CVE-2026-118344 (CRITICAL): Google Chrome before 156.0.8078.73 is vulnerable to a use-after-free in Layout, allowing remote code execution inside the sandbox. Update now. https://radar.offseq.com/threat/cve-2026-118344-use-after-free-in-google-chrome-1373d02f29569b9e #OffSeq #Chrome #CVE2026118344 #Infosec

CVE-2026-118344 (CRITICAL): Google Chrome before 156.0.8078.73 is vulnerable to a use-after-free in Layout, allowing remote code execution inside the sandbox. Update now. https://radar.offseq.com/threat/cve-2026-118344-use-after-free-in-google-chrome-1373d02f29569b9e #OffSeq #Chrome #CVE2026118344 #Infosec

🟠 CVE-2026-118008 - High (8.8)

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118008/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-83831 - High (8.8)

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-83831/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-83831 - High (8.8)

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-83831/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-85898 - High (8.8)

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-85898 - High (8.8)

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-85898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Auth bypasses are so hot right now.

https://nvd.nist.gov/vuln/detail/cve-2026-112352

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random identifier or integrity protection. Attackers can guess default account names such as Admin or sftp_user and submit a forged username cookie to satisfy the login check in checkLogin (libwebcmn.so) and networkDiag.cgi, chaining into root command execution.

Auth bypasses are so hot right now.

https://nvd.nist.gov/vuln/detail/cve-2026-112352

Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any user with an active web session by forging a session cookie containing only a cleartext username with no random identifier or integrity protection. Attackers can guess default account names such as Admin or sftp_user and submit a forged username cookie to satisfy the login check in checkLogin (libwebcmn.so) and networkDiag.cgi, chaining into root command execution.

CISA KEV catalog adds actively exploited Magento flaw CVE-2026-48356 and Brotli vulnerability CVE-2026-111497. Patch before November 10.

#CISA #KEV #Magento #AdobeCommerce #Brotli #CVE202648356 #CVE2026111497 #ActiveExploitation

https://securityonline.info/cisa-kev-magento-brotli-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1027] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-111497 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- Name: Google Brotli Unchecked Return Value Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Brotli
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111497

⚠️ CVE-2026-48356 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48356)
- Name: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://www.adobe.com/trust/security/products/commerce/apsb26-73.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48356

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261027 #cisa20261027 #cve_2026_111497 #cve_2026_48356 #cve2026111497 #cve202648356

CVE ID: CVE-2026-48356
Vendor: Adobe
Product: Commerce and Magento
Date Added: 2026-10-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-48356

CISA adds node2shell (broccoli2shell?) CVE-2026-111497 (Google Brotli Unchecked Return Value) and Adobe Commerce/Magento unrestricted file upload CVE-2026-48356 to the KEV Catalog:

https://www.cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog

#CISA #KEV #node2shell #broccoli2shell #brotli #Adobe #magento #CVE

CISA KEV catalog adds actively exploited Magento flaw CVE-2026-48356 and Brotli vulnerability CVE-2026-111497. Patch before November 10.

#CISA #KEV #Magento #AdobeCommerce #Brotli #CVE202648356 #CVE2026111497 #ActiveExploitation

https://securityonline.info/cisa-kev-magento-brotli-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1027] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-111497 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- Name: Google Brotli Unchecked Return Value Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Google
- Product: Brotli
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111497

⚠️ CVE-2026-48356 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48356)
- Name: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Adobe
- Product: Commerce and Magento
- Notes: https://www.adobe.com/trust/security/products/commerce/apsb26-73.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48356

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261027 #cisa20261027 #cve_2026_111497 #cve_2026_48356 #cve2026111497 #cve202648356

CVE ID: CVE-2026-48356
Vendor: Adobe
Product: Commerce and Magento
Date Added: 2026-10-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-48356

CISA adds node2shell (broccoli2shell?) CVE-2026-111497 (Google Brotli Unchecked Return Value) and Adobe Commerce/Magento unrestricted file upload CVE-2026-48356 to the KEV Catalog:

https://www.cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog

#CISA #KEV #node2shell #broccoli2shell #brotli #Adobe #magento #CVE

HIGH severity: 953 Magento stores infected by loader malware since July 2025 🛒 Loader uses visitor fingerprinting and exploits CVE-2026-48356 & CVE-2025-54236. Inspect for rogue admin accounts, backdoors, and patch now. https://radar.offseq.com/threat/953-online-stores-infected-in-long-lasting-malware-campaign-884b9644d42ac663 #OffSeq #Magento #Malware

🔴 CVE-2026-116692 - Critical (9.8)

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116692/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-116692 - Critical (9.8)

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116692/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116688 - High (8.1)

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can be reached while CKEditor processes incoming s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116688 - High (8.1)

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can be reached while CKEditor processes incoming s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116682 - High (8.6)

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling in backend/pkg/indexing/indexingFiles.go resolves symbolic links through GetRealPath without confirming that the resolved ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116682/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116682 - High (8.6)

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling in backend/pkg/indexing/indexingFiles.go resolves symbolic links through GetRealPath without confirming that the resolved ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116682/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116662 - High (7.5)

Tanium addressed a compression bomb vulnerability in Enforce.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116662 - High (7.5)

Tanium addressed a compression bomb vulnerability in Enforce.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116662/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88812 - High (7.8)

A double free in XKB SetGeometryin https://x.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88812/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88812 - High (7.8)

A double free in XKB SetGeometryin https://x.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88812/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87086 - High (7.5)

Tanium addressed a denial of service vulnerability in Provision.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-87086 - High (7.5)

Tanium addressed a denial of service vulnerability in Provision.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-87086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92377 - High (7.8)

Improper access control in the Patch
Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC res...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92377/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92372 - High (8.8)

An out-of-bounds write vulnerability in the
screen-image decoder of TeamViewer Full Client for Linux and macOS prior to
version 15.83 allows a remote attacker to execute arbitrary code by supplying
crafted screen-image data during a remote-control...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92372/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

🟠 CVE-2026-116676 - High (8.8)

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled workspace value from atlantis.yaml into Terraform command argume...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116676/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116676 - High (8.8)

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled workspace value from atlantis.yaml into Terraform command argume...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116676/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

#Veeam #VeeamONE #BackupSecurity #CVE2026108142 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/veeam-vulnerabilities-backup-replication-veeam-one/?utm_source=mastodon&utm_medium=jetpack_social

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

#Veeam #VeeamONE #BackupSecurity #CVE2026108142 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/veeam-vulnerabilities-backup-replication-veeam-one/?utm_source=mastodon&utm_medium=jetpack_social

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

#Veeam #VeeamONE #BackupSecurity #CVE2026108142 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/veeam-vulnerabilities-backup-replication-veeam-one/?utm_source=mastodon&utm_medium=jetpack_social

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

Patch 5 Veeam vulnerabilities in Veeam Backup & Replication and Veeam ONE, including critical flaw CVE-2026-108142 and MFA bypass CVE-2026-107671.

#Veeam #VeeamONE #BackupSecurity #CVE2026108142 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/veeam-vulnerabilities-backup-replication-veeam-one/?utm_source=mastodon&utm_medium=jetpack_social

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

🚨🇺🇸 Veeam patches critical Backup & Replication authorization bypass

Veeam has released security updates addressing five vulnerabilities across Backup & Replication, Veeam Agent for Linux and Veeam ONE.
⠀
The most serious, CVE-2026-108142, carries a CVSS score of 9.1 and allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
⠀
Other patched vulnerabilities include:

• CVE-2026-105477: Local privilege escalation in managed Veeam Agent for Linux installations, CVSS 7.3
• CVE-2026-108140: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-108141: Arbitrary file writes through path traversal, CVSS 5.9
• CVE-2026-107671: Veeam ONE administrator can bypass MFA by disabling it before completing verification, CVSS 8.5
⠀
Backup & Replication versions 13.0 and 13.1 are affected by the authorization and path-traversal flaws.

Older 12.x releases are not affected by those specific issues.
⠀
Administrators should update to:

• Backup & Replication 13.1.2 build 13.1.2.57
• Backup & Replication 13.0.3 build 13.0.3.63
• Veeam Agent for Linux 13.1.2 build 13.1.2.11
• Veeam ONE 13.1 P1 build 13.1.0.7940

Sources: https://www.veeam.com/kb4948, https://www.veeam.com/kb4951

🟠 CVE-2026-92376 - High (7.8)

Improper authentication in the
inter-process communication (IPC) mechanism of TeamViewer Remote Management
Monitoring for Windows prior to version 26.10.1 allows a local authenticated
attacker with low privileges to impersonate the IPC broker and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92376/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WatchGuard fixes 18 Fireware OS vulnerabilities on the Firebox firewall, including critical CVE-2026-103594 (CVSS 9.5). Upgrade to 2026.4 now.

#WatchGuard #Fireware #Firebox #Firewall #CVE2026103594 #CVE202693865 #PatchNow #NetworkSecurity

https://securityonline.info/watchguard-fireware-os-vulnerabilities-2/?utm_source=mastodon&utm_medium=jetpack_social

WatchGuard fixes 18 Fireware OS vulnerabilities on the Firebox firewall, including critical CVE-2026-103594 (CVSS 9.5). Upgrade to 2026.4 now.

#WatchGuard #Fireware #Firebox #Firewall #CVE2026103594 #CVE202693865 #PatchNow #NetworkSecurity

https://securityonline.info/watchguard-fireware-os-vulnerabilities-2/?utm_source=mastodon&utm_medium=jetpack_social

Reset the "days since hardcoded JWT SECRET" timer.

https://nvd.nist.gov/vuln/detail/cve-2026-117564

nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonating any user ID or claiming the admin role for full administrative access.

CVE-2026-115216 – Eclipse ioFog Operator (3.8.0 – <3.9.2) has CRITICAL improper TLS cert validation (CWE-295), allowing attackers to intercept OAuth secrets & admin passwords. Upgrade to 3.9.2 to mitigate. https://radar.offseq.com/threat/cve-2026-115216-cwe-295-improper-certificate-validation-in-eclipse-foundation-eclipse-iofog-e8964354e78c9553 #OffSeq #CVE2026115216 #Eclipse #TLS #infosec

🟠 CVE-2026-116816 - High (7.8)

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose negative pa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116816/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-65220 - High (8.8)

A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-117602 - High (8.4)

Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature. A rogue...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117602/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Better than what?

https://nvd.nist.gov/vuln/detail/cve-2026-114607

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in social or Generic OAuth provider, and use account.storeStateStrategy set to database can accept an OAuth sign-in state value as a Magic Link token. These settings can cause Magic Link verification records and OAuth state to resolve to the same stored identifier, allowing an unauthenticated attacker to start OAuth sign-in for a known email address and redeem the returned state through Magic Link without controlling the mailbox or completing the provider callback. The attacker can obtain a normal session for an existing user, or create an account incorrectly marked as email verified when sign-up is enabled. This issue is fixed in version 1.7.7.

An #Authlib signature bypass #vulnerability (CVE-2026-96760, CVE-2026-28802, CVE-2026-27962) lets attackers forge #JWS payloads.

Update libraries ASAP!.

#OSS #Authlib #CVE #Cybersecurity #security

🟠 CVE-2026-117604 - High (7.5)

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profiler data via a loopback REMOTE_ADDR fallback. Behind a same-host reverse...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117604/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-116839: HIGH severity CSRF vuln in Ubiquiti airMAX M (<6.3.26). Exploitation allows unauthorized changes & DoS if an authenticated user visits a malicious page. Upgrade to 6.3.26+ ASAP. https://radar.offseq.com/threat/cve-2026-116839-cwe-352-cross-site-request-forgery-csrf-in-ubiquiti-inc-airmax-m-384ff83bdd5089b1 #OffSeq #CSRF #Ubiquiti

NVIDIA security update fixes NeMo Agent Toolkit vulnerability CVE-2026-65145 (CVSS 10.0) plus TensorRT-LLM and PhysX flaws. Update to 1.9.0 now.

#NVIDIA #NeMoAgentToolkit #TensorRTLLM #PhysX #CVE202665145 #AISecurity #SecurityUpdate #Vulnerability

https://securityonline.info/nemo-agent-toolkit-vulnerability-cve-2026-65145/?utm_source=mastodon&utm_medium=jetpack_social

NVIDIA security update fixes NeMo Agent Toolkit vulnerability CVE-2026-65145 (CVSS 10.0) plus TensorRT-LLM and PhysX flaws. Update to 1.9.0 now.

#NVIDIA #NeMoAgentToolkit #TensorRTLLM #PhysX #CVE202665145 #AISecurity #SecurityUpdate #Vulnerability

https://securityonline.info/nemo-agent-toolkit-vulnerability-cve-2026-65145/?utm_source=mastodon&utm_medium=jetpack_social

If you're using Python & authlib for a custom autosign solution, you should upgrade ASAP because you may be vulnerable to an authentication bypass in authlib. https://www.cve.org/CVERecord?id=CVE-2026-96760

An #Authlib signature bypass #vulnerability (CVE-2026-96760, CVE-2026-28802, CVE-2026-27962) lets attackers forge #JWS payloads.

Update libraries ASAP!.

#OSS #Authlib #CVE #Cybersecurity #security

If you're using Python & authlib for a custom autosign solution, you should upgrade ASAP because you may be vulnerable to an authentication bypass in authlib. https://www.cve.org/CVERecord?id=CVE-2026-96760

You. Had. One. Job.

https://nvd.nist.gov/vuln/detail/cve-2026-96760

Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and without requiring a cryptographic key.

CVE-2026-82117: CRITICAL (CVSS 9.8) in Hitachi HiRDB Server v10 (<10-12-01) – authentication bypass via spoofing. Full system compromise possible. Update to 10-12-01 ASAP. https://radar.offseq.com/threat/cve-2026-82117-cwe-290-authentication-bypass-by-spoofing-in-hitachi-hirdb-server-version-10-8e50efd369906f3e #OffSeq #CVE202682117 #Infosec #Patch

Apple has backported security fixes to older devices, releasing iOS and iPadOS 18.7.11.

The updates address a high-severity CoreGraphics out-of-bounds write flaw tracked as CVE-2026-86950, along with an Audio logic issue and a CoreMedia access vulnerability that could allow unauthorized camera access.

Additionally, Apple shipped a broad wave of updates across its ecosystem, patching hundreds of security defects.

https://en.hacks.gr/i-apple-kykloforei-enimeroseis-asfaleias-gia-palaiotera-iphone-kai-ipad/

#Apple #iOS #iPadOS #CVE

Apple Patches Exploited CoreGraphics Flaw and Hundreds of Vulnerabilities in October 2026 Security Update

On October 26, 2026, Apple released security updates across iOS, iPadOS, macOS, tvOS, watchOS, visionOS and Safari, patching several hundred vulnerabilities concentrated in WebKit, the kernel, ImageIO and CoreStorage. The fixes include WebKit code-execution and sandbox-escape flaws, a Remote Management remote code execution bug, and many privilege-escalation issues, plus the most urgent one: CVE-2026-86950 in CoreGraphics, which was exploited in targeted attacks and makes updating to iOS 18.7.11 critical for owners of older iPhones.

**If you use any Apple device (iPhone, iPad, Mac, Apple Watch, Apple TV or Vision Pro), update it now. The current versions are iOS/iPadOS 27.2, 26.7.2 or 18.7.11, macOS Golden Gate 27.2, Tahoe 26.7.2 or Sequoia 15.8.2, tvOS/watchOS/visionOS 27.2, and Safari 27.2. If you still use an iPhone XS, XS Max or XR, install iOS 18.7.11 first: it fixes a flaw that has been exploited in targeted attacks. Until you've updated, be extra careful about unfamiliar websites, files, images and fonts from strangers, and connecting to unknown file-sharing or Screen Sharing servers.**
#cybersecurity #infosec #advisory #databreach
https://beyondmachines.net/event_details/apple-addressed-329-unique-b-security-b-vulnerabilities-across-today-s-updates-9to5mac-y-u-w-g-y/gD2P6Ple2L

Apple's iOS 18.7.11 fixes CVE-2026-86950, a CoreGraphics zero-day exploited in the wild, on older iPhones and iPads. Update now.

#Apple #iOS #ZeroDay #CVE202686950 #CoreGraphics #ExploitedInTheWild #iPhone #CyberSecurity

https://securityonline.info/coregraphics-zero-day-cve-2026-86950-ios-18/?utm_source=mastodon&utm_medium=jetpack_social

📣 EMERGENCY UPDATE 📣

Apple pushed additional updates for a zero-day that may have been actively exploited.

🐛 CVE-2026-86950 (CoreGraphics) additional patches:
- iOS and iPadOS 18.7.11

#apple #cybersecurity #infosec #security #ios

CVE-2026-92885: Qode Membership plugin (≤2.0.6.2) suffers a CRITICAL auth bypass (CVSS 9.8). Typo in Facebook OAuth check lets attackers hijack any WordPress account — including admins. Remove or restrict plugin use now. https://radar.offseq.com/threat/cve-2026-92885-cwe-287-improper-authentication-in-qode-themes-qode-membership-038e4dcfed22c95b #OffSeq #WordPress #Vuln

New advisories. You'll need to log into Broadcom for details.

CRITICAL: Broadcom Output Management Web Viewer 12.1 Vulnerabilities in Apache Tomcat https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Fortinet:

Medium-severity: CVE-2026-106174: Improper Locking Allows Unauthenticated DoS of FortiOS HTTPS Management Interface https://app.opencve.io/cve/CVE-2026-106174 #Fortinet

Adobe:

Note: Adobe doesn't allow you to bail out of data-theft if you're not a subscriber.

Security updates available for Substance 3D Painter | APSB26-178 https://www.adobe.com/trust/security/products/substance3d-painter/apsb26-178.html

Security update available for Adobe Campaign Classic | APSB26-162 https://www.adobe.com/trust/security/products/campaign/apsb26-162.html

Creative Cloud https://www.adobe.com/trust/security/products/creative-cloud/apsb26-135.html

Connect: https://www.adobe.com/trust/security/products/connect/apsb26-182.html #Adobe

Dell:

CRITICAL, affecting multiple CVEs: Security Update for Dell Integrated Data Protection Appliance Software 2.7.9 Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000524348/dsa-2026-474-security-update-for-dell-integrated-data-protection-appliance-software-2-7-9-vulnerabilities

Yesterday:

High-severity: Security Update for Multiple Dell Client Platform BIOS Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000502180/dsa-2026-373 #Dell #VMWare #vulnerability #infosec

🟠 CVE-2026-106174 - High (7.5)

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-106174/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-18450 - Critical (9.8)

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18450/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18449 - High (7.5)

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18449/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75891 - High (8.8)

The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and including, 6.2.5 via deserialization of untrusted input through the 'get-single-symbol' branch of the kirki_post_apis() AJAX d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75891/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

HIGH severity in Kirki WordPress plugin (≤6.2.5): CVE-2026-75891 enables privilege escalation via deserialization of untrusted data. Authenticated users can overwrite admin passwords. Restrict plugin use or disable until patched. https://radar.offseq.com/threat/cve-2026-75891-cwe-502-deserialization-of-untrusted-data-in-themeum-kirki-freeform-page-builder-e6faae58108b3cd9 #OffSeq #WordPress #Vuln

CVE-2026-111820: HIGH severity stored XSS in Analytics Insights – Google Analytics Dashboard for WordPress (≤6.3.12). Unauthenticated attackers can inject scripts via Page Title. Restrict input, await vendor patch. Details: https://radar.offseq.com/threat/cve-2026-111820-cwe-79-cross-site-scripting-in-deconf-analytics-insights-google-analytics-dashboard-9c2c2541b7ce4cd6 #OffSeq #XSS #WordPress

🟠 CVE-2026-116843 - High (8.8)

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116843/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116837 - High (8.8)

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116837/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116836 - High (8.8)

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116836/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update your #iPhone, #iPad, #Apple Safari, and everything else #Webkit *right now*

https://support.apple.com/en-us/149227
https://www.cve.org/CVERecord?id=CVE-2026-112623

OpenPanel <3.0.0 HIGH severity info disclosure (CVE-2026-116819): Read-level users can access integration secrets (Slack tokens, webhooks) due to missing redaction. Upgrade to 3.0.0+ and restrict access. https://radar.offseq.com/threat/openpanel-before-300-contains-an-information-disclosure-vulnerability-that-allows-read-level-project-1754d084c1108896 #OffSeq #vuln #OpenPanel #CVESecurity

Patch CVE-2026-110720 now. This 9.9 CVSS consul-k8s vulnerability enables a cross-namespace authorization bypass in ACL binding rules.

#HashiCorp #Consul #Kubernetes #CVE2026110720 #CloudSecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/hashicorp-consul-k8s-vulnerability-cve-2026-110720/?utm_source=mastodon&utm_medium=jetpack_social

This week has been extremely busy. I have seen 4x RCE vulnerabilities, compromised eMudhra CA certificates that spill into their own CVE for Java with a CVSS of 9.1, and 3x DoS type of vulnerabilities, all in very popular and widely used software that can either crash under specific conditions or give remote code execution capabilities to threat actors. The mentioned vulnerabilities are:

PHP RCE: CVE-2026-109618/109619/115560
Gitlab RCE: CVE-2026-110264
Node2Shell \ HTTP2Shell RCE: CVE-2026-111497
ISC Bind 9 RCE: CVE-2026-94300

ISC Bind 9 DoS: CVE-2026-19630/96888/97313
Windows SMB Server DoS: CVE-2026-91403
Unbound DNS-over-QUIC Bug: CVE-2026-97206
Oracle Java (JSSE) containing compromised eMudhra certificates: CVE-2026-91403

Patching all these vulnerabilities on endpoints and servers will take a humungous amount of time and effort, as it can't be done overnight and is heavily dependent on the size of your environment. It's good that we are getting security patches for software that had critical vulnerabilities present for years without anyone discovering them, like in the Gitlab case where the RCE vulnerability went undiscovered for 12 years across all their releases.

What will happen over the coming years is that we will get a massive influx of vulnerabilities just like the one seen this week, but over time it will stabilise more as software becomes more secure, and we will start seeing fewer vulnerabilities overall.

#Gitlab #eMudhra #Node2Shell #CyberSecurity #Vulnerabilities

🚨 Security update: Routinator 0.15.3 is now available.

This release fixes several security issues. These security fixes primarily fix some cases where someone could make Routinator exit or become unavailable. They have been assigned CVE-2026-72752 till -72758.

https://community.nlnetlabs.nl/t/routinator-0-15-3-until-it-ends-there-is-no-end-released/3496

JFC

https://nvd.nist.gov/vuln/detail/cve-2026-112346

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to execute arbitrary shell commands as root in the sandbox, access the mounted workspace, and read plaintext secrets from the secrets store.

Go ../ more MCP bullshit.

https://nvd.nist.gov/vuln/detail/cve-2026-93328

sev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/U:Amber

Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox) versions 1.2.0 through 1.4.0 allows an unauthenticated remote attacker to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted tool invocation parameters.

🔴 CVE-2026-116207 - Critical (9.1)

YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest(). Field names from the query and searchfields parameters of the public Bazar entries se...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116207/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116171 - High (7.5)

SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows extended-length prefix (\\?\) survives filepath.Clean and matches no forbidden prefix. Authenticated API callers can prepend the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116171/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Upgrade to #Mautic 7.2.2 to fix critical Mautic vulnerabilities, including 9.9 #CVSS #RCE flaw CVE-2026-115188, CVE-2026-115189, and SQL injection bugs.

#PHP #SQLInjection #OpenSource #Cybersecurity #Vulnerability #InfoSec #CVE #OSS

Upgrade to #Mautic 7.2.2 to fix critical Mautic vulnerabilities, including 9.9 #CVSS #RCE flaw CVE-2026-115188, CVE-2026-115189, and SQL injection bugs.

#PHP #SQLInjection #OpenSource #Cybersecurity #Vulnerability #InfoSec #CVE #OSS

Upgrade to Mautic 7.2.2 to fix critical Mautic vulnerabilities, including 9.9 CVSS RCE flaw CVE-2026-115188, CVE-2026-115189, and SQL injection bugs.

#Mautic #RCE #SQLInjection #PHPObjectInjection #OpenSource #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/mautic-vulnerabilities-rce-sqli-patched-7-2-2/?utm_source=mastodon&utm_medium=jetpack_social

Apache Camel fixes eight Apache Camel vulnerabilities, including XXE flaw CVE-2026-90885 and S3 injection CVE-2026-95664. Upgrade to 4.23.0.

#ApacheCamel #XXE #CVE202690885 #CVE202695664 #CVE202694386 #Java #OpenSource #CyberSecurity

https://securityonline.info/apache-camel-vulnerabilities-xxe-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

New advisory from Fortinet for a critical vulnerability.

CRITICAL: CVE-2026-107656: an authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox https://app.opencve.io/cve/CVE-2026-107656

Yesterday:

CRITICAL: CVE-2026-21643: FortiClientEMS 7.4.4 SQL Injection Enabling Unauthenticated Remote Code Execution https://app.opencve.io/cve/CVE-2026-21643 #Fortinet
-----

Dell:

High-severity, affecting multiple CVEs: Security Update for Multiple Dell Client Platform BIOS Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000502180/dsa-2026-373

Security Update for Dell Client Platform BIOS for Multiple AMI BIOS Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000516289/dsa-2026-230-security-update-for-dell-client-platform-bios-for-multiple-ami-bios-vulnerabilities

Security Update for Dell PowerScale OneFS Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000505684/dsa-2026-360-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities #Dell #infosec #vulnerability

CVE-2026-107900: FUJI ELECTRIC/Hakko V-SFT (≤6.2.11.0) has a HIGH severity out-of-bounds read in VS6ComFile!CCheck::ItemCheck. Crafted V7 files may cause info disclosure or code execution. Avoid untrusted files. https://radar.offseq.com/threat/cve-2026-107900-out-of-bounds-read-in-fuji-electric-co-ltd-hakko-electronics-co-ltd-v-sft-fc586c6c5117dc99 #OffSeq #ICS #Vulnerability

🟠 CVE-2026-116189 - High (7.5)

rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from unsigned bytes preceding the PGP-clearsigned SHA256SUMS block. Attackers controlling the release distribution path can prepen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116189/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116177 - High (7.5)

vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to exhaust memory because the Nemotron-VL processors globally set Image.MAX_IMAGE_PIXELS to None. Attackers can submit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116177/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Apache Camel fixes eight Apache Camel vulnerabilities, including XXE flaw CVE-2026-90885 and S3 injection CVE-2026-95664. Upgrade to 4.23.0.

#ApacheCamel #XXE #CVE202690885 #CVE202695664 #CVE202694386 #Java #OpenSource #CyberSecurity

https://securityonline.info/apache-camel-vulnerabilities-xxe-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

CRITICAL: CVE-2026-116234 in Oray Pugongying X5 Pro 7.6.1 allows remote CRLF injection via 'secproto' in IPsec Policy Handler. Public exploit exists, no patch from vendor. Restrict access & monitor closely. https://radar.offseq.com/threat/cve-2026-116234-crlf-injection-in-oray-pugongying-x5-pro-84e430f291e3bea4 #OffSeq #Cybersecurity #CVE #NetworkSecurity

CVE-2026-116237: CRITICAL CRLF injection in Oray Pugongying X5 Pro 7.6.1 (Dnsmasq). Remote attackers can exploit public PoC; no vendor patch. Apply network filtering & monitor for updates. https://radar.offseq.com/threat/cve-2026-116237-crlf-injection-in-oray-pugongying-x5-pro-52f065cc5bfd9b94 #OffSeq #CVE2026116237 #Vuln #Infosec

Yoosee GM8135S Camera v21.00.01.36 faces CRITICAL risk (CVE-2026-116116): improper cryptographic signature verification in Secure Boot. Local, privileged access required. No patch; public exploit exists. Mitigate access. https://radar.offseq.com/threat/cve-2026-116116-improper-verification-of-cryptographic-signature-in-yoosee-gm8135s-camera-2ebc37c26530cbf4 #OffSeq #CVE2026116116 #IoTSec

Incorrect default permissions (CVE-2026-113345, HIGH, CVSS 7.8) in Japan MLIT's Inspection Support System let local users alter app files, risking code execution. No patch yet — restrict access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-113345-incorrect-default-permissions-in-ministry-of-land-infrastructure-transport-and-tourism-b1dd0c4094dd454d #OffSeq #vuln #infosec #japan

🟠 CVE-2026-116199 - High (8.1)

Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the user whose username matches the Google account email without enforcing the activated flag. Deactivated users with email-shaped...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116199/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL: grokability Snipe-IT (<8.6.3) suffers improper auth in GoogleAuthController (CVE-2026-116199). Deactivated users can regain admin via Google SSO. Patch to 8.6.3+ now. https://radar.offseq.com/threat/cve-2026-116199-improper-authorization-in-grokability-snipe-it-c10467b7c5886087 #OffSeq #CVE2026116199 #SnipeIT #Vuln

🟠 CVE-2026-116211 - High (8.2)

YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche field of a Bazar entry-creation request is concatenated unescaped into an INSERT statement. Unauthenticated attackers on default in...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116211/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116180 - High (7.7)

vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates an uninitialized int32 tensor, and the V1 model runner leaves prompt positions reported as computed by a KV connector unwritten...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116180/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116183 - High (7.5)

phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers to modify or delete any visitor question by supplying an arbitrary openQuestionID to POST /api/faq/create. Attackers solving t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116183/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116191 - High (7.5)

Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116191/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116176 - High (8.2)

vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outbound connections by embedding a decode address in the X-Request-Id header. Attackers can make a P2pNcclConnector prefill worker...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116176/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116201 - High (8.8)

Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116201/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116204 - High (8.1)

YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/despam.php) that lets unauthenticated attackers delete or restore pages through an administrator's session. Attackers can plant a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116204/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116179 - High (7.5)

vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs. Attackers can set num_frames to -1 with a large inline v...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116179/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116149 - High (8.1)

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116149/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116208 - High (8.1)

YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts that lets malicious ActivityPub servers manipulate other actors' mirrored entries. Attackers can serve a poisoned outbox with cros...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116208/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

This week has been extremely busy. I have seen 4x RCE vulnerabilities, compromised eMudhra CA certificates that spill into their own CVE for Java with a CVSS of 9.1, and 3x DoS type of vulnerabilities, all in very popular and widely used software that can either crash under specific conditions or give remote code execution capabilities to threat actors. The mentioned vulnerabilities are:

PHP RCE: CVE-2026-109618/109619/115560
Gitlab RCE: CVE-2026-110264
Node2Shell \ HTTP2Shell RCE: CVE-2026-111497
ISC Bind 9 RCE: CVE-2026-94300

ISC Bind 9 DoS: CVE-2026-19630/96888/97313
Windows SMB Server DoS: CVE-2026-91403
Unbound DNS-over-QUIC Bug: CVE-2026-97206
Oracle Java (JSSE) containing compromised eMudhra certificates: CVE-2026-91403

Patching all these vulnerabilities on endpoints and servers will take a humungous amount of time and effort, as it can't be done overnight and is heavily dependent on the size of your environment. It's good that we are getting security patches for software that had critical vulnerabilities present for years without anyone discovering them, like in the Gitlab case where the RCE vulnerability went undiscovered for 12 years across all their releases.

What will happen over the coming years is that we will get a massive influx of vulnerabilities just like the one seen this week, but over time it will stabilise more as software becomes more secure, and we will start seeing fewer vulnerabilities overall.

#Gitlab #eMudhra #Node2Shell #CyberSecurity #Vulnerabilities

Last week it was #PHP, this week we start with some nice #Java patch day it seems...

https://nvd.nist.gov/vuln/detail/cve-2026-114820

🟠 CVE-2026-99016 - High (7.8)

In the Linux kernel, the following vulnerability has been resolved:

riscv: futex: untag the user pointer before the atomic access

access_ok() checks untagged_addr(uaddr), but arch_futex_atomic_op_inuser()
and futex_atomic_cmpxchg_inatomic() hand...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-99016/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-99014 - High (7.8)

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_sync: Fix command skb lifetime during scan setup

During PA sync scan setup, hci_le_set_ext_scan_param_sync() gets the
address used for the PA_LINK lookup from hci...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-99014/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-99032 - High (7.8)

In the Linux kernel, the following vulnerability has been resolved:

net/smc: protect clcsock lifetime in smc_getname

smc_getname() dereferences smc->clcsock without holding
clcsock_release_lock. Link-group termination can release the CLC socket
...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-99032/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-99018 - High (7.8)

In the Linux kernel, the following vulnerability has been resolved:

riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp

Under CONFIG_SHADOW_CALL_STACK, handle_exception() reloads the kernel
shadow call stack pointer (gp) only when...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-99018/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-99013 - High (7.8)

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Reject concurrent BIS listener setup

iso_sock_listen() drops the socket lock before calling iso_listen_bis()
to preserve the hdev->lock ordering. Two concurrent ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-99013/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Discovering and exploiting vulnerabilities in real-world software with Claude

미공개 Claude 연구 모델이 초기 프롬프트를 받은 뒤 Chrome, Safari, Android, Windows, Linux에서 취약점을 발견하고 공격 체인을 작성했다고 연구진이 밝혔다. Chrome에서는 V8 취약점과 샌드박스 탈출을 연결해 원클릭 원격 코드 실행을 구현했으며, 관련 취약점 62건은 Chrome 156까지 패치됐다. Linux에서는 멀티패스 TCP 리스너를 대상으로 사용자 개입 없이 루트 권한 명령을 실행하는 취약점(CVE-2026-98432)을 발견했으며, 수정 사항은 유지보수 중인 안...

https://www.anthropic.com/research/discovering-vulnerabilities-with-claude

Wasmtime Patches Critical Sandbox Escape Flaws in Cranelift Compiler

Wasmtime fixed two critical vulnerabilities (CVE-2026-115889 and CVE-2026-115893) that allow malicious WebAssembly modules to escape their sandboxes and execute arbitrary code on host systems. The flaws affect the Cranelift compiler and require immediate updates to Wasmtime 50.0.0 or other patched versions.

**If you use Wasmtime (directly, inside your own apps, or through tools like Spin), update ASAP to version 36.0.19, 48.0.7, 49.0.4 or 50.0.0, rebuild any applications that include it, and update Spin to 4.2.4. If you're still on the 24.x line, there is no patch, so upgrade to a supported version. If possible don't run WebAssembly code from sources you don't fully trust.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/wasmtime-patches-critical-sandbox-escape-flaws-in-cranelift-compiler-8-z-h-v-8/gD2P6Ple2L

🚨 Two critical Wasmtime flaws could allow malicious WebAssembly modules to escape the runtime sandbox

Both vulnerabilities affect Cranelift, Wasmtime’s default compiler, and carry CVSS scores of 9.9.
⠀
CVE-2026-115889 affects all processor architectures and can trigger silent compiler errors that generate incorrect machine code.

CVE-2026-115893 affects ARM64 systems and can cause large br_table instructions to jump to the wrong code location.
⠀
Exploitation requires a vulnerable Wasmtime instance to compile an attacker-controlled WebAssembly module. Services that accept and execute untrusted customer modules face the greatest risk.

Fixed versions:

• Wasmtime 36.0.19
• Wasmtime 48.0.7
• Wasmtime 49.0.4
• Wasmtime 50.0.0 or later

No exploitation in the wild has been reported.

Sources: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-897f-g5gm-fmxm

https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-mghf-wjfp-p5xm

Wasmtime Patches Critical Sandbox Escape Flaws in Cranelift Compiler

Wasmtime fixed two critical vulnerabilities (CVE-2026-115889 and CVE-2026-115893) that allow malicious WebAssembly modules to escape their sandboxes and execute arbitrary code on host systems. The flaws affect the Cranelift compiler and require immediate updates to Wasmtime 50.0.0 or other patched versions.

**If you use Wasmtime (directly, inside your own apps, or through tools like Spin), update ASAP to version 36.0.19, 48.0.7, 49.0.4 or 50.0.0, rebuild any applications that include it, and update Spin to 4.2.4. If you're still on the 24.x line, there is no patch, so upgrade to a supported version. If possible don't run WebAssembly code from sources you don't fully trust.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/wasmtime-patches-critical-sandbox-escape-flaws-in-cranelift-compiler-8-z-h-v-8/gD2P6Ple2L

🚨 Two critical Wasmtime flaws could allow malicious WebAssembly modules to escape the runtime sandbox

Both vulnerabilities affect Cranelift, Wasmtime’s default compiler, and carry CVSS scores of 9.9.
⠀
CVE-2026-115889 affects all processor architectures and can trigger silent compiler errors that generate incorrect machine code.

CVE-2026-115893 affects ARM64 systems and can cause large br_table instructions to jump to the wrong code location.
⠀
Exploitation requires a vulnerable Wasmtime instance to compile an attacker-controlled WebAssembly module. Services that accept and execute untrusted customer modules face the greatest risk.

Fixed versions:

• Wasmtime 36.0.19
• Wasmtime 48.0.7
• Wasmtime 49.0.4
• Wasmtime 50.0.0 or later

No exploitation in the wild has been reported.

Sources: https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-897f-g5gm-fmxm

https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-mghf-wjfp-p5xm

Okta Patches Command Injection and Authentication Bypass in Access Gateway

Okta released security updates for Access Gateway to fix a command injection flaw (CVE-2026-115547) and an authentication bypass (CVE-2026-115546) that allow attackers to take full control of the appliance. The updates also address two remote code execution vulnerabilities in the PHP runtime used by the gateway.

**If you run Okta Access Gateway, upgrade it to version 2026.10.2 or later to fix the admin takeover flaws, and install version 2026.44.0 to fix the PHP flaws. Make sure the Admin Console can only be reached from trusted internal IP addresses, and check for any unexpected admin logins or configuration changes.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/okta-patches-command-injection-and-authentication-bypass-in-access-gateway-r-q-6-8-m/gD2P6Ple2L

Rapid7 disclosed 17 Zimbra Collaboration Suite flaws, including CVE-2026-10632 and CVE-2026-93640, allowing XSS and root privilege escalation.

#Zimbra #Rapid7 #EmailSecurity #PrivilegeEscalation #XSS #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/zimbra-collaboration-suite-vulnerabilities-rapid7/?utm_source=mastodon&utm_medium=jetpack_social

Rapid7 disclosed 17 Zimbra Collaboration Suite flaws, including CVE-2026-10632 and CVE-2026-93640, allowing XSS and root privilege escalation.

#Zimbra #Rapid7 #EmailSecurity #PrivilegeEscalation #XSS #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/zimbra-collaboration-suite-vulnerabilities-rapid7/?utm_source=mastodon&utm_medium=jetpack_social

Okta Patches Command Injection and Authentication Bypass in Access Gateway

Okta released security updates for Access Gateway to fix a command injection flaw (CVE-2026-115547) and an authentication bypass (CVE-2026-115546) that allow attackers to take full control of the appliance. The updates also address two remote code execution vulnerabilities in the PHP runtime used by the gateway.

**If you run Okta Access Gateway, upgrade it to version 2026.10.2 or later to fix the admin takeover flaws, and install version 2026.44.0 to fix the PHP flaws. Make sure the Admin Console can only be reached from trusted internal IP addresses, and check for any unexpected admin logins or configuration changes.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/okta-patches-command-injection-and-authentication-bypass-in-access-gateway-r-q-6-8-m/gD2P6Ple2L

Code-execution flaw in UEFI firmware threatens most servers on planet Earth

서버 UEFI 펌웨어에 널리 사용되는 TianoCore EDK II에서 심각도 9.5점의 코드 실행 취약점 CVE-2026-97631이 공개됐다. PXE 네트워크 부팅 중 ICMP 오류 메시지를 처리할 때 발생하는 버퍼 오버플로로, 공격자는 조건이 맞으면 운영체제 로딩 전에 악성 코드를 실행할 수 있다. 공격에는 PXE 부팅 시점의 네트워크 접근이 필요하며, 코드 실행을 위해서는 대상 펌웨어 빌드 정보도 필요하다. 수정 코드가 이미 공개...

https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth/

CVE-2026-97631 has a severity rating of 9.5/10. The memory-corruption flaw is in the ICMP component of TianoCore EDK II’s PXE-Base Code driver. It affects servers, storage equipment and devices using EDK II with PXE enabled to boot from a local network.

The flaw can allow malicious code to run early in the boot process, before Secure Boot and TPM defenses load. Exploitation requires low-level local-network or insider access;…

https://en.hacks.gr/sovaro-provlima-asfaleias-se-logismiko-ekkinisis-epaggelmatikon-systimaton-pagkosmios/

#EDKII #PXE #UEFIFirmware #MemoryCorruption

Code-execution flaw in UEFI firmware threatens most servers on planet Earth

Defenders across the world face the burden of responding to yet another botched code-execution vulnerability, this time in boot-time firmware used by most of the world’s server vendors and data centers.

The vulnerability, with a severity rating of 9.5 out of 10, resides in the TianoCore EDK II, an open source codebase that hardware makers and cloud providers use to create the UEFI firmware that runs during the boot-up sequence. Last year, a representative of the UEFI Forum called EDK2 the "preeminent solution / implementation of the UEFI specifications." Virtually all UEFI suppliers (sometimes still called IBVs or independent BIOS vendors), including AMI, Insyde, and Phoenix, use the reference code extensively. Project Mu, Microsoft's hardened EDK2 fork, used the code containing the vulnerable component as well.

The vulnerability, tracked as CVE-2026-97631, is a memory-corruption flaw in an ICMP component that attackers can exploit to execute malicious code that runs before the operating system and firmware can implement defenses like Secure Boot, which establishes a chain of trust for all code, including the Trusted Platform Module (TPM), loaded during boot. While final payloads delivered by CVE-2026-97631 have no persistence—meaning they run only once—they can give attackers a wide opening to install other payloads that also run each time early in the boot process.

Read full article

Comments

Code-execution flaw in UEFI firmware affects most servers on planet Earth

CVE-2026-97631 doesn’t affect home and small office users, or any other users who boot their devices solely from…
#NewsBeep #News #US #USA #UnitedStates #UnitedStatesOfAmerica #Technology
https://www.newsbeep.com/us/896879/

Hackers exploit YOOtheme Pro vulnerability CVE-2026-102785 (CVSS 10) for remote code execution, dropping webshells. Update to 5.0.53 now.

#YOOtheme #YOOthemePro #CVE2026102785 #RCE #Webshell #Joomla #WordPress #Unit42 #ActiveExploitation

https://securityonline.info/yootheme-pro-vulnerability-cve-2026-102785-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Ruby security update 4.0.9, 3.4.12 and 3.3.13 fixes Onigmo regex bugs behind GitLab RCE flaws CVE-2026-110264 and CVE-2026-97229. Upgrade now.

#Ruby #Onigmo #GitLab #CVE2026110264 #CVE202697229 #CVE202689078 #RCE #CyberSecurity

https://securityonline.info/ruby-security-update-onigmo-gitlab-cves/?utm_source=mastodon&utm_medium=jetpack_social

This week has been extremely busy. I have seen 4x RCE vulnerabilities, compromised eMudhra CA certificates that spill into their own CVE for Java with a CVSS of 9.1, and 3x DoS type of vulnerabilities, all in very popular and widely used software that can either crash under specific conditions or give remote code execution capabilities to threat actors. The mentioned vulnerabilities are:

PHP RCE: CVE-2026-109618/109619/115560
Gitlab RCE: CVE-2026-110264
Node2Shell \ HTTP2Shell RCE: CVE-2026-111497
ISC Bind 9 RCE: CVE-2026-94300

ISC Bind 9 DoS: CVE-2026-19630/96888/97313
Windows SMB Server DoS: CVE-2026-91403
Unbound DNS-over-QUIC Bug: CVE-2026-97206
Oracle Java (JSSE) containing compromised eMudhra certificates: CVE-2026-91403

Patching all these vulnerabilities on endpoints and servers will take a humungous amount of time and effort, as it can't be done overnight and is heavily dependent on the size of your environment. It's good that we are getting security patches for software that had critical vulnerabilities present for years without anyone discovering them, like in the Gitlab case where the RCE vulnerability went undiscovered for 12 years across all their releases.

What will happen over the coming years is that we will get a massive influx of vulnerabilities just like the one seen this week, but over time it will stabilise more as software becomes more secure, and we will start seeing fewer vulnerabilities overall.

#Gitlab #eMudhra #Node2Shell #CyberSecurity #Vulnerabilities

Nyolc eMudhra köztes CA privát kulcsa kompromittálódott. Chrome és Firefox gyorsan blokkolta a tanúsítványokat; Go (CVE-2026-111943), Firefox (CVE-2026-113470), certifi, NSS, webpki-roots, Homebrew stb. javítások már kiadva. Ha saját trust store-od van vagy cert bundle-t használsz, ellenőrizd a frissítéseket. https://linuxmint.hu/hir/2026/10/nyolc-emudhra-ca-kulcs-kompromittalodott-veszhelyzeti-javitasok-indultak-a-bongeszokben #Security #TLS #OpenSource #Linux #CVE

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Cisco has new advisories relating to one critical and one high-severity vulnerability.

CRITICAL, first published on October 21: CVE-2026-76473,
CVE-2026-76474, and CVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-hardening-twgbH9e3

High Severity, first published on the 21st: CVE-2026-76490,
CVE-2026-76491, and CVE-2026-76492Cisco Expressway Series Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs

Yesterday:

CRITICAL: Vulnerabilities in PHP Affecting Cisco Products: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq @TalosSecurity #infosec #PHP #vulnerability #Cisco

Storybook dev server vulnerability CVE-2026-114125 (CVSS 9.4) enables code injection from malicious websites. Upgrade to 10.6.2, 9.1.21 or 8.6.19.

#Storybook #CVE2026114125 #CodeInjection #JavaScript #npm #DevSecOps #SupplyChain #CyberSecurity

https://securityonline.info/storybook-dev-server-vulnerability-cve-2026-114125/?utm_source=mastodon&utm_medium=jetpack_social

This week has been extremely busy. I have seen 4x RCE vulnerabilities, compromised eMudhra CA certificates that spill into their own CVE for Java with a CVSS of 9.1, and 3x DoS type of vulnerabilities, all in very popular and widely used software that can either crash under specific conditions or give remote code execution capabilities to threat actors. The mentioned vulnerabilities are:

PHP RCE: CVE-2026-109618/109619/115560
Gitlab RCE: CVE-2026-110264
Node2Shell \ HTTP2Shell RCE: CVE-2026-111497
ISC Bind 9 RCE: CVE-2026-94300

ISC Bind 9 DoS: CVE-2026-19630/96888/97313
Windows SMB Server DoS: CVE-2026-91403
Unbound DNS-over-QUIC Bug: CVE-2026-97206
Oracle Java (JSSE) containing compromised eMudhra certificates: CVE-2026-91403

Patching all these vulnerabilities on endpoints and servers will take a humungous amount of time and effort, as it can't be done overnight and is heavily dependent on the size of your environment. It's good that we are getting security patches for software that had critical vulnerabilities present for years without anyone discovering them, like in the Gitlab case where the RCE vulnerability went undiscovered for 12 years across all their releases.

What will happen over the coming years is that we will get a massive influx of vulnerabilities just like the one seen this week, but over time it will stabilise more as software becomes more secure, and we will start seeing fewer vulnerabilities overall.

#Gitlab #eMudhra #Node2Shell #CyberSecurity #Vulnerabilities

This week has been extremely busy. I have seen 4x RCE vulnerabilities, compromised eMudhra CA certificates that spill into their own CVE for Java with a CVSS of 9.1, and 3x DoS type of vulnerabilities, all in very popular and widely used software that can either crash under specific conditions or give remote code execution capabilities to threat actors. The mentioned vulnerabilities are:

PHP RCE: CVE-2026-109618/109619/115560
Gitlab RCE: CVE-2026-110264
Node2Shell \ HTTP2Shell RCE: CVE-2026-111497
ISC Bind 9 RCE: CVE-2026-94300

ISC Bind 9 DoS: CVE-2026-19630/96888/97313
Windows SMB Server DoS: CVE-2026-91403
Unbound DNS-over-QUIC Bug: CVE-2026-97206
Oracle Java (JSSE) containing compromised eMudhra certificates: CVE-2026-91403

Patching all these vulnerabilities on endpoints and servers will take a humungous amount of time and effort, as it can't be done overnight and is heavily dependent on the size of your environment. It's good that we are getting security patches for software that had critical vulnerabilities present for years without anyone discovering them, like in the Gitlab case where the RCE vulnerability went undiscovered for 12 years across all their releases.

What will happen over the coming years is that we will get a massive influx of vulnerabilities just like the one seen this week, but over time it will stabilise more as software becomes more secure, and we will start seeing fewer vulnerabilities overall.

#Gitlab #eMudhra #Node2Shell #CyberSecurity #Vulnerabilities

FortiSIEM vulnerability CVE-2026-106173 is exploited in the wild after Horizon3 released details and a PoC exploit. Upgrade to 7.5.1 now.

#FortiSIEM #Fortinet #CVE2026106173 #ExploitedInTheWild #PoC #RCE #Horizon3 #CyberSecurity

https://securityonline.info/fortisiem-cve-2026-106173-exploited-poc/?utm_source=mastodon&utm_medium=jetpack_social

📈 CVE Published in last 7 days (2026-10-19 - 2026-10-19)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 314
- High: 1367
- Medium: 1422
- Low: 307
- None: 503

Status:
- : 43
- Analyzed: 239
- Awaiting Analysis: 1494
- Deferred: 941
- Modified: 1
- Received: 780
- Rejected: 117
- Undergoing Analysis: 298

CISA KEVs:
- CISA-2026:1020 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1020)
- CISA-2026:1023 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)

Top CNAs:
- Oracle: 1078
- VulnCheck: 457
- Chrome: 353
- GitHub, Inc.: 290
- kernel.org: 220
- VulDB: 202
- Apache Software Foundation: 150
- Apple Inc.: 134
- WPScan: 128
- Patchstack: 91

Top Affected Products:
- UNKNOWN: 3233
- Google Chrome: 178
- Oracle Mysql Cluster: 62
- Oracle Mysql Server: 60
- Oracle Essbase: 36
- Oracle Java Se: 35
- Oracle Siebel Crm Deployment: 29
- Oracle Graalvm: 25
- Oracle Graalvm for Jdk: 22
- Oracle Outside In Technology: 16

Top EPSS Score:
- CVE-2026-109619 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- CVE-2026-109618 - 99.98 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- CVE-2026-111497 - 32.78 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- CVE-2026-112195 - 4.13 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112195)
- CVE-2026-113802 - 3.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113802)
- CVE-2026-103038 - 3.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-103038)
- CVE-2026-113506 - 2.08 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113506)
- CVE-2026-113391 - 2.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113391)
- CVE-2026-112301 - 2.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112301)
- CVE-2026-112370 - 2.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112370)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-10-19 - 2026-10-19)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 314
- High: 1367
- Medium: 1422
- Low: 307
- None: 503

Status:
- : 43
- Analyzed: 239
- Awaiting Analysis: 1494
- Deferred: 941
- Modified: 1
- Received: 780
- Rejected: 117
- Undergoing Analysis: 298

CISA KEVs:
- CISA-2026:1020 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1020)
- CISA-2026:1023 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)

Top CNAs:
- Oracle: 1078
- VulnCheck: 457
- Chrome: 353
- GitHub, Inc.: 290
- kernel.org: 220
- VulDB: 202
- Apache Software Foundation: 150
- Apple Inc.: 134
- WPScan: 128
- Patchstack: 91

Top Affected Products:
- UNKNOWN: 3233
- Google Chrome: 178
- Oracle Mysql Cluster: 62
- Oracle Mysql Server: 60
- Oracle Essbase: 36
- Oracle Java Se: 35
- Oracle Siebel Crm Deployment: 29
- Oracle Graalvm: 25
- Oracle Graalvm for Jdk: 22
- Oracle Outside In Technology: 16

Top EPSS Score:
- CVE-2026-109619 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- CVE-2026-109618 - 99.98 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- CVE-2026-111497 - 32.78 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- CVE-2026-112195 - 4.13 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112195)
- CVE-2026-113802 - 3.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113802)
- CVE-2026-103038 - 3.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-103038)
- CVE-2026-113506 - 2.08 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113506)
- CVE-2026-113391 - 2.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113391)
- CVE-2026-112301 - 2.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112301)
- CVE-2026-112370 - 2.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112370)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-10-19 - 2026-10-19)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 314
- High: 1367
- Medium: 1422
- Low: 307
- None: 503

Status:
- : 43
- Analyzed: 239
- Awaiting Analysis: 1494
- Deferred: 941
- Modified: 1
- Received: 780
- Rejected: 117
- Undergoing Analysis: 298

CISA KEVs:
- CISA-2026:1020 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1020)
- CISA-2026:1023 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)

Top CNAs:
- Oracle: 1078
- VulnCheck: 457
- Chrome: 353
- GitHub, Inc.: 290
- kernel.org: 220
- VulDB: 202
- Apache Software Foundation: 150
- Apple Inc.: 134
- WPScan: 128
- Patchstack: 91

Top Affected Products:
- UNKNOWN: 3233
- Google Chrome: 178
- Oracle Mysql Cluster: 62
- Oracle Mysql Server: 60
- Oracle Essbase: 36
- Oracle Java Se: 35
- Oracle Siebel Crm Deployment: 29
- Oracle Graalvm: 25
- Oracle Graalvm for Jdk: 22
- Oracle Outside In Technology: 16

Top EPSS Score:
- CVE-2026-109619 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- CVE-2026-109618 - 99.98 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- CVE-2026-111497 - 32.78 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- CVE-2026-112195 - 4.13 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112195)
- CVE-2026-113802 - 3.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113802)
- CVE-2026-103038 - 3.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-103038)
- CVE-2026-113506 - 2.08 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113506)
- CVE-2026-113391 - 2.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113391)
- CVE-2026-112301 - 2.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112301)
- CVE-2026-112370 - 2.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112370)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-10-19 - 2026-10-19)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 314
- High: 1367
- Medium: 1422
- Low: 307
- None: 503

Status:
- : 43
- Analyzed: 239
- Awaiting Analysis: 1494
- Deferred: 941
- Modified: 1
- Received: 780
- Rejected: 117
- Undergoing Analysis: 298

CISA KEVs:
- CISA-2026:1020 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1020)
- CISA-2026:1023 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)

Top CNAs:
- Oracle: 1078
- VulnCheck: 457
- Chrome: 353
- GitHub, Inc.: 290
- kernel.org: 220
- VulDB: 202
- Apache Software Foundation: 150
- Apple Inc.: 134
- WPScan: 128
- Patchstack: 91

Top Affected Products:
- UNKNOWN: 3233
- Google Chrome: 178
- Oracle Mysql Cluster: 62
- Oracle Mysql Server: 60
- Oracle Essbase: 36
- Oracle Java Se: 35
- Oracle Siebel Crm Deployment: 29
- Oracle Graalvm: 25
- Oracle Graalvm for Jdk: 22
- Oracle Outside In Technology: 16

Top EPSS Score:
- CVE-2026-109619 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- CVE-2026-109618 - 99.98 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- CVE-2026-111497 - 32.78 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- CVE-2026-112195 - 4.13 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112195)
- CVE-2026-113802 - 3.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113802)
- CVE-2026-103038 - 3.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-103038)
- CVE-2026-113506 - 2.08 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113506)
- CVE-2026-113391 - 2.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113391)
- CVE-2026-112301 - 2.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112301)
- CVE-2026-112370 - 2.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112370)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-10-19 - 2026-10-19)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 314
- High: 1367
- Medium: 1422
- Low: 307
- None: 503

Status:
- : 43
- Analyzed: 239
- Awaiting Analysis: 1494
- Deferred: 941
- Modified: 1
- Received: 780
- Rejected: 117
- Undergoing Analysis: 298

CISA KEVs:
- CISA-2026:1020 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1020)
- CISA-2026:1023 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)

Top CNAs:
- Oracle: 1078
- VulnCheck: 457
- Chrome: 353
- GitHub, Inc.: 290
- kernel.org: 220
- VulDB: 202
- Apache Software Foundation: 150
- Apple Inc.: 134
- WPScan: 128
- Patchstack: 91

Top Affected Products:
- UNKNOWN: 3233
- Google Chrome: 178
- Oracle Mysql Cluster: 62
- Oracle Mysql Server: 60
- Oracle Essbase: 36
- Oracle Java Se: 35
- Oracle Siebel Crm Deployment: 29
- Oracle Graalvm: 25
- Oracle Graalvm for Jdk: 22
- Oracle Outside In Technology: 16

Top EPSS Score:
- CVE-2026-109619 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- CVE-2026-109618 - 99.98 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- CVE-2026-111497 - 32.78 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- CVE-2026-112195 - 4.13 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112195)
- CVE-2026-113802 - 3.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113802)
- CVE-2026-103038 - 3.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-103038)
- CVE-2026-113506 - 2.08 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113506)
- CVE-2026-113391 - 2.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113391)
- CVE-2026-112301 - 2.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112301)
- CVE-2026-112370 - 2.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112370)

#ZEN #SecDB #InfoSec

CW: CVE-2026-113380 — Signalben használt RingRTC híváslezárás megkerülhető: az FSM eseménysorát eláraszthatja a támadó, így a bontás jelzése elsikkad; mikrofon/kamera aktív maradhat. PoC nyilvános, javítva RingRTC 2.27.0 (2026-09-04). Érdemes frissíteni. https://linuxmint.hu/hir/2026/10/a-signal-egy-hibaja-miatt-nem-lehetett-megszakitani-a-csalo-hivasokat #Signal #CVE #Security #WebRTC #OpenSource

Signal bug could keep your mic - and camera - on after hangup

theregister.com/security/2026/…

The vulnerability, CVE-2026-113380, was published by MITRE on Tuesday and given a CVSS score of 9.3, marking it as a critical issue in Signal’s open-source RingRTC library in every single version before 2.72.0. That update was pushed out last month, but the vulnerability wasn’t made public until now.

#Signal #security #vulnterability #software #privacy #TeamCommUNITY

📈 CVE Published in last 7 days (2026-10-19 - 2026-10-19)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 314
- High: 1367
- Medium: 1422
- Low: 307
- None: 503

Status:
- : 43
- Analyzed: 239
- Awaiting Analysis: 1494
- Deferred: 941
- Modified: 1
- Received: 780
- Rejected: 117
- Undergoing Analysis: 298

CISA KEVs:
- CISA-2026:1020 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1020)
- CISA-2026:1023 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)

Top CNAs:
- Oracle: 1078
- VulnCheck: 457
- Chrome: 353
- GitHub, Inc.: 290
- kernel.org: 220
- VulDB: 202
- Apache Software Foundation: 150
- Apple Inc.: 134
- WPScan: 128
- Patchstack: 91

Top Affected Products:
- UNKNOWN: 3233
- Google Chrome: 178
- Oracle Mysql Cluster: 62
- Oracle Mysql Server: 60
- Oracle Essbase: 36
- Oracle Java Se: 35
- Oracle Siebel Crm Deployment: 29
- Oracle Graalvm: 25
- Oracle Graalvm for Jdk: 22
- Oracle Outside In Technology: 16

Top EPSS Score:
- CVE-2026-109619 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- CVE-2026-109618 - 99.98 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- CVE-2026-111497 - 32.78 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- CVE-2026-112195 - 4.13 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112195)
- CVE-2026-113802 - 3.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113802)
- CVE-2026-103038 - 3.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-103038)
- CVE-2026-113506 - 2.08 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113506)
- CVE-2026-113391 - 2.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113391)
- CVE-2026-112301 - 2.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112301)
- CVE-2026-112370 - 2.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112370)

#ZEN #SecDB #InfoSec

🚨 Microsoft issues emergency .NET updates after earlier patches failed to fully fix two vulnerabilities

Microsoft says its October 13 updates did not completely address CVE-2026-102870 and CVE-2026-70197, prompting new out-of-band security releases for .NET 8, 9, 10 and 11.
⠀
CVE-2026-102870 is a high-severity remote code execution flaw in the Blazor WebAssembly debugger.

Attacker-controlled data from a debugged application could escape a generated C# string and execute code on a developer’s computer when they evaluate an expression. The vulnerability has a CVSS score of 8.8 and requires user interaction.
⠀
The emergency updates also address:

• CVE-2026-70197, a SocketAsyncEventArgs memory corruption flaw
• CVE-2026-111497, a Brotli decoder out-of-bounds write
• CVE-2026-114148, a Linux source-build tarball ownership issue
⠀
Microsoft warns that updating the shared .NET runtime alone is not enough to fix the Blazor vulnerability when affected NuGet packages are referenced directly.

Developers should update Microsoft.AspNetCore.Components.WebAssembly.Server and DevServer to patched releases, including version 10.0.14 for .NET 10 projects.

Source: https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates

🚨 Microsoft issues emergency .NET updates after earlier patches failed to fully fix two vulnerabilities

Microsoft says its October 13 updates did not completely address CVE-2026-102870 and CVE-2026-70197, prompting new out-of-band security releases for .NET 8, 9, 10 and 11.
⠀
CVE-2026-102870 is a high-severity remote code execution flaw in the Blazor WebAssembly debugger.

Attacker-controlled data from a debugged application could escape a generated C# string and execute code on a developer’s computer when they evaluate an expression. The vulnerability has a CVSS score of 8.8 and requires user interaction.
⠀
The emergency updates also address:

• CVE-2026-70197, a SocketAsyncEventArgs memory corruption flaw
• CVE-2026-111497, a Brotli decoder out-of-bounds write
• CVE-2026-114148, a Linux source-build tarball ownership issue
⠀
Microsoft warns that updating the shared .NET runtime alone is not enough to fix the Blazor vulnerability when affected NuGet packages are referenced directly.

Developers should update Microsoft.AspNetCore.Components.WebAssembly.Server and DevServer to patched releases, including version 10.0.14 for .NET 10 projects.

Source: https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates

📈 CVE Published in last 7 days (2026-10-19 - 2026-10-19)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 314
- High: 1367
- Medium: 1422
- Low: 307
- None: 503

Status:
- : 43
- Analyzed: 239
- Awaiting Analysis: 1494
- Deferred: 941
- Modified: 1
- Received: 780
- Rejected: 117
- Undergoing Analysis: 298

CISA KEVs:
- CISA-2026:1020 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1020)
- CISA-2026:1023 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)

Top CNAs:
- Oracle: 1078
- VulnCheck: 457
- Chrome: 353
- GitHub, Inc.: 290
- kernel.org: 220
- VulDB: 202
- Apache Software Foundation: 150
- Apple Inc.: 134
- WPScan: 128
- Patchstack: 91

Top Affected Products:
- UNKNOWN: 3233
- Google Chrome: 178
- Oracle Mysql Cluster: 62
- Oracle Mysql Server: 60
- Oracle Essbase: 36
- Oracle Java Se: 35
- Oracle Siebel Crm Deployment: 29
- Oracle Graalvm: 25
- Oracle Graalvm for Jdk: 22
- Oracle Outside In Technology: 16

Top EPSS Score:
- CVE-2026-109619 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- CVE-2026-109618 - 99.98 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- CVE-2026-111497 - 32.78 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- CVE-2026-112195 - 4.13 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112195)
- CVE-2026-113802 - 3.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113802)
- CVE-2026-103038 - 3.44 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-103038)
- CVE-2026-113506 - 2.08 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113506)
- CVE-2026-113391 - 2.06 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-113391)
- CVE-2026-112301 - 2.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112301)
- CVE-2026-112370 - 2.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-112370)

#ZEN #SecDB #InfoSec

A PoC and full details are public for CVE-2026-43501 (CVSS 9.8), a Linux kernel IPv6 vulnerability in RPL source routing. Update your kernel now.

#Linux #LinuxKernel #CVE202643501 #IPv6 #kernelCTF #ContainerEscape #PoC #CyberSecurity

https://securityonline.info/linux-kernel-ipv6-cve-2026-43501-exploit/?utm_source=mastodon&utm_medium=jetpack_social

Ruby security update 4.0.9, 3.4.12 and 3.3.13 fixes Onigmo regex bugs behind GitLab RCE flaws CVE-2026-110264 and CVE-2026-97229. Upgrade now.

#Ruby #Onigmo #GitLab #CVE2026110264 #CVE202697229 #CVE202689078 #RCE #CyberSecurity

https://securityonline.info/ruby-security-update-onigmo-gitlab-cves/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-93985 OpenPanel js-runtime sandbox escape: computed property access reaches the Function constructor, letting project writers run arbitrary code in the worker. CVSS 9.9, unpatched. Restrict write access and patch now. https://www.valtersit.com/cve/CVE-2026-93985/

CVE-2026-94054: Exim before 4.100.1 has an out-of-bounds write via attacker-controlled Proxy-Protocol, CVSS 7. No patch yet, so restrict proxy exposure now. #CVE #infosec #Exim https://www.valtersit.com/cve/CVE-2026-94054/

CVE-2026-86553: SmartLife auth flaw lets attackers reset any account password via spoofed app auth. CVSS 8.8, no patch yet. Lock down accounts now: #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-86553/

CVE-2026-93982 OpenPanel logs MCP auth tokens from URL params in plaintext, letting log readers replay credentials for analytics access. CVSS 3.3, patch status unknown. Update now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-93982/

PoC and details are public for CVE-2026-84568, a macOS autofs vulnerability enabling root code execution, and a Gatekeeper bypass. Update macOS now.

#macOS #Apple #CVE202684568 #CVE202684570 #Gatekeeper #autofs #PoC #CyberSecurity

https://securityonline.info/macos-autofs-vulnerability-cve-2026-84568-poc/?utm_source=mastodon&utm_medium=jetpack_social

🚨🇺🇸 Microsoft Authenticator flaw allowed malicious Android apps to steal work account tokens

Tracked as CVE-2026-80097, the high-severity vulnerability allowed an Android app with no permissions to impersonate trusted Microsoft apps such as Teams and request tokens for a work account signed into Authenticator.
⠀
Researchers demonstrated that the stolen tokens could provide access to:

• Email and the ability to send messages
• Files stored in Microsoft services
• Calendars and Teams chats
• Authentication methods and passkey management
⠀
The flaw existed because Authenticator trusted identity information supplied by the requesting app instead of confirming which app actually made the request.
⠀
Microsoft rates the vulnerability 8.6 and says exploitation requires a malicious app on the device and user interaction during authentication. However, researchers reported obtaining tokens without further interaction when a work account was already signed in.
⠀
Microsoft says it has found no evidence of exploitation. The issue affects Authenticator for Android versions before 6.2606.4246.

Users should update to version 6.2606.4246 or later.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80097

Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html

『微软身份验证器 Authenticator 曝高危漏洞：恶意 App 无需权限就能窃取账户令牌』
微软的身份验证工具 Microsoft Authenticator 被发现存在一个高危漏洞（CVE-2026-80097），CVSS 评分为 8.6 分。 攻击者只需要诱导用户安装一个恶意安卓应用，即
……
阅读全文： :sys_link: https://www.appinn.com/microsoft-authenticator-android-cve-2026-80097/

#小众软件

CVE-2026-80097: How a Microsoft Authenticator Android Flaw Let Any App Steal Work Tokens

https://thecybersecguru.com/news/cve-2026-80097-microsoft-authenticator-android-broker-bypass/

Popcorn Time : un processus oublié menaçait des millions de PC (CVE-2026-30612) https://www.it-connect.fr/popcorn-time-updater-cve-2026-30612/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

A Popcorn Time updater flaw, CVE-2026-30612, exposed millions of PCs to SYSTEM-level code. Eye Security disabled it on 2M+ systems.

#PopcornTime #Time4Popcorn #CVE202630612 #EyeSecurity #Botnet #SupplyChain #RCE #Malware

https://meterpreter.org/popcorn-time-updater-flaw/?utm_source=mastodon&utm_medium=jetpack_social

Exploit code and details are public for CVE-2026-23074, a Linux kernel privilege escalation flaw in the teql qdisc dating to 2005. Patch now.

#Linux #LinuxKernel #CVE202623074 #PrivilegeEscalation #kernelCTF #ContainerEscape #PoC #CyberSecurity

https://meterpreter.org/linux-kernel-teql-cve-2026-23074-exploit/?utm_source=mastodon&utm_medium=jetpack_social