🟠 CVE-2026-16900 - High (7.5)

Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted reg...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16900/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-16900 - High (7.5)

Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass in local collector registration, allowing unauthenticated actor to register a local collector by sending a specially crafted reg...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16900/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Maybe go hack and patch some CWP if you are into that sort of thing.

https://nvd.nist.gov/vuln/detail/cve-2026-73695

https://nvd.nist.gov/vuln/detail/cve-2026-73696

https://nvd.nist.gov/vuln/detail/cve-2026-73697

Maybe go hack and patch some CWP if you are into that sort of thing.

https://nvd.nist.gov/vuln/detail/cve-2026-73695

https://nvd.nist.gov/vuln/detail/cve-2026-73696

https://nvd.nist.gov/vuln/detail/cve-2026-73697

📢 Ivanti Connect Secure : trois zero-days chaînés exploités in the wild par UTA0576

Le 2 novembre 2026, Rapid7 publie une analyse d'urgence suite à la mise à jour de l'advisory sécurité d'Ivanti du 29 octobre 2026, concernant Ivanti Connect Secure (ICS), solution VPN d'entreprise déployée en bordure de réseau.

📖 cyberveille : https://cyberveille.ch/posts/2026-11-03-ivanti-connect-secure-trois-zero-days-chaines-exploites-in-the-wild-par-uta0576/
🌐 source : https://www.rapid7.com/blog/post/etr-additional-ivanti-connect-secure-zero-days-exploited-in-the-wild-cve-2026-111357-cve-2026-118527/
🟢 vérification factuelle haute
#IvantiConnectSecure #UTA0576 #Cyberveille

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-118527 – Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Strategic C-Suite briefing on CVE-2026-118527 for Ivanti Connect Secure, providing risk impact assessments, compliance alignment, and executive mitigation protocols....

https://thecybermind.co/pfmw

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-118527 – Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Actionable threat intelligence and multi-SIEM detection queries for CVE-2026-118527, featuring complete technical execution and hardening guidelines...

https://thecybermind.co/5pzs

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-118527 – Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Strategic C-Suite briefing on CVE-2026-118527 for Ivanti Connect Secure, providing risk impact assessments, compliance alignment, and executive mitigation protocols....

https://thecybermind.co/pfmw

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-118527 – Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Actionable threat intelligence and multi-SIEM detection queries for CVE-2026-118527, featuring complete technical execution and hardening guidelines...

https://thecybermind.co/5pzs

New.

Rapid7: Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527) https://www.rapid7.com/blog/post/etr-additional-ivanti-connect-secure-zero-days-exploited-in-the-wild-cve-2026-111357-cve-2026-118527/ @Rapid7Official #infosec #zeroday #Ivanti #vulnerability #threatintel #threatintelligence

Threat actors exploited these two flaws (tracked as CVE-2026-111357 and CVE-2026-118527) alongside an authentication bypass vulnerability (CVE-2026-104935), which Ivanti patched last month to remove the main attack surface. https://www.bleepingcomputer.com/news/security/ivanti-patches-two-more-connect-secure-zero-days-chained-in-attacks/

SQLi in RunZero.

https://www.runzero.com/advisories/runzero-search-sqli-cve-2026-110265/

SQLi in RunZero.

https://www.runzero.com/advisories/runzero-search-sqli-cve-2026-110265/

🟠 CVE-2026-91898 - High (8.1)

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, le...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📰 Android's November Patch Fixes Critical Zero-Click RCE, 'SMS of Death'

Google & Samsung's November Android update patches 200+ flaws, including a critical zero-click RCE (CVE-2026-58868) and the 'SMS of Death' bug (CVE-2026-58882). Update your devices immediately! #Android #CyberSecurity #PatchTuesday #RCE

🔗 https://cyber.netsecops.io/articles/android-november-2026-security-update-patches-critical-zero-click-rce/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

The November 2026 Android security update fixes 216 flaws, including zero-click remote code execution bugs CVE-2026-58868 and CVE-2026-58936.

#Android #AndroidSecurity #CVE202658868 #ZeroClick #RCE #MediaTek #PatchNow #MobileSecurity

https://securityonline.info/android-security-update-november-2026/?utm_source=mastodon&utm_medium=jetpack_social

📰 Android's November Patch Fixes Critical Zero-Click RCE, 'SMS of Death'

Google & Samsung's November Android update patches 200+ flaws, including a critical zero-click RCE (CVE-2026-58868) and the 'SMS of Death' bug (CVE-2026-58882). Update your devices immediately! #Android #CyberSecurity #PatchTuesday #RCE

🔗 https://cyber.netsecops.io/articles/android-november-2026-security-update-patches-critical-zero-click-rce/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

CW: kritikus Android sebezhetőség (CVE-2026-58882)

Egy speciálisan összeállított SMS összeomlaszthatja a híváskezelőt, megszakítva hívásokat — akár segélyhívásokat is. Javítást Google kiadta júliusban biztonsági előzetesekben; novemberi bulletinben szerepel. Frissítsd, ahol elérhető.

https://linuxmint.hu/hir/2026/11/halalos-sms-bug-benithatja-az-androidot-de-hamarosan-erkezik-a-javitas

#Android #CVE2026-58882 #Security #OpenSource

🟠 CVE-2026-58873 - High (8.4)

In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58873/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 Rapid Response: Critical Control Web Panel command injection (CVE-2026-77876, CVSS 9.8).

Censys identified 443,734 Internet-exposed web properties running CWP. Versions cannot be confirmed, so not all are necessarily vulnerable.

Read the full advisory for additional details and queries: https://censys.com/advisory/cve-2026-77876/

#Cybersecurity #CensysARC #Vulnerability #CVE202677876 #CommandInjection #ControlWebPanel #AttackSurfaceManagement #ThreatIntelligence #VulnerabilityManagement #WebHosting

🚨 Rapid Response: Critical Control Web Panel command injection (CVE-2026-77876, CVSS 9.8).

Censys identified 443,734 Internet-exposed web properties running CWP. Versions cannot be confirmed, so not all are necessarily vulnerable.

Read the full advisory for additional details and queries: https://censys.com/advisory/cve-2026-77876/

#Cybersecurity #CensysARC #Vulnerability #CVE202677876 #CommandInjection #ControlWebPanel #AttackSurfaceManagement #ThreatIntelligence #VulnerabilityManagement #WebHosting

CVE-2026-77876: OS command injection in Control Web Panel (<1.16) – CRITICAL severity (CVSS 9.3). Remote code execution possible via unescaped POST input. Restrict access & monitor for acc=deletedp abuse. https://radar.offseq.com/threat/cve-2026-77876-cwe-78-os-command-injection-in-control-web-panel-ec9d2cc2044f7ecc #OffSeq #CVE #infosec #vuln

Maybe go hack and patch some CWP if you are into that sort of thing.

https://nvd.nist.gov/vuln/detail/cve-2026-73695

https://nvd.nist.gov/vuln/detail/cve-2026-73696

https://nvd.nist.gov/vuln/detail/cve-2026-73697

CVE-2026-99247 | HIGH severity in Linux kernel 5.19: Kernel may crash (NULL pointer dereference) during early boot if tracing is disabled & trace buffer allocation fails. Patch available — apply ASAP to prevent boot failures. https://radar.offseq.com/threat/cve-2026-99247-tracing-do-not-initialize-tracefs-work-if-tracing-is-disabled-in-linux-kernel-11ff73f18055537a #OffSeq #Linux #Kernel #Vuln

CVE-2026-99247 | HIGH severity in Linux kernel 5.19: Kernel may crash (NULL pointer dereference) during early boot if tracing is disabled & trace buffer allocation fails. Patch available — apply ASAP to prevent boot failures. https://radar.offseq.com/threat/cve-2026-99247-tracing-do-not-initialize-tracefs-work-if-tracing-is-disabled-in-linux-kernel-11ff73f18055537a #OffSeq #Linux #Kernel #Vuln

CVE-2026-89292 | Eclipse Mnestix Browser (v1.6.0 – <2.3.0): CRITICAL bug allows unauthenticated extraction of backend API keys 🗝️. Restrict access, monitor for patch info. No known exploit in wild. https://radar.offseq.com/threat/in-eclipse-mnestix-browser-versions-160-up-until-but-excluding-230-it-was-possible-for-an-0d3db4ce36b8acbe #OffSeq #CVE202689292 #infosec

CVE-2026-89292 | Eclipse Mnestix Browser (v1.6.0 – <2.3.0): CRITICAL bug allows unauthenticated extraction of backend API keys 🗝️. Restrict access, monitor for patch info. No known exploit in wild. https://radar.offseq.com/threat/in-eclipse-mnestix-browser-versions-160-up-until-but-excluding-230-it-was-possible-for-an-0d3db4ce36b8acbe #OffSeq #CVE202689292 #infosec

🟠 CVE-2026-77691 - High (8.1)

ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77691/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77691 - High (8.1)

ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77691/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-121022 - High (8.1)

Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121022/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-121022 - High (8.1)

Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-121022/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

CVE-2026-4052 (CRITICAL): WSO2 API Manager (4.1.0 – 4.6.0, <1.8.8) has missing authorization — self-registered users can access System REST APIs if Identity Server is a Resident Key Manager. Upgrade to 1.8.8. https://radar.offseq.com/threat/cve-2026-4052-cwe-862-missing-authorization-in-wso2-wso2-api-manager-d1eaf36f3e90a714 #OffSeq #CVE #WSO2 #APIsecurity

🔴 CVE-2026-4052 - Critical (9.8)

This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-4052 (CRITICAL): WSO2 API Manager (4.1.0 – 4.6.0, <1.8.8) has missing authorization — self-registered users can access System REST APIs if Identity Server is a Resident Key Manager. Upgrade to 1.8.8. https://radar.offseq.com/threat/cve-2026-4052-cwe-862-missing-authorization-in-wso2-wso2-api-manager-d1eaf36f3e90a714 #OffSeq #CVE #WSO2 #APIsecurity

🔴 CVE-2026-4052 - Critical (9.8)

This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-13594 - Critical (9.1)

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-13594/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-13594 - Critical (9.1)

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-13594/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

@malwaretech I was wondering when the patched Ubuntu kernels would be out. TL;DR - the fixes are available now in the -proposed pocket, and will make it into the regular updates when testing is complete.

https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

Fixed kernels addressing Linux TCP vulnerability CVE-2026-98432 have been released for Red Hat Enterprise Linux 8, 9, and 10, requiring a system reboot after installation.

Meanwhile, Ubuntu has placed its corresponding fixes for supported LTS releases into its opt-in testing channel.

The underlying bug affects kernels dating back to version 4.4 and allows remote unauthenticated attackers to potentially achieve code execution.

Additiona…

https://en.hacks.gr/keno-asfaleias-ston-pyrina-toy-linux-epitrepei-apomakrysmeno-elegcho-choris-kodiko/

#Linux #RedHat #Ubuntu #Debian

Ubuntu continues to work on the the fix for CVE-2026-98432.

a critical use-after-free vulnerability in the Linux kernel's IPv4 TCP connection handling code (CVSS 9.8 score)

Debian released the fix on Oct 16.

https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

#Security

Linux Flaw Exposes Remote Code Execution Risk

A critical Linux flaw, rated 9.8 out of 10 in severity, poses a high risk of remote code execution, allowing hackers to take control of your system. This vulnerability, tracked as CVE-2026-98432, requires immediate attention and patching to prevent exploitation.

https://osintsights.com/linux-flaw-exposes-remote-code-execution-risk?utm_source=mastodon&utm_medium=social

#LinuxFlaw #RemoteCodeExecution #Cve202698432 #Cvss #RedHat

Critical Kernel Flaw CVE-2026-98432: How to Patch #Ubuntu #Linux

https://www.ubuntufree.com/linux-kernel-cve-2026-98432-ubuntu-fix/

The IPFire team has released IPFire 2.29 Core Update 205 to address CVE-2026-98432, a serious use-after-free vulnerability located in the Linux kernel's TCP stack.

Due to the nature of the issue, developers urge administrators not to postpone installation until the next regular maintenance window.

This update upgrades the underlying Linux kernel to version 6.18.60 and resolves a separate crash affecting the Broadcom network driver.

A syst…

https://en.hacks.gr/ektakti-enimerosi-asfaleias-apo-to-ipfire-gia-sovaro-provlima-diktyoy/

#IPFire #Linux #Kernel #TCP

@anthroposamu 2+ weeks ago:
https://lore.kernel.org/all/2026101531-CVE-2026-98432-d140@gregkh/

> "
affected

affected at 4.4

unaffected

unaffected from 0 before 4.4

unaffected from 5.10.272 through 5.10.*

unaffected from 5.15.223 through 5.15.*

unaffected from 6.1.190 through 6.1.*

unaffected from 6.6.159 through 6.6.*

unaffected from 6.12.113through 6.12.*

unaffected from 6.18.56 through 6.18.*

unaffected from 7.2.10 through 7.2.*

unaffected at 7.3
"

https://chalmovsky.com/posts/wtf-ubuntu
CVE-2026-98432 is a critical (CVSS 9.8) bug in the Linux kernel's TCP code. It's been there since 2016, so virtually every Linux server on the planet has it, and it can be hit remotely. Anthropic says it built a working exploit that gets root on a server. A total takeover.

Debian patched it on October 16. Ubuntu still doesn't have a patch more than two weeks later. Every supported release, LTS included, is listed as "Vulnerable". #security #offrehcked

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks

Link: https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432
Discussion: https://news.ycombinator.com/item?id=50341462

Blip blop, I'm a #mastobot.
Here is a summary (in beta) of the latest posts in #technologyAtKukei https://masto.kukei.eu/browse/technology category:
- AI backlash and controversies (Proton CEO manifesto, "vibe coding" risks, Sam Altman's RAM comments, Anthropic warnings)
- Cyberattacks on supermarket refrigeration systems across Europe causing food waste
- Critical Linux kernel vulnerability CVE-2026-98432 (unauthenticated remote root via MPTCP, Ubuntu/RHEL patch lag)
- Proton/ProtonMail user [1/2]

Russia-Ukraine war: Russian strikes killed 24+ at Zaporizhzhia humanitarian aid center; decoy drones adapted for 1,200km-range attacks
- Israel-Palestine conflict: Israeli raids in Hebron displacing 3,000+ Palestinians, arrest of Al Jazeera journalist, ongoing killings in Gaza
- Critical Linux kernel vulnerability CVE-2026-98432 (CVSS 9.8) allows unauthenticated remote root via MPTCP; AI-written exploit exists, Ubuntu patch delayed
- Transport accidents: Two helicopter [2/3]

Ubuntu puts fixes for CVE-2026-98432, a Linux kernel TCP flaw rated CVSS 9.8, in the proposed pocket for 22.04 LTS and newer. Older releases wait.

#CVE202698432 #LinuxKernel #Ubuntu #TCP #RCE #MPTCP #PatchNow #LinuxSecurity

https://securityonline.info/cve-2026-98432-ubuntu-proposed-fix/?utm_source=mastodon&utm_medium=jetpack_social

Fixes available in -proposed pocket for CVE-2026-98432

Linux 커널의 IPv4 TCP 연결 처리 취약점 CVE-2026-98432는 원격 코드 실행으로 이어질 수 있으며 CVSS 3.1 점수는 9.8이다. Ubuntu 22.04·24.04·26.04의 수정 패키지는 아직 검증 중인 -proposed 저장소에서 제공되며, 이전 지원 버전의 수정은 대기 중이다. 운영 환경에서는 자체 검증 후 패치를 적용하고 재부팅해야 한다. Canonical은 알려진 미공개 익스플로잇이 MPTCP를 사용하지만 취약점 자체는 MPTCP에 한정되지 않으므로 MPTCP 비활성화 대신 보안 업데이트를 권고한다.

https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

#linux #ubuntu #security #rce #kernel

@malwaretech I was wondering when the patched Ubuntu kernels would be out. TL;DR - the fixes are available now in the -proposed pocket, and will make it into the regular updates when testing is complete.

https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

Ubuntu continues to work on the the fix for CVE-2026-98432.

a critical use-after-free vulnerability in the Linux kernel's IPv4 TCP connection handling code (CVSS 9.8 score)

Debian released the fix on Oct 16.

https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

#Security

Critical Kernel Flaw CVE-2026-98432: How to Patch #Ubuntu #Linux

https://www.ubuntufree.com/linux-kernel-cve-2026-98432-ubuntu-fix/

https://chalmovsky.com/posts/wtf-ubuntu
CVE-2026-98432 is a critical (CVSS 9.8) bug in the Linux kernel's TCP code. It's been there since 2016, so virtually every Linux server on the planet has it, and it can be hit remotely. Anthropic says it built a working exploit that gets root on a server. A total takeover.

Debian patched it on October 16. Ubuntu still doesn't have a patch more than two weeks later. Every supported release, LTS included, is listed as "Vulnerable". #security #offrehcked

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks

Link: https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432
Discussion: https://news.ycombinator.com/item?id=50341462

Ubuntu still hasn't released a patch for the Linux 0day RCE in almost three weeks.

https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432

#Linux #Security #ubuntu #zeroday

Ubuntu puts fixes for CVE-2026-98432, a Linux kernel TCP flaw rated CVSS 9.8, in the proposed pocket for 22.04 LTS and newer. Older releases wait.

#CVE202698432 #LinuxKernel #Ubuntu #TCP #RCE #MPTCP #PatchNow #LinuxSecurity

https://securityonline.info/cve-2026-98432-ubuntu-proposed-fix/?utm_source=mastodon&utm_medium=jetpack_social

Noone should blame Ubuntu for not fixing CVE-2026-98432. They actually have had a solution for a decade. Just roll back to 14.04 LTS.

Update on the 9.8 CVSS TCP/IP RCE in the Linux kernel (CVE-2026-98432): we've detected what appears to be a threat actor activity scanning the entire internet for exposed affected systems. Our own scanning also suggests that the number of potential targets is high, therefore there is an increased likelihood of threat actors attempting to develop exploits for the vulnerability.

while CVE-2026-98432 is believed to require MPTCP to be enabled in the kernel, as well as a listening app/service which binds an MPTCP socket, which many have suggested should be rare, several kernels including Debian enable MPTCP by default.

Additionally, Go 1.24+ binds MPTCP sockets by default if the option is enabled in the kernel, so anything built on top of Go (including Caddy) will create the required MPTCP listener.

The mitigation of setting net.mptcp.enabled=0 disabled MPTCP, but does not apply to existing sockets, so any applications that have bound MPTCP sockets need to be restarted, otherwise the system remains exploitable.

You can check if your server is running any MPTCP listeners with the following command: sudo ss -Mlnp

On 2026-10-30 our preliminary internet-wide scan of port 443 confirmed that there are approximately 2,102,043 servers that are successfully reachable via an MPTCP connection. A deeper scan which attempts to connect to each endpoint on port 443 and negotiate a full TLS connection with MPTCP enabled returned about 762,774 systems.

Neither scan can confirm that these are unpatched kernels, just total exposure, but it's a lot more systems than expected. Since a valid HTTP connection is not required to exploit the vulnerability, the total attack surface is likely closer to the 2.1 million number than the 763k one.

As of today (2026-11-02), we've picked up several residential proxies and VPNs scanning the internet on port 443 using MPTCP-enabled connections. Since regular scanners do not negotiate MPTCP by default, and no data is being sent to the HTTP server over 443, we strongly suspect this activity is scanning for CVE-2026-98432 specifically. The use of residential proxies and RU-based VPN servers suggests that this is likely threat actor scanning, rather than security researchers.

Currently there are no known publicly available remote code execution exploits, but there are several denial of service proof-of-concepts floating around. This code gives threat actors a starting point to begin attempting to weaponize the vulnerability. Building exploits for the vulnerability is reported to be extremely difficult, but several state-sponsored threat actors likely have the resources required to succeed.

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432

Arista fixed critical Arista security vulnerabilities CVE-2026-111497 and CVE-2026-98432 that allow unauthenticated remote code execution. Update now.

#Arista #VeloCloud #LinuxKernel #RCE #CVE2026111497 #CVE202698432 #Cybersecurity #InfoSec

https://securityonline.info/arista-security-vulnerabilities-rce-flaws/?utm_source=mastodon&utm_medium=jetpack_social

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432
Discussion: https://news.ycombinator.com/item?id=50341462

Now that's what I call commitment.

https://bloatberg.com/2026/11/02/ubuntu-canonical-extends-long-term-support-for-cve-2026-98432-through-2036

#satire

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks

Link: https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432
Discussion: https://news.ycombinator.com/item?id=50341462

Reaffirming its commitment to enterprise-grade stability, Canonical announced Monday that CVE-2026-98432, the critical use-after-free in the Linux kernel's IPv4 TCP code, will receive a full 10 years of Long-Term Support on every Ubuntu release it affects.

"Other distros will patch something out from under you in 48 hours, and suddenly your whole threat model is wrong. Canonical is giving CIOs a vulnerability they can actually budget for."

https://bloatberg.com/2026/11/02/ubuntu-canonical-extends-long-term-support-for-cve-2026-98432-through-2036

#Ubuntu #Canonical #Linux

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks

Link: https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432
Discussion: https://news.ycombinator.com/item?id=50341462

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks

Link: https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432
Discussion: https://news.ycombinator.com/item?id=50341462

Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks

https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432

#linux

@nixCraft

Ubuntu, IMHO an awful choice.

the fact that below CVE is not fixed despite the fact it is patched by Debian
is yet another reason to install a decent distribution.

CVE-2026-98432 is a critical (CVSS 9.8) bug in the Linux kernel's TCP code.

It's really funny Ubuntu hasn't shipped a fix for CVE-2026-98432 yet because the fix is a +2/-2 diff that applies cleanly to their kernels and the entire reason they haven't been able to get an update out the door is due to deep organisational dysfunction within Canonical.

🚨 Critical Linux kernel flaw could allow remote root code execution; CVE-2026-98432

A use-after-free vulnerability in the Linux IPv4 TCP handshake path allows an unauthenticated attacker to trigger memory corruption by sending specially timed packets to a listening service.

Successful exploitation could crash the system or potentially execute arbitrary code as root.
⠀
• CVSS: 9.8
• Affected: Linux kernel 4.4 and later
• Attack vector: Network
• Privileges required: None
• User interaction: None
• Active exploitation: Not reported
⠀
Fixed kernel branches:

• 5.10.272
• 5.15.223
• 6.1.190
• 6.6.159
• 6.12.113
• 6.18.56
• 7.2.10
• 7.3
⠀
Administrators should install their distribution’s updated kernel and reboot to activate the fix.

Advisory: https://access.redhat.com/security/vulnerabilities/RHSB-2026-016

WTF Ubuntu? https://chalmovsky.com/posts/wtf-ubuntu

In case you missed it: CVE-2026-98432 is a critical (CVSS 9.8) bug in the Linux kernel's TCP code. It's been there since 2016, so virtually every Linux server on the planet has it, and it can be hit remotely. Anthropic says it built a working exploit that gets root on a server. A total takeover.

Debian patched it on October 16. Ubuntu still doesn't have a patch more than two weeks later. Every supported release, LTS included, is listed as "Vulnerable".

Bin irritiert, dass für Debian schön länger Kernelpatches bereitstehen, aber man bei Ubuntu irgendwie hängt (CVE Score 9,8).

https://ubuntu.com/security/CVE-2026-98432

CVE-2026-98432 : la faille critique du noyau Linux qui peut offrir un accès root à distance https://www.it-connect.fr/cve-2026-98432-faille-noyau-linux-tcp-root-distance/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Linux

9.8 CVE in Linux kernel: https://www.cve.org/CVERecord?id=CVE-2026-98432

CW: biztonság

CVE-2026-98432 (CVSS 9.8) kritikus Linux kernel IPv4 use-after-free: Anthropic belső Claude modellje működő exploitot demonstrált—Multipath TCP listenerek esetén távoli root lehetséges. Upstream javítások elérhetők, de Ubuntu 22.04/24.04/26.04/26.10 még sebezhető. Ideiglenes mitigáció: sudo sysctl -w net.mptcp.enabled=0 vagy az iptables DROP szabály. Részletek: https://linuxmint.hu/hir/2026/11/a-claude-ai-jelszo-nelkul-torhet-be-sebezheto-linux-szerverekre-az-ubuntu-meg-mindig-nem

#Linux #CVE2026-98432 #Ubuntu #security #OpenSource

Ubuntu is shitty software and backporting is flawed
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

Anza has urged Solana mainnet-beta validators to act on CVE-2026-98432, a critical Linux kernel use-after-free bug scored 9.8 that lets a remote attacker run commands as root. Ubuntu still lists the fix as work in progress, so operators should disable Multipath TCP. A host takeover could expose the validator identity key. https://thedefiant.io/news/security/anza-urges-solana-validators-to-act-on-critical-linux-flaw #Web3 #Blockchain #Solana

what the heck?

CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. Ubuntu and RHEL haven't shipped a fixed kernel yet.

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

#linux

Linux's October 2026 TCP Use-After-Free: CVE-2026-98432 — Atlas
-> mptcp
-> IPv4 packets with options

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

Si portes Linux, això et toca avui: CVE-2026-98432, use-after-free a l'handshake TCP IPv4, CVSS 9.8. S'arriba per xarxa, abans de qualsevol autenticació.

✅ Debian, SUSE, Oracle UEK, Amazon: pedaç llest
❌ Ubuntu (totes) i RHEL 8/9/10: encara res

🔎 uname -r · ss -Mlnp #Linux #CVE #seguretat
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

https://ubuntu.com/security/CVE-2026-98432

Ubuntu still haven’t released this fix? It’s been days since Debian released the new kernel? Wtf is going on Shuttleworth

Linux kernel CVE-2026-98432 is a use-after-free in the IPv4 TCP handshake that a remote, unauthenticated peer can reach. Upstream is fixed, but Ubuntu's tracker still lists its kernels as vulnerable and Red Hat lists RHEL 8, 9 and 10 as affected. Anthropic says Claude built a root exploit for servers with a multipath TCP listener, which Go 1.24+ enables by default. The Go team says the bug is not specific to MPTCP.

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

#LinuxKernel #InfoSec

CVE-2026-98432: blocking the Linux TCP bug until Ubuntu and Red Hat ship a fix https://getrff.com/blog/cve-2026-98432-linux-tcp-ip-options-block/

ioquake3.org will be offline for a bit. Ubuntu hasn’t patched this yet https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

This includes all services (irc relay, directory server) as this looks severe and I don’t have time right now to look into it more.

這年頭架服務真是有夠苦

https://blog.gslin.org/archives/2026/11/01/13313/linux-%E9%80%99%E6%AC%A1-mptcp-%E7%9A%84-use-after-free-%E6%BC%8F%E6%B4%9E-cve-2026-98432/

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

🔒 New CSAF advisory published

VDE-2026-119
Welotec: Multiple vulnerabilities in TK routers
CVE-2026-105978, CVE-2026-105979, CVE-2026-105980, CVE-2026-105981, CVE-2026-105982 (+1 more)

Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote at…

HTML: https://certvde.com/en/advisories/VDE-2026-119
CSAF JSON: https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-119.json

#OT #Advisory

🟠 CVE-2026-77800 - High (7.7)

ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant for another service provider.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77800/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77800 - High (7.7)

ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant for another service provider.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77800/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120577 - High (8.1)

The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFile function in all versions up to, and including, 1.6.2. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120577/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120577 - High (8.1)

The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteFile function in all versions up to, and including, 1.6.2. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120577/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Advanced Custom Fields: Extended PRO for WordPress affected by CRITICAL code injection (CVE-2026-120534, CVSS 9.8). All versions ≤0.9.2.6 vulnerable via render_field. Immediate review and mitigation advised. https://radar.offseq.com/threat/the-advanced-custom-fields-extended-pro-plugin-for-wordpress-is-vulnerable-to-limited-code-injection-721e7bd7c6236973 #OffSeq #WordPress #CVE2026120534

CVE-2026-120534 | CRITICAL vuln (CVSS 9.8) in ACF Extended PRO ≤0.9.2.6 allows unauthenticated code injection via render_field. Prevent by disabling 'shortcode_preview' & ensuring OpenSSL is present. Patch status pending. https://radar.offseq.com/threat/cve-2026-120534-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-acf-extended-advanced-24aed413b4a5b6e4 #OffSeq #WordPress #Vuln

Out-of-bounds write (CWE-787) in MediaTek chipsets' modem (CVE-2026-68589, HIGH) allows local privilege escalation for attackers with System privilege. Patch: MOLY01320076. Fix now! https://radar.offseq.com/threat/cve-2026-68589-cwe-787-out-of-bounds-write-in-mediatek-inc-mediatek-chipset-743516bd3729fd5f #OffSeq #MediaTek #Vulnerability #Security

The November 2026 bulletin resolves critical MediaTek vulnerabilities, including modem flaws CVE-2026-20499, CVE-2026-20545, and CVE-2026-20546.

#MediaTek #ChipsetSecurity #AndroidSecurity #CVE202620499 #MobileSecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/critical-mediatek-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

Barracuda Discloses Flaws Enabling Root Access to Devices

Beware: two newly discovered vulnerabilities in Barracuda devices could give attackers the keys to the kingdom, allowing them to gain complete control over affected appliances if they can get their hands on administrative access. Patching is crucial to prevent these flaws, tracked as CVE-2026-116606 and CVE-2026-111560, from putting…

https://osintsights.com/barracuda-discloses-flaws-enabling-root-access-to-devices?utm_source=mastodon&utm_medium=social

#Barracuda #Cve2026116606 #Cve2026111560 #EmailSecurityGateway #RootAccess

SANS Stormcast Tuesday, November 3rd, 2026: Multipath TCP (MPTCP) Detection; BTCPay Server 2.4.1 Hot Wallet Thefts; Barracuda ESG Flaws (CVE-2026-116606, CVE-2026-111560); Synology DSM Ransomware
https://isc.sans.edu/podcastdetail/10162

Barracuda security advisory:

• CVE-2026-116606 (9.3 critical) Pre-Authentication Authorization Bypass in Email Security Gateway
• CVE-2026-111560 (8.6 high) Command Injection in ESG, ADC, BMA, WCC, WAF, WSGhttps://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection

#Barracuda #CVE

Patch two Barracuda vulnerabilities, CVE-2026-116606 and CVE-2026-111560, that allow attackers to gain Barracuda root access across multiple appliances.

#Barracuda #EmailSecurity #CVE2026116606 #CVE2026111560 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/barracuda-vulnerabilities-root-access-patch/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-116606: CRITICAL auth bypass in Barracuda ESG (<9.4.0.030). Unauthenticated attackers can import crafted configs, altering appliance settings. Upgrade to 9.4.0.030+ now. https://radar.offseq.com/threat/cve-2026-116606-cwe-288-authentication-bypass-using-an-alternate-path-or-channel-in-barracuda-networks-f64fb8cb7ae70977 #OffSeq #Barracuda #Infosec #CVE2026_116606

Barracuda Discloses Flaws Enabling Root Access to Devices

Beware: two newly discovered vulnerabilities in Barracuda devices could give attackers the keys to the kingdom, allowing them to gain complete control over affected appliances if they can get their hands on administrative access. Patching is crucial to prevent these flaws, tracked as CVE-2026-116606 and CVE-2026-111560, from putting…

https://osintsights.com/barracuda-discloses-flaws-enabling-root-access-to-devices?utm_source=mastodon&utm_medium=social

#Barracuda #Cve2026116606 #Cve2026111560 #EmailSecurityGateway #RootAccess

SANS Stormcast Tuesday, November 3rd, 2026: Multipath TCP (MPTCP) Detection; BTCPay Server 2.4.1 Hot Wallet Thefts; Barracuda ESG Flaws (CVE-2026-116606, CVE-2026-111560); Synology DSM Ransomware
https://isc.sans.edu/podcastdetail/10162

Barracuda security advisory:

• CVE-2026-116606 (9.3 critical) Pre-Authentication Authorization Bypass in Email Security Gateway
• CVE-2026-111560 (8.6 high) Command Injection in ESG, ADC, BMA, WCC, WAF, WSGhttps://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection

#Barracuda #CVE

Patch two Barracuda vulnerabilities, CVE-2026-116606 and CVE-2026-111560, that allow attackers to gain Barracuda root access across multiple appliances.

#Barracuda #EmailSecurity #CVE2026116606 #CVE2026111560 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/barracuda-vulnerabilities-root-access-patch/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-76955: HIGH severity buffer overflow in Zyxel NWA110AX (≤7.12[ABTG.0]C0) allows LAN-based privilege escalation and device compromise. No patch yet — limit LAN access & monitor for abuse. https://radar.offseq.com/threat/a-buffer-overflow-vulnerability-in-the-zdpwtp-binary-in-zyxel-nwa110ax-firmware-versions-through-ef14a731cb981018 #OffSeq #Zyxel #Vulnerability

🟠 CVE-2026-76955 - High (8.8)

A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate privileges on an affected device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76955/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120833 - High (7.8)

labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that passes any file with a .p or .pickle extension to pandas.read_pickle based on the extension alone. Attackers who supply a crafte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120833/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107441 - High (8.8)

An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an unauthenticated adjacent attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107441/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120752 - High (7.5)

PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who control the callout argument...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120752/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-86596 | s2Member plugin <=260927 has a CRITICAL RCE bug. Auth'd users (custom-level+) can execute arbitrary PHP via 'item_name' in email templates. No confirmed patch — restrict or disable plugin now. https://radar.offseq.com/threat/the-s2member-plugin-for-wordpress-is-vulnerable-to-remote-code-execution-in-all-versions-up-to-and-2c20f20d9eb4970a #OffSeq #WordPress #RCE #CVE202686596

🔴 CVE-2026-86596 - Critical (9.8)

The s2Member plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, &lt;= 260927 via the &#039;item_name&#039; parameter parameter. This is due to insufficient sanitization in strip_php_tags_deep(), which...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86596/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119978 - High (8.5)

Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers can submit JavaScript to /api/v1/node-...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119978/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Technical details and a macOS revisiond vulnerability PoC exploit for CVE-2026-112487 are public, allowing root elevation. Update macOS immediately.

#macOS #Apple #CVE2026112487 #PoC #PrivilegeEscalation #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/macos-revisiond-vulnerability-poc-cve-2026-112487/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-29508 - High (8.8)

ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value tha...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-29508/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

The November 2026 Android security update fixes 216 flaws, including zero-click remote code execution bugs CVE-2026-58868 and CVE-2026-58936.

#Android #AndroidSecurity #CVE202658868 #ZeroClick #RCE #MediaTek #PatchNow #MobileSecurity

https://securityonline.info/android-security-update-november-2026/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-91893 - High (7.8)

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91893/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Prefab UI's opt-in Generative UI sandbox has a bypass (CVE-2026-120338). The Pyodide/Deno boundary let caller-supplied Python read and write host files as the server OS user.

Relevant to FastMCP servers that expose generate_prefab_ui. Unauthenticated exposure depends on the server's access controls.

Fixed in prefab-ui 0.21.0, released Oct 26. Check versions and tool access.

https://github.com/PrefectHQ/prefab/pull/538

#Cybersecurity #Infosec #AppSec #MCP

🔴 CVE-2026-120338 - Critical (10)

Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120338/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120306 - Critical (9.9)

Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAH_ISOLATION=chroot, and no buildah invocation passes --isolation, so the step only...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120306/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-105769 - Critical (9.3)

kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-ac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105769/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

The PostgreSQL project resolved 15 critical pgAdmin 4 vulnerabilities in version 9.19, fixing command injection flaw CVE-2026-116241 and credential leaks.

#pgAdmin4 #PostgreSQL #DatabaseSecurity #CVE2026116241 #RCE #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/pgadmin-4-vulnerabilities-fixed-9-19/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-116241 - Critical (9.9)

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted str...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116247 - High (8.2)

When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the configured one could not be found, pgAdmin left the parameter out of the connection and libpq fell back to the defaults of the operating-system ac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116247/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

Bulletin ID: 2026-162-AWS Publication Date: 11/02/2026 09:30 AM PST
Description:
Virtual Engineering Workbench (VEW) is an open-source platform where platform engineers define and publish development environments, and developers provision them on demand ...

https://aws.amazon.com/security/security-bulletins/rss/2026-162-aws/

#aws #security

The November 2026 bulletin resolves critical MediaTek vulnerabilities, including modem flaws CVE-2026-20499, CVE-2026-20545, and CVE-2026-20546.

#MediaTek #ChipsetSecurity #AndroidSecurity #CVE202620499 #MobileSecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/critical-mediatek-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

The November 2026 bulletin resolves critical MediaTek vulnerabilities, including modem flaws CVE-2026-20499, CVE-2026-20545, and CVE-2026-20546.

#MediaTek #ChipsetSecurity #AndroidSecurity #CVE202620499 #MobileSecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/critical-mediatek-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-120282 - Critical (9.9)

A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120282/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118638 - High (7.5)

The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post data, allowing unauthenticated attackers to overwrite the title of arbitrary posts, create arbitrary published posts, a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118638/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120276 - Critical (10)

A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120276/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120283 - Critical (10)

A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120283/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120283 – CRITICAL stack buffer overflow in Linksys E8450 v1.2.00.360516. Remote, unauthenticated RCE possible via /www/cgi-bin/portal.cgi (hidden_timezone). No patch from vendor. Restrict access ASAP. https://radar.offseq.com/threat/cve-2026-120283-stack-based-buffer-overflow-in-linksys-e8450-ba4aff2d530ff600 #OffSeq #CVE2026120283 #InfoSec #RouterSecurity

🔴 CVE-2026-120228 - Critical (9.9)

A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120228/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120232 - High (8.8)

A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120232/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WAVLINK WL-WN530BE1-A V251117 is impacted by CRITICAL CVE-2026-120198 (CVSS 10) – remote, unauthenticated command injection in /protocol.csp. Exploit code is public, no patch yet. Isolate devices from untrusted networks now. https://radar.offseq.com/threat/a-vulnerability-has-been-found-in-wavlink-wl-wn530be1-a-v251117-cve-2026-120198-6f356a0bfcb26716 #OffSeq #CVE2026120198 #infosec

🔴 CVE-2026-120198 - Critical (10)

A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120198 — CRITICAL command injection (CVSS 10) in WAVLINK WL-WN530BE1-A via con_check_read_finish in /protocol.csp. Remote code execution possible; public exploit out, no patch yet. Restrict device access & monitor for updates: https://radar.offseq.com/threat/cve-2026-120198-command-injection-in-wavlink-wl-wn530be1-a-ba1bf1be0ae2942e #OffSeq #Vuln #IoT

The ASF patched Apache security vulnerabilities with new Apache security fixes for Syncope, Arrow, and Fineract, including critical flaw CVE-2026-64618.

#Apache #ApacheSyncope #ApacheFineract #ApacheArrow #SQLInjection #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/apache-security-vulnerabilities-syncope-fineract/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-120345: CRITICAL RCE in WAVLINK WN551X3-A (M51X3_V251020-WO-182e965) via DNS handler. Public exploit. No patch. Isolate devices from untrusted networks until fix released. https://radar.offseq.com/threat/a-vulnerability-was-found-in-wavlink-wn551x3-a-m51x3v251020-wo-182e965-cve-2026-120345-c09ec0836592aef0 #OffSeq #Vuln #IoT #Security

CVE-2026-120345: CRITICAL OS command injection in WAVLINK WN551X3-A (DNS Handler, /bin/ioos). Remote code execution possible — public exploit exists. Restrict network access & monitor device activity. Details: https://radar.offseq.com/threat/cve-2026-120345-os-command-injection-in-wavlink-wn551x3-a-8a3e40bb494c5e8c #OffSeq #CVE2026120345 #IoTSecurity

WAVLINK WN536AX6-A V260507 is impacted by CVE-2026-120279 (CRITICAL, CVSS 10) – remote OS command injection via /protocol.csp openvpn_cli Handler. Exploit is public. Patch or isolate devices now! https://radar.offseq.com/threat/a-flaw-has-been-found-in-wavlink-wn536ax6-a-v260507-cve-2026-120279-f78efd8cb5e677e8 #OffSeq #Vulnerability #CVE2026120279

🔴 CVE-2026-120279 - Critical (10)

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120279/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120281 - Critical (10)

A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120281/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120280 - Critical (10)

A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_id/group_name leads to os c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120280/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120277 - Critical (10)

A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120277/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120277: CRITICAL OS command injection in WAVLINK WN536AX6-A (V260507_2.0.0). Remote attackers can execute OS commands – no patch yet. Restrict access & monitor for updates. Exploit code is public. https://radar.offseq.com/threat/cve-2026-120277-os-command-injection-in-wavlink-wn536ax6-a-51fe2fe977f184ad #OffSeq #CVE #Infosec #IoT

Apache Wicket vulnerabilities: a security update fixes 19 flaws, including CVE-2026-84170 upload DoS and XSS bugs. Upgrade to 8.20.0, 9.25.0 or 10.12.0.

#ApacheWicket #Java #CVE202684170 #CVE202683594 #XSS #WebSecurity #PatchNow #Vulnerability

https://securityonline.info/apache-wicket-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-120240 - Critical (9.9)

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120240/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120241 - High (7.5)

A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118185 - High (7.5)

The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for a pending login, allowing an attacker who already knows a user's password to brute force the second factor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118185/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62048 - Critical (9.3)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62048/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120239 - Critical (9.9)

A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument file_id results in os command ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120239/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120238 - Critical (9.9)

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of the argument file_id leads to os command injection. The attack ca...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120238/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WAVLINK WN553X1-B firmware V260403_2.0.0 has authenticated command injection (CVE-2026-120231). A researcher reproduced root execution in emulated firmware. Default passwords raise the risk.

MSPs: inventory devices, change defaults, and restrict management access. No confirmed vendor fix or in-the-wild exploitation.

https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK%20WN553X1-B%20Router/WAVLINK_WN553X1-B_openvpn_cli_command_injection.md

#Cybersecurity #Infosec #NetworkSecurity #MSP

🔴 CVE-2026-120231 - Critical (9.9)

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument file_id causes os command injection. I...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120231/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120229 - Critical (9.1)

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. The attack is possible to be carried out re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120229/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120230 - Critical (9.9)

A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web Backend. The manipulation of the argument vlan_name results in os command injection. The attack may be performed from remote. Th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120230/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120227 - Critical (9.9)

A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file static_route_setting.sh of the component ioos Web Backend. Performing a manipulation of the argument rule_name results in os comman...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120227/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120308 - Critical (9.9)

A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub configuration. Nothing checks t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120308/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120308 (CRITICAL, CVSS 9.9): Path traversal in beam-cloud Beta9 gateway (<0.1.776/0.1.756) lets tenants with workspace tokens read/write any worker files. Upgrade gateway & worker ASAP to fix. https://radar.offseq.com/threat/cve-2026-120308-cwe-22-path-traversal-in-beam-cloud-beta9-gateway-9721aa33b77da3f8 #OffSeq #CVE2026120308 #infosec #CloudSecurity

🔴 CVE-2026-120307 - Critical (9.9)

The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into a worker path. If the unresolved path starts with a mount destination, including the default upload mount ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120307/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120225 (CVSS 9.4) affects Oray Pugongying X5 Pro v7.6.0 & v7.6.1 – critical path traversal in config_restore_ex lets remote attackers access/modify files. Public exploit code, no patch. Restrict access & monitor logs. https://radar.offseq.com/threat/cve-2026-120225-relative-path-traversal-in-oray-pugongying-x5-pro-9cee731f9b642b58 #OffSeq #CVE2026120225 #infosec #IoT

🔴 CVE-2026-120225 - Critical (9.1)

A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function config_restore_ex of the file /etc/openwrt_release. This manipulation of the argument filename causes relative path traversal. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120225/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120224 - Critical (9.9)

A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_by_json/run_async_task of the component API Authorization. The manipulation results in improper authorization. The attack can be launched ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120224/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CW: CVE-2026-120263, CVE-2026-118386 — OAuth2 alapú fiókátvétel és Actions workflow-k kihasználása; összesen 20 biztonsági javítás. Emellett több teljesítmény- és Actions-fejlesztés. Saját Gitea-t üzemeltetsz? Frissíts 28.3-ra. Részletek: https://linuxmint.hu/hir/2026/11/megjelent-a-gitea-283-20-biztonsagi-javitas-es-teljesitmenybeli-fejlesztes
#Gitea #Linux #OpenSource #Security

Apply the new Gitea vulnerabilities patch to resolve 18 Gitea vulnerabilities, including XSS flaw CVE-2026-113429 and token leak bug CVE-2026-112887.

#Gitea #DevOps #Git #Cybersecurity #CVE2026113429 #AppSec #Vulnerability #InfoSec

https://meterpreter.org/gitea-vulnerabilities-patch-28-3-0/?utm_source=mastodon&utm_medium=jetpack_social

WAVLINK WN579X3-D V250402 hit by CRITICAL OS command injection (CVE-2026-120196, CVSS 9.9). Public exploits available; no patch yet. Restrict device access, disable remote management. https://radar.offseq.com/threat/a-vulnerability-was-detected-in-wavlink-wn579x3-d-v250402-cve-2026-120196-2bf24d3ff2b5dc6b #OffSeq #infosec #CVE #IoT

🔴 CVE-2026-120196 - Critical (9.9)

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection. The attack may be performed from remote. The ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120196/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WAVLINK WL-WN530HG4B M_V260724 has a CRITICAL OS command injection (CVE-2026-120197, CVSS 9.9). Exploit code is public, no patch yet. Restrict management interface access. https://radar.offseq.com/threat/a-flaw-has-been-found-in-wavlink-wl-wn530hg4b-mv260724-cve-2026-120197-caef8b3ed7bd13a6 #OffSeq #CVE2026120197 #RouterVuln #Infosec

🔴 CVE-2026-120197 - Critical (9.9)

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120197 (CRITICAL, CVSS 9.4): WAVLINK WL-WN530HG4B routers have an OS command injection flaw in port_forward (/cgi-bin/wapi.cgi). Public exploit code exists. Restrict access, monitor devices, and check for updates. https://radar.offseq.com/threat/cve-2026-120197-os-command-injection-in-wavlink-wl-wn530hg4b-b13519810fe65740 #OffSeq #Vulnerability #IoTSecurity

🔴 CVE-2026-120195 - Critical (10)

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlan_ssi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120195/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Linux kernel vulnerabilities this week: 129 CVEs, including critical iSCSI flaws CVE-2026-99154 and CVE-2026-99153. Get the kernel security update.

#LinuxKernel #Linux #CVE202699154 #CVE202699153 #iSCSI #KernelSecurity #PatchNow #Vulnerability

https://securityonline.info/linux-kernel-vulnerabilities-oct-26-nov-1-2026/?utm_source=mastodon&utm_medium=jetpack_social

Linux kernel vulnerabilities this week: 129 CVEs, including critical iSCSI flaws CVE-2026-99154 and CVE-2026-99153. Get the kernel security update.

#LinuxKernel #Linux #CVE202699154 #CVE202699153 #iSCSI #KernelSecurity #PatchNow #Vulnerability

https://securityonline.info/linux-kernel-vulnerabilities-oct-26-nov-1-2026/?utm_source=mastodon&utm_medium=jetpack_social

📈 CVE Published in last 7 days (2026-10-26 - 2026-10-26)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 254
- High: 1007
- Medium: 1185
- Low: 189
- None: 1033

Status:
- : 23
- Analyzed: 151
- Awaiting Analysis: 1116
- Deferred: 1572
- Modified: 5
- Received: 408
- Rejected: 217
- Undergoing Analysis: 176

CISA KEVs:
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 459
- GitHub, Inc.: 389
- Mozilla Corporation: 343
- Apple Inc.: 328
- Patchstack: 251
- Wordfence: 204
- VulDB: 165
- kernel.org: 129
- WPScan: 109
- Drupal.org: 106

Top Affected Products:
- UNKNOWN: 3324
- Google Chrome: 72
- Langflow: 33
- Microsoft Edge Chromium: 16
- Apple Macos: 14
- Semantic-mediawiki Semantic Mediawiki: 14
- Vllm: 8
- Mtrudel Bandit: 8
- Openpanel: 7
- Elastic Cloud Enterprise: 7

Top EPSS Score:
- CVE-2026-101210 - 2.84 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101210)
- CVE-2026-101214 - 2.84 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101214)
- CVE-2026-86379 - 2.84 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86379)
- CVE-2026-116505 - 2.74 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-116505)
- CVE-2026-112351 - 2.68 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112351)
- CVE-2026-91913 - 2.65 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-91913)
- CVE-2026-119409 - 2.48 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119409)
- CVE-2026-116485 - 2.35 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-116485)
- CVE-2026-86394 - 2.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86394)
- CVE-2026-86395 - 2.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86395)

#ZEN #SecDB #InfoSec

📢 Ivanti Connect Secure : trois zero-days chaînés exploités in the wild par UTA0576

Le 2 novembre 2026, Rapid7 publie une analyse d'urgence suite à la mise à jour de l'advisory sécurité d'Ivanti du 29 octobre 2026, concernant Ivanti Connect Secure (ICS), solution VPN d'entreprise déployée en bordure de réseau.

📖 cyberveille : https://cyberveille.ch/posts/2026-11-03-ivanti-connect-secure-trois-zero-days-chaines-exploites-in-the-wild-par-uta0576/
🌐 source : https://www.rapid7.com/blog/post/etr-additional-ivanti-connect-secure-zero-days-exploited-in-the-wild-cve-2026-111357-cve-2026-118527/
🟢 vérification factuelle haute
#IvantiConnectSecure #UTA0576 #Cyberveille

3 threats SOC teams should know about this week 🛡️

My site Intel60 tracked 119 security stories this week. 34 were rated critical, and CISA added 10 bugs to its Known Exploited Vulnerabilities list. These are the three I’d put at the top of a SOC’s list:

1️⃣ Cisco firewall VPN zero-day (CVE-2026-76418)
Attackers are exploiting a flaw in the remote-access VPN of Cisco Secure Firewall ASA and FTD. It’s the second Cisco firewall zero-day since August.
🔎 SOC angle: patch now, then review VPN logs for unusual sessions. Edge devices are where attackers get in first.

2️⃣ Claude Code extension backdoored in Open VSX
The extension in the Open VSX registry was compromised to install a persistent SSH backdoor on developer machines. Cursor’s marketplace was also affected and temporarily shut down.
🔎 SOC angle: check developer endpoints for unexpected SSH keys and new authorized_keys entries. Developer tools are now part of the supply-chain attack surface.

3️⃣ Ivanti Connect Secure flaws added to KEV
CISA flagged a missing-authentication flaw (CVE-2026-111357) that can be chained with other bugs. The federal deadline is Nov 2, which tells you how urgent CISA considers it.
🔎 SOC angle: if you run Ivanti, patch, then hunt for signs of compromise. With Ivanti, patching alone hasn’t always removed attackers who were already in.

The pattern this week: the entry points are edge devices and developer tools. Watch what sits at the perimeter and what your developers install.

I track these with Intel60, a free tool I built that turns security news into 60-word, severity-rated briefs every 30 minutes: https://intel60.app

What was the biggest story on your radar this week? 👇

#cybersecurity #SOC #threatintel #infosec #blueteam #vulnerabilitymanagement

New.

Rapid7: Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527) https://www.rapid7.com/blog/post/etr-additional-ivanti-connect-secure-zero-days-exploited-in-the-wild-cve-2026-111357-cve-2026-118527/ @Rapid7Official #infosec #zeroday #Ivanti #vulnerability #threatintel #threatintelligence

Threat actors exploited these two flaws (tracked as CVE-2026-111357 and CVE-2026-118527) alongside an authentication bypass vulnerability (CVE-2026-104935), which Ivanti patched last month to remove the main attack surface. https://www.bleepingcomputer.com/news/security/ivanti-patches-two-more-connect-secure-zero-days-chained-in-attacks/

SANS Stormcast Monday, November 2nd, 2026: OneNote Bulk Extraction; Trojanized Claude Code Extension in Cursor Marketplace; Ivanti Connect Secure Zero-Days (CVE-2026-111357); Android SMS of Death
https://isc.sans.edu/podcastdetail/10160

📈 CVE Published in last 7 days (2026-10-26 - 2026-10-26)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 254
- High: 1007
- Medium: 1185
- Low: 189
- None: 1033

Status:
- : 23
- Analyzed: 151
- Awaiting Analysis: 1116
- Deferred: 1572
- Modified: 5
- Received: 408
- Rejected: 217
- Undergoing Analysis: 176

CISA KEVs:
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 459
- GitHub, Inc.: 389
- Mozilla Corporation: 343
- Apple Inc.: 328
- Patchstack: 251
- Wordfence: 204
- VulDB: 165
- kernel.org: 129
- WPScan: 109
- Drupal.org: 106

Top Affected Products:
- UNKNOWN: 3324
- Google Chrome: 72
- Langflow: 33
- Microsoft Edge Chromium: 16
- Apple Macos: 14
- Semantic-mediawiki Semantic Mediawiki: 14
- Vllm: 8
- Mtrudel Bandit: 8
- Openpanel: 7
- Elastic Cloud Enterprise: 7

Top EPSS Score:
- CVE-2026-101210 - 2.84 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101210)
- CVE-2026-101214 - 2.84 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101214)
- CVE-2026-86379 - 2.84 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86379)
- CVE-2026-116505 - 2.74 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-116505)
- CVE-2026-112351 - 2.68 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112351)
- CVE-2026-91913 - 2.65 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-91913)
- CVE-2026-119409 - 2.48 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119409)
- CVE-2026-116485 - 2.35 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-116485)
- CVE-2026-86394 - 2.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86394)
- CVE-2026-86395 - 2.19 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86395)

#ZEN #SecDB #InfoSec

📢 Alpine Linux reconstruit son GitLab après une tentative d'exploitation RCE via CVE-2026-97229

BleepingComputer, publié le 1er novembre 2026. L'article rapporte une tentative d'attaque contre l'infrastructure GitLab du projet open-source Alpine Linux, survenue les 20 et 21 octobre 2026. Des attaquants ont ciblé CVE-2026-97229, une vulnérabilité de…

📖 cyberveille : https://cyberveille.ch/posts/2026-11-03-alpine-linux-reconstruit-son-gitlab-apres-une-tentative-d-exploitation-rce-via-cve-2026-97229/
🌐 source : https://www.bleepingcomputer.com/news/security/alpine-linux-rebuilds-gitlab-after-attempted-rce-attack/
🟡 vérification factuelle moyenne
#AlpineLinux #GitLab #Cyberveille

Karen IT Security Response Center (@ksrc) Advisory

Advisory ID: KSRC-2026-11023

A #critical #vulnerability has been identified in #GitLab Community Edition (CE) and Enterprise Edition (EE) that allows an unauthenticated remote attacker to achieve Remote Code Execution (RCE) on the GitLab server. The vulnerability is tracked as CVE-2026-97229 and has been assigned a CVSS v3.1 score of 10.0 (Critical) — the maximum possible severity.

https://ksrc.karenit.net/blog/security-alert/critical-unauthenticated-remote-code-execution-in-gitlab-ce

#cve #cyberSecurity #staysafe #StayInformed #StayProtected

Tracked as CVE-2026-97229, this vulnerability stems from an integer overflow weakness and was discovered in the CI/CD Regular Expression Compiler, which parses and evaluates regular expressions in pipeline configuration files. https://www.bleepingcomputer.com/news/security/over-1-000-gitlab-servers-vulnerable-to-code-execution-attacks/

🚨 More than 1,000 GitLab servers remain exposed to an actively exploited RCE flaw; CVE-2026-97229

The CVSS 10.0 vulnerability allows an unauthenticated attacker to execute arbitrary code through a malicious regular expression inside a CI/CD configuration.
⠀
• CVSS: 10.0
• Affected: GitLab CE/EE 19.2 before 19.2.8, 19.3 before 19.3.5 and 19.4 before 19.4.2
• Fixed: 19.2.8, 19.3.5 and 19.4.2
• Active exploitation: Confirmed
⠀
CISA added the flaw to its Known Exploited Vulnerabilities catalog after attacks were detected.

Shadowserver is still tracking more than 1,000 vulnerable internet-facing instances.

Source: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/

Mais de 1.000 servidores do GitLab permanecem expostos a ataques de execução de código. A falha CVE-2026-97229 permite que atacantes não autenticados assumam o controle das instâncias afetadas. 🚨

🔗 https://tugatech.com.pt/t93904-gitlab-tem-mais-de-1-000-servidores-expostos-a-ataques-ativos-de-execucao-de-codigo

#empresa #erro #falha #gitlab #vulnerabilidade 

🟠 CVE-2026-116239 - High (8.5)

In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an internal account and an LDAP account. After LDAP or Kerberos authenticated a user, pgAdmin chose the account to log in by usern...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116239/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-39732 - Critical (9.3)

Unauthenticated SQL Injection in Transliterator &lt;= 2.5.13 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39732/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116238 - High (8.1)

In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit could be bypassed, giving an unauthenticated attacker an unlimited number of password guesses against any internal account, includi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116238/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-116852 - Critical (9.1)

Author Remote Code Execution (RCE) in Widget Options &lt;= 4.2.5 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116852/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118086 - High (8.8)

Subscriber Privilege Escalation in WP BASE Booking &lt;= 6.5.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-39738 - Critical (9.8)

Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39738/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118090 - High (8.8)

Subscriber PHP Object Injection in MasterStudy LMS &lt;= 3.7.55 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118090/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-119526 - Critical (9.8)

Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection.

This issue affects Royal Event: from n/a through 2.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119526/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116242 - High (8.2)

pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so it always loaded the unencrypted private keys in ~/.ssh of the operating-system account running pgAdmin, read that account's ~...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116242/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116862 - High (7.5)

Unauthenticated Broken Access Control in WP REST Cache &lt;= 2026.3.1 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116862/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116861 - High (7.5)

Unauthenticated Sensitive Data Exposure in Flexible Chat &lt;= 1.1.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116861/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116401 - High (7.5)

Unauthenticated Broken Access Control in HUSKY &lt;= 1.4.6 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116401/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-59978 - High (7.5)

AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated `?script=version` endpoint accepts POST data without origin, CSRF or parameter-type validation. A `version[]` parameter becomes a PHP ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59978/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62264 - High (7.5)

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when `MCP_TRANSPORT=http` enables the opt-in HTTP server, `@sylphx/pdf-reader-mcp` reads `MCP_API_KEY` and logs that `X-API-Ke...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62264/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-116386 - Critical (9.8)

Unauthenticated Privilege Escalation in SMS Alert Order Notifications &lt;= 4.0.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116386/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-39734 - High (7.5)

Unauthenticated Path Traversal in WP EasyPay &lt;= 4.5.4 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39734/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76012 - High (7.5)

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacy_render function. This is due to broken authorization on the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76012/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97638 - High (7.5)

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.57.3.1 via the 'previous_draft_id' parameter due to missing va...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97638/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

UWN: A snapshot of what happened this week in Canonical's Ubuntu eco-system. What's happening ? We cite the high impact stuff that over shadows the lil things. Fixed is CVE-2026-112816, Canonical adds back the Ubuntu Core Desktop as a snap only release, 27.04 open for development, linux-firmware-hwe details.

A reminder: Ubuntu Summit 26.10 takes place next week :D

Too:
Circles! activities
Meetings/Reports/Events/ and such

Details: https://ubuntu.com/community/uwn/ubuntu-weekly-newsletter-issue-968
Read, stay informed and enjoy!

Karen IT Security Response Center (@ksrc) Advisory

Advisory ID: KSRC-2026-11021

A #critical #authentication #bypass #vulnerability has been identified in Canonical #LXD and MicroCloud. The vulnerability, tracked as CVE-2026-112816, has been assigned a CVSS v4.0 score of 10.0 (Critical) — the maximum possible severity.

https://ksrc.karenit.net/blog/security-alert/critical-authentication-bypass-in-canonical-lxd-https-listener

#cve #cyberSecurity #staysafe #StayInformed #StayProtected

Canonical fixes LXD vulnerability CVE-2026-112816 (CVSS 10) in LXD and MicroCloud, letting attackers impersonate trusted TLS clients. Update now.

#LXD #MicroCloud #Canonical #Ubuntu #CVE2026112816 #TLS #Containers #PatchNow

https://securityonline.info/lxd-vulnerability-cve-2026-112816/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-112816 Explained: The LXD and MicroCloud Authentication Bypass That Scored a Perfect CVSS 10.0

https://thecybersecguru.com/exploits/cve-2026-112816-lxd-microcloud-authentication-bypass/

🚨 Critical LXD and MicroCloud authentication bypass rated CVSS 10.0

CVE-2026-112816 allows an unauthenticated attacker to impersonate a trusted TLS client using only its public certificate, potentially gaining full access to clusters, virtual machines and the host as root.
⠀
The attacker must be able to reach the HTTPS API and obtain the public certificate of an existing trusted client.
⠀
• CVSS: 10.0
• Affected: LXD 4.0.14, 5.0.10, 5.21.8 and 6.9
• Fixed: LXD 4.0.15, 5.0.11, 5.21.9 and 6.10.1
• MicroCloud fixes: 2.1.5 and 3.4.1
• Active exploitation: Not reported
• Public exploit: None reported
⠀
Administrators should update immediately and restrict access to the HTTPS API.

CW: biztonsági hír — CVE-2026-112816 (CVSS 10.0). LXD/MicroCloud mutual TLS-validáció hibája lehetővé teszi megbízhatónak tűnő kliens megszemélyesítését privát kulcs nélkül. Érintett: LXD 4.0.14, 5.0.10, 5.21.8, 6.9. Javított snapek: lxd 6.10.1/5.21.9/5.0.11/4.0.15, microcloud 3.4.1/2.1.5. Frissítsétek vagy szűkítsétek a hálózati API-hozzáférést. #Linux #LXD #MicroCloud #CVE #security
https://linuxmint.hu/hir/2026/11/cvss-100-s-lxd-microcloud-sebezhetoseg-a-tamadok-privat-kulcs-nelkul-is

🟠 CVE-2026-119979 - High (8.8)

LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119979/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119777 - High (7.8)

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker coul...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119777/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119760 - High (7.5)

sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or H...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119760/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-77884: Gallery Vault 1.0.41 exposes an unauthenticated HTTP server on port 8080, leaking files from Android external storage to anyone on the local network. CVSS 6.5, no patch yet. Lock down network access and update as soon as a fix lands. https://www.valtersit.com/cve/CVE-2026-77884/