigned CVE-2026-66747 to track backdoored firmware versions; our blog also has guidance for defenders, including affected firmware images, hashes, network indicators, a YARA rule, and network signatures (Suricata / Snort).

https://www.vulncheck.com/blog/zbt-endlessdoors

CVE-2026-71254: CRITICAL out-of-bounds write in debevv nanoMODBUS (≤v1.23.0). Unauthenticated FC 0x14 requests can cause memory corruption, leading to DoS or RCE — especially on embedded targets. Patch/mitigate now. https://radar.offseq.com/threat/cve-2026-71254-cwe-787-in-debevv-nanomodbus-649361bc8788d305 #OffSeq #CVE #ICS #infosec

CVE-2026-71214: NASA-AMMOS plandev sequencing-server has a CRITICAL vuln (CVSS 9.8) — unauthenticated users can inject commands by spoofing session roles or using whitelisted endpoints. Patch urgently. More: https://radar.offseq.com/threat/cve-2026-71214-cwe-306-missing-authentication-for-critical-function-in-nasa-ammos-plandev-sequencing-a69c1ea44211854b #OffSeq #Vuln #NASA #CyberSec #CVSS

Veeam Patches Critical Credential Theft and RCE Flaws in Service Provider Console

Veeam patched four vulnerabilities in its Service Provider Console, including critical flaws (CVE-2026-58073 and CVE-2026-58072) that allow unauthenticated credential theft and remote code execution.

**If you run Veeam Service Provider Console version 9.2.1.33875 or any earlier version 9 build, upgrade to version 9.3.0.35057 ASAP. These flaws let attackers take over the console that controls all of your customers' backups. Make sure to lock down the management portal so it's only reachable from a small list of trusted IP addresses, not the open internet.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/veeam-patches-critical-credential-theft-and-rce-flaws-in-service-provider-console-y-k-8-e-6/gD2P6Ple2L

🚨 CISA KEV ALERT: CVE-2026-18556 exposes N-able N-central installations to authentication bypass via alternate channel paths. Active exploitation confirmed. Get the forensic breakdown, Splunk/KQL/Chronicle detection logic, and hardening guidance now: https://thecybermind.co/radr

🏆 New Achievement! Patch Notes From Hell!

Version 2026.08 changelog: ADDED — Chinese-speaking threat actor manually planting reverse shells on Apache Tomcat servers via CVE-2026-34486, itself an incomplete fix for the 9.8-rated CVE-2026-29146. ADDED — unauthenticated admin account hijacking on N-able's N-central via CVE-2026-18576. ADDED — critical 9.8-rated remote code execution at root on IBM Langflow via CVE-2026-9198. (1/2)

Actively Exploited IBM Langflow Vulnerability Allows Unauthenticated Remote Code Execution

IBM Langflow OSS injection vulnerability (CVE-2026-9198)is actively exploited. CISA has added the flaw to its Known Exploited Vulnerabilities catalog and requires immediate patching/

**If you run IBM Langflow OSS (versions 1.0.0 through 1.10.0), update to version 1.10.1 or later immediately. Attackers are already using this flaw to take over servers. If you can't update immediately, take the Langflow instance off the internet, and check your logs for unexpected superuser tokens or odd Python code being run.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/actively-exploited-ibm-langflow-vulnerability-allows-unauthenticated-remote-code-execution-1-k-n-g-e/gD2P6Ple2L

NVIDIA Dynamo Code Execution Flaw CVE-2026-24254 CVSS 9.8

https://securityonline.info/nvidia-dynamo-code-execution-flaw/?utm_source=mastodon&utm_medium=jetpack_social

Veeam ONE Patches Critical Remote Code Execution and SQL Injection Flaws

Veeam ONE version 13 contains six vulnerabilities, including a CVSS 10.0 critical remote code execution flaw and a high-severity SQL injection bug. These vulnerabilities allow unauthenticated attackers to take over agent hosts, read arbitrary files, and extract sensitive database information.

**If you run Veeam ONE version 13, update it to build 13.1.0.7034. One of these flaws (CVE-2026-64633) lets an attacker take over the system remotely without any login or clicks from you. While you're at it, make sure Veeam ONE is only reachable from your trusted admin network, not from the internet or the general user network.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/veeam-one-patches-critical-remote-code-execution-and-sql-injection-flaws-q-a-8-7-1/gD2P6Ple2L

Veeam Patches Critical Credential Theft and RCE Flaws in Service Provider Console

Veeam patched four vulnerabilities in its Service Provider Console, including critical flaws (CVE-2026-58073 and CVE-2026-58072) that allow unauthenticated credential theft and remote code execution.

**If you run Veeam Service Provider Console version 9.2.1.33875 or any earlier version 9 build, upgrade to version 9.3.0.35057 ASAP. These flaws let attackers take over the console that controls all of your customers' backups. Make sure to lock down the management portal so it's only reachable from a small list of trusted IP addresses, not the open internet.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/veeam-patches-critical-credential-theft-and-rce-flaws-in-service-provider-console-y-k-8-e-6/gD2P6Ple2L

Stored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920) https://syntetisk.tech/blog/posts/stored-xss-in-djangos-admin-via-an-unvalidated-urlfield-display-path-cve-2026-15920/

🏆 New Achievement! Patch Notes From Hell!

Version 2026.08 changelog: ADDED — Chinese-speaking threat actor manually planting reverse shells on Apache Tomcat servers via CVE-2026-34486, itself an incomplete fix for the 9.8-rated CVE-2026-29146. ADDED — unauthenticated admin account hijacking on N-able's N-central via CVE-2026-18576. ADDED — critical 9.8-rated remote code execution at root on IBM Langflow via CVE-2026-9198. (1/2)

Instale já a correção para vulnerabilidade em máquinas virtuais

Se você usa Proxmox ou apenas tem um VPS, atualize já seu sistema. O problema permite o escape de máquinas virtuais e acesso à máquina física.

Se usa Debian, saiu o kernel 6.12.101-1 que corrige o problema. O Proxmox também já lançou atualização mesmo para quem não é assinante com o kernel 7.0.14-9.

:debian: https://security-tracker.debian.org/tracker/CVE-2026-64561
:xp_secure_server: https://forum.proxmox.com/threads/proxmox-and-cve-2026-64561.185571/
:xp_sys_info: https://www.cve.org/CVERecord?id=CVE-2026-64561
:github: https://github.com/V4bel/Zapscape

@fediadminbr

#FediAdminBR #MastoAdmin

Instale já a correção para vulnerabilidade em máquinas virtuais

Se você usa Proxmox ou apenas tem um VPS, atualize já seu sistema. O problema permite o escape de máquinas virtuais e acesso à máquina física.

Se usa Debian, saiu o kernel 6.12.101-1 que corrige o problema. O Proxmox também já lançou atualização mesmo para quem não é assinante com o kernel 7.0.14-9.

:debian: https://security-tracker.debian.org/tracker/CVE-2026-64561
:xp_secure_server: https://forum.proxmox.com/threads/proxmox-and-cve-2026-64561.185571/
:xp_sys_info: https://www.cve.org/CVERecord?id=CVE-2026-64561
:github: https://github.com/V4bel/Zapscape

@fediadminbr

#FediAdminBR #MastoAdmin

A new Linux Kernel KVM vulnerability threatens cloud servers with virtual machine escape risks. Learn about CVE-2026-64561 and secure your host machine now.

#LinuxKernel #KVMVulnerability #CVE202664561 #CloudSecurity #VMescape

https://securityexpress.info/linux-kernel-kvm-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

「Zapscape KVMの新たな脆弱性により、特権を持つL1ゲストコードがLinuxホストに漏洩する可能性 」： #TheHackerNews

「Linuxカーネルの新たな脆弱性「Zapscape」 により、L1ゲスト仮想マシン（VM）内でカーネル権限を持つ攻撃者がKVM分離を回避し、ホスト上でコードを実行できる可能性があります。このリスクは、ネストされた仮想化が信頼できないゲストに公開されている場合に発生します。

この脆弱性は CVE-2026-64561 として追跡されており、ネストされたゲストメモリ変換に使用されるシャドウページテーブルを管理するKVM/x86のシャドウメモリ管理ユニット（MMU）に影響を与えます。

このバグを明らかにしたセキュリティ研究者の キム・ヒョヌ氏 は、実証されたエクスプロイト経路によって、カーネル権限、つまりroot権限でホスト上でコマンドを実行できると述べた。 」

https://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html

#prattohome

CVE-2026-64561: Zapscape KVM Escape Runs Commands With Kernel Root Privilege, PoC Exploit Code Publicly Disclosed

https://securityonline.info/kvm-escape-vulnerability-zapscape/?utm_source=mastodon&utm_medium=jetpack_social

Not sure if I'm late to that party on this one or not. Guest to host escape in Linux KVM.

Zapscape (CVE-2026-64561)
Zapscape is a use-after-free vulnerability in the shadow MMU emulation of KVM/x86, specifically in the recursive zap path that runs when shadow pages are reclaimed. It can trigger the bug with guest-side actions alone to corrupt the host kernel's shadow page, and it can threaten the guest-host isolation of KVM/x86 hosts that accept untrusted guests and expose nested virtualization, particularly multi-tenant x86 public clouds.

https://github.com/V4bel/Zapscape

#Security #Linux #VIrtualization

Zapscape (CVE-2026-64561): Guest-to-Host Escape in KVM/x86

Link: https://github.com/V4bel/Zapscape
Discussion: https://news.ycombinator.com/item?id=49198843

🎉 Ah, yet another CVE! The thrilling tale of "Zapscape" is as exciting as watching paint dry, with #GitHub promising to stop leaks before they start 🔒. With a catchy name like CVE-2026-64561, it’s sure to stay in our nightmares forever. 🙄
https://github.com/V4bel/Zapscape #CVE2026 #Zapscape #cybersecurity #vulnerabilities #technews #HackerNews #ngated

Zapscape (CVE-2026-64561)

https://github.com/V4bel/Zapscape

Comments: https://news.ycombinator.com/item?id=49198843

#HackerNews #Zapscape #CVE-2026-64561 #cybersecurity #vulnerability #hackernews #open_source #software_security

Zapscape (CVE-2026-64561): Guest-to-Host Escape in KVM/x86

https://github.com/V4bel/Zapscape

#github