🟠 CVE-2026-72859 - High (7.7)

Budibase versions 3.39.4 before 3.40.0 contain an authorization regression in the S3 attachment upload endpoint that allows BASIC users to obtain S3 PutObject presigned URLs by sending POST requests to the attachments endpoint. The route was chang...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72859/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72859 - High (7.7)

Budibase versions 3.39.4 before 3.40.0 contain an authorization regression in the S3 attachment upload endpoint that allows BASIC users to obtain S3 PutObject presigned URLs by sending POST requests to the attachments endpoint. The route was chang...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72859/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19821 - High (8.8)

A vulnerability was determined in Tenda AC12 15.03.06.23_multi_TD01. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd web management interface. This manipulation of the argum...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19821/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19821 - High (8.8)

A vulnerability was determined in Tenda AC12 15.03.06.23_multi_TD01. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd web management interface. This manipulation of the argum...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19821/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Grav API plugin <1.0.13 has a CRITICAL flaw (CVE-2026-72830): scoped API keys can inject arbitrary commands into scheduler config, leading to remote code execution. Patch now! https://radar.offseq.com/threat/cve-2026-72830-improper-privilege-management-in-getgrav-grav-96262eb7a2b2ec89 #OffSeq #CVE202672830 #Grav #RCE #Infosec

Grav API plugin <1.0.13 has a CRITICAL flaw (CVE-2026-72830): scoped API keys can inject arbitrary commands into scheduler config, leading to remote code execution. Patch now! https://radar.offseq.com/threat/cve-2026-72830-improper-privilege-management-in-getgrav-grav-96262eb7a2b2ec89 #OffSeq #CVE202672830 #Grav #RCE #Infosec

🟠 CVE-2026-72837 - High (8.8)

File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72837/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72837 - High (8.8)

File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72837/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72836 - High (8.1)

FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration. When Signup and CreateUserDir are enabled and FileBrowser's root is on a case-insensitive filesystem (con...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72836/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72836 - High (8.1)

FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration. When Signup and CreateUserDir are enabled and FileBrowser's root is on a case-insensitive filesystem (con...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72836/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-72829 (CRITICAL): getgrav grav API plugin <1.0.13 allows api.users.write-scoped keys from super accounts to escalate to full admin. Restrict API key use & monitor for privilege changes. Details: https://radar.offseq.com/threat/cve-2026-72829-improper-privilege-management-in-getgrav-grav-8d7c1bb7ce40a2ba #OffSeq #CVE202672829 #infosec #WebAppSec

CVE-2026-72829 (CRITICAL): getgrav grav API plugin <1.0.13 allows api.users.write-scoped keys from super accounts to escalate to full admin. Restrict API key use & monitor for privilege changes. Details: https://radar.offseq.com/threat/cve-2026-72829-improper-privilege-management-in-getgrav-grav-8d7c1bb7ce40a2ba #OffSeq #CVE202672829 #infosec #WebAppSec

CVE-2026-19792 – Critical buffer overflow in Tenda G0 httpd via setPortMapping. Remote RCE risk. CVSS 8.8. Exploit public, no patch yet. Disable access or update ASAP. #CVE #Tenda #infosec

https://www.valtersit.com/cve/CVE-2026-19792/

🟠 CVE-2026-19814 - High (8.8)

A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setMacQos of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Performing a manipulation of the argument macAddress results in stack-based bu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19814/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19814 - High (8.8)

A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setMacQos of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Performing a manipulation of the argument macAddress results in stack-based bu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19814/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19815 - High (8.8)

A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Executing a manipulation of the argument urlKeyword can ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19815/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19815 - High (8.8)

A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by this vulnerability is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Executing a manipulation of the argument urlKeyword can ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19815/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19811 - High (8.8)

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment results in sta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19811/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19811 - High (8.8)

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment results in sta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19811/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19813 - High (8.8)

A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads to stac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19813/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19813 - High (8.8)

A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Such manipulation of the argument Comment leads to stac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19813/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19812 - High (8.8)

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer ov...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19812/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19812 - High (8.8)

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer ov...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19812/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-12949 - Critical Account Takeover in Wishlist Member WordPress plugin. Insufficient verification allows attacker to merge accounts. CVSS 9.8. Unpatched. Update immediately. #CVE #WordPress #infosec

https://www.valtersit.com/cve/CVE-2026-12949/

🔴 CVE-2026-12949 - Critical (9.8)

The Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verification of Data Authenticity in versions up to and including 3.34.1. This is due to the wpm_register() function validating the registration cookie onl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12949/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-12949 - Critical (9.8)

The Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verification of Data Authenticity in versions up to and including 3.34.1. This is due to the wpm_register() function validating the registration cookie onl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12949/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Essential Addons for Elementor (≤5.8.6) has a CRITICAL CWE-269 bug (CVE-2026-18039) allowing unauthenticated attackers to register admin accounts via custom profile fields. Disable user registration or adjust config until patched. https://radar.offseq.com/threat/cve-2026-18039-cwe-269-improper-privilege-management-in-essential-addons-for-elementor-9865398cac8d7db7 #OffSeq #WordPress #Security #CVE202618039

Essential Addons for Elementor (≤5.8.6) has a CRITICAL CWE-269 bug (CVE-2026-18039) allowing unauthenticated attackers to register admin accounts via custom profile fields. Disable user registration or adjust config until patched. https://radar.offseq.com/threat/cve-2026-18039-cwe-269-improper-privilege-management-in-essential-addons-for-elementor-9865398cac8d7db7 #OffSeq #WordPress #Security #CVE202618039

CVE-2026-19788 – Critical stack buffer overflow in Tenda AC1206 router via /goform/SetOnlineDevName. Remote RCE possible. CVSS 8.8. Unpatched – update firmware or restrict access now. #CVE #Tenda #infosec

https://www.valtersit.com/cve/CVE-2026-19788/

🟠 CVE-2026-6464 - High (8.1)

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6464/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-6464 - High (8.1)

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6464/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CRITICAL: Global Threat Campaign Hits Critical VMware vCenter Flaw

Active exploitation of CVE-2026-59310 in VMware vCenter Server is ongoing. All organizations running vCenter are at risk of compromise. Patching alone may be insufficient due to suspected persistence mechanisms already deployed by threat actors.

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

⚠️ CRITICAL: Critical VMware vCenter RCE flaw exploited for reverse SSH access

A critical directory traversal vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being actively exploited in the wild to deploy reverse SSH tools for persistence. At least 361 compromised hosts across 47 countries have been identified, with attackers establishing remote access on vi…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

🏆 New Achievement! Directory Traversal of Doom (9.8 Stars, Would Not Recommend)!

ITEM DROPPED: CVE-2026-59310, a critical directory traversal flaw in VMware vCenter, CVSS 9.8. Broadcom disclosed this cursed artifact on July 29, and attackers — believed to be a single suspected APT actor — were already swinging it around earlier this month. Network access to a vCenter instance is all it takes to remotely execute arbitrary code across your entire virtual environment. (1/2)

「VMware vCenterの重大なリモートコード実行（RCE）の脆弱性が悪用され、リバースSSHアクセスが行われた。 」： #BLEEPINGCOMPUTER

「VMware vCenter Syslog Serverに存在する、最近パッチが適用された重大な脆弱性（CVE-2026-59310）が、永続的な接続とリモートアクセスを目的としたリバースSSHツールの展開を目的としたアクティブな攻撃キャンペーンで悪用されています。

47か国にわたる361のIPアドレスで侵害が確認されており、その半数以上はドイツ、米国、トルコ、イラン、フランスに位置している。

Broadcomは7月29日にCVE-2026-59310を公開し、 vCenter Syslogサーバーにおける重大なディレクトリトラバーサル脆弱性 であり、ネットワークアクセス権を持つ認証されていない攻撃者が悪用して任意のコードを実行できる可能性があると説明した。 」

https://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/

#prattohome

VMware vCenter Under Attack: Critical CVE-2026-59310 Exploited in a Global Reverse-SSH Campaign + Video

Introduction: A Five-Day Warning That A critical vulnerability in VMware vCenter has rapidly turned from a security advisory into an active global intrusion campaign. CVE-2026-59310, a directory traversal flaw affecting the vCenter Server Syslog component, is now being exploited by attackers to gain access to vulnerable infrastructure and install a reverse-SSH tool…

https://undercodenews.com/vmware-vcenter-under-attack-critical-cve-2026-59310-exploited-in-a-global-reverse-ssh-campaign-video/?utm_source=mastodon&utm_medium=jetpack_social

Critical VMware vCenter RCE flaw exploited for reverse SSH access

A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a...

🔗️ [Bleepingcomputer] https://link.is.it/3RirvF

VMware vCenter flaw exploited for reverse SSH access globally

A critical VMware vCenter flaw, CVE-2026-59310, is being exploited globally, with 361 Internet-connected systems across 47 countries already compromised. This severe vulnerability allows unauthenticated attackers to execute arbitrary code, making swift action essential to prevent further breaches.

https://osintsights.com/vmware-vcenter-flaw-exploited-for-reverse-ssh-access-globally?utm_source=mastodon&utm_medium=social

#Vmware #Cve202659310 #Vcenter #DirectoryTraversal #SupplyChain

VMware vCenter Flaw Exploited Days After Disclosure

Within days of Broadcom's advisory, a critical VMware vCenter flaw, CVE-2026-59310, was exploited, putting 361 victim IP addresses across 47 countries at risk. This severe vulnerability allowed attackers to turn a logging service into a gateway to infiltrate operating systems worldwide.

https://osintsights.com/vmware-vcenter-flaw-exploited-days-after-disclosure?utm_source=mastodon&utm_medium=social

#Cve202659310 #Vmware #Vcenter #DirectoryTraversal #SupplyChain

📢 ⚠️ Researchers have linked 361 victim IPs in 47 countries to a suspected APT campaign exploiting a critical VMware vCenter flaw, CVE-2026-59310.

Listen/Read: https://hackread.com/apt-exploits-critical-vmware-vcenter-vulnerabilities/

#CyberSecurity #VMware #vCenter #APT #Vulnerability

Attackers Exploit Critical VMware vCenter Flaws to Gain Persistent Remote Access

German cybersecurity firm QUIRSO reports active exploitation of VMware vCenter and ESXi, critical flaws (CVE-2026-59310 and CVE-2026-59309).

**If you run VMware vCenter, this is important. Make sure it is not reachable from the internet and can only be accessed from trusted internal networks. Then urgently apply the fixes from Broadcom advisory VMSA-2026-0006.1 (vCenter 9.1.0.0300, 9.0.2.0100, or 8.0 U3k / U2f), because the platform is being attacked and there is no workaround for the flaws. If your vCenter was exposed, check it for signs of compromise such as unexpected cron jobs, unknown SSH tools, or unusual outbound connections.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/attackers-exploit-critical-vmware-vcenter-flaws-to-gain-persistent-remote-access-4-o-b-8-9/gD2P6Ple2L

「攻撃者がVMware vCenterの脆弱性を悪用し、永続的なリモートアクセスを取得する 」： #TheHackerNews

「QUIRSOの 新たな調査結果 によると、攻撃者は、最近パッチが適用されたBroadcom VMware vCenterの重大なセキュリティ脆弱性を積極的に悪用し始めている。

問題となっている脆弱性は CVE-2026-59310 （CVSSスコア：9.8）で、VMware vCenterサーバーのディレクトリトラバーサル脆弱性であり、ネットワークアクセス権を持つ悪意のある攻撃者がこれを悪用して任意のコードを実行できる可能性がある。この脆弱性に対するパッチは、ブロードコム社が先月末にリリースした。

ドイツのサイバーセキュリティ企業は、インシデント対応活動中にこの活動を発見したと発表した。 」

https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html

#prattohome

VMware vCenter Under Attack: CVE-2026-59310 Enables Persistent Access

https://cyberworldops.eu/en/vmware-vcenter-under-attack-cve-2026-59310-enables-persistent-access

⚠️ CRITICAL: Global Threat Campaign Hits Critical VMware vCenter Flaw

Active exploitation of CVE-2026-59310 in VMware vCenter Server is ongoing. All organizations running vCenter are at risk of compromise. Patching alone may be insufficient due to suspected persistence mechanisms already deployed by threat actors.

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

⚠️ CRITICAL: Critical VMware vCenter RCE flaw exploited for reverse SSH access

A critical directory traversal vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being actively exploited in the wild to deploy reverse SSH tools for persistence. At least 361 compromised hosts across 47 countries have been identified, with attackers establishing remote access on vi…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

🏆 New Achievement! Directory Traversal of Doom (9.8 Stars, Would Not Recommend)!

ITEM DROPPED: CVE-2026-59310, a critical directory traversal flaw in VMware vCenter, CVSS 9.8. Broadcom disclosed this cursed artifact on July 29, and attackers — believed to be a single suspected APT actor — were already swinging it around earlier this month. Network access to a vCenter instance is all it takes to remotely execute arbitrary code across your entire virtual environment. (1/2)

「VMware vCenterの重大なリモートコード実行（RCE）の脆弱性が悪用され、リバースSSHアクセスが行われた。 」： #BLEEPINGCOMPUTER

「VMware vCenter Syslog Serverに存在する、最近パッチが適用された重大な脆弱性（CVE-2026-59310）が、永続的な接続とリモートアクセスを目的としたリバースSSHツールの展開を目的としたアクティブな攻撃キャンペーンで悪用されています。

47か国にわたる361のIPアドレスで侵害が確認されており、その半数以上はドイツ、米国、トルコ、イラン、フランスに位置している。

Broadcomは7月29日にCVE-2026-59310を公開し、 vCenter Syslogサーバーにおける重大なディレクトリトラバーサル脆弱性 であり、ネットワークアクセス権を持つ認証されていない攻撃者が悪用して任意のコードを実行できる可能性があると説明した。 」

https://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/

#prattohome

Critical VMware vCenter RCE flaw exploited for reverse SSH access

A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a...

🔗️ [Bleepingcomputer] https://link.is.it/3RirvF

📢 ⚠️ Researchers have linked 361 victim IPs in 47 countries to a suspected APT campaign exploiting a critical VMware vCenter flaw, CVE-2026-59310.

Listen/Read: https://hackread.com/apt-exploits-critical-vmware-vcenter-vulnerabilities/

#CyberSecurity #VMware #vCenter #APT #Vulnerability

Attackers Exploit Critical VMware vCenter Flaws to Gain Persistent Remote Access

German cybersecurity firm QUIRSO reports active exploitation of VMware vCenter and ESXi, critical flaws (CVE-2026-59310 and CVE-2026-59309).

**If you run VMware vCenter, this is important. Make sure it is not reachable from the internet and can only be accessed from trusted internal networks. Then urgently apply the fixes from Broadcom advisory VMSA-2026-0006.1 (vCenter 9.1.0.0300, 9.0.2.0100, or 8.0 U3k / U2f), because the platform is being attacked and there is no workaround for the flaws. If your vCenter was exposed, check it for signs of compromise such as unexpected cron jobs, unknown SSH tools, or unusual outbound connections.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/attackers-exploit-critical-vmware-vcenter-flaws-to-gain-persistent-remote-access-4-o-b-8-9/gD2P6Ple2L

「攻撃者がVMware vCenterの脆弱性を悪用し、永続的なリモートアクセスを取得する 」： #TheHackerNews

「QUIRSOの 新たな調査結果 によると、攻撃者は、最近パッチが適用されたBroadcom VMware vCenterの重大なセキュリティ脆弱性を積極的に悪用し始めている。

問題となっている脆弱性は CVE-2026-59310 （CVSSスコア：9.8）で、VMware vCenterサーバーのディレクトリトラバーサル脆弱性であり、ネットワークアクセス権を持つ悪意のある攻撃者がこれを悪用して任意のコードを実行できる可能性がある。この脆弱性に対するパッチは、ブロードコム社が先月末にリリースした。

ドイツのサイバーセキュリティ企業は、インシデント対応活動中にこの活動を発見したと発表した。 」

https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html

#prattohome

VMware vCenter Under Attack: CVE-2026-59310 Enables Persistent Access

https://cyberworldops.eu/en/vmware-vcenter-under-attack-cve-2026-59310-enables-persistent-access

The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html

CVE-2026-19791 - Critical stack buffer overflow in Tenda G0 router web interface. Remote RCE via staticRouteNet param. CVSS 8.8. Unpatched, exploit public. Disable remote management now. #CVE #Tenda #infosec

https://www.valtersit.com/cve/CVE-2026-19791/

CVE-2026-72841 (CRITICAL, CVSS 9.4) affects OpenWrt luci-app-openvpn: improper instance_name2 validation enables path traversal and arbitrary file writes, risking persistent root code execution. Restrict access & monitor uploads. https://radar.offseq.com/threat/cve-2026-72841-external-control-of-file-name-or-path-in-openwrt-luci-109c1361849edb55 #OffSeq #OpenWrt #Vuln

CVE-2026-72841 (CRITICAL, CVSS 9.4) affects OpenWrt luci-app-openvpn: improper instance_name2 validation enables path traversal and arbitrary file writes, risking persistent root code execution. Restrict access & monitor uploads. https://radar.offseq.com/threat/cve-2026-72841-external-control-of-file-name-or-path-in-openwrt-luci-109c1361849edb55 #OffSeq #OpenWrt #Vuln

CVE-2026-72842: CRITICAL vuln in OpenWrt luci-app-lxc. Authenticated users can bypass ACLs via `/.%2E` path traversal, leading to root code exec on host. Restrict LuCI access & monitor systems. Patch status pending. https://radar.offseq.com/threat/cve-2026-72842-external-control-of-file-name-or-path-in-openwrt-luci-6786f542d3189e32 #OffSeq #OpenWrt #LinuxSec #CVE

CVE-2026-72842: CRITICAL vuln in OpenWrt luci-app-lxc. Authenticated users can bypass ACLs via `/.%2E` path traversal, leading to root code exec on host. Restrict LuCI access & monitor systems. Patch status pending. https://radar.offseq.com/threat/cve-2026-72842-external-control-of-file-name-or-path-in-openwrt-luci-6786f542d3189e32 #OffSeq #OpenWrt #LinuxSec #CVE

CVE-2026-72850: CRITICAL path traversal (CVSS 9.4) in Budibase server <3.40.0 lets authenticated builders write files outside temp dirs. Cloud-hosted — vendor patch applied server-side. Confirm upgrade. Details: https://radar.offseq.com/threat/cve-2026-72850-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-budibase-119aa29b1a7d2c6b #OffSeq #Budibase #Infosec #Vuln

🔴 CVE-2026-72850 - Critical (9.1)

Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenames containing .. segments that escape the tempo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72850/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-72850: CRITICAL path traversal (CVSS 9.4) in Budibase server <3.40.0 lets authenticated builders write files outside temp dirs. Cloud-hosted — vendor patch applied server-side. Confirm upgrade. Details: https://radar.offseq.com/threat/cve-2026-72850-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-budibase-119aa29b1a7d2c6b #OffSeq #Budibase #Infosec #Vuln

🔴 CVE-2026-72850 - Critical (9.1)

Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenames containing .. segments that escape the tempo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72850/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Budibase server <3.40.0 hit by CRITICAL SQL injection (CVE-2026-72851) in webhook-triggered EXECUTE_QUERY. Unauthenticated attackers can run arbitrary SQL on connected datasources (e.g., Snowflake). Patch managed by vendor. https://radar.offseq.com/threat/cve-2026-72851-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-1263010eb783b278 #OffSeq #SQLi #Budibase #Infosec

Budibase server <3.40.0 hit by CRITICAL SQL injection (CVE-2026-72851) in webhook-triggered EXECUTE_QUERY. Unauthenticated attackers can run arbitrary SQL on connected datasources (e.g., Snowflake). Patch managed by vendor. https://radar.offseq.com/threat/cve-2026-72851-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-1263010eb783b278 #OffSeq #SQLi #Budibase #Infosec

🟠 CVE-2026-72857 - High (7.7)

Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields, allowing authenticated users to read MongoDB connection strings and Firebase private keys in plaintext. Attackers with table read permissions can retrieve...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72857/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72857 - High (7.7)

Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields, allowing authenticated users to read MongoDB connection strings and Firebase private keys in plaintext. Attackers with table read permissions can retrieve...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72857/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73843 - Critical (9.6)

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.2 and 1.1.2, internal/cluster-gateway/server.go served caller-facing management APIs on the externally reachable agent listener without authentication, allowing ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73843/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73843 - Critical (9.6)

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.2 and 1.1.2, internal/cluster-gateway/server.go served caller-facing management APIs on the externally reachable agent listener without authentication, allowing ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73843/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-73421 (CRITICAL, CVSS 9.1): nextauthjs next-auth (5.0.0-beta.0 to <5.0.0-beta.32) improper authorization bug lets unauthenticated users access protected routes if config is invalid. Patch now! https://radar.offseq.com/threat/cve-2026-73421-cwe-285-improper-authorization-in-nextauthjs-next-auth-287433c9f8ab5781 #OffSeq #nextauthjs #CVE202673421 #infosec

CVE-2026-73421 (CRITICAL, CVSS 9.1): nextauthjs next-auth (5.0.0-beta.0 to <5.0.0-beta.32) improper authorization bug lets unauthenticated users access protected routes if config is invalid. Patch now! https://radar.offseq.com/threat/cve-2026-73421-cwe-285-improper-authorization-in-nextauthjs-next-auth-287433c9f8ab5781 #OffSeq #nextauthjs #CVE202673421 #infosec

🟠 CVE-2026-73305 - High (8.8)

Budibase is an open-source low-code platform. Prior to 3.39.24, POST /api/public/v1/roles/assign called validateGlobalRoleUpdate without checking appBuilder.appId or role.appId in packages/server/src/api/controllers/public/globalRoleValidation.ts....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73305/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73305 - High (8.8)

Budibase is an open-source low-code platform. Prior to 3.39.24, POST /api/public/v1/roles/assign called validateGlobalRoleUpdate without checking appBuilder.appId or role.appId in packages/server/src/api/controllers/public/globalRoleValidation.ts....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73305/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72849 - High (7.7)

Budibase before 3.40.0 contains a cross-site request forgery vulnerability in the chat-link handoff endpoint that allows attackers to bind an external chat identity to a victim's account. Attackers can craft a phishing page that auto-submits a POS...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72849/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72849 - High (7.7)

Budibase before 3.40.0 contains a cross-site request forgery vulnerability in the chat-link handoff endpoint that allows attackers to bind an external chat identity to a victim's account. Attackers can craft a phishing page that auto-submits a POS...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72849/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17197 - High (8.1)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17197 - High (8.1)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72777 - High (8.6)

Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution. Unauthenticated attackers can supply hostna...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72777/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-72777 - High (8.6)

Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution. Unauthenticated attackers can supply hostna...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-72777/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17220 - High (8.2)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and modify authentication metadata due to a buffer overflow.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17220 - High (8.2)

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and modify authentication metadata due to a buffer overflow.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73482 - High (8.1)

phpList before 3.7.0-RC5 contains a cross-site request forgery (CSRF) vulnerability in lists/admin/admins.php. The administrator deletion action is triggered via an unauthenticated GET request (?page=admins&delete=N) that is not protected by a CSR...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73482/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73482 - High (8.1)

phpList before 3.7.0-RC5 contains a cross-site request forgery (CSRF) vulnerability in lists/admin/admins.php. The administrator deletion action is triggered via an unauthenticated GET request (?page=admins&delete=N) that is not protected by a CSR...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73482/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73418 - High (7.5)

NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the exported getToken() helper in the next-auth/jwt and @auth/core/jwt modules can throw an uncaught exception when it reads a mal...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73418/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73418 - High (7.5)

NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the exported getToken() helper in the next-auth/jwt and @auth/core/jwt modules can throw an uncaught exception when it reads a mal...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73418/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73514 - High (8.8)

The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardize_address() t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73514/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73514 - High (8.8)

The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardize_address() t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73514/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73570 - High (8.9)

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notificati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73570/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73570 - High (8.9)

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notificati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73570/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73653 - Critical (9.4)

Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73653/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73653 - Critical (9.4)

Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73653/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73515 - High (8.1)

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73515/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73515 - High (8.1)

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73515/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73650 - High (8.2)

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.3, 3.3.4, and 4.0.2, the removeScripts plugin, named removeScriptElement in versions 1 through 3, can ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73650 - High (8.2)

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.3, 3.3.4, and 4.0.2, the removeScripts plugin, named removeScriptElement in versions 1 through 3, can ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73650/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-17248 - DoS in IBM i 7.3-7.6 via improper OS command neutralization. Remote authenticated attacker can crash systems. CVSS 7.1. No patch yet - monitor advisory. #CVE #IBM #infosec

https://www.valtersit.com/cve/CVE-2026-17248/

🟠 CVE-2026-66878 - High (7.7)

A flaw was found in multicloud-operators-subscription. A privileged user, specifically a namespace administrator capable of creating Channel and Subscription resources, can exploit this vulnerability. By manipulating the Channel.Spec.SecretRef.Nam...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66878/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-64954 - High (8.2)

Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the auth...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64954/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-28173 - Arbitrary content deletion in WP Event Solution <= 4.1.19. CVSS 7.1. Unpatched - check your installs and restrict access now. #CVE #WordPress #infosec

https://www.valtersit.com/cve/CVE-2026-28173/

New.

"Today VulnCheck is disclosing CVE-2026-14863, an OS command injection to remote code execution in FileRun, a commercial self-hosted file manager. It is being disclosed in accordance with VulnCheck's coordinated vulnerability disclosure policy."

"The motivation was deliberate. Open-source codebases are getting shredded by AI-assisted auditing, where every researcher and their LLM greps the same GitHub repos and finds the same bugs."

Vulncheck: FileRun: When Your File Manager Runs Your Files https://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce @vulncheck #infosec #opensource #vulnerability

New.

"Today VulnCheck is disclosing CVE-2026-14863, an OS command injection to remote code execution in FileRun, a commercial self-hosted file manager. It is being disclosed in accordance with VulnCheck's coordinated vulnerability disclosure policy."

"The motivation was deliberate. Open-source codebases are getting shredded by AI-assisted auditing, where every researcher and their LLM greps the same GitHub repos and finds the same bugs."

Vulncheck: FileRun: When Your File Manager Runs Your Files https://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce @vulncheck #infosec #opensource #vulnerability

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

CVE-2026-59507 (CRITICAL, CVSS 9.3) impacts Priority ERP Portal Generator addon: hard-coded creds, info exposure, improper access control. No patch yet — restrict access & monitor systems. https://radar.offseq.com/threat/cve-2026-59507-cwe-798-use-of-hard-coded-credentials-cwe-200-exposure-of-sensitive-information-to-an-30882f5adf8cd1ad #OffSeq #CVE #Infosec #ERP

CVE-2026-59507 (CRITICAL, CVSS 9.3) impacts Priority ERP Portal Generator addon: hard-coded creds, info exposure, improper access control. No patch yet — restrict access & monitor systems. https://radar.offseq.com/threat/cve-2026-59507-cwe-798-use-of-hard-coded-credentials-cwe-200-exposure-of-sensitive-information-to-an-30882f5adf8cd1ad #OffSeq #CVE #Infosec #ERP

🟠 CVE-2026-59501 - High (8.2)

CWE-284: Improper Access Control

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59501/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59501 - High (8.2)

CWE-284: Improper Access Control

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59501/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18952 - High (8.1)

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the thr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18952/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18952 - High (8.1)

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the thr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18952/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73498 - High (7.7)

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment passes its client-supplied file_path directly to open(file_path, "rb") in src/mcp_atlassian/confluen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73498/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73498 - High (7.7)

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment passes its client-supplied file_path directly to open(file_path, "rb") in src/mcp_atlassian/confluen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73498/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📢 CVE-2026-55040 : vulnérabilité SharePoint exploitée dans la nature après publication d'un PoC

Il rapporte l'exploitation active en conditions réelles de CVE-2026-55040, une vulnérabilité affectant Microsoft SharePoint, corrigée lors du Patch Tuesday de juillet 2026. CVE-2026-55040 est décrite par Microsoft comme un problème d'authentification faible…

📖 cyberveille : https://cyberveille.ch/posts/2026-08-13-cve-2026-55040-vulnerabilite-sharepoint-exploitee-dans-la-nature-apres-publication-d-un-poc/
🌐 source : https://www.securityweek.com/sharepoint-vulnerability-exploited-shortly-after-poc-release/
🟢 vérification factuelle haute
#PoC #SharePoint #Cyberveille

Attackers are actively exploiting CVE-2026-55040, a critical remote code execution vulnerability in Microsoft SharePoint, after a proof-of-concept exploit was released by Rapid7. This flaw affects Sha
https://www.helpnetsecurity.com/2026/08/13/microsoft-sharepoint-cve-2026-55040-poc-exploit/
#cybersecurity #Microsoft #SharePoint

「公開された概念実証（PoC）リリース後、攻撃者がSharePointの認証バイパスを悪用 」： #TheHackerNews

「攻撃者は、概念実証（PoC）コードの公開を受けて、新たに明らかになったMicrosoft SharePointの脆弱性を悪用し始めている。

問題となっている脆弱性は CVE-2026-55040 （CVSSスコア：9.1）で、認証の脆弱性に起因する重大なセキュリティ機能のバイパスに関するものです。この脆弱性は、マイクロソフトが2026年7月のパッチチューズデーアップデートの一環として修正しました。

マイクロソフトは先月、この脆弱性に関する勧告の中で、「この脆弱性によりなりすましが可能になるため、認証機能が回避される可能性がある」と述べた。「この脆弱性を悪用すると、攻撃者はファイルを漏洩させたりデータを改ざんしたりできる可能性があるが、システムの可用性に影響を与えることはできない」としている。 」

https://thehackernews.com/2026/08/attackers-exploit-sharepoint.html

#prattohome

Attackers Exploit SharePoint Flaw After Public PoC Release

Microsoft warned that a critical SharePoint flaw, patched in July 2026, could allow attackers to bypass authentication and disclose files or modify data. This vulnerability, tracked as CVE-2026-55040, has now been exploited by attackers following the public release of a proof-of-concept exploit.

https://osintsights.com/attackers-exploit-sharepoint-flaw-after-public-poc-release?utm_source=mastodon&utm_medium=social

#Cve202655040 #SharepointFlaw #Microsoft #AuthenticationBypass #SupplyChain

Microsoft SharePoint Under Attack: Critical CVE-2026-55040 Exploitation Surges After Public PoC Release + Video

A New SharePoint Warning Is Turning Into a Real-World Security Crisis Microsoft SharePoint administrators are facing another serious warning as attackers appear to be testing a critical authentication-bypass vulnerability that can allow unauthenticated users to impersonate legitimate SharePoint accounts. The situation became more urgent after security…

https://undercodenews.com/microsoft-sharepoint-under-attack-critical-cve-2026-55040-exploitation-surges-after-public-poc-release-video/?utm_source=mastodon&utm_medium=jetpack_social

Cybercriminals are exploiting SharePoint vulnerability CVE-2026-55040, allowing authentication bypass and unauthorized access. Organizations should apply patches immediately to mitigate this risk.

#CyberSecurity #SharePoint #CVE202655040 #AuthenticationBypass #DataBreach #Microsoft

https://thedailytechfeed.com/attackers-exploit-sharepoint-authentication-bypass-vulnerability/

Rapid7 released a proof-of-concept for CVE-2026-55040, a critical SharePoint vulnerability, on August 12. Within hours, Defused observed the exploit weaponized against SharePoint honeypots. Microsoft patched the flaw in July, yet Shadowserver still reports over 8,500 exposed servers. Patching is no longer optional.

#SharePoint #CVE2026 #VulnerabilityManagement #PatchTuesday

https://cyberworldops.eu/en/sharepoint-proof-of-concept-for-critical-flaw-already-used-in-attacks

Microsoft SharePoint Under Attack: Hackers Exploit CVE-2026-55040 Shortly After Rapid7 Releases a Proof of Concept + Video

A Dangerous Window Opens for SharePoint Administrators A new Microsoft SharePoint security incident is highlighting one of the most dangerous realities in modern cybersecurity: the moment a working proof of concept becomes public, attackers can move from research to exploitation with astonishing speed. On August 12, 2026, reports emerged that…

https://undercodenews.com/microsoft-sharepoint-under-attack-hackers-exploit-cve-2026-55040-shortly-after-rapid7-releases-a-proof-of-concept-video/?utm_source=mastodon&utm_medium=jetpack_social

「公開された概念実証（PoC）リリース後、攻撃者がSharePointの認証バイパスを悪用 」： #TheHackerNews

「攻撃者は、概念実証（PoC）コードの公開を受けて、新たに明らかになったMicrosoft SharePointの脆弱性を悪用し始めている。

問題となっている脆弱性は CVE-2026-55040 （CVSSスコア：9.1）で、認証の脆弱性に起因する重大なセキュリティ機能のバイパスに関するものです。この脆弱性は、マイクロソフトが2026年7月のパッチチューズデーアップデートの一環として修正しました。

マイクロソフトは先月、この脆弱性に関する勧告の中で、「この脆弱性によりなりすましが可能になるため、認証機能が回避される可能性がある」と述べた。「この脆弱性を悪用すると、攻撃者はファイルを漏洩させたりデータを改ざんしたりできる可能性があるが、システムの可用性に影響を与えることはできない」としている。 」

https://thehackernews.com/2026/08/attackers-exploit-sharepoint.html

#prattohome

Rapid7 released a proof-of-concept for CVE-2026-55040, a critical SharePoint vulnerability, on August 12. Within hours, Defused observed the exploit weaponized against SharePoint honeypots. Microsoft patched the flaw in July, yet Shadowserver still reports over 8,500 exposed servers. Patching is no longer optional.

#SharePoint #CVE2026 #VulnerabilityManagement #PatchTuesday

https://cyberworldops.eu/en/sharepoint-proof-of-concept-for-critical-flaw-already-used-in-attacks

Tracked as CVE-2026-55040, this authentication bypass security flaw in the JWT token validation pipeline can be exploited by attackers without privileges to perform operations as a SharePoint site user or administrator. https://www.bleepingcomputer.com/news/microsoft/hackers-leverage-new-microsoft-sharepoint-exploit-in-attacks/

Researchers disclosed a full unauthenticated RCE chain in Microsoft SharePoint, tracked as CVE-2026-55040 (CVSS 9.1). The flaw in the authentication pipeline allows an attacker to impersonate any user, including admins, using only the target's AD SID or UPN. No credentials required.

#SharePointRCE #UnauthenticatedExploit #CVE2026 #CriticalVulnerability

https://cyberworldops.eu/en/sharepoint-exploit-chain-enables-unauthenticated-rce

Rapid7 published full details and a PoC for CVE-2026-55040, a critical SharePoint authentication bypass that forges JWT tokens. Patch now.

#CVE202655040 #SharePoint #AuthenticationBypass #JWT #Rapid7 #PoC #Cybersecurity

https://securityonline.info/sharepoint-auth-bypass-cve-2026-55040/?utm_source=mastodon&utm_medium=jetpack_social

「研究者らが、認証不要のリモートコード実行（RCE）を実現するAI支援型SharePointエクスプロイトチェーンを公開 」： #TheHackerNews

「セキュリティ研究者らは、有効なアカウントを持たずに、管理者を含むあらゆるユーザーとしてMicrosoft SharePointサーバーに侵入する方法を発見した。この発見に大きく貢献したのが、AIエージェントを用いた作業だった。

CVE-2026-55040 （CVSS 9.1）として追跡されているこの脆弱性は 、SharePoint Server Subscription Edition、SharePoint Server 2019、およびSharePoint Server 2016に影響します。マイクロソフトの影響を受ける製品リストには、これら3つのオンプレミス版のみが含まれており、SharePoint Onlineは含まれていません。

この攻撃手法は、認証されていないリモート攻撃者が、選択したユーザーの身元を偽装することを可能にします。 」

https://thehackernews.com/2026/08/researchers-disclose-ai-assisted.html

#prattohome

also: those are some god damn useless CVEs, istg... https://db.gcve.eu/vuln/cve-2026-17083

also: those are some god damn useless CVEs, istg... https://db.gcve.eu/vuln/cve-2026-17083

🔴 CVE-2026-73501 - Critical (9.1)

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load() in openapi3filter/validation_handler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73501/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73501 - Critical (9.1)

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load() in openapi3filter/validation_handler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73501/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49819 - Critical (9.8)

UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in `pb.HandlerInitSuperuser` (`backend/pb/handlers.go:249`), reachable as `POST /api/upsnap/init-superuser`. The ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49819/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-49819: UpSnap (4.4.1 – 5.3.5) has a CRITICAL flaw (CVSS 9.8) — unauthenticated attackers can register a superuser & achieve root RCE via POST /api/upsnap/init-superuser. Upgrade to 5.4.0 ASAP. https://radar.offseq.com/threat/cve-2026-49819-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-f2cf5294c0d169b6 #OffSeq #Vuln #Infosec #RCE

🔴 CVE-2026-49819 - Critical (9.8)

UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in `pb.HandlerInitSuperuser` (`backend/pb/handlers.go:249`), reachable as `POST /api/upsnap/init-superuser`. The ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49819/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-49819: UpSnap (4.4.1 – 5.3.5) has a CRITICAL flaw (CVSS 9.8) — unauthenticated attackers can register a superuser & achieve root RCE via POST /api/upsnap/init-superuser. Upgrade to 5.4.0 ASAP. https://radar.offseq.com/threat/cve-2026-49819-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-f2cf5294c0d169b6 #OffSeq #Vuln #Infosec #RCE

🟠 CVE-2026-47717 - High (7.5)

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even when secureEnabled is enabled. Versio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47717/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47717 - High (7.5)

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even when secureEnabled is enabled. Versio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47717/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19654 - High (7.5)

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19654/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19654 - High (7.5)

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19654/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12263 - High (8.8)

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12263/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12263 - High (8.8)

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12263/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-59506 (CRITICAL): Portal Generator addon to Priority ERP lacks authentication for a critical function. Unauthenticated remote attackers can access sensitive data. No patch yet — restrict access & monitor. More info: https://radar.offseq.com/threat/cve-2026-59506-cwe-306-missing-authentication-for-critical-function-in-priority-portal-generator-addon-10b51be16c861426 #OffSeq #CVE202659506 #ERP #Infosec

CVE-2026-59506 (CRITICAL): Portal Generator addon to Priority ERP lacks authentication for a critical function. Unauthenticated remote attackers can access sensitive data. No patch yet — restrict access & monitor. More info: https://radar.offseq.com/threat/cve-2026-59506-cwe-306-missing-authentication-for-critical-function-in-priority-portal-generator-addon-10b51be16c861426 #OffSeq #CVE202659506 #ERP #Infosec

🔴 CVE-2026-59500 - Critical (10)

CWE-287: Improper Authentication

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59500/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-59500 - Critical (10)

CWE-287: Improper Authentication

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59500/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-11840 - Authenticated SQLi in Zohocorp ManageEngine Password Manager Pro & PAM360. CVSS 8.8. Unpatched. Update immediately. #CVE #Zoho #infosec

https://www.valtersit.com/cve/CVE-2026-11840/

CVE-2026-13610 | CRITICAL privilege flaw in KiviCare <4.5.2 lets unauthenticated attackers create privileged staff accounts, risking patient data exposure 🏥. Restrict registration endpoint & monitor user creation. https://radar.offseq.com/threat/cve-2026-13610-cwe-269-improper-privilege-management-in-kivicare-c9bee31557a60fdb #OffSeq #WordPress #Infosec #Healthcare

CVE-2026-13610 | CRITICAL privilege flaw in KiviCare <4.5.2 lets unauthenticated attackers create privileged staff accounts, risking patient data exposure 🏥. Restrict registration endpoint & monitor user creation. https://radar.offseq.com/threat/cve-2026-13610-cwe-269-improper-privilege-management-in-kivicare-c9bee31557a60fdb #OffSeq #WordPress #Infosec #Healthcare

🟠 CVE-2026-70468 - High (8.1)

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiMan...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-70468/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📰 Fortinet patches critical auth bypass in FortiWeb WAF (CVE-2026-26035)

Fortinet patches a critical authentication bypass in FortiWeb WAF (CVE-2026-26035). The flaw allows admin access with any password if a non-default 'admin wildcard' is set. Patch and check your configs now! #Fortinet #CyberSecurity #Vulnerability

🔗 https://cyber.netsecops.io/articles/fortinet-patches-critical-authentication-bypass-in-fortiweb/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

🔴 CVE-2026-26035 - Critical (9.8)

An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-26035/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

There are several updates from Broadcom addressing a long list of vulnerabilities, one of them critical https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Yesterday:

CISA:

CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts https://www.cisa.gov/news-events/news/cisa-unveils-new-cybersecurity-resources-k-12-schools-and-districts #CISA

Palo Alto: CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering https://security.paloaltonetworks.com/CVE-2026-0301 #infosec #vulnerability

There are several updates from Broadcom addressing a long list of vulnerabilities, one of them critical https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Yesterday:

CISA:

CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts https://www.cisa.gov/news-events/news/cisa-unveils-new-cybersecurity-resources-k-12-schools-and-districts #CISA

Palo Alto: CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering https://security.paloaltonetworks.com/CVE-2026-0301 #infosec #vulnerability

OpenStack Designate CRITICAL vuln (CVE-2026-71193, CVSS 9.6): Authenticated users can hijack or disrupt DNS cross-tenant by bypassing zone checks via AttributeFilter in multi-pool deployments. Disable AttributeFilter until patched. https://radar.offseq.com/threat/cve-2026-71193-cwe-863-incorrect-authorization-in-openstack-designate-01ef425c39443191 #OffSeq #OpenStack #DNS #Vuln

🔴 CVE-2026-71193 - Critical (9.6)

In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different poo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71193/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

OpenStack Designate CRITICAL vuln (CVE-2026-71193, CVSS 9.6): Authenticated users can hijack or disrupt DNS cross-tenant by bypassing zone checks via AttributeFilter in multi-pool deployments. Disable AttributeFilter until patched. https://radar.offseq.com/threat/cve-2026-71193-cwe-863-incorrect-authorization-in-openstack-designate-01ef425c39443191 #OffSeq #OpenStack #DNS #Vuln

🔴 CVE-2026-71193 - Critical (9.6)

In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different poo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71193/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-10534 - High (8.4)

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10534/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-10534 - High (8.4)

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10534/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19003 - High (7.8)

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19003/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19003 - High (7.8)

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19003/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-73519: WolfStack <25.9.2 vulnerable to hard-coded secret in src/auth/mod.rs — remote attackers can bypass auth & run root commands in containers via the management port. Restrict access & monitor for X-WolfStack-Secret usage. https://radar.offseq.com/threat/cve-2026-73519-use-of-hard-coded-credentials-in-wolfsoftwaresystemsltd-wolfstack-ed98acc25b8c686b #OffSeq #CVE202673519

🔴 CVE-2026-73519 - Critical (9.8)

WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73519/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-73519: WolfStack <25.9.2 vulnerable to hard-coded secret in src/auth/mod.rs — remote attackers can bypass auth & run root commands in containers via the management port. Restrict access & monitor for X-WolfStack-Secret usage. https://radar.offseq.com/threat/cve-2026-73519-use-of-hard-coded-credentials-in-wolfsoftwaresystemsltd-wolfstack-ed98acc25b8c686b #OffSeq #CVE202673519

🔴 CVE-2026-73519 - Critical (9.8)

WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73519/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-71471 - Critical (9)

A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource (CR), could exploit a vulnerability in the `Collector.ImageOverride` field. This a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71471/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71471 (CRITICAL): acm-search-v2-rhel9 lets hub admins with Search CR patch rights deploy arbitrary containers fleet-wide. RCE & data access at risk. Restrict Search CR patch access now. Full details: https://radar.offseq.com/threat/a-flaw-was-found-in-acm-search-v2-rhel9-cve-2026-71471-abe3108354cb7e94 #OffSeq #Kubernetes #RedHat #Infosec

🔴 CVE-2026-71471 - Critical (9)

A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource (CR), could exploit a vulnerability in the `Collector.ImageOverride` field. This a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71471/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-71471 (CRITICAL): acm-search-v2-rhel9 lets hub admins with Search CR patch rights deploy arbitrary containers fleet-wide. RCE & data access at risk. Restrict Search CR patch access now. Full details: https://radar.offseq.com/threat/a-flaw-was-found-in-acm-search-v2-rhel9-cve-2026-71471-abe3108354cb7e94 #OffSeq #Kubernetes #RedHat #Infosec

🟠 CVE-2026-71473 - High (8.5)

A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inject arbitrary configuration data. This manipulation can override critic...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71473/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71473 - High (8.5)

A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inject arbitrary configuration data. This manipulation can override critic...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71473/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73303 - High (8.2)

Budibase is an open-source low-code platform. Prior to 3.40.0, POST /api/v2/email on account.budibase.app accepted a client-controlled accountId without binding it to the authenticated session, while checking only currentEmail. An authenticated at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73303/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73303 - High (8.2)

Budibase is an open-source low-code platform. Prior to 3.40.0, POST /api/v2/email on account.budibase.app accepted a client-controlled accountId without binding it to the authenticated session, while checking only currentEmail. An authenticated at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73303/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71469 - High (7.5)

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71469/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-71469 - High (7.5)

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71469/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19002 - High (8.1)

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19002 - High (8.1)

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19001 - Critical (9.8)

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19001/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19001 - Critical (9.8)

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19001/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73326 - High (7.6)

CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access and modify plugin settings by reaching four unprotected plugin-administration endpoints without administrator-level authorizatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73326/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73326 - High (7.6)

CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access and modify plugin settings by reaching four unprotected plugin-administration endpoints without administrator-level authorizatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73326/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73433 - High (7.6)

A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73433/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73433 - High (7.6)

A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73433/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19311 - High (8.1)

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19311/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19311 - High (8.1)

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19311/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73332 - High (8.7)

CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin that allows low-privileged authenticated attackers to inject arbitrary HTML by submitting unsanitized content to the before_html field through the con...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73332/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73332 - High (8.7)

CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin that allows low-privileged authenticated attackers to inject arbitrary HTML by submitting unsanitized content to the before_html field through the con...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73332/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-72798 - High severity info disclosure in SiYuan. Unpatched v3.7.4 lets anonymous readers access hidden database content via related-database bypass. CVSS 8.6. Update immediately. #CVE #SiYuan #infosec

https://www.valtersit.com/cve/CVE-2026-72798/

🟠 CVE-2026-73329 - High (8.7)

CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execute arbitrary JavaScript in an administrator's browser by injecting unsanitized HTML payloads into the post title parameter duri...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73329/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73329 - High (8.7)

CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execute arbitrary JavaScript in an administrator's browser by injecting unsanitized HTML payloads into the post title parameter duri...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73329/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73493 - High (7.5)

Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming WebSocket message with no limit on total size or fragment count. A clie...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73493/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73493 - High (7.5)

Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming WebSocket message with no limit on total size or fragment count. A clie...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73493/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches. https://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/

Adobe Reporrts Critical Magento Flaw Under Active Attack

Attackers began probing CVE-2026-71362 (CVSS 9.1), a critical incorrect-authorization flaw in Adobe Commerce, B2B, and Magento Open Source almost immediately after Adobe's August 11 patch (APSB26-92) went public. Sansec blocked the first exploitation attempts shortly after the advisory.

**If you run Adobe Commerce, Adobe Commerce B2B or Magento Open Source, update immediately to the "-2026-aug" release for your version. Attackers are already exploiting this flaw to take over customer accounts. After patching, force a logout of all active customer sessions and review recent account activity for signs that someone else accessed customer data.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/adobe-reporrts-critical-magento-flaw-under-active-attack-9-1-x-z-8/gD2P6Ple2L

Adobe Commerce CVE-2026-71362 Exploited Almost Immediately, Turning a Critical 91 Flaw Into an Urgent Security Warning + Video

A Critical Vulnerability Moves From Disclosure to Exploitation Some cybersecurity vulnerabilities remain theoretical for months. Others become dangerous the moment the technical details become public. CVE-2026-71362 appears to belong to the second category. A critical Adobe Commerce vulnerability rated 9.1 has reportedly been exploited shortly…

https://undercodenews.com/adobe-commerce-cve-2026-71362-exploited-almost-immediately-turning-a-critical-91-flaw-into-an-urgent-security-warning-video/?utm_source=mastodon&utm_medium=jetpack_social

Critical Adobe Commerce Flaw CVE-2026-71362 Is Under Active Attack: Hackers Can Hijack Customer Accounts Without Logging In + Video

A Dangerous Warning for Every Magento Store Owner A critical vulnerability in Adobe Commerce and Magento Open Source has moved from disclosure to exploitation with alarming speed. CVE-2026-71362, carrying a CVSS score of 9.1, gives unauthenticated attackers a way to manipulate customer sessions, potentially hijack accounts and access…

https://undercodenews.com/critical-adobe-commerce-flaw-cve-2026-71362-is-under-active-attack-hackers-can-hijack-customer-accounts-without-logging-in-video/?utm_source=mastodon&utm_medium=jetpack_social

「ハッカーがAdobe Commerceの重大な脆弱性を悪用し、顧客アカウントを乗っ取る 」： #BLEEPINGCOMPUTER

「AdobeのeコマースプラットフォームであるCommerceとMagentoにおける重大な脆弱性（CVE-2026-71362）を悪用しようとする試みが検出されました。この脆弱性により、攻撃者が顧客アカウントを乗っ取る可能性があります。

この脆弱性は、認証なしに「機密性の高いリソースへの上位アクセス権を取得する」ために悪用される可能性のある、誤った認証の脆弱性と説明されており、Adobeが昨日のセキュリティアップデートで対処した7つの問題のうちの1つです。

ソフトウェアベンダーは 勧告 の中で、修正された脆弱性に対する実際の攻撃事例は把握していないと述べているが、eコマースセキュリティ企業のSansecは、同社のShieldウェブアプリケーションファイアウォール（WAF）が既にCVE-2026-71362の悪用を阻止していると述べている。 」

https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/

#prattohome

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

Active exploitation attempts targeting CVE-2026-71362 have been observed since August 12, 2026, affecting Adobe Commerce and Magento installations. The flaw is an authorization bypass that grants unauthenticated access to sensitive resources due to incorrect identity handling.

#CVE202671362 #AdobeCommerce #Magento #AuthorizationBypass

https://cyberworldops.eu/en/adobe-commerce-and-magento-under-attack-cve-2026-71362-exploited

Hackers exploit critical Adobe Commerce flaw to hijack customer accounts

Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially...

🔗️ [Bleepingcomputer] https://link.is.it/JJqIH9

Hackers Exploit Adobe Commerce Flaw to Hijack Customer Accounts

Hackers can hijack your customer accounts with just a few clicks, thanks to a critical flaw in Adobe Commerce that lets attackers switch to another customer's session, gaining access to sensitive data. This vulnerability, tracked as CVE-2026-71362, is a wake-up call for businesses to take immediate action and protect…

https://osintsights.com/hackers-exploit-adobe-commerce-flaw-to-hijack-customer-accounts?utm_source=mastodon&utm_medium=social

#AdobeCommerce #Cve202671362 #SessionHijacking #CustomerDataBreach #EcommerceSecurity

The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches. https://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/

Adobe Reporrts Critical Magento Flaw Under Active Attack

Attackers began probing CVE-2026-71362 (CVSS 9.1), a critical incorrect-authorization flaw in Adobe Commerce, B2B, and Magento Open Source almost immediately after Adobe's August 11 patch (APSB26-92) went public. Sansec blocked the first exploitation attempts shortly after the advisory.

**If you run Adobe Commerce, Adobe Commerce B2B or Magento Open Source, update immediately to the "-2026-aug" release for your version. Attackers are already exploiting this flaw to take over customer accounts. After patching, force a logout of all active customer sessions and review recent account activity for signs that someone else accessed customer data.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/adobe-reporrts-critical-magento-flaw-under-active-attack-9-1-x-z-8/gD2P6Ple2L

「ハッカーがAdobe Commerceの重大な脆弱性を悪用し、顧客アカウントを乗っ取る 」： #BLEEPINGCOMPUTER

「AdobeのeコマースプラットフォームであるCommerceとMagentoにおける重大な脆弱性（CVE-2026-71362）を悪用しようとする試みが検出されました。この脆弱性により、攻撃者が顧客アカウントを乗っ取る可能性があります。

この脆弱性は、認証なしに「機密性の高いリソースへの上位アクセス権を取得する」ために悪用される可能性のある、誤った認証の脆弱性と説明されており、Adobeが昨日のセキュリティアップデートで対処した7つの問題のうちの1つです。

ソフトウェアベンダーは 勧告 の中で、修正された脆弱性に対する実際の攻撃事例は把握していないと述べているが、eコマースセキュリティ企業のSansecは、同社のShieldウェブアプリケーションファイアウォール（WAF）が既にCVE-2026-71362の悪用を阻止していると述べている。 」

https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/

#prattohome

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

Active exploitation attempts targeting CVE-2026-71362 have been observed since August 12, 2026, affecting Adobe Commerce and Magento installations. The flaw is an authorization bypass that grants unauthenticated access to sensitive resources due to incorrect identity handling.

#CVE202671362 #AdobeCommerce #Magento #AuthorizationBypass

https://cyberworldops.eu/en/adobe-commerce-and-magento-under-attack-cve-2026-71362-exploited

Hackers exploit critical Adobe Commerce flaw to hijack customer accounts

Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially...

🔗️ [Bleepingcomputer] https://link.is.it/JJqIH9

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

「AdobeがColdFusionとCampaign ClassicのCVSS 10.0違反3件を修正 」： #TheHackerNews

「Adobeは 、ColdFusion、Commerce、およびCampaign Classicに影響を与える複数の重大なセキュリティ脆弱性に対処するためのアップデートをリリース

最も深刻な欠陥は以下のとおりです。

CVE-2026-48362 (CVSSスコア: 10.0)
CVE-2026-48273 (CVSSスコア: 9.9)
CVE-2026-71384 (CVSSスコア: 9.6))
CVE-2026-71362 （CVSSスコア：9.1）
CVE-2026-71398 (CVSSスコア: 10.0)
CVE-2026-27302 (CVSSスコア: 10.0)
CVE-2026-48381 （CVSSスコア：9.0）
」

https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html

#prattohome

NextAuth.js CRITICAL vuln (CVE-2026-73420): Unicode email normalization flaw lets attackers intercept magic links & access accounts. Affects pre-@auth/core 0.41.3, next-auth 4.24.15, 5.0.0-beta.32. Patch now! https://radar.offseq.com/threat/cve-2026-73420-cwe-180-incorrect-behavior-order-validate-before-canonicalize-in-nextauthjs-next-auth-d40a9b21d54d8a7a #OffSeq #NextAuth #IAM #CVE202673420

NextAuth.js CRITICAL vuln (CVE-2026-73420): Unicode email normalization flaw lets attackers intercept magic links & access accounts. Affects pre-@auth/core 0.41.3, next-auth 4.24.15, 5.0.0-beta.32. Patch now! https://radar.offseq.com/threat/cve-2026-73420-cwe-180-incorrect-behavior-order-validate-before-canonicalize-in-nextauthjs-next-auth-d40a9b21d54d8a7a #OffSeq #NextAuth #IAM #CVE202673420

🔴 CVE-2026-73300 - Critical (9.6)

Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73300/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-73300 - Critical (9.6)

Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73300/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73406 - High (7.5)

Budibase is an open-source low-code platform. Prior to 3.39.32, GET /api/global/users/tenant/:id was listed in PUBLIC_ENDPOINTS in packages/worker/src/api/index.ts, and tenantUserLookup returned a full PlatformUser document. An unauthenticated cal...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73406/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73406 - High (7.5)

Budibase is an open-source low-code platform. Prior to 3.39.32, GET /api/global/users/tenant/:id was listed in PUBLIC_ENDPOINTS in packages/worker/src/api/index.ts, and tenantUserLookup returned a full PlatformUser document. An unauthenticated cal...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73406/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-69106 - High (8.8)

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69106/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-69106 - High (8.8)

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69106/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73327 - High (7.6)

Joomla 6.1.1 contains a path traversal vulnerability in the com_joomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory traversal sequences or absolute paths in ZIP entry filenames. Atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73327/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73327 - High (7.6)

Joomla 6.1.1 contains a path traversal vulnerability in the com_joomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory traversal sequences or absolute paths in ZIP entry filenames. Atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73327/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-73325 - High (7.8)

Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.load_quantized_model_pt() unc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73325/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-69105 - High (8.1)

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69105/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-18634 - High severity deserialization flaw in GMS 9.5.1 and earlier. Local attacker can trigger unauthorized actions via service. CVSS 8.4. Unpatched - update immediately. #CVE #cybersecurity #GMS

https://www.valtersit.com/cve/CVE-2026-18634/

🟠 CVE-2026-73293 - High (8.8)

Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, ProjectMiddleware and GetProjectOrGlobalRoleBySlug allow a project manager to use POST /api/project/{id}/roles to create a cust...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73293/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65941 - High (8.8)

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65941/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📰 New 'ShieldBreak' Exploit Bypasses Microsoft Defender Patch

A new zero-day exploit, 'ShieldBreak,' bypasses Microsoft's patch for the 'RoguePlanet' Defender flaw (CVE-2026-50656). The PoC allows SYSTEM-level access on patched Windows systems. No fix is currently available. #ZeroDay #MicrosoftDefender #CyberSe...

🔗 https://cyber.netsecops.io/articles/shieldbreak-zero-day-exploit-bypasses-microsoft-defender-patch/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

「Microsoftに恨みを持つハッカーが、完全にパッチが適用されたWindows上でシステム権限を取得できる新たなゼロデイ脆弱性を発見した。
/水曜日の裏技を使おうぜ、ベイビー 」： #TheRegister

「マイクロソフトに恨みを持つ、ゼロデイ攻撃を専門とするNightmare Eclipseは、マイクロソフトのRoguePlanetパッチ（CVE-2026-50656）を回避すると思われる、Defenderの新たなゼロデイ脆弱性「ShieldBreak」を公開した。これにより、攻撃者は完全にパッチが適用されたWindows 10、Windows 11、およびWindows Serverシステム上でSYSTEM権限を取得できる。

少なくとも他の研究者の一人によると、このエクスプロイトは有効だという。「試してみたところ、最新のWindows 11でも動作しました」と、元マイクロソフト社員でセキュリティ専門家のケビン・ボーモント氏 は述べている 。 」

https://www.theregister.com/cyber-crime/2026/08/12/microsoft-vendetta-hacker-has-a-new-zero-day-that-gives-system-privileges-on-fully-patched-windows/5286889

#prattohome

“Nightmare Eclipse, the serial zero-day hunter who has an axe to grind with Microsoft, published a new Defender zero-day, ShieldBreak, that apparently bypasses Redmond’s RoguePlanet patch (CVE-2026-50656), allowing attackers to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server systems.”

https://www.theregister.com/cyber-crime/2026/08/12/microsoft-vendetta-hacker-has-a-new-zero-day-that-gives-system-privileges-on-fully-patched-windows/5286889

「Microsoftに恨みを持つハッカーが、完全にパッチが適用されたWindows上でシステム権限を取得できる新たなゼロデイ脆弱性を発見した。
/水曜日の裏技を使おうぜ、ベイビー 」： #TheRegister

「マイクロソフトに恨みを持つ、ゼロデイ攻撃を専門とするNightmare Eclipseは、マイクロソフトのRoguePlanetパッチ（CVE-2026-50656）を回避すると思われる、Defenderの新たなゼロデイ脆弱性「ShieldBreak」を公開した。これにより、攻撃者は完全にパッチが適用されたWindows 10、Windows 11、およびWindows Serverシステム上でSYSTEM権限を取得できる。

少なくとも他の研究者の一人によると、このエクスプロイトは有効だという。「試してみたところ、最新のWindows 11でも動作しました」と、元マイクロソフト社員でセキュリティ専門家のケビン・ボーモント氏 は述べている 。 」

https://www.theregister.com/cyber-crime/2026/08/12/microsoft-vendetta-hacker-has-a-new-zero-day-that-gives-system-privileges-on-fully-patched-windows/5286889

#prattohome

“Nightmare Eclipse, the serial zero-day hunter who has an axe to grind with Microsoft, published a new Defender zero-day, ShieldBreak, that apparently bypasses Redmond’s RoguePlanet patch (CVE-2026-50656), allowing attackers to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server systems.”

https://www.theregister.com/cyber-crime/2026/08/12/microsoft-vendetta-hacker-has-a-new-zero-day-that-gives-system-privileges-on-fully-patched-windows/5286889

A proof-of-concept for ShieldBreak has been disclosed, showing how to bypass the patch Microsoft issued for CVE-2026-50656 (RoguePlanet). The flaw targets SYSTEM-level privilege escalation on Windows systems protected by Microsoft Defender.

#ShieldBreak #CVE202650656 #PrivilegeEscalation #MicrosoftDefender

https://cyberworldops.eu/en/shieldbreak-poc-bypasses-microsoft-defender-patch-and-targets-system

„Microsoft hat mit dem August 2026-Patchday zwar einige Sicherheitskorrekturen ausgeliefert. Aber die RoguePlanet genannte Schwachstelle (CVE-2026-50656) soll nicht ausreichend abgeschwächt worden sein. Der als Nightmare Eclipse agierende Sicherheitsforscher hat einen ShieldBreak genannten Proof of Concept (PoC) veröffentlicht.“

https://borncity.com/blog/2026/08/12/shieldbreak-poc-fuer-microsoft-defender-0-day-schwachstelle/

A public PoC named ShieldBreak bypasses Microsoft's CVE-2026-50656 patch, enabling Windows Defender privilege escalation to SYSTEM.

#ShieldBreak #CVE202650656 #WindowsDefender #PrivilegeEscalation #PoC #RoguePlanet #Cybersecurity

https://securityonline.info/shieldbreak-defender-poc/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-57858 - High (8.9)

Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracki...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57858/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-57858: CRITICAL stored XSS in Cal.com Self-Hosted (v2.1.1 – 6.2.0). Exploited via BookingPageTagManager by authenticated event owners; affects all booking page visitors. Patch status unknown. Restrict privileges. https://radar.offseq.com/threat/cve-2026-57858-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-953e719dabfd2c11 #OffSeq #XSS #SecOps

⚠️ CRITICAL: Lazarus hackers exploited Windows zero-day to target defense firms

Lazarus Group is actively exploiting Windows zero-day CVE-2026-68820 to target defense, aerospace, and aviation firms worldwide. The vulnerability enables privilege escalation to SYSTEM level and is being weaponized alongside a new backdoor called Troy. Compromised Roundcube instances have also bee…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

⚪️ Microsoft Releases Patches for More Than 400 Vulnerabilities

🗨️ Microsoft has released its August patches, fixing 421 vulnerabilities. These included three zero-day flaws, among them CVE-2026-68820, which the North Korean Lazarus group had already exploited in real-world attacks. One of the most important fixes this month is a patch…

🔗 https://hackmag.com/news/august-2026-patches?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

🔵 THREAT INTELLIGENCE

Lazarus hackers exploited Windows zero-day to target defense firms

Vulnerability | CRITICAL
CVEs: CVE-2026-68820

North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the...

Full analysis:
https://www.yazoul.net/news/article/lazarus-hackers-exploited-windows-zero-day-to-target-defense-firms

by Yazoul AI

#CyberSecurity #CVE #ThreatHunting

📢 Lazarus Group exploite un zero-day Windows (CVE-2026-68820) via de fausses offres d'emploi

Cet article documente une nouvelle vague de la campagne Operation Dream Job, attribuée au groupe nord-coréen Lazarus, ciblant les secteurs de la défense, de l'aérospatiale et de l'aviation en Europe, Asie et Amérique du Sud.

📖 cyberveille : https://cyberveille.ch/posts/2026-08-13-lazarus-group-exploite-un-zero-day-windows-cve-2026-68820-via-de-fausses-offres-d-emploi/
🌐 source : https://blog.checkpoint.com/research/state-sponsored-hackers-use-fake-job-offers-to-deliver-new-zero-day-exploit/
🟢 vérification factuelle haute
#LazarusGroup #ZeroDay #Cyberveille

(CISA TS-SOC) CVE-2026-68820 – Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Severity: HIGH Impact Summary: Allows an authorized attacker to elevate privileges locally via a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock....

https://thecybermind.co/join

Microsoft’s Record Patch Tuesday Exposes a New Cybersecurity Reality as AI Finds More Flaws + Video

A Patch Tuesday That Signals a Bigger Change Microsoft’s latest Patch Tuesday has delivered an extraordinary number of security fixes, with 419 vulnerabilities addressed in a single release, including three zero-day flaws. One vulnerability, CVE-2026-68820, was reportedly exploited in the wild and has been linked to activity associated with the Lazarus Group. The scale…

https://undercodenews.com/microsofts-record-patch-tuesday-exposes-a-new-cybersecurity-reality-as-ai-finds-more-flaws-video/?utm_source=mastodon&utm_medium=jetpack_social