FediSecfeeds

##

AAKL@infosec.exchange at 2026-09-14T16:42:45.000Z ##

Welcome to Monday and two new advisories from Cisco.

CRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm

CRITICAL: CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX

Two more critical vulnerabilities on the 9th and the 11th https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability

##

CVE-2026-20353
(9.8 CRITICAL)

EPSS: 0.37%

updated 2026-09-15T18:32:19

2 posts

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20353 are related to i

AAKL at 2026-09-14T16:42:45.394Z ##

Welcome to Monday and two new advisories from Cisco.

CRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm

CRITICAL: CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX

Two more critical vulnerabilities on the 9th and the 11th https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability

##

AAKL@infosec.exchange at 2026-09-14T16:42:45.000Z ##

Welcome to Monday and two new advisories from Cisco.

CRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm

CRITICAL: CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX

Two more critical vulnerabilities on the 9th and the 11th https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability

##

CVE-2026-20275
(8.8 HIGH)

EPSS: 0.18%

updated 2026-09-15T18:32:14

2 posts

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20275 are related to incorrect calculation issues that are group

AAKL at 2026-09-15T15:50:22.060Z ##

Cisco has addressed a critical September 2 vulnerability.

CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM @TalosSecurity

More related to Cisco:

Rapid7: CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild https://www.rapid7.com/blog/post/etr-cve-2026-76461-critical-cisco-secure-email-gateway-vulnerability-exploited-in-the-wild/ @Rapid7Official #threatresearch #infosec #Cisco #vulnerability

##

AAKL@infosec.exchange at 2026-09-15T15:50:22.000Z ##

Cisco has addressed a critical September 2 vulnerability.

CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM @TalosSecurity

More related to Cisco:

Rapid7: CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild https://www.rapid7.com/blog/post/etr-cve-2026-76461-critical-cisco-secure-email-gateway-vulnerability-exploited-in-the-wild/ @Rapid7Official #threatresearch #infosec #Cisco #vulnerability

##

CVE-2026-90703
(9.1 CRITICAL)

EPSS: 2.80%

updated 2026-09-15T18:19:38.113000

1 posts

A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

offseq@infosec.exchange at 2026-09-14T10:30:25.000Z ##

D-Link DWR-M921 v1.1.52 is vulnerable to CRITICAL OS command injection (CVE-2026-90703, CVSS 9.4). No patch yet, public exploit out. Restrict access & monitor logs. Details: https://radar.offseq.com/threat/cve-2026-90703-os-command-injection-in-d-link-dwr-m921-f9739a3ef4495656 #OffSeq #CVE #RouterSecurity #Infosec

##

CVE-2026-76440
(9.8 CRITICAL)

EPSS: 0.43%

updated 2026-09-15T18:19:12.950000

2 posts

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76440 are related to

AAKL at 2026-09-14T16:42:45.394Z ##

Welcome to Monday and two new advisories from Cisco.

CRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm

CRITICAL: CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX

Two more critical vulnerabilities on the 9th and the 11th https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability

##

AAKL@infosec.exchange at 2026-09-14T16:42:45.000Z ##

Welcome to Monday and two new advisories from Cisco.

CRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm

CRITICAL: CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX

Two more critical vulnerabilities on the 9th and the 11th https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59160/

##

CVE-2026-59160
(8.8 HIGH)

EPSS: 0.00%

updated 2026-09-15T18:17:26.587000

2 posts

Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while the GET handler for /api/run in packages/turbo-graph-ui/app/api/run/route.ts has no authentication, authorization, CSRF protection, or task allowlist. The

thehackerwire@mastodon.social at 2026-09-15T18:01:29.000Z ##

🟠 CVE-2026-59160 - High (8.8)

Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while t...

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-15T18:01:29.000Z ##

🟠 CVE-2026-59160 - High (8.8)

Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59160/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-20276
(8.6 HIGH)

EPSS: 0.25%

updated 2026-09-15T18:17:18.607000

2 posts

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20276 are related to insufficient control flow management issu

AAKL at 2026-09-15T15:50:22.060Z ##

Cisco has addressed a critical September 2 vulnerability.

CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM @TalosSecurity

More related to Cisco:

Rapid7: CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild https://www.rapid7.com/blog/post/etr-cve-2026-76461-critical-cisco-secure-email-gateway-vulnerability-exploited-in-the-wild/ @Rapid7Official #threatresearch #infosec #Cisco #vulnerability

##

AAKL@infosec.exchange at 2026-09-15T15:50:22.000Z ##

Cisco has addressed a critical September 2 vulnerability.

CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM @TalosSecurity

More related to Cisco:

Rapid7: CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild https://www.rapid7.com/blog/post/etr-cve-2026-76461-critical-cisco-secure-email-gateway-vulnerability-exploited-in-the-wild/ @Rapid7Official #threatresearch #infosec #Cisco #vulnerability

##

CVE-2026-20274
(9.8 CRITICAL)

EPSS: 0.67%

updated 2026-09-15T18:17:18.240000

2 posts

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20274 are related to improper resource control issues that are

AAKL at 2026-09-15T15:50:22.060Z ##

Cisco has addressed a critical September 2 vulnerability.

CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM @TalosSecurity

More related to Cisco:

Rapid7: CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild https://www.rapid7.com/blog/post/etr-cve-2026-76461-critical-cisco-secure-email-gateway-vulnerability-exploited-in-the-wild/ @Rapid7Official #threatresearch #infosec #Cisco #vulnerability

##

AAKL@infosec.exchange at 2026-09-15T15:50:22.000Z ##

Cisco has addressed a critical September 2 vulnerability.

CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM @TalosSecurity

More related to Cisco:

Rapid7: CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild https://www.rapid7.com/blog/post/etr-cve-2026-76461-critical-cisco-secure-email-gateway-vulnerability-exploited-in-the-wild/ @Rapid7Official #threatresearch #infosec #Cisco #vulnerability

##

CVE-2026-91985
(7.5 HIGH)

EPSS: 0.00%

updated 2026-09-15T17:17:44.127000

2 posts

Vikunja before 2.6.0 fails to properly restrict access to the link-share hash field in single-share read endpoints, allowing read-only members to obtain the share's secret credential. Attackers can exchange the disclosed hash for a link-share JWT at the share's permission level to escalate privileges and perform unauthorized writes or administrative actions.

thehackerwire@mastodon.social at 2026-09-15T17:00:15.000Z ##

🟠 CVE-2026-91985 - High (7.5)

Vikunja before 2.6.0 fails to properly restrict access to the link-share hash field in single-share read endpoints, allowing read-only members to obtain the share's secret credential. Attackers can exchange the disclosed hash for a link-share JWT ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91985/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-15T17:00:15.000Z ##

🟠 CVE-2026-91985 - High (7.5)

Vikunja before 2.6.0 fails to properly restrict access to the link-share hash field in single-share read endpoints, allowing read-only members to obtain the share's secret credential. Attackers can exchange the disclosed hash for a link-share JWT ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91985/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-91989
(7.5 HIGH)

EPSS: 0.00%

updated 2026-09-15T16:17:58.010000

2 posts

atomic-agents-stack before 1.1.0 contains a path traversal vulnerability in the dashboard HTTP server that allows remote attackers to read arbitrary files by supplying directory traversal sequences in request paths. Attackers can bypass path containment checks by including '../' segments in requests to the DashboardHandler.do_GET endpoint to access files outside the intended agents_root directory.

thehackerwire@mastodon.social at 2026-09-15T16:59:53.000Z ##

🟠 CVE-2026-91989 - High (7.5)

atomic-agents-stack before 1.1.0 contains a path traversal vulnerability in the dashboard HTTP server that allows remote attackers to read arbitrary files by supplying directory traversal sequences in request paths. Attackers can bypass path conta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91989/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-15T16:59:53.000Z ##

🟠 CVE-2026-91989 - High (7.5)

atomic-agents-stack before 1.1.0 contains a path traversal vulnerability in the dashboard HTTP server that allows remote attackers to read arbitrary files by supplying directory traversal sequences in request paths. Attackers can bypass path conta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91989/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-63696
(9.1 CRITICAL)

EPSS: 0.00%

updated 2026-09-15T15:32:20

2 posts

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

thehackerwire@mastodon.social at 2026-09-15T16:01:34.000Z ##

🔴 CVE-2026-63696 - Critical (9.1)

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63696/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-15T16:01:34.000Z ##

🔴 CVE-2026-63696 - Critical (9.1)

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63696/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-89025
(7.5 HIGH)

EPSS: 0.00%

updated 2026-09-15T15:32:20

2 posts

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specific endpoint that is processed incorrectly, causing the device to perform an unintended reboot and resulting in a temporary denial-of-service condition. T

thehackerwire@mastodon.social at 2026-09-15T16:00:52.000Z ##

🟠 CVE-2026-89025 - High (7.5)

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specif...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89025/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-15T16:00:52.000Z ##

🟠 CVE-2026-89025 - High (7.5)

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specif...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89025/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-91001
(9.9 CRITICAL)

EPSS: 0.48%

updated 2026-09-15T15:17:30.983000

4 posts

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

thehackerwire@mastodon.social at 2026-09-15T10:04:12.000Z ##

🔴 CVE-2026-91001 - Critical (9.9)

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91001/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq at 2026-09-15T06:00:26.004Z ##

Stack-based buffer overflow (CVE-2026-91001, CVSS 9.4) in D-Link DI-8400 (16.07) exposes devices to RCE. Exploit code is public. Restrict management access until fix. Details: https://radar.offseq.com/threat/cve-2026-91001-stack-based-buffer-overflow-in-d-link-di-8400-abc2e3e858f255b9 #OffSeq #CVE202691001 #IoTSecurity #Vulnerability

##

thehackerwire@mastodon.social at 2026-09-15T10:04:12.000Z ##

🔴 CVE-2026-91001 - Critical (9.9)

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91001/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-09-15T06:00:26.000Z ##

Stack-based buffer overflow (CVE-2026-91001, CVSS 9.4) in D-Link DI-8400 (16.07) exposes devices to RCE. Exploit code is public. Restrict management access until fix. Details: https://radar.offseq.com/threat/cve-2026-91001-stack-based-buffer-overflow-in-d-link-di-8400-abc2e3e858f255b9 #OffSeq #CVE202691001 #IoTSecurity #Vulnerability

##

CVE-2026-89308
(0 None)

EPSS: 0.00%

updated 2026-09-15T13:16:45.543000

2 posts

An unauthenticated OS command injection vulnerability exists in the ping.php endpoint, allowing remote attackers to execute arbitrary commands on the underlying operating system and achieve remote code execution.

offseq at 2026-09-15T12:00:26.360Z ##

CVE-2026-89308 in TREXOM TrxTimeATTENDANCE (v1.0.5 – 1.9.5): CRITICAL OS command injection in ping.php allows unauthenticated RCE. Remediate ASAP. https://radar.offseq.com/threat/cve-2026-89308-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-8f863d468f1bf361 #OffSeq #CVE202689308 #infosec #vuln #remediation

##

offseq@infosec.exchange at 2026-09-15T12:00:26.000Z ##

CVE-2026-89308 in TREXOM TrxTimeATTENDANCE (v1.0.5 – 1.9.5): CRITICAL OS command injection in ping.php allows unauthenticated RCE. Remediate ASAP. https://radar.offseq.com/threat/cve-2026-89308-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-8f863d468f1bf361 #OffSeq #CVE202689308 #infosec #vuln #remediation

##

CVE-2026-76461
(9.8 CRITICAL)

EPSS: 2.16%

updated 2026-09-15T12:47:32.497000

43 posts

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that co

3 repos

https://github.com/fevar54/CVE-2026-76461-Detection-Kit-

https://github.com/0xBlackash/CVE-2026-76461

https://github.com/HORKimhab/CVE-2026-76461

threatnoir at 2026-09-16T02:05:58.455Z ##

⚠️ CRITICAL: Cisco warns customers of actively exploited zero-day in email gateways

Cisco Secure Email Gateway contains a critical unauthenticated root privilege escalation vulnerability (CVE-2026-76461) that was actively exploited in the wild before patches were available. Multiple customers are likely already compromised. This is now tracked in CISA's Known Exploited Vulnerabili…

🤖 AI generated summary

##

threatnoir at 2026-09-16T02:05:54.039Z ##

⚠️ CRITICAL: Cisco patches Secure Email Gateway zero-day exploited in attacks

Cisco Secure Email Gateway has a critical zero-day (CVE-2026-76461) that allows unauthenticated attackers to execute arbitrary commands as root via malicious SQL in crafted emails. This is actively exploited in the wild. Any organization running SEG is at immediate risk of full compromise.

https://www.theregister.com/security/2026/09/15/cisco-email-security-boxes-can-be-rooted-by-an-email/5296604

🤖 AI generated summary

##

sayzard@mastodon.sayzard.org at 2026-09-16T01:39:03.000Z ##

Cisco email security boxes can be rooted by an email

Cisco Secure Email Gateway의 AsyncOS에서 수신 이메일 처리 취약점(CVE-2026-76461)이 악용되고 있으며, 인증 없이 조작된 이메일 하나로 어플라이언스의 root 권한 명령 실행이 가능하다. CVSS는 9.8이고 물리·가상 어플라이언스 구성과 무관하게 영향을 받으며, 우회책이 없어 패치가 유일한 대응이다. 침해 후 공격자는 로컬 로그를 변조해 흔적을 지울 수 있으므로 게이트웨이 로그뿐 아니라 네트워크·방화벽 로그를 함께 조사해야 한다. Cisco는 AsyncO...

##

undercodenews@mastodon.social at 2026-09-15T22:35:16.000Z ##

Cisco Secure Email Gateway Zero-Day Under Active Attack: Critical CVE-2026-76461 Puts Root-Level Access at Risk + Video

A Critical Warning for Cisco Customers A serious cybersecurity warning is unfolding around Cisco Secure Email Gateway after Cisco disclosed active exploitation of CVE-2026-76461, a critical zero-day vulnerability that can allow an unauthenticated remote attacker to execute commands with root privileges. The vulnerability has also been added to the…

https://undercodenews.com/cisco-secure-email-gateway-zero-day-under-active-attack-critical-cve-2026-76461-puts-root-level-access-at-risk-video/?utm_source=mastodon&utm_medium=jetpack_social

##

Matchbook3469@mastodon.social at 2026-09-15T19:34:02.000Z ##

🔵 THREAT INTELLIGENCE

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Vulnerability | CRITICAL
CVEs: CVE-2026-76461

Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks. [...]

Full analysis:
https://www.yazoul.net/news/article/cisco-secure-email-gateway-flaw-exploited-in-the-wild-enables-root-command-execu

by Yazoul AI

#CyberSecurity #APT #CyberNews

##

Analyst207@mastodon.social at 2026-09-15T18:03:19.000Z ##

Cisco Discloses Actively Exploited Zero-Day in Email Gateways

A critical zero-day vulnerability, CVE-2026-76461, is under active exploitation, allowing hackers to remotely execute commands as root on Cisco Secure Email Gateway appliances with just a simple email. This gaping security hole gives attackers total control of the gateway, putting your email security at risk.

https://osintsights.com/cisco-discloses-actively-exploited-zero-day-in-email-gateways?utm_source=mastodon&utm_medium=social

#ZeroDay #Cve202676461 #Cisco #EmailGateway #RemoteCodeExecution

##

netsecio@mastodon.social at 2026-09-15T17:12:32.000Z ##

📰 Cisco Patches Actively Exploited Zero-Day in Secure Email Gateways

Cisco patches critical, actively exploited zero-day (CVE-2026-76461) in Secure Email Gateways. Unauthenticated attackers can compromise devices via a crafted email. CISA has added it to the KEV catalog. #CyberSecurity #ZeroDay #Infosec #Cisco

🔗 https://cyber.netsecops.io/articles/cisco-patches-actively-exploited-zero-day-in-secure-email-gateway/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

##

youranonnewsirc@nerdculture.de at 2026-09-15T16:26:27.000Z ##

Geopolitical tensions: A Russian drone struck a Kyiv-Warsaw train near the Polish border (Sept 13), and Houthi forces secured Yemen's Red Sea coast (Sept 11), affecting maritime routes. Tech news: Apple's Siri AI, powered by Apple Intelligence, began its beta rollout (Sept 14). Cybersecurity: Cisco warned of active exploitation of a critical Secure Email Gateway flaw (CVE-2026-76461) (Sept 15), and Anthropic reported Russia-linked spies used its AI Claude for hacking campaigns.

#Cybersecurity #Geopolitics #TechNews

##

thecybermind at 2026-09-15T16:25:35.618Z ##

Actionable C-Suite threat intelligence and mitigation strategies for CVE-2026-76461, addressing active SQL injection exploitation vectors within enterprise Cisco Secure Email Gateway infrastructures. https://thecybermind.co/r5ry

##

Analyst207@mastodon.social at 2026-09-15T16:03:31.000Z ##

Cisco Email Gateways Exploited by Malicious Emails

A single malicious email can wreak havoc on your Cisco Secure Email Gateway, thanks to a critical vulnerability (CVE-2026-76461) that allows hackers to gain root access with a 9.8 CVSS score - and patching is the only fix.

https://osintsights.com/cisco-email-gateways-exploited-by-malicious-emails?utm_source=mastodon&utm_medium=social

#Cisco #Cve202676461 #EmailGateway #SecureEmailGateway #Vulnerability

##

AAKL at 2026-09-15T15:50:22.060Z ##

Cisco has addressed a critical September 2 vulnerability.

CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM @TalosSecurity

More related to Cisco:

Rapid7: CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild https://www.rapid7.com/blog/post/etr-cve-2026-76461-critical-cisco-secure-email-gateway-vulnerability-exploited-in-the-wild/ @Rapid7Official #threatresearch #infosec #Cisco #vulnerability

##

undercodenews@mastodon.social at 2026-09-15T13:47:25.000Z ##

Cisco Secure Email Gateway Zero-Day CVE-2026-76461: Critical 98 Flaw Is Already Being Exploited in the Wild + Video

A Dangerous New Threat Hiding Inside Email Traffic Email security appliances are supposed to stand between organizations and malicious messages. This time, however, attackers are using the email-processing function itself as the entry point. Cisco has disclosed CVE-2026-76461, a critical SQL-injection vulnerability in Cisco Secure Email Gateway appliances…

https://undercodenews.com/cisco-secure-email-gateway-zero-day-cve-2026-76461-critical-98-flaw-is-already-being-exploited-in-the-wild-video/?utm_source=mastodon&utm_medium=jetpack_social

##

Matchbook3469@mastodon.social at 2026-09-15T12:02:26.000Z ##

🔴 New security advisory:

CVE-2026-76461 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-76461-cisco-secure-email-gateway-rce-exploited-poc

by Yazoul AI

#CVE #PatchNow #InfoSecCommunity

##

undercodenews@mastodon.social at 2026-09-15T10:58:52.000Z ##

Cisco Secure Email Gateway Hit by Critical Zero-Day as Attackers Gain Root Access Through Malicious Emails + Video

A Dangerous New Cisco Zero-Day A critical zero-day vulnerability in Cisco Secure Email Gateway has moved from a theoretical security concern into an active incident, with Cisco confirming exploitation in the wild. Tracked as CVE-2026-76461, the flaw carries a CVSS score of 9.8 and can allow an unauthenticated remote attacker to execute arbitrary commands…

https://undercodenews.com/cisco-secure-email-gateway-hit-by-critical-zero-day-as-attackers-gain-root-access-through-malicious-emails-video/?utm_source=mastodon&utm_medium=jetpack_social

##

undercodenews@mastodon.social at 2026-09-15T10:33:18.000Z ##

Cisco Secure Email Gateway Zero-Day Exploited in the Wild: Critical CVE-2026-76461 Gives Attackers a Path to Root + Video

A New Cisco Security Crisis Is Unfolding A serious security warning has emerged for organizations relying on Cisco Secure Email Gateway. Cisco has confirmed that CVE-2026-76461, a critical SQL injection vulnerability in Cisco AsyncOS, is being actively exploited in the wild. The flaw can allow a remote, unauthenticated attacker to send a specially…

https://undercodenews.com/cisco-secure-email-gateway-zero-day-exploited-in-the-wild-critical-cve-2026-76461-gives-attackers-a-path-to-root-video/?utm_source=mastodon&utm_medium=jetpack_social

##

cyberveille@mastobot.ping.moi at 2026-09-15T09:00:06.000Z ##

📢 [VULN] ⚠️Injection SQL exploitée dans Cisco Secure Email Gateway - CVE-2026-76461

Le 14 septembre 2026 à 16 h 00 UTC, Cisco a publié deux avis de sécurité sur sa passerelle de messagerie.

🔗 https://blog.marcfredericgomez.fr/injection-sql-exploitee-dans-cisco-secure-email-gateway/
💬 discussion : https://infosec.pub/post/52317366
#CVE #Cyberveille

##

ottoto2017@prattohome.com at 2026-09-15T08:14:44.000Z ##

「Ciscoのセキュアメールゲートウェイの脆弱性が実際に悪用され、ルート権限でのコマンド実行が可能になる」： #TheHackerNews

「スコは、Cisco Secure Email Gateway向けAsyncOSソフトウェアに影響を与える新たな重大な脆弱性が、実際に悪用されていると警告した。

CVE-2026-76461 として追跡されているこの脆弱性は、CVSSスコアが10.0点満点中9.8点です。これは、メール解析ロジックにおける検証の不備が原因で、認証されていないリモート攻撃者が、基盤となるオペレーティングシステム上でroot権限で任意のコマンドを実行できる可能性があるとされています。

シスコは月曜日の勧告で、「攻撃者は、悪意のあるSQL文を含む細工された電子メールメッセージを影響を受けるデバイスに送信することで、この脆弱性を悪用する可能性がある」と述べた。」

https://thehackernews.com/2026/09/cisco-secure-email-gateway-flaw.html

https://osintsights.com/cisco-discloses-zero-day-exploited-in-secure-email-gateway-attacks?utm_source=mastodon&utm_medium=social

##

Analyst207@mastodon.social at 2026-09-15T07:33:31.000Z ##

Cisco Discloses Zero-Day Exploited in Secure Email Gateway Attacks

Cisco has warned of a zero-day flaw in its Secure Email Gateway that allows attackers to run commands as root, prompting federal agencies to patch the vulnerability within just three days. This critical defect, tracked as CVE-2026-76461, lets hackers execute arbitrary commands with root privileges, putting systems at risk.

#ZeroDay #SecureEmailGateway #Cve202676461 #EmergingThreats #Cisco

##

Analyst207@mastodon.social at 2026-09-15T07:03:21.000Z ##

Cisco Email Gateway Flaw Exploited, Enables Root Command Execution

A critical Cisco email gateway flaw, CVE-2026-76461, with a near-perfect CVSS score of 9.8, is being actively exploited in the wild, allowing attackers to send a single crafted email and gain root command execution on vulnerable devices. This severe vulnerability stems from insufficient validation in AsyncOS email parsing, making it…

https://osintsights.com/cisco-email-gateway-flaw-exploited-enables-root-command-execution?utm_source=mastodon&utm_medium=social

#Cisco #Cve202676461 #EmailGateway #RemoteCodeExecution #SupplyChain

##

undercodenews@mastodon.social at 2026-09-15T06:47:21.000Z ##

Cisco Secure Email Gateway Zero-Day Under Active Attack as Root-Level Access Puts Defenders on High Alert + Video

A Critical Warning for Email Security Teams Cisco has confirmed that a critical vulnerability in Cisco Secure Email Gateway is being actively exploited in the wild, turning a security weakness inside email-processing logic into a potential gateway for complete operating-system compromise. Tracked as CVE-2026-76461, the flaw carries a CVSS score of 9.8,…

https://undercodenews.com/cisco-secure-email-gateway-zero-day-under-active-attack-as-root-level-access-puts-defenders-on-high-alert-video/?utm_source=mastodon&utm_medium=jetpack_social

##

offseq at 2026-09-15T03:00:26.099Z ##

CRITICAL (CVSS 9.8): CVE-2026-76461 in Cisco AsyncOS for Secure Email Gateway lets unauthenticated attackers execute commands as root via crafted emails. Patch status unknown — monitor Cisco’s updates. https://radar.offseq.com/threat/a-vulnerability-in-the-email-parsing-of-cisco-asyncos-software-for-cisco-secure-email-gateway-could-a5a1b3247d786df4 #OffSeq #Cisco #Vulnerability #EmailSecurity

##

DailyCyberSecurity at 2026-09-15T02:18:05.203Z ##

CVE-2026-76461 (CVSS 9.8) is a Cisco Secure Email Gateway vulnerability exploited in the wild. SQL injection grants root command execution. Patch now.

#Cisco #EmailSecurity #CVE202676461 #SQLInjection #RCE #ExploitedInTheWild #AsyncOS #InfoSec #PatchNow #RootAccess

https://securityonline.info/cve-2026-76461-cisco-email-gateway-rce/?utm_source=mastodon&utm_medium=jetpack_social

##

ssvc at 2026-09-14T22:16:17.750Z ##

No one else seems to have noticed the Cisco exploited zero-day:

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability

https://www.cisa.gov/news-events/alerts/2026/09/14/cisa-adds-one-known-exploited-vulnerability-catalog

#CISA #KEV #Cisco #zeroday #CVE

##

secdb at 2026-09-14T21:00:30.745Z ##

🚨 [CISA-2026:0914] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-76461 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76461)
- Name: Cisco Secure Email Gateway SQL Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Email Gateway
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76461

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260914 #cisa20260914 #cve_2026_76461 #cve202676461

##

thecybermind at 2026-09-14T20:55:43.327Z ##

CRITICAL CISA KEV ALERT: CVE-2026-76461 targets Cisco Secure Email Gateway via SQL injection, granting root-level RCE. Active exploitation verified. Access our TSUITE brief for SIEM queries and hardening steps to secure your email perimeter.

https://thecybermind.co/al1f

##

cisakevtracker@mastodon.social at 2026-09-14T20:00:50.000Z ##

CVE ID: CVE-2026-76461
Vendor: Cisco
Product: Secure Email Gateway
Date Added: 2026-09-14
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-76461

##

AAKL at 2026-09-14T16:42:45.394Z ##

Welcome to Monday and two new advisories from Cisco.

CRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm

CRITICAL: CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX

Two more critical vulnerabilities on the 9th and the 11th https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX

##

ssvc at 2026-09-14T16:31:59.297Z ##

ayy lmao Cisco CVE-2026-76461
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.

In September 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.

#cve #cisco #zeroday #eitw

##

threatnoir@infosec.exchange at 2026-09-16T02:05:58.000Z ##

⚠️ CRITICAL: Cisco warns customers of actively exploited zero-day in email gateways

Cisco Secure Email Gateway contains a critical unauthenticated root privilege escalation vulnerability (CVE-2026-76461) that was actively exploited in the wild before patches were available. Multiple customers are likely already compromised. This is now tracked in CISA's Known Exploited Vulnerabili…

🤖 AI generated summary

##

threatnoir@infosec.exchange at 2026-09-16T02:05:54.000Z ##

⚠️ CRITICAL: Cisco patches Secure Email Gateway zero-day exploited in attacks

Cisco Secure Email Gateway has a critical zero-day (CVE-2026-76461) that allows unauthenticated attackers to execute arbitrary commands as root via malicious SQL in crafted emails. This is actively exploited in the wild. Any organization running SEG is at immediate risk of full compromise.

#Cybersecurity #Geopolitics #TechNews

🤖 AI generated summary

##

youranonnewsirc@nerdculture.de at 2026-09-15T16:26:27.000Z ##

Geopolitical tensions: A Russian drone struck a Kyiv-Warsaw train near the Polish border (Sept 13), and Houthi forces secured Yemen's Red Sea coast (Sept 11), affecting maritime routes. Tech news: Apple's Siri AI, powered by Apple Intelligence, began its beta rollout (Sept 14). Cybersecurity: Cisco warned of active exploitation of a critical Secure Email Gateway flaw (CVE-2026-76461) (Sept 15), and Anthropic reported Russia-linked spies used its AI Claude for hacking campaigns.

##

thecybermind@infosec.exchange at 2026-09-15T16:25:35.000Z ##

Actionable C-Suite threat intelligence and mitigation strategies for CVE-2026-76461, addressing active SQL injection exploitation vectors within enterprise Cisco Secure Email Gateway infrastructures. https://thecybermind.co/r5ry

##

AAKL@infosec.exchange at 2026-09-15T15:50:22.000Z ##

Cisco has addressed a critical September 2 vulnerability.

CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM @TalosSecurity

More related to Cisco:

Rapid7: CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild https://www.rapid7.com/blog/post/etr-cve-2026-76461-critical-cisco-secure-email-gateway-vulnerability-exploited-in-the-wild/ @Rapid7Official #threatresearch #infosec #Cisco #vulnerability

##

cyberveille@mastobot.ping.moi at 2026-09-15T09:00:06.000Z ##

📢 [VULN] ⚠️Injection SQL exploitée dans Cisco Secure Email Gateway - CVE-2026-76461

Le 14 septembre 2026 à 16 h 00 UTC, Cisco a publié deux avis de sécurité sur sa passerelle de messagerie.

🔗 https://blog.marcfredericgomez.fr/injection-sql-exploitee-dans-cisco-secure-email-gateway/
💬 discussion : https://infosec.pub/post/52317366
#CVE #Cyberveille

##

ottoto2017@prattohome.com at 2026-09-15T08:14:44.000Z ##

「Ciscoのセキュアメールゲートウェイの脆弱性が実際に悪用され、ルート権限でのコマンド実行が可能になる」： #TheHackerNews

「スコは、Cisco Secure Email Gateway向けAsyncOSソフトウェアに影響を与える新たな重大な脆弱性が、実際に悪用されていると警告した。

CVE-2026-76461 として追跡されているこの脆弱性は、CVSSスコアが10.0点満点中9.8点です。これは、メール解析ロジックにおける検証の不備が原因で、認証されていないリモート攻撃者が、基盤となるオペレーティングシステム上でroot権限で任意のコマンドを実行できる可能性があるとされています。

シスコは月曜日の勧告で、「攻撃者は、悪意のあるSQL文を含む細工された電子メールメッセージを影響を受けるデバイスに送信することで、この脆弱性を悪用する可能性がある」と述べた。」

https://thehackernews.com/2026/09/cisco-secure-email-gateway-flaw.html

#Cisco #EmailSecurity #CVE202676461 #SQLInjection #RCE #ExploitedInTheWild #AsyncOS #InfoSec #PatchNow #RootAccess

##

offseq@infosec.exchange at 2026-09-15T03:00:26.000Z ##

CRITICAL (CVSS 9.8): CVE-2026-76461 in Cisco AsyncOS for Secure Email Gateway lets unauthenticated attackers execute commands as root via crafted emails. Patch status unknown — monitor Cisco’s updates. https://radar.offseq.com/threat/a-vulnerability-in-the-email-parsing-of-cisco-asyncos-software-for-cisco-secure-email-gateway-could-a5a1b3247d786df4 #OffSeq #Cisco #Vulnerability #EmailSecurity

##

DailyCyberSecurity@infosec.exchange at 2026-09-15T02:18:05.000Z ##

CVE-2026-76461 (CVSS 9.8) is a Cisco Secure Email Gateway vulnerability exploited in the wild. SQL injection grants root command execution. Patch now.

https://securityonline.info/cve-2026-76461-cisco-email-gateway-rce/?utm_source=mastodon&utm_medium=jetpack_social

##

ssvc@infosec.exchange at 2026-09-14T22:16:17.000Z ##

Since no one seems to have noticed the Cisco exploited zero-day:

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability

https://www.cisa.gov/news-events/alerts/2026/09/14/cisa-adds-one-known-exploited-vulnerability-catalog

#CISA #KEV #Cisco #zeroday #CVE

##

secdb@infosec.exchange at 2026-09-14T21:00:30.000Z ##

🚨 [CISA-2026:0914] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-76461 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76461)
- Name: Cisco Secure Email Gateway SQL Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Email Gateway
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76461

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260914 #cisa20260914 #cve_2026_76461 #cve202676461

##

thecybermind@infosec.exchange at 2026-09-14T20:55:43.000Z ##

CRITICAL CISA KEV ALERT: CVE-2026-76461 targets Cisco Secure Email Gateway via SQL injection, granting root-level RCE. Active exploitation verified. Access our TSUITE brief for SIEM queries and hardening steps to secure your email perimeter.

https://thecybermind.co/al1f

##

cisakevtracker@mastodon.social at 2026-09-14T20:00:50.000Z ##

CVE ID: CVE-2026-76461
Vendor: Cisco
Product: Secure Email Gateway
Date Added: 2026-09-14
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-76461

##

AAKL@infosec.exchange at 2026-09-14T16:42:45.000Z ##

Welcome to Monday and two new advisories from Cisco.

CRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm

CRITICAL: CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX

Two more critical vulnerabilities on the 9th and the 11th https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX

##

ssvc@infosec.exchange at 2026-09-14T16:31:59.000Z ##

ayy lmao Cisco CVE-2026-76461
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.

In September 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.

#cve #cisco #zeroday #eitw

##

CVE-2026-91995
(9.1 CRITICAL)

EPSS: 0.00%

updated 2026-09-15T12:17:54.943000

2 posts

pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verification results are discarded, allowing any value as the current password. Remote attackers can submit a username with an incorrect current password to overwrite any account credential including the admin account and gain full administrative control.

offseq at 2026-09-15T13:30:26.442Z ##

pig-mesh pig <4.1.0 hit by CRITICAL vuln (CVE-2026-91995, CVSS 9.3): remote attackers can reset any account password — admin included — via /register/password auth bypass. Restrict access & monitor logs while awaiting patch. https://radar.offseq.com/threat/cve-2026-91995-unverified-password-change-in-pig-mesh-pig-6a0b879ab4cc0e5c #OffSeq #vulnerability #CVE #infosec

##

offseq@infosec.exchange at 2026-09-15T13:30:26.000Z ##

pig-mesh pig <4.1.0 hit by CRITICAL vuln (CVE-2026-91995, CVSS 9.3): remote attackers can reset any account password — admin included — via /register/password auth bypass. Restrict access & monitor logs while awaiting patch. https://radar.offseq.com/threat/cve-2026-91995-unverified-password-change-in-pig-mesh-pig-6a0b879ab4cc0e5c #OffSeq #vulnerability #CVE #infosec

##

CVE-2026-80217
(8.8 HIGH)

EPSS: 0.28%

updated 2026-09-15T09:30:39

2 posts

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands.

thehackerwire@mastodon.social at 2026-09-15T10:04:02.000Z ##

🟠 CVE-2026-80217 - High (8.8)

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-80217/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-15T10:04:02.000Z ##

🟠 CVE-2026-80217 - High (8.8)

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-80217/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-77853
(8.8 HIGH)

EPSS: 1.03%

updated 2026-09-15T09:30:39

2 posts

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane (NETCONF) may execute arbitrary OS commands.

thehackerwire@mastodon.social at 2026-09-15T10:03:52.000Z ##

🟠 CVE-2026-77853 - High (8.8)

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane (NETCONF) may execute arbitrary OS commands.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77853/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-15T10:03:52.000Z ##

🟠 CVE-2026-77853 - High (8.8)

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane (NETCONF) may execute arbitrary OS commands.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77853/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-75983
(7.5 HIGH)

EPSS: 0.41%

updated 2026-09-15T09:30:38

2 posts

The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.1.23. This is due to the `PermissionManager::manage_permissions()` function being registered as a callback on WordPress core's `map_meta_cap` filter and unconditionally returning the always-true `'exist'` primitive for every c

thehackerwire@mastodon.social at 2026-09-15T08:00:29.000Z ##

🟠 CVE-2026-75983 - High (7.5)

The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.1.23. This is due to the `PermissionManager::manage_permissions()` func...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-15T08:00:29.000Z ##

🟠 CVE-2026-75983 - High (7.5)

The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.1.23. This is due to the `PermissionManager::manage_permissions()` func...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-91003
(9.1 CRITICAL)

EPSS: 0.51%

updated 2026-09-15T06:30:40

4 posts

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redirct_url causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

thehackerwire@mastodon.social at 2026-09-15T08:00:39.000Z ##

🔴 CVE-2026-91003 - Critical (9.1)

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redirct_url causes stack-based buffer overflow. Remote exploitation ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91003/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq at 2026-09-15T07:30:25.006Z ##

D-Link DI-8300 (fw 16.07) hit by CRITICAL stack buffer overflow (CVE-2026-91003) in /rzgl.asp — remote RCE possible, public exploit code out. Restrict access & monitor traffic until patch. https://radar.offseq.com/threat/cve-2026-91003-stack-based-buffer-overflow-in-d-link-di-8300-ce23f2734338a347 #OffSeq #CVE202691003 #DLink #Security

##

thehackerwire@mastodon.social at 2026-09-15T08:00:39.000Z ##

🔴 CVE-2026-91003 - Critical (9.1)

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redirct_url causes stack-based buffer overflow. Remote exploitation ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91003/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-09-15T07:30:25.000Z ##

D-Link DI-8300 (fw 16.07) hit by CRITICAL stack buffer overflow (CVE-2026-91003) in /rzgl.asp — remote RCE possible, public exploit code out. Restrict access & monitor traffic until patch. https://radar.offseq.com/threat/cve-2026-91003-stack-based-buffer-overflow-in-d-link-di-8300-ce23f2734338a347 #OffSeq #CVE202691003 #DLink #Security

##

CVE-2026-90847
(9.1 CRITICAL)

EPSS: 2.18%

updated 2026-09-15T03:30:30

2 posts

A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux_set.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

offseq at 2026-09-15T01:30:24.723Z ##

EFM ipTIME C200E v1.094 suffers CRITICAL OS command injection (CVE-2026-90847, CVSS 9.4) via iux_set.cgi. Remotely exploitable, public exploit available. Restrict device access and monitor. https://radar.offseq.com/threat/cve-2026-90847-os-command-injection-in-efm-iptime-c200e-1c30057b126bbbf4 #OffSeq #Vulnerability #IoTSecurity #CVE

##

offseq@infosec.exchange at 2026-09-15T01:30:24.000Z ##

EFM ipTIME C200E v1.094 suffers CRITICAL OS command injection (CVE-2026-90847, CVSS 9.4) via iux_set.cgi. Remotely exploitable, public exploit available. Restrict device access and monitor. https://radar.offseq.com/threat/cve-2026-90847-os-command-injection-in-efm-iptime-c200e-1c30057b126bbbf4 #OffSeq #Vulnerability #IoTSecurity #CVE

##

CVE-2026-91771
(8.8 HIGH)

EPSS: 0.73%

updated 2026-09-15T02:16:49.680000

2 posts

Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.download function, allowing path traversal attacks. Attackers controlling the backend can supply file names with directory traversal sequences to write files outside the intended download directory, potentially enabling code execution through modification of shell startup files or Python import p

thehackerwire@mastodon.social at 2026-09-15T04:00:11.000Z ##

🟠 CVE-2026-91771 - High (8.8)

Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.download function, allowing path traversal attacks. Attackers controlling the backend can supply file names with directory traversal sequences t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91771/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-15T04:00:11.000Z ##

🟠 CVE-2026-91771 - High (8.8)

Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.download function, allowing path traversal attacks. Attackers controlling the backend can supply file names with directory traversal sequences t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91771/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-91200
(8.8 HIGH)

EPSS: 0.42%

updated 2026-09-15T00:31:22

2 posts

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can stream tar entries with traversal sequences to write arbitrary files on the developer workstation, enabling code execution.

thehackerwire@mastodon.social at 2026-09-15T00:00:17.000Z ##

🟠 CVE-2026-91200 - High (8.8)

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can stream tar entries with traversal sequences to write arbitrary files on the developer w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91200/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-15T00:00:17.000Z ##

🟠 CVE-2026-91200 - High (8.8)

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can stream tar entries with traversal sequences to write arbitrary files on the developer w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91200/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-12944
(9.6 CRITICAL)

EPSS: 0.25%

updated 2026-09-15T00:31:21

6 posts

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft via IMDSv1 SSRF with full IAM role permissions, (2) arbitrary file exfiltration from the container filesystem, and (3) lateral movement to internal services

1 repos

https://github.com/cflowsec/CVE-2026-12944

DailyCyberSecurity at 2026-09-16T01:03:01.753Z ##

A critical Langflow SSRF flaw (CVE-2026-12944) exposes cloud credentials and internal networks. Patch your Langflow OSS servers immediately.

#Langflow #SSRF #CVE202612944 #CVE202617628 #Cybersecurity

https://securityonline.info/langflow-ssrf-flaw-cve-2026-12944/?utm_source=mastodon&utm_medium=jetpack_social

##

offseq at 2026-09-15T00:00:36.910Z ##

CVE-2026-12944 (CRITICAL, CVSS 9.6) affects IBM Langflow OSS 1.0.0 – 1.10.0. Attackers can execute arbitrary Python as root via SSRF, steal AWS creds, and move laterally. Patch is available — validate remediation. https://radar.offseq.com/threat/cve-2026-12944-cwe-918-server-side-request-forgery-ssrf-in-ibm-langflow-oss-98110564771040c9 #OffSeq #SSRF #IBM #CloudSecurity

##

thehackerwire@mastodon.social at 2026-09-14T23:00:59.000Z ##

🔴 CVE-2026-12944 - Critical (9.6)

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft via...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12944/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

DailyCyberSecurity@infosec.exchange at 2026-09-16T01:03:01.000Z ##

A critical Langflow SSRF flaw (CVE-2026-12944) exposes cloud credentials and internal networks. Patch your Langflow OSS servers immediately.

#Langflow #SSRF #CVE202612944 #CVE202617628 #Cybersecurity

https://securityonline.info/langflow-ssrf-flaw-cve-2026-12944/?utm_source=mastodon&utm_medium=jetpack_social

##

offseq@infosec.exchange at 2026-09-15T00:00:36.000Z ##

CVE-2026-12944 (CRITICAL, CVSS 9.6) affects IBM Langflow OSS 1.0.0 – 1.10.0. Attackers can execute arbitrary Python as root via SSRF, steal AWS creds, and move laterally. Patch is available — validate remediation. https://radar.offseq.com/threat/cve-2026-12944-cwe-918-server-side-request-forgery-ssrf-in-ibm-langflow-oss-98110564771040c9 #OffSeq #SSRF #IBM #CloudSecurity

##

thehackerwire@mastodon.social at 2026-09-14T23:00:59.000Z ##

🔴 CVE-2026-12944 - Critical (9.6)

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables: (1) AWS credential theft via...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12944/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-65352
(4.3 MEDIUM)

EPSS: 0.25%

updated 2026-09-15T00:31:13

2 posts

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on.

mysk@mastodon.social at 2026-09-15T14:41:27.000Z ##

Apple acknowledges fixing the Private Relay bug leaking the IP in the secure release notes of iOS 26.6.1 and macOS 26.6.2.
CVE-2026-65352 was assigned to it

##

mysk@mastodon.social at 2026-09-15T14:41:27.000Z ##

Apple acknowledges fixing the Private Relay bug leaking the IP in the secure release notes of iOS 26.6.1 and macOS 26.6.2.
CVE-2026-65352 was assigned to it

##

CVE-2026-91144
(7.5 HIGH)

EPSS: 0.37%

updated 2026-09-14T22:16:59.053000

2 posts

ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holding a share link can supply arbitrary file paths as query parameters to download any file under the shared base directory, bypassing the intended access restrictions.

thehackerwire@mastodon.social at 2026-09-14T23:00:48.000Z ##

🟠 CVE-2026-91144 - High (7.5)

ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holding a share link can supply arbitrary file paths as query parameters to download any file under the shared ba...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91144/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-14T23:00:48.000Z ##

🟠 CVE-2026-91144 - High (7.5)

ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holding a share link can supply arbitrary file paths as query parameters to download any file under the shared ba...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91144/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-82232
(9.8 CRITICAL)

EPSS: 0.56%

updated 2026-09-14T21:32:45

2 posts

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort clauses for Task search. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 through 4.0.7, from 4.1.0-M0 through 4.1.2

DailyCyberSecurity at 2026-09-16T01:52:03.188Z ##

Six Apache Syncope vulnerabilities, including CVE-2026-82232, expose severe identity management flaws. Patch your Apache Syncope servers immediately.

#ApacheSyncope #IdentityManagement #CVE202682232 #Cybersecurity #Vulnerability

https://securityonline.info/apache-syncope-vulnerabilities-2/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-09-16T01:52:03.000Z ##

Six Apache Syncope vulnerabilities, including CVE-2026-82232, expose severe identity management flaws. Patch your Apache Syncope servers immediately.

#ApacheSyncope #IdentityManagement #CVE202682232 #Cybersecurity #Vulnerability

https://securityonline.info/apache-syncope-vulnerabilities-2/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-82028
(8.8 HIGH)

EPSS: 0.43%

updated 2026-09-14T21:31:46

2 posts

Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attackers to inject arbitrary SQL by supplying a malicious format query parameter that is interpolated directly into the FROM clause without parameterization or identifier quoting. Attackers with a self-registered account can substitute arbitrary su

thehackerwire@mastodon.social at 2026-09-14T21:00:35.000Z ##

🟠 CVE-2026-82028 - High (8.8)

Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attackers to inject arbitrary SQL by supplying a malicious format query parameter that is interp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82028/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-14T21:00:35.000Z ##

🟠 CVE-2026-82028 - High (8.8)

Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attackers to inject arbitrary SQL by supplying a malicious format query parameter that is interp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82028/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-53713
(9.1 CRITICAL)

EPSS: 0.41%

updated 2026-09-14T21:17:12.520000

2 posts

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before is_critical_path evaluates Lua submitted through EnvoyExtensionPolicy during default Strict validation. Linux resolves a double-s

thehackerwire@mastodon.social at 2026-09-14T23:01:09.000Z ##

🔴 CVE-2026-53713 - Critical (9.1)

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, to_absolute_normalized_path in internal/gatewayapi/luavalidator/security.lua does not collapse redu...

updated 2026-09-14T21:07:11.883000

2 posts

ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stored offer records, delete arbitrary offers by numeric identifier, and access dashboard statistics to disclose bidder contact information, offer details, m

thehackerwire@mastodon.social at 2026-09-14T20:00:08.000Z ##

🟠 CVE-2026-89023 - High (8.6)

ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stor...

updated 2026-09-14T20:56:48.220000

2 posts

A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used.

thehackerwire@mastodon.social at 2026-09-14T03:01:46.000Z ##

🔴 CVE-2026-90607 - Critical (9.9)

A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90607/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-09-14T03:00:25.000Z ##

Totolink A3002MU routers hit by CRITICAL (CVSS 9.4) buffer overflow (CVE-2026-90607) in formNewSchedule. Public exploit code available. Restrict remote access & monitor systems until a patch is released. https://radar.offseq.com/threat/cve-2026-90607-buffer-overflow-in-totolink-a3002mu-f5be31acbfac3e1f #OffSeq #CVE202690607 #RouterSecurity #Infosec

##

CVE-2026-90510
(8.3 HIGH)

EPSS: 0.29%

updated 2026-09-14T20:56:48.220000

1 posts

A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file orion-visor-modules/orion-visor-module-asset/orion-visor-module-asset-service/src/main/java/org/dromara/visor/module/asset/service/impl/HostKeyServiceImpl.java. The manipulation leads to use of hard-coded cryptographic key . The attack is possible to b

thehackerwire@mastodon.social at 2026-09-13T14:00:49.000Z ##

🟠 CVE-2026-90510 - High (8.3)

A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file orion-visor-modules/orion-visor-module-asset/orion-visor-module-asset-service/src/main/java/org/drom...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90510/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-73496
(7.7 HIGH)

EPSS: 0.33%

updated 2026-09-14T20:16:50.833000

2 posts

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the confluence_upload_attachment and confluence_upload_attachments tools pass a client-controlled file_path through src/mcp_atlassian/confluence/attachments.py upload_attachment, and the jira_update_issue attachments parameter reaches src/mcp_atlassian/jira/attachments.py upload_at

thehackerwire@mastodon.social at 2026-09-14T21:00:46.000Z ##

🟠 CVE-2026-73496 - High (7.7)

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the confluence_upload_attachment and confluence_upload_attachments tools pass a client-controlled file_path through src/mcp_atlas...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73496/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-14T21:00:46.000Z ##

🟠 CVE-2026-73496 - High (7.7)

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the confluence_upload_attachment and confluence_upload_attachments tools pass a client-controlled file_path through src/mcp_atlas...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73496/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-91080
(7.5 HIGH)

EPSS: 0.59%

updated 2026-09-14T19:18:14.500000

2 posts

webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, allowing unauthenticated attackers to exhaust memory by sending oversized bodies. Attackers can send multi-gigabyte request bodies with invalid signatures to trigger out-of-memory conditions and crash the service.

thehackerwire@mastodon.social at 2026-09-14T20:00:27.000Z ##

🟠 CVE-2026-91080 - High (7.5)

webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, allowing unauthenticated attackers to exhaust memory by sending oversized bodies. Attackers can send multi-gigabyte request bodies with invalid signat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91080/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-14T20:00:27.000Z ##

🟠 CVE-2026-91080 - High (7.5)

webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, allowing unauthenticated attackers to exhaust memory by sending oversized bodies. Attackers can send multi-gigabyte request bodies with invalid signat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91080/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-59178
(9.8 CRITICAL)

EPSS: 0.42%

updated 2026-09-14T19:17:37.617000

2 posts

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to version 1.0.12, the dashboard reads its authentication credentials from `$ESPHOME_USERNAME` and `$ESPHOME_PASSWORD`. Earlier versions, and the legacy `esphome` dashboard, read the bare `$USERNAME` and `$PASSWORD` instead. When the env vars were renamed the bare names were dropped with no fallback, so

thehackerwire@mastodon.social at 2026-09-14T20:00:17.000Z ##

🔴 CVE-2026-59178 - Critical (9.8)

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to version 1.0.12, the dashboard reads its authentication credentials from `$ESPHOME_USERNAME` and `$ESPHOME_PASSWORD`. Earlier versions, and the legac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59178/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-14T20:00:17.000Z ##

🔴 CVE-2026-59178 - Critical (9.8)

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to version 1.0.12, the dashboard reads its authentication credentials from `$ESPHOME_USERNAME` and `$ESPHOME_PASSWORD`. Earlier versions, and the legac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59178/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-91079
(8.5 HIGH)

EPSS: 0.35%

updated 2026-09-14T18:31:35

2 posts

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images, enabling access to internal metadata services and network hosts.

thehackerwire@mastodon.social at 2026-09-14T19:01:55.000Z ##

🟠 CVE-2026-91079 - High (8.5)

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91079/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-14T19:01:55.000Z ##

🟠 CVE-2026-91079 - High (8.5)

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-91079/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-90946
(7.5 HIGH)

EPSS: 0.57%

updated 2026-09-14T18:31:29

2 posts

DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that accepts repo_url as a filesystem path with no containment. Attackers can supply arbitrary directory paths to read all files with supported extensions including Python, JavaScript, YAML, and JSON files containing hardcoded secrets and credentials.

thehackerwire@mastodon.social at 2026-09-14T19:01:45.000Z ##

🟠 CVE-2026-90946 - High (7.5)

DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that accepts repo_url as a filesystem path with no containment. Attackers can supply arbitrary directory paths to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90946/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-14T19:01:45.000Z ##

🟠 CVE-2026-90946 - High (7.5)

DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket endpoint that accepts repo_url as a filesystem path with no containment. Attackers can supply arbitrary directory paths to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90946/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-85921
(8.2 HIGH)

EPSS: 0.26%

updated 2026-09-14T18:31:29

2 posts

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

AAKL at 2026-09-14T17:40:55.319Z ##

Looks like Microsoft has a couple of new flaws.

NEW and CRITICAL: CVE-2026-85921: Windows Secure Kernel Mode Elevation of Privilege Vulnerabilityhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85921

NEW and CRITICAL: CVE-2026-85921: Windows Secure Kernel Mode Elevation of Privilege Vulnerability New https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85921 #infosec #Microsoft #vulnerability #Windows

##

AAKL@infosec.exchange at 2026-09-14T17:40:55.000Z ##

Looks like Microsoft has a couple of new flaws.

NEW and CRITICAL: CVE-2026-85921: Windows Secure Kernel Mode Elevation of Privilege Vulnerabilityhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85921

NEW and CRITICAL: CVE-2026-85921: Windows Secure Kernel Mode Elevation of Privilege Vulnerability New https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85921 #infosec #Microsoft #vulnerability #Windows

##

CVE-2026-90945
(9.8 CRITICAL)

EPSS: 0.53%

updated 2026-09-14T18:31:28

4 posts

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and execute code on worker nodes.

thehackerwire@mastodon.social at 2026-09-14T19:01:34.000Z ##

🔴 CVE-2026-90945 - Critical (9.8)

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90945/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

cR0w at 2026-09-14T18:49:58.905Z ##

Go fuck with some crawlers.

https://nvd.nist.gov/vuln/detail/cve-2026-90945

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and execute code on worker nodes.

##

thehackerwire@mastodon.social at 2026-09-14T19:01:34.000Z ##

🔴 CVE-2026-90945 - Critical (9.8)

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90945/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

cR0w@infosec.exchange at 2026-09-14T18:49:58.000Z ##

Go fuck with some crawlers.

https://nvd.nist.gov/vuln/detail/cve-2026-90945

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and execute code on worker nodes.

##

CVE-2026-57129
(7.5 HIGH)

EPSS: 0.44%

updated 2026-09-14T16:17:14.220000

2 posts

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, MentionsParser._process_file_mention accepts file-mention values and falls back from workspace-relative resolution to Path(file_path) without traversal, symlink, or workspace-boundary validation. Prompt input from users, bots, or workflows can therefore read arbitrary files accessible to the process, including credentials, k

thehackerwire@mastodon.social at 2026-09-14T16:00:27.000Z ##

updated 2026-09-14T15:32:07

2 posts

In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the message is queued A zerocopy send can fail after user pages have been pinned but before the message is attached to the sending socket. The purge path currently infers zerocopy state from rm->m_rs, so an unqueued message can be cleaned up as if it owned normal payload pages. Howev

1 repos

https://github.com/suominen/pintheft

secdb at 2026-09-14T22:14:36.215Z ##

🚨 ZcopyReaper (CVE-2026-43502) has been identified as a notable vulnerability.

In the Linux kernel, the following vulnerability has been resolved:

net/rds: handle zerocopy send cleanup before the message is queued

A zerocopy send can fail after user pages have been pinned but before
the message is attached to the sending socket.

The purge path currently infers zerocopy state from rm->m_rs, so an
unqueued message can be cleaned up as if it owned normal payload pages.
However, zerocopy ownership is really determined by the presence of
op_mmp_znotifier, regardless of whether the message has reached the
socket queue.

Capture op_mmp_znotifier up front in rds_message_purge() and use it as
the cleanup discriminator. If the message is already associated with a
socket, keep the existing completion path. Otherwise, drop the pinned
page accounting directly and release the notifier before putting the
payload pages.

This keeps early send failure cleanup consistent with the zerocopy
lifetime rules without changing the normal queued completion path.

ℹ️ Additional information on ZEN SecDB 👉 https://secdb.nttzen.cloud/cve/detail/CVE-2026-43502

#Infosec #ZcopyReaper #Linux #Kernel #LPE #CVE202643502
#NTTData #ZEN #SecDB

##

secdb@infosec.exchange at 2026-09-14T22:14:36.000Z ##

🚨 ZcopyReaper (CVE-2026-43502) has been identified as a notable vulnerability.

In the Linux kernel, the following vulnerability has been resolved:

net/rds: handle zerocopy send cleanup before the message is queued

A zerocopy send can fail after user pages have been pinned but before
the message is attached to the sending socket.

The purge path currently infers zerocopy state from rm->m_rs, so an
unqueued message can be cleaned up as if it owned normal payload pages.
However, zerocopy ownership is really determined by the presence of
op_mmp_znotifier, regardless of whether the message has reached the
socket queue.

Capture op_mmp_znotifier up front in rds_message_purge() and use it as
the cleanup discriminator. If the message is already associated with a
socket, keep the existing completion path. Otherwise, drop the pinned
page accounting directly and release the notifier before putting the
payload pages.

This keeps early send failure cleanup consistent with the zerocopy
lifetime rules without changing the normal queued completion path.

ℹ️ Additional information on ZEN SecDB 👉 https://secdb.nttzen.cloud/cve/detail/CVE-2026-43502

#Infosec #ZcopyReaper #Linux #Kernel #LPE #CVE202643502
#NTTData #ZEN #SecDB

##

CVE-2026-12258
(0 None)

EPSS: 0.40%

updated 2026-09-14T15:17:04.153000

2 posts

Inadequate access control in Hiperdino’s REST v1.0 API. The public endpoint ‘customer/check’ could allow an authenticated attacker to enter a telephone number or an email address. When the value entered belongs to a registered customer, the service returns the associated information (email address and telephone number). No authentication is required beyond a static bearer token, and there is no ra

offseq at 2026-09-14T13:30:25.596Z ##

Hiperdino REST API v1.0 (CVE-2026-12258) has a CRITICAL info disclosure flaw (CVSS 9.2): attackers with a static bearer token can enumerate user contact info via the 'customer/check' endpoint. No patch yet. Restrict token access & monitor usage. https://radar.offseq.com/threat/cve-2026-12258-cwe-284-improper-access-control-in-hiperdino-rest-api-827f2edf6294f9bd #OffSeq #infosec #APIsecurity

##

offseq@infosec.exchange at 2026-09-14T13:30:25.000Z ##

Hiperdino REST API v1.0 (CVE-2026-12258) has a CRITICAL info disclosure flaw (CVSS 9.2): attackers with a static bearer token can enumerate user contact info via the 'customer/check' endpoint. No patch yet. Restrict token access & monitor usage. https://radar.offseq.com/threat/cve-2026-12258-cwe-284-improper-access-control-in-hiperdino-rest-api-827f2edf6294f9bd #OffSeq #infosec #APIsecurity

##

CVE-2026-85706
(10.0 CRITICAL)

EPSS: 11.96%

updated 2026-09-14T14:22:15.323000

20 posts

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.

12 repos

https://github.com/0xlyvio/cve-2026-85706-poc-exploit-gitlab

https://github.com/0xenesbayram/cve-2026-85706

https://github.com/brigadeops32/CVE-2026-85706

https://github.com/guneykabel/cve-2026-85706

https://github.com/FlowerWitch/CVE-2026-85706_docker_exp

https://github.com/ynsmroztas/GitLabSniper

https://github.com/gabrielunknown/CVE-2026-85706

https://github.com/plur1bu5/gitread

https://github.com/jithinkrishnanrs/gitlab-cve-2026-85706-ioc

https://github.com/gagaltotal/CVE-2026-85706-gitlab-poc

https://github.com/mhtsec/CVE-2026-85706

https://github.com/solivaquaant/CVE-2026-85706

DailyCyberSecurity at 2026-09-16T04:17:24.317Z ##

Learn why CISA added GitLab CVE-2026-85706 to the Known Exploited Vulnerabilities catalog. Discover how this CVSS 10 flaw allows remote secret extraction.

#GitLab #CVE202685706 #CISA #CyberSecurity #Vulnerability

https://meterpreter.org/gitlab-cve-2026-85706-cisa-exploitation/?utm_source=mastodon&utm_medium=jetpack_social

##

eric.zip@bsky.brid.gy at 2026-09-16T02:09:52.270Z ##

Dropped some research and detection/hunt content on CVE-2026-85706 🤓

RE: https://bsky.app/profile/did:plc:lsvsraxh3ckc7frgv5p5d7gy/post/3mvl6a4xflz23

##

censys at 2026-09-15T15:32:12.849Z ##

🚨 GitLab CVE-2026-85706 is a critical CVSS 10.0 vulnerability under active exploitation.
Censys sees 86K+ GitLab hosts on the Internet.

Patch immediately. If your instance was exposed while vulnerable, rotate credentials and investigate for compromise. https://censys.com/advisory/cve-2026-85706/

#GitLab #Cybersecurity #Vulnerability #CVE

##

benzogaga33@mamot.fr at 2026-09-15T09:20:04.000Z ##

Comment la faille de GitLab peut mettre à nu vos serveurs https://goodtech.info/gitlab-faille-critique-cve-2026-85706-cisa-cert-fr/ #Développement #Revuedepresse #Sécurité

##

tierrasapiens@mastodon.social at 2026-09-15T06:11:10.000Z ##

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Maximum Severity GitLab Flaw Puts Supply Chains at Risk
🔗 https://www.darkreading.com/cyberattacks-data-breaches/maximum-severity-gitlab-flaw-supply-chains-risk

CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition instances.

##

hackmag at 2026-09-15T03:06:55.633Z ##

⚪️ Developers Urge Immediate Fix for Critical GitLab Vulnerability

🗨️ GitLab engineers have released patches for the critical CVE-2026-85706 vulnerability, which received the maximum CVSS score of 10 and allows an unauthenticated attacker to read arbitrary files on a server. Security researchers warn that attackers began attempting to exploit the…

🔗 https://hackmag.com/news/gitlab-patch?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

https://thecybermind.co/pcid

##

thecybermind at 2026-09-14T20:01:09.772Z ##

CRITICAL CISA KEV ALERT: CVE-2026-85706 targets GitLab CE/EE via path traversal in the repository commits API. Active exploitation verified. Access our TSUITE brief for SIEM detection queries and compensating controls to protect your CI/CD pipeline and isolate your secrets.

##

undercodenews@mastodon.social at 2026-09-14T19:34:00.000Z ##

GitLab CVE-2026-85706: A Critical Zero-Authentication Flaw Is Now Being Exploited in the Wild + Video

GitLab CVE-2026-85706: A Critical Zero-Authentication Flaw Is Now Being Exploited in the Wild Introduction: A GitLab Warning That Security Teams Cannot Ignore A critical GitLab vulnerability has rapidly moved from a newly patched security issue to an active exploitation concern. Tracked as CVE-2026-85706, the flaw carries the maximum CVSS score of 10.0 and affects…

https://undercodenews.com/gitlab-cve-2026-85706-a-critical-zero-authentication-flaw-is-now-being-exploited-in-the-wild-video/?utm_source=mastodon&utm_medium=jetpack_social

##

AAKL at 2026-09-14T17:47:44.652Z ##

New.

Rapid7: CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild https://www.rapid7.com/blog/post/etr-cve-2026-85706-critical-gitlab-path-traversal-exploited-in-the-wild/ @Rapid7Official #infosec #GitLab #vulnerability

##

decio at 2026-09-14T14:41:51.072Z ##

⚠️GitLab : CVE-2026-85706 est activement exploitée.

Une faille critique de traversée de répertoires permet à un attaquant non authentifié de lire des fichiers arbitraires sur le serveur.

Encore une vulnérabilité qui prend des chemins de traverse…
../../../../etc/ :dumpster_fire_gif: 👀

-->GitLab auto-hébergé exposé sur Internet : mise à jour rapide recommandée.

Correctifs : 19.1.8, 19.2.6 et 19.3.2.

La faille a déjà rejoint le catalogue KEV de la CISA, et ça commence clairement à renifler autour : watchTowr et plusieurs honeypots ont déjà vu passer des tentatives de probing.

Onyphe recense une bonne centaine d’instances vulnérables en CH aujourd'hui...

🩹
👇
https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/

🔍
👇
https://vulnerability.circl.lu/vuln/CVE-2026-85706

#CyberVeille #GitLab #CVE202685706

##

threatcodex at 2026-09-14T12:31:48.619Z ##

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
#CVE_2026_85706
https://www.rapid7.com/blog/post/etr-cve-2026-85706-critical-gitlab-path-traversal-exploited-in-the-wild/

##

DailyCyberSecurity@infosec.exchange at 2026-09-16T04:17:24.000Z ##

Learn why CISA added GitLab CVE-2026-85706 to the Known Exploited Vulnerabilities catalog. Discover how this CVSS 10 flaw allows remote secret extraction.

#GitLab #CVE202685706 #CISA #CyberSecurity #Vulnerability

https://meterpreter.org/gitlab-cve-2026-85706-cisa-exploitation/?utm_source=mastodon&utm_medium=jetpack_social

##

censys@infosec.exchange at 2026-09-15T15:32:12.000Z ##

🚨 GitLab CVE-2026-85706 is a critical CVSS 10.0 vulnerability under active exploitation.
Censys sees 86K+ GitLab hosts on the Internet.

Patch immediately. If your instance was exposed while vulnerable, rotate credentials and investigate for compromise. https://censys.com/advisory/cve-2026-85706/

#GitLab #Cybersecurity #Vulnerability #CVE

##

benzogaga33@mamot.fr at 2026-09-15T09:20:04.000Z ##

Comment la faille de GitLab peut mettre à nu vos serveurs https://goodtech.info/gitlab-faille-critique-cve-2026-85706-cisa-cert-fr/ #Développement #Revuedepresse #Sécurité

##

hackmag@infosec.exchange at 2026-09-15T03:06:55.000Z ##

⚪️ Developers Urge Immediate Fix for Critical GitLab Vulnerability

🗨️ GitLab engineers have released patches for the critical CVE-2026-85706 vulnerability, which received the maximum CVSS score of 10 and allows an unauthenticated attacker to read arbitrary files on a server. Security researchers warn that attackers began attempting to exploit the…

🔗 https://hackmag.com/news/gitlab-patch?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

https://thecybermind.co/pcid

##

thecybermind@infosec.exchange at 2026-09-14T20:01:09.000Z ##

CRITICAL CISA KEV ALERT: CVE-2026-85706 targets GitLab CE/EE via path traversal in the repository commits API. Active exploitation verified. Access our TSUITE brief for SIEM detection queries and compensating controls to protect your CI/CD pipeline and isolate your secrets.

##

AAKL@infosec.exchange at 2026-09-14T17:47:44.000Z ##

New.

Rapid7: CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild https://www.rapid7.com/blog/post/etr-cve-2026-85706-critical-gitlab-path-traversal-exploited-in-the-wild/ @Rapid7Official #infosec #GitLab #vulnerability

##

decio@infosec.exchange at 2026-09-14T14:41:51.000Z ##

⚠️GitLab : CVE-2026-85706 est activement exploitée.

Une faille critique de traversée de répertoires permet à un attaquant non authentifié de lire des fichiers arbitraires sur le serveur.

Encore une vulnérabilité qui prend des chemins de traverse…
../../../../etc/ :dumpster_fire_gif: 👀

-->GitLab auto-hébergé exposé sur Internet : mise à jour rapide recommandée.

Correctifs : 19.1.8, 19.2.6 et 19.3.2.

La faille a déjà rejoint le catalogue KEV de la CISA, et ça commence clairement à renifler autour : watchTowr et plusieurs honeypots ont déjà vu passer des tentatives de probing.

Onyphe recense une bonne centaine d’instances vulnérables en CH aujourd'hui...

🩹
👇
https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/

🔍
👇
https://vulnerability.circl.lu/vuln/CVE-2026-85706

#CyberVeille #GitLab #CVE202685706

##

threatcodex@infosec.exchange at 2026-09-14T12:31:48.000Z ##

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
#CVE_2026_85706
https://www.rapid7.com/blog/post/etr-cve-2026-85706-critical-gitlab-path-traversal-exploited-in-the-wild/

##

youranonnewsirc@nerdculture.de at 2026-09-14T10:26:20.000Z ##

Recent reports confirm a critical GitLab zero-day (CVE-2026-85706) exploited within 24 hours, alongside new EU Cyber Resilience Act mandates for 24-hour vulnerability reporting. Operational technology (OT) sectors face emerging ransomware threats. Meanwhile, leading AI developers advocate for a slowdown in development due to safety concerns, prompting market shifts. Geopolitically, the BRICS summit addressed rising global tensions and the "weaponization of technology."

#Cybersecurity #TechNews #Geopolitics

##

CVE-2026-73324
(4.3 MEDIUM)

updated 2026-09-14T12:31:50

2 posts

LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endpoint that passes the first client frame directly to pickle.loads(). Attackers can reach the Config Server port and send a malicious serialized payload with a __reduce__ method to execute arbitrary code with Config Server process privileges.

offseq at 2026-09-14T12:00:27.236Z ##

CVE-2026-90919: ModelTC LightLLM <=1.2.0 faces CRITICAL RCE risk. Unauthenticated /visual_register WebSocket lets attackers send malicious pickle data, leading to code execution. Patch or restrict access fast. https://radar.offseq.com/threat/cve-2026-90919-deserialization-of-untrusted-data-in-modeltc-lightllm-99a91583cd9500c2 #OffSeq #CVE202690919 #RCE #LightLLM

##

offseq@infosec.exchange at 2026-09-14T12:00:27.000Z ##

CVE-2026-90919: ModelTC LightLLM <=1.2.0 faces CRITICAL RCE risk. Unauthenticated /visual_register WebSocket lets attackers send malicious pickle data, leading to code execution. Patch or restrict access fast. https://radar.offseq.com/threat/cve-2026-90919-deserialization-of-untrusted-data-in-modeltc-lightllm-99a91583cd9500c2 #OffSeq #CVE202690919 #RCE #LightLLM

##

CVE-2026-12518
(0 None)

EPSS: 0.11%

updated 2026-09-14T11:17:02.930000

3 posts

A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM.

benzogaga33@mamot.fr at 2026-09-15T15:40:03.000Z ##

Logitech Options+ : une faille donne les privilèges SYSTEM à n’importe quel utilisateur Windows https://www.it-connect.fr/logitech-options-plus-faille-system-cve-2026-12518/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

##

cyberveille@mastobot.ping.moi at 2026-09-15T13:30:06.000Z ##

📢 [VULN] Logitech Options+ : une faille donne les privilèges SYSTEM à n’importe quel utilisateur Windows - CVE-2026-12518

C'est un simple logiciel destiné à configurer une souris ou un clavier, et pourtant Logitech Options+ contient une faille de sécurité permettant d'obtenir les privilèges SYSTEM sur Windows. Voici ce que l'on sait sur ce problème de sécurité.

🔗 https://www.it-connect.fr/logitech-options-plus-faille-system-cve-2026-12518/
💬 discussion : https://infosec.pub/post/52323085
#Vulnérabilité #CVE #Cyberveille

##

benzogaga33@mamot.fr at 2026-09-15T15:40:03.000Z ##

Logitech Options+ : une faille donne les privilèges SYSTEM à n’importe quel utilisateur Windows https://www.it-connect.fr/logitech-options-plus-faille-system-cve-2026-12518/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

##

CVE-2026-90608
(9.9 CRITICAL)

EPSS: 0.80%

updated 2026-09-14T03:30:29

2 posts

A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component boa. This manipulation of the argument service_type causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.

thehackerwire@mastodon.social at 2026-09-14T03:01:32.000Z ##

🔴 CVE-2026-90608 - Critical (9.9)

A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component boa. This manipulation of the argument service_type causes buffer overflow. It is possible...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90608/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-09-14T01:30:25.000Z ##

CVE-2026-90608: Totolink A3002MU routers have a CRITICAL buffer overflow (CVSS 9.4) in /boafrm/formPortFw. Exploit code is public; RCE possible. No patch — restrict external access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-90608-buffer-overflow-in-totolink-a3002mu-43328ea907451224 #OffSeq #CVE202690608 #RouterSecurity

##

CVE-2026-33963
(7.5 HIGH)

EPSS: 0.11%

updated 2026-09-14T03:30:29

1 posts

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the camera driver, causing a denial of service.

thehackerwire@mastodon.social at 2026-09-14T02:59:57.000Z ##

🟠 CVE-2026-33963 - High (7.5)

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the camera driver, causing a denial of service.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33963/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-31278
(7.7 HIGH)

EPSS: 0.15%

updated 2026-09-14T03:30:22

2 posts

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET request.

1 repos

https://github.com/mda1r/CVE-2026-31278

Matchbook3469@mastodon.social at 2026-09-14T13:16:46.000Z ##

🟠 New security advisory:

CVE-2026-31278 affects multiple systems.

• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-31278-biostar-2-leaks-ad-service-credentials-poc

updated 2026-09-14T00:16:56.777000

1 posts

updated 2026-09-13T12:31:19

1 posts

PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers can craft malicious rule rows with out-of-range Weight values to trigger out-of-bounds reads in the load_value array, causing the PostgreSQL backend process to crash and terminate all cluster sessions.

offseq@infosec.exchange at 2026-09-13T13:30:23.000Z ##

CVE-2026-90775: HIGH severity vuln in PostGIS address_standardizer (≤3.7.0) allows out-of-bounds read via unvalidated Weight parameter, crashing PostgreSQL backend (DoS). Patch status pending — monitor vendor updates. https://radar.offseq.com/threat/cve-2026-90775-out-of-bounds-read-in-postgis-addressstandardizer-b09887107f7082c5 #OffSeq #PostGIS #Vuln

##

CVE-2026-90779
(7.5 HIGH)

EPSS: 0.56%

updated 2026-09-13T12:31:19

1 posts

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process.

thehackerwire@mastodon.social at 2026-09-13T13:01:17.000Z ##

🟠 CVE-2026-90779 - High (7.5)

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90779/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-90561
(8.7 HIGH)

updated 2026-09-13T09:33:21

2 posts

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmi_add_smi() creates the nr_users and nr_msgs files before trying to create the maintenance_mode file. If that last creation fails, the error path removes only nr_users before dropping the final reference to the interface. Remove nr_msgs as well so no sysfs attribute embedd

hugovalters@mastodon.social at 2026-09-15T03:30:01.000Z ##

CVE-2026-81006 Linux kernel ipmi: failed registration leaves sysfs files on freed memory, risking use-after-free. CVSS N/A, patch status unknown. Update your kernel now. https://www.valtersit.com/cve/CVE-2026-81006/ #CVE #Linux #infosec

##

hugovalters@mastodon.social at 2026-09-15T03:30:01.000Z ##

CVE-2026-81006 Linux kernel ipmi: failed registration leaves sysfs files on freed memory, risking use-after-free. CVSS N/A, patch status unknown. Update your kernel now. https://www.valtersit.com/cve/CVE-2026-81006/ #CVE #Linux #infosec

##

CVE-2026-80980
(9.8 CRITICAL)

EPSS: 0.60%

updated 2026-09-13T09:33:21

1 posts

In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and out_of_sync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smc_connection and every store to one is a read-modify-write of the other two: u8 killed : 1; u8 freed : 1; u8 out_of_sync : 1; They are not written under a comm

hugovalters@mastodon.social at 2026-09-14T11:50:01.000Z ##

CVE-2026-80980 Linux kernel net/smc bitfield race - killed, freed, out_of_sync share one byte without a common lock, a data race that can corrupt connection state. CVSS N/A, patch status unknown/unpatched. Audit https://www.valtersit.com/cve/CVE-2026-80980/ #CVE #Linux #infosec

##

CVE-2026-89748
(7.8 HIGH)

EPSS: 0.15%

updated 2026-09-13T09:32:30

1 posts

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix retry exhaustion in simple ring buffer reader swap simple_ring_buffer_swap_reader_page() starts with retry set to 8 and post-decrements it only after a failed link replacement. On the final attempt, a successful replacement leaves retry at zero, while a failed replacement leaves it at -1. The current !retry test re

thehackerwire@mastodon.social at 2026-09-13T16:01:07.000Z ##

🟠 CVE-2026-89748 - High (7.8)

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix retry exhaustion in simple ring buffer reader swap

simple_ring_buffer_swap_reader_page() starts with retry set to 8 and
post-decrements it only after a failed link ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89748/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-89758
(7.8 HIGH)

EPSS: 0.14%

updated 2026-09-13T09:32:30

updated 2026-09-11T21:31:17

9 posts

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConnect servers are not impacted.

beyondmachines1 at 2026-09-15T11:01:13.932Z ##

ConnectWise Patches Critical ScreenConnect Flaw Exploited in Worm Attacks

ConnectWise fixed a critical vulnerability (CVE-2026-84869) in ScreenConnect that allows unauthorized file execution and worm-like propagation across remote sessions.

**If you use ConnectWise ScreenConnect, update to version 26.6.5 right away and then reinstall every host client. The update only takes effect once the clients are reinstalled, and this flaw is already being exploited to spread from machine to machine. If you can't patch, turn off the TransferFiles permission for all user roles as a mitigating measures. Don't forget to check integrated tools like ConnectWise Automate for their own patched versions.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/connectwise-patches-critical-screenconnect-flaw-exploited-in-worm-attacks-n-t-h-f-x/gD2P6Ple2L

##

security_crawler_carl at 2026-09-14T19:46:27.876Z ##

🏆 New Achievement! The Help Desk Has Turned Against You!

PHASE ONE: ConnectWise ScreenConnect, your trusted remote support companion, enters the arena. PHASE TWO: CVE-2026-84869 awakens — CVSS 9.9, the kind of score that makes sysadmins physically leave their bodies. PHASE THREE: the worm-like propagation begins, chaining active remote sessions into unauthorized file transfers and full remote code execution. Huntress confirmed real-world exploitation. (1/2)

##

undercodenews@mastodon.social at 2026-09-14T19:33:56.000Z ##

ConnectWise ScreenConnect Flaw Turns Remote Support Into a Worm-Like Attack Engine + Video

A Critical Vulnerability With a Dangerous Twist ConnectWise has rushed out an emergency security update for its ScreenConnect remote access and support platform after a critical vulnerability was exploited in real-world attacks. Tracked as CVE-2026-84869 and rated 9.9 out of 10, the flaw is particularly dangerous because attackers can potentially abuse an active remote session to…

https://undercodenews.com/connectwise-screenconnect-flaw-turns-remote-support-into-a-worm-like-attack-engine-video/?utm_source=mastodon&utm_medium=jetpack_social

##

thecybermind at 2026-09-14T14:01:07.511Z ##

CRITICAL CISA KEV ALERT: CVE-2026-84869 targets ConnectWise ScreenConnect with unauthorized file transfer and RCE. Active exploitation verified. Access our TSUITE brief for Splunk, Sentinel, QRadar queries, and endpoint hardening steps to protect your environment. https://thecybermind.co/g5ob

##

beyondmachines1@infosec.exchange at 2026-09-15T11:01:13.000Z ##

ConnectWise Patches Critical ScreenConnect Flaw Exploited in Worm Attacks

ConnectWise fixed a critical vulnerability (CVE-2026-84869) in ScreenConnect that allows unauthorized file execution and worm-like propagation across remote sessions.

**If you use ConnectWise ScreenConnect, update to version 26.6.5 right away and then reinstall every host client. The update only takes effect once the clients are reinstalled, and this flaw is already being exploited to spread from machine to machine. If you can't patch, turn off the TransferFiles permission for all user roles as a mitigating measures. Don't forget to check integrated tools like ConnectWise Automate for their own patched versions.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/connectwise-patches-critical-screenconnect-flaw-exploited-in-worm-attacks-n-t-h-f-x/gD2P6Ple2L

##

security_crawler_carl@infosec.exchange at 2026-09-14T19:46:27.000Z ##

🏆 New Achievement! The Help Desk Has Turned Against You!

PHASE ONE: ConnectWise ScreenConnect, your trusted remote support companion, enters the arena. PHASE TWO: CVE-2026-84869 awakens — CVSS 9.9, the kind of score that makes sysadmins physically leave their bodies. PHASE THREE: the worm-like propagation begins, chaining active remote sessions into unauthorized file transfers and full remote code execution. Huntress confirmed real-world exploitation. (1/2)

##

thecybermind@infosec.exchange at 2026-09-14T14:01:07.000Z ##

CRITICAL CISA KEV ALERT: CVE-2026-84869 targets ConnectWise ScreenConnect with unauthorized file transfer and RCE. Active exploitation verified. Access our TSUITE brief for Splunk, Sentinel, QRadar queries, and endpoint hardening steps to protect your environment. https://thecybermind.co/g5ob

##

cyberworldops@infosec.exchange at 2026-09-14T10:20:01.000Z ##

ConnectWise patched CVE-2026-84869, a critical ScreenConnect authorization flaw allowing file transfer and execution via active sessions. Huntress reports worm-like exploitation since August 20. It enables lateral spread without host confirmation, requiring immediate patching and session review. #ScreenConnect #CyberSecurity #InfoSec

https://cyberworldops.eu/en/critical-screenconnect-flaw-fuels-worm-like-attacks-through-active

##

offseq@infosec.exchange at 2026-09-14T09:00:25.000Z ##

ConnectWise ScreenConnect CRITICAL vuln (CVE-2026-84869) exploited in worm-like attacks — unauthorized file transfer & execution via remote sessions in versions <26.6.5. Patch to 26.6.5 now or disable TransferFiles. https://radar.offseq.com/threat/connectwise-patches-screenconnect-vulnerability-exploited-in-worm-like-attacks-c3e27ae69aeeacb1 #OffSeq #Cybersecurity #Vuln #CISA

##

CVE-2026-42016
(8.1 HIGH)

EPSS: 0.89%

updated 2026-09-11T21:31:06

3 posts

JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

thecybermind at 2026-09-14T17:10:44.668Z ##

CRITICAL CISA KEV ALERT: CVE-2026-42016 targets JFrog Artifactory via incorrect authorization and token scope flaws. Active exploitation verified. Access our TSUITE brief for Splunk, Sentinel, QRadar queries, and endpoint hardening steps to secure your software pipelines.

https://thecybermind.co/4u1b

##

cyberveille@mastobot.ping.moi at 2026-09-14T16:30:05.000Z ##

📢 Exploitation active de trois vulnérabilités critiques dans JFrog Artifactory

🔍 Contexte : Le 10 septembre 2026, Wiz Research publie une analyse technique détaillant l'exploitation active en conditions réelles de trois vulnérabilités critiques et de haute sévérité affectant JFrog Artifactory.

📖 cyberveille : https://cyberveille.ch/posts/2026-09-14-exploitation-active-de-trois-vulnerabilites-critiques-dans-jfrog-artifactory/
🌐 source : https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201
🟢 vérification factuelle haute
#JFrogArtifactory #ExploitationActive #Cyberveille

##

thecybermind@infosec.exchange at 2026-09-14T17:10:44.000Z ##

CRITICAL CISA KEV ALERT: CVE-2026-42016 targets JFrog Artifactory via incorrect authorization and token scope flaws. Active exploitation verified. Access our TSUITE brief for Splunk, Sentinel, QRadar queries, and endpoint hardening steps to secure your software pipelines.

https://thecybermind.co/4u1b

##

CVE-2026-59971
(10.0 CRITICAL)

EPSS: 0.00%

updated 2026-09-11T20:36:20

2 posts

## Summary In SSE/HTTP transport mode, `mysql_mcp_server` constructs `SseServerTransport` without passing `security_settings`. As a result, the MCP Python SDK's DNS-rebinding protection (Origin/Host header validation) is disabled; the Starlette application has no CORS or TrustedHost middleware; and the service binds to `0.0.0.0` by default with no authentication on any route. **Trigger condition

thehackerwire@mastodon.social at 2026-09-15T16:01:54.000Z ##

🔴 CVE-2026-59971 - Critical (10)

MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCP_TRANSPORT=sse causes src/mysql_mcp_server/server.py to construct SseServerTransport without security_settings or ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59971/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-15T16:01:54.000Z ##

🔴 CVE-2026-59971 - Critical (10)

MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCP_TRANSPORT=sse causes src/mysql_mcp_server/server.py to construct SseServerTransport without security_settings or ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59971/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-81861
(0 None)

EPSS: 0.38%

updated 2026-09-11T20:19:13.263000

2 posts

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.

1 repos

https://github.com/abhinavagarwal07/scadapack-secure-lock-poc

cyberworldops at 2026-09-15T18:50:00.545Z ##

Schneider Electric disclosed CVE-2026-81861 (CWE-522) affecting SCADAPack x70 RTUs. Legacy Secure Lock insufficiently protects credentials, exposing RTU authentication data. Exposed credentials matter for OT as they can enable unauthorized access to monitoring and control functions. #IcsSecurity #ScadaSecurity #OtSecurity

updated 2026-09-11T17:35:21.440000

1 posts

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the sync_server daemon on TCP port 13136. The daemon interpolates attacker-controlled filename input containing shell metacharacters into a shell command string vi

secdb@infosec.exchange at 2026-09-14T00:02:28.000Z ##

📈 CVE Published in last 7 days (2026-09-07 - 2026-09-07)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 346
- High: 1713
- Medium: 1297
- Low: 177
- None: 301

Status:
- : 75
- Analyzed: 817
- Awaiting Analysis: 956
- Deferred: 771
- Modified: 23
- Received: 764
- Rejected: 23
- Undergoing Analysis: 405

CISA KEVs:
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)

Top CNAs:
- Microsoft Corporation: 967
- kernel.org: 443
- VulnCheck: 349
- Chrome: 230
- Adobe Systems Incorporated: 168
- VulDB: 156
- GitHub, Inc.: 134
- MITRE: 125
- Dell: 115
- WPScan: 105

Top Affected Products:
- UNKNOWN: 2097
- Microsoft Windows Server 2025: 676
- Microsoft Windows Server 2022: 638
- Microsoft Windows 11 24h2: 626
- Microsoft Windows 11 25h2: 625
- Microsoft Windows 11 26h1: 625
- Microsoft Windows Server 2019: 613
- Microsoft Windows 10 1809: 609
- Microsoft Windows 11 23h2: 599
- Microsoft Windows 10 22h2: 566

##

CVE-2026-17176
(0 None)

EPSS: 3.59%

updated 2026-09-11T15:21:12.850000

1 posts

An OS command injection vulnerability in the TDDP module of Deco BE11000 allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet. Successful exploitation may lead to complete device compromise, including unauthorized command execution, modification of device settings, and loss of confidentiality, integrity, and availability

secdb@infosec.exchange at 2026-09-14T00:02:28.000Z ##

📈 CVE Published in last 7 days (2026-09-07 - 2026-09-07)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 346
- High: 1713
- Medium: 1297
- Low: 177
- None: 301

Status:
- : 75
- Analyzed: 817
- Awaiting Analysis: 956
- Deferred: 771
- Modified: 23
- Received: 764
- Rejected: 23
- Undergoing Analysis: 405

CISA KEVs:
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)

Top CNAs:
- Microsoft Corporation: 967
- kernel.org: 443
- VulnCheck: 349
- Chrome: 230
- Adobe Systems Incorporated: 168
- VulDB: 156
- GitHub, Inc.: 134
- MITRE: 125
- Dell: 115
- WPScan: 105

Top Affected Products:
- UNKNOWN: 2097
- Microsoft Windows Server 2025: 676
- Microsoft Windows Server 2022: 638
- Microsoft Windows 11 24h2: 626
- Microsoft Windows 11 25h2: 625
- Microsoft Windows 11 26h1: 625
- Microsoft Windows Server 2019: 613
- Microsoft Windows 10 1809: 609
- Microsoft Windows 11 23h2: 599
- Microsoft Windows 10 22h2: 566

https://cyberworldops.eu/en/orthanc-dicom-server-flaw-allows-authenticated-attackers-to-corrupt

##

CVE-2026-87020
(8.1 HIGH)

EPSS: 0.56%

updated 2026-09-11T15:17:06.937000

1 posts

An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG.

cyberworldops@infosec.exchange at 2026-09-13T18:50:01.000Z ##

Orthanc DICOM Server is affected by CVE-2026-87020, an integer overflow in image pitch calculation enabling authenticated heap out-of-bounds write via malicious PNG. It matters for clinical environments where exploitation risks service disruption and imaging integrity. #OrthancServer #DicomSecurity #HeapCorruption

##

CVE-2026-86060
(9.8 CRITICAL)

EPSS: 1.06%

updated 2026-09-11T12:52:16.507000

2 posts

RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS login helper.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable

1 repos

https://github.com/bahirul/cve-2026-86060

thecybermind at 2026-09-14T18:30:04.775Z ##

CRITICAL CISA KEV ALERT: CVE-2026-86060 targets MikroTik RouterOS via improper argument delimiter neutralization and command injection. Active exploitation verified. Access our TSUITE brief for hardening steps and network segmentation protocols to secure your perimeter.

https://thecybermind.co/957k

##

thecybermind@infosec.exchange at 2026-09-14T18:30:04.000Z ##

CRITICAL CISA KEV ALERT: CVE-2026-86060 targets MikroTik RouterOS via improper argument delimiter neutralization and command injection. Active exploitation verified. Access our TSUITE brief for hardening steps and network segmentation protocols to secure your perimeter.

https://thecybermind.co/957k

##

CVE-2026-82079
(8.4 HIGH)

EPSS: 0.16%

updated 2026-09-11T03:31:25

2 posts

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0.

DailyCyberSecurity at 2026-09-14T13:11:53.355Z ##

Discover the dangerous Nintendo Switch QR code vulnerability (CVE-2026-82079) allowing hackers to execute code. Learn how system update 23.0.0 fixes it.

#NintendoSwitch #CyberSecurity #CVE202682079 #QRCode #Vulnerability

https://meterpreter.org/nintendo-switch-qr-code-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-09-14T13:11:53.000Z ##

Discover the dangerous Nintendo Switch QR code vulnerability (CVE-2026-82079) allowing hackers to execute code. Learn how system update 23.0.0 fixes it.

#NintendoSwitch #CyberSecurity #CVE202682079 #QRCode #Vulnerability

https://meterpreter.org/nintendo-switch-qr-code-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-65638
(0 None)

EPSS: 3.20%

updated 2026-09-10T19:54:25.810000

1 posts

Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection. The vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed t

secdb@infosec.exchange at 2026-09-14T00:02:28.000Z ##

📈 CVE Published in last 7 days (2026-09-07 - 2026-09-07)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 346
- High: 1713
- Medium: 1297
- Low: 177
- None: 301

Status:
- : 75
- Analyzed: 817
- Awaiting Analysis: 956
- Deferred: 771
- Modified: 23
- Received: 764
- Rejected: 23
- Undergoing Analysis: 405

CISA KEVs:
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)

Top CNAs:
- Microsoft Corporation: 967
- kernel.org: 443
- VulnCheck: 349
- Chrome: 230
- Adobe Systems Incorporated: 168
- VulDB: 156
- GitHub, Inc.: 134
- MITRE: 125
- Dell: 115
- WPScan: 105

Top Affected Products:
- UNKNOWN: 2097
- Microsoft Windows Server 2025: 676
- Microsoft Windows Server 2022: 638
- Microsoft Windows 11 24h2: 626
- Microsoft Windows 11 25h2: 625
- Microsoft Windows 11 26h1: 625
- Microsoft Windows Server 2019: 613
- Microsoft Windows 10 1809: 609
- Microsoft Windows 11 23h2: 599
- Microsoft Windows 10 22h2: 566

##

CVE-2026-81467
(9.8 CRITICAL)

EPSS: 3.84%

updated 2026-09-10T18:33:04

1 posts

Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

secdb@infosec.exchange at 2026-09-14T00:02:28.000Z ##

📈 CVE Published in last 7 days (2026-09-07 - 2026-09-07)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 346
- High: 1713
- Medium: 1297
- Low: 177
- None: 301

Status:
- : 75
- Analyzed: 817
- Awaiting Analysis: 956
- Deferred: 771
- Modified: 23
- Received: 764
- Rejected: 23
- Undergoing Analysis: 405

CISA KEVs:
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)

Top CNAs:
- Microsoft Corporation: 967
- kernel.org: 443
- VulnCheck: 349
- Chrome: 230
- Adobe Systems Incorporated: 168
- VulDB: 156
- GitHub, Inc.: 134
- MITRE: 125
- Dell: 115
- WPScan: 105

Top Affected Products:
- UNKNOWN: 2097
- Microsoft Windows Server 2025: 676
- Microsoft Windows Server 2022: 638
- Microsoft Windows 11 24h2: 626
- Microsoft Windows 11 25h2: 625
- Microsoft Windows 11 26h1: 625
- Microsoft Windows Server 2019: 613
- Microsoft Windows 10 1809: 609
- Microsoft Windows 11 23h2: 599
- Microsoft Windows 10 22h2: 566

##

CVE-2026-81468
(9.1 CRITICAL)

EPSS: 2.28%

updated 2026-09-10T18:33:03

1 posts

Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

secdb@infosec.exchange at 2026-09-14T00:02:28.000Z ##

📈 CVE Published in last 7 days (2026-09-07 - 2026-09-07)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 346
- High: 1713
- Medium: 1297
- Low: 177
- None: 301

Status:
- : 75
- Analyzed: 817
- Awaiting Analysis: 956
- Deferred: 771
- Modified: 23
- Received: 764
- Rejected: 23
- Undergoing Analysis: 405

CISA KEVs:
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)

Top CNAs:
- Microsoft Corporation: 967
- kernel.org: 443
- VulnCheck: 349
- Chrome: 230
- Adobe Systems Incorporated: 168
- VulDB: 156
- GitHub, Inc.: 134
- MITRE: 125
- Dell: 115
- WPScan: 105

Top Affected Products:
- UNKNOWN: 2097
- Microsoft Windows Server 2025: 676
- Microsoft Windows Server 2022: 638
- Microsoft Windows 11 24h2: 626
- Microsoft Windows 11 25h2: 625
- Microsoft Windows 11 26h1: 625
- Microsoft Windows Server 2019: 613
- Microsoft Windows 10 1809: 609
- Microsoft Windows 11 23h2: 599
- Microsoft Windows 10 22h2: 566

https://github.com/DiegoArias008/CVE-2026-20079-checker

##

CVE-2026-20079
(10.0 CRITICAL)

EPSS: 75.75%

updated 2026-09-10T12:48:17.580000

1 posts

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.  This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this v

3 repos

https://github.com/CyberAuth/CVE-2026-20079

https://github.com/0xBlackash/CVE-2026-20079

8bitsecurity@mastodon.social at 2026-09-14T07:05:00.000Z ##

🔎 NEXUS8 WEEKLY DIGEST · 💥 EXPLOIT

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. The vulnerability…

Also tracked this week: Hackers exploit Sangoma Switchvox flaw to deploy reverse… · Microsoft Plugs Nearly 1,000…

https://nexus8.8bitsecurity.com/entity/signal_event-6576247

##

CVE-2025-25249
(8.1 HIGH)

EPSS: 2.40%

updated 2026-09-10T12:47:59.933000

1 posts

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

DailyCyberSecurity@infosec.exchange at 2026-09-14T07:16:02.000Z ##

Discover how the PivotC2 FortiGate RAT uses CVE-2025-25249 exploitation to harvest credentials and tunnel traffic across corporate network environments.

#PivotC2 #FortiGate #Malware #Cybercrime #CVE202525249

http://securityonline.info/pivotc2-fortigate-rat/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-85103
(9.8 CRITICAL)

EPSS: 0.36%

updated 2026-09-10T04:18:18.390000

2 posts

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

threatnoir@infosec.exchange at 2026-09-14T02:05:45.000Z ##

⚠️ CRITICAL: Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

Two critical remote code execution vulnerabilities in Check Point VPN (CVE-2026-85102 and CVE-2026-85103) are facing imminent exploitation. Any organization running affected Check Point VPN appliances is at immediate risk of full system compromise. Unpatched instances are likely to be targeted with…

https://thecybersecguru.com/news/check-point-vpn-cve-2026-85102-cve-2026-85103/

🤖 AI generated summary

##

guru@thecybersecguru.com at 2026-09-13T13:02:46.000Z ##

Check Point patches two critical VPN gateway flaws scoring 9.8 on CVSS

Check Point patches two critical VPN vulnerabilities, CVE-2026-85102 and CVE-2026-85103, rated CVSS 9.8 and capable of unauthenticated remote code execution

##

CVE-2026-87491
(8.8 HIGH)

EPSS: 1.00%

updated 2026-09-09T21:31:35

1 posts

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

2 repos

https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.

https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter

CapTechGroup@mastodon.social at 2026-09-15T12:46:42.000Z ##

BlueMoon chain: CVE-2026-85046 for arbitrary read/write in the Chrome V8 sandbox, CVE-2026-87491 to escape the browser sandbox, CVE-2026-85880 (Windows ALPC) to inject into the Chrome process. Delivery: reflected XSS on a...

https://captechgroup.com/threat-intelligence-center/china-linked-apt31-exploits-chrome-and-windows-zer-4c1c3d?utm_source=mastodon&utm_medium=social&utm_campaign=threat_intel&utm_content=china-linked-apt31-exploits-chrome-and-windows-zero-day-chain-to-deploy-grimwedg

##

CVE-2026-58113
(6.1 MEDIUM)

EPSS: 0.22%

updated 2026-09-09T16:17:03.483000

2 posts

A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Teamcenter V2606 (All versions < V2606.2607). Affected applications do not properly encode user-supplied input reflected into HTML attribute contexts within the authentication redirect flow (/auth/ endpoint). This could al

cyberworldops at 2026-09-16T04:50:00.761Z ##

Siemens patched CVE-2026-58113, a reflected XSS (CWE-79) in Teamcenter /auth/ redirect flow. An unauthenticated attacker can craft a URL executing JavaScript in an authenticated user's session. Update all four affected branches. #SiemensTeamcenter #CrossSiteScripting #PatchManagement

https://cyberworldops.eu/en/siemens-patches-teamcenter-authentication-redirect-xss-across-four

##

cyberworldops@infosec.exchange at 2026-09-16T04:50:00.000Z ##

Siemens patched CVE-2026-58113, a reflected XSS (CWE-79) in Teamcenter /auth/ redirect flow. An unauthenticated attacker can craft a URL executing JavaScript in an authenticated user's session. Update all four affected branches. #SiemensTeamcenter #CrossSiteScripting #PatchManagement

https://cyberworldops.eu/en/siemens-patches-teamcenter-authentication-redirect-xss-across-four

##

CVE-2026-87827
(0 None)

EPSS: 1.07%

updated 2026-09-09T15:37:49.157000

2 posts

Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potentially resulting in complete compromise of the DVR. The vulnerability is known to have been exploited in t

DailyCyberSecurity at 2026-09-15T01:53:00.192Z ##

CVE-2026-87827 (CVSS 10) is a KGUARD DVR vulnerability exploited by the Mirai botnet for unauthenticated RCE and complete device compromise.

#KGUARD #DVR #CVE202687827 #Mirai #Botnet #IoTSecurity #RCE #DDoS #ExploitedInTheWild #InfoSec

https://securityonline.info/cve-2026-87827-kguard-dvr-mirai/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-09-15T01:53:00.000Z ##

CVE-2026-87827 (CVSS 10) is a KGUARD DVR vulnerability exploited by the Mirai botnet for unauthenticated RCE and complete device compromise.

#KGUARD #DVR #CVE202687827 #Mirai #Botnet #IoTSecurity #RCE #DDoS #ExploitedInTheWild #InfoSec

https://securityonline.info/cve-2026-87827-kguard-dvr-mirai/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-85102
(9.8 CRITICAL)

EPSS: 0.33%

updated 2026-09-09T15:35:15

2 posts

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

threatnoir@infosec.exchange at 2026-09-14T02:05:45.000Z ##

⚠️ CRITICAL: Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

Two critical remote code execution vulnerabilities in Check Point VPN (CVE-2026-85102 and CVE-2026-85103) are facing imminent exploitation. Any organization running affected Check Point VPN appliances is at immediate risk of full system compromise. Unpatched instances are likely to be targeted with…

https://thecybersecguru.com/news/check-point-vpn-cve-2026-85102-cve-2026-85103/

🤖 AI generated summary

##

guru@thecybersecguru.com at 2026-09-13T13:02:46.000Z ##

Check Point patches two critical VPN gateway flaws scoring 9.8 on CVSS

Check Point patches two critical VPN vulnerabilities, CVE-2026-85102 and CVE-2026-85103, rated CVSS 9.8 and capable of unauthenticated remote code execution

##

CVE-2026-56711
(8.8 HIGH)

EPSS: 0.11%

updated 2026-09-09T15:35:15

1 posts

VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as i_bytes += p->i_pitch * p->i_lines, and both plane_t fields are declared int in include/vlc_picture.h, so the multiplication is evaluated at 32 bits and wraps before it is widened to the size_t accumulator.

beyondmachines1@infosec.exchange at 2026-09-13T17:01:13.000Z ##

VLC Media Player Flaws Allow Heap Corruption and Sensitive Data Disclosure

VideoLAN reports two vulnerabilities in VLC Media Player (CVE-2026-56711 and CVE-2026-73324) that allow attackers to corrupt heap memory or leak sensitive data via crafted PNG files and RTSP streams.

**If you use VLC Media Player (any version from 3.0.0 to 3.0.23), update it to the latest patched version as soon as VideoLAN releases it. Until you've updated, don't open media files, playlists, or RTSP streaming links that come from people or websites you don't know and trust.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/vlc-media-player-flaws-allow-heap-corruption-and-sensitive-data-disclosure-6-k-q-2-9/gD2P6Ple2L

##

CVE-2026-86218
(9.8 CRITICAL)

EPSS: 0.74%

updated 2026-09-09T05:18:19.490000

1 posts

N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.

3 repos

https://github.com/jithinkrishnanrs/CVE-2026-86218-N-central-IOC-Toolkit

https://github.com/Udyz/CVE-2026-86218

https://github.com/HORKimhab/CVE-2026-86218

DailyCyberSecurity@infosec.exchange at 2026-09-14T02:34:52.000Z ##

CVE-2026-86218, a CVSS 10 N-central vulnerability, is exploited in the wild for remote code execution. A public Metasploit PoC is out. Patch now.

#Nable #Ncentral #CVE202686218 #Cybersecurity #InfoSec

https://securityonline.info/n-able-n-central-vulnerability-exploited-poc/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-85880
(7.8 HIGH)

EPSS: 0.57%

updated 2026-09-09T05:18:19.193000

3 posts

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

CapTechGroup@mastodon.social at 2026-09-15T12:46:42.000Z ##

BlueMoon chain: CVE-2026-85046 for arbitrary read/write in the Chrome V8 sandbox, CVE-2026-87491 to escape the browser sandbox, CVE-2026-85880 (Windows ALPC) to inject into the Chrome process. Delivery: reflected XSS on a...

https://captechgroup.com/threat-intelligence-center/china-linked-apt31-exploits-chrome-and-windows-zer-4c1c3d?utm_source=mastodon&utm_medium=social&utm_campaign=threat_intel&utm_content=china-linked-apt31-exploits-chrome-and-windows-zero-day-chain-to-deploy-grimwedg

##

youranonnewsirc@nerdculture.de at 2026-09-15T04:26:24.000Z ##

Microsoft's September 2026 Patch Tuesday addressed a record 974 vulnerabilities, including two actively exploited zero-days (CVE-2026-85880, CVE-2026-81963) allowing privilege escalation. Anthropic also revealed Russia-linked cyber-espionage groups are using Claude AI for hacking operations targeting government and defense organizations. Geopolitically, China is hosting a defense forum amid rising regional tensions over Taiwan and the South China Sea. In technology, OpenAI delayed its IPO beyond 2026, advocating for a global AI development slowdown.

##

youranonnewsirc@nerdculture.de at 2026-09-15T04:26:24.000Z ##

Microsoft's September 2026 Patch Tuesday addressed a record 974 vulnerabilities, including two actively exploited zero-days (CVE-2026-85880, CVE-2026-81963) allowing privilege escalation. Anthropic also revealed Russia-linked cyber-espionage groups are using Claude AI for hacking operations targeting government and defense organizations. Geopolitically, China is hosting a defense forum amid rising regional tensions over Taiwan and the South China Sea. In technology, OpenAI delayed its IPO beyond 2026, advocating for a global AI development slowdown.

##

CVE-2026-81963
(7.8 HIGH)

EPSS: 0.63%

updated 2026-09-09T05:18:17.173000

2 posts

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

youranonnewsirc@nerdculture.de at 2026-09-15T04:26:24.000Z ##

Microsoft's September 2026 Patch Tuesday addressed a record 974 vulnerabilities, including two actively exploited zero-days (CVE-2026-85880, CVE-2026-81963) allowing privilege escalation. Anthropic also revealed Russia-linked cyber-espionage groups are using Claude AI for hacking operations targeting government and defense organizations. Geopolitically, China is hosting a defense forum amid rising regional tensions over Taiwan and the South China Sea. In technology, OpenAI delayed its IPO beyond 2026, advocating for a global AI development slowdown.

##

youranonnewsirc@nerdculture.de at 2026-09-15T04:26:24.000Z ##

Microsoft's September 2026 Patch Tuesday addressed a record 974 vulnerabilities, including two actively exploited zero-days (CVE-2026-85880, CVE-2026-81963) allowing privilege escalation. Anthropic also revealed Russia-linked cyber-espionage groups are using Claude AI for hacking operations targeting government and defense organizations. Geopolitically, China is hosting a defense forum amid rising regional tensions over Taiwan and the South China Sea. In technology, OpenAI delayed its IPO beyond 2026, advocating for a global AI development slowdown.

https://github.com/dinosn/cve-2026-75650-magento-validation-lab

##

CVE-2026-75650
(10.0 CRITICAL)

EPSS: 2.15%

updated 2026-09-09T05:18:07.237000

3 posts

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

5 repos

https://github.com/disrex-group/stylesmuggler-adobe-patches

https://github.com/fortbridge/stylesmuggler

https://github.com/disrex-group/stylesmuggler-adobe-patches-mageos

https://github.com/jithinkrishnanrs/stylesmuggler-ioc-toolkit

threatcodex at 2026-09-15T14:30:56.587Z ##

CVE-2026-75650: StyleSmuggler — Critical RCE in Adobe Commerce and Magento
#CVE_2026_75650 #AdobeCommerce
https://www.akamai.com/blog/security-research/2026/sep/cve-2026-75650-stylesmuggler-adobe-commerce-magento

##

threatcodex@infosec.exchange at 2026-09-15T14:30:56.000Z ##

CVE-2026-75650: StyleSmuggler — Critical RCE in Adobe Commerce and Magento
#CVE_2026_75650 #AdobeCommerce
https://www.akamai.com/blog/security-research/2026/sep/cve-2026-75650-stylesmuggler-adobe-commerce-magento

##

secdb@infosec.exchange at 2026-09-14T00:02:28.000Z ##

📈 CVE Published in last 7 days (2026-09-07 - 2026-09-07)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 346
- High: 1713
- Medium: 1297
- Low: 177
- None: 301

Status:
- : 75
- Analyzed: 817
- Awaiting Analysis: 956
- Deferred: 771
- Modified: 23
- Received: 764
- Rejected: 23
- Undergoing Analysis: 405

CISA KEVs:
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)

Top CNAs:
- Microsoft Corporation: 967
- kernel.org: 443
- VulnCheck: 349
- Chrome: 230
- Adobe Systems Incorporated: 168
- VulDB: 156
- GitHub, Inc.: 134
- MITRE: 125
- Dell: 115
- WPScan: 105

Top Affected Products:
- UNKNOWN: 2097
- Microsoft Windows Server 2025: 676
- Microsoft Windows Server 2022: 638
- Microsoft Windows 11 24h2: 626
- Microsoft Windows 11 25h2: 625
- Microsoft Windows 11 26h1: 625
- Microsoft Windows Server 2019: 613
- Microsoft Windows 10 1809: 609
- Microsoft Windows 11 23h2: 599
- Microsoft Windows 10 22h2: 566

##

CVE-2026-12745
(9.8 CRITICAL)

EPSS: 2.09%

updated 2026-09-08T15:32:04

1 posts

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.

secdb@infosec.exchange at 2026-09-14T00:02:28.000Z ##

📈 CVE Published in last 7 days (2026-09-07 - 2026-09-07)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 346
- High: 1713
- Medium: 1297
- Low: 177
- None: 301

Status:
- : 75
- Analyzed: 817
- Awaiting Analysis: 956
- Deferred: 771
- Modified: 23
- Received: 764
- Rejected: 23
- Undergoing Analysis: 405

CISA KEVs:
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)

Top CNAs:
- Microsoft Corporation: 967
- kernel.org: 443
- VulnCheck: 349
- Chrome: 230
- Adobe Systems Incorporated: 168
- VulDB: 156
- GitHub, Inc.: 134
- MITRE: 125
- Dell: 115
- WPScan: 105

Top Affected Products:
- UNKNOWN: 2097
- Microsoft Windows Server 2025: 676
- Microsoft Windows Server 2022: 638
- Microsoft Windows 11 24h2: 626
- Microsoft Windows 11 25h2: 625
- Microsoft Windows 11 26h1: 625
- Microsoft Windows Server 2019: 613
- Microsoft Windows 10 1809: 609
- Microsoft Windows 11 23h2: 599
- Microsoft Windows 10 22h2: 566

##

CVE-2026-12744
(9.8 CRITICAL)

EPSS: 2.17%

updated 2026-09-08T15:32:04

1 posts

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.

secdb@infosec.exchange at 2026-09-14T00:02:28.000Z ##

📈 CVE Published in last 7 days (2026-09-07 - 2026-09-07)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 346
- High: 1713
- Medium: 1297
- Low: 177
- None: 301

Status:
- : 75
- Analyzed: 817
- Awaiting Analysis: 956
- Deferred: 771
- Modified: 23
- Received: 764
- Rejected: 23
- Undergoing Analysis: 405

CISA KEVs:
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)

Top CNAs:
- Microsoft Corporation: 967
- kernel.org: 443
- VulnCheck: 349
- Chrome: 230
- Adobe Systems Incorporated: 168
- VulDB: 156
- GitHub, Inc.: 134
- MITRE: 125
- Dell: 115
- WPScan: 105

Top Affected Products:
- UNKNOWN: 2097
- Microsoft Windows Server 2025: 676
- Microsoft Windows Server 2022: 638
- Microsoft Windows 11 24h2: 626
- Microsoft Windows 11 25h2: 625
- Microsoft Windows 11 26h1: 625
- Microsoft Windows Server 2019: 613
- Microsoft Windows 10 1809: 609
- Microsoft Windows 11 23h2: 599
- Microsoft Windows 10 22h2: 566

##

CVE-2026-79697
(9.9 CRITICAL)

EPSS: 3.35%

updated 2026-09-08T14:17:29.160000

1 posts

A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This affects the function basicstation_apply of the component Basic Station Certificate-Deletion Handler. This manipulation of the argu

secdb@infosec.exchange at 2026-09-14T00:02:28.000Z ##

📈 CVE Published in last 7 days (2026-09-07 - 2026-09-07)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 346
- High: 1713
- Medium: 1297
- Low: 177
- None: 301

Status:
- : 75
- Analyzed: 817
- Awaiting Analysis: 956
- Deferred: 771
- Modified: 23
- Received: 764
- Rejected: 23
- Undergoing Analysis: 405

CISA KEVs:
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)

Top CNAs:
- Microsoft Corporation: 967
- kernel.org: 443
- VulnCheck: 349
- Chrome: 230
- Adobe Systems Incorporated: 168
- VulDB: 156
- GitHub, Inc.: 134
- MITRE: 125
- Dell: 115
- WPScan: 105

Top Affected Products:
- UNKNOWN: 2097
- Microsoft Windows Server 2025: 676
- Microsoft Windows Server 2022: 638
- Microsoft Windows 11 24h2: 626
- Microsoft Windows 11 25h2: 625
- Microsoft Windows 11 26h1: 625
- Microsoft Windows Server 2019: 613
- Microsoft Windows 10 1809: 609
- Microsoft Windows 11 23h2: 599
- Microsoft Windows 10 22h2: 566

#WordPress #WooCommerce #CVE #SecurityHardening #WordPressSecurity

##

CVE-2026-48888
(7.5 HIGH)

EPSS: 0.26%

updated 2026-09-08T13:12:58.310000

2 posts

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0.

wpguyuk at 2026-09-15T07:04:31.833Z ##

WooCommerce CVE-2026-48888 is a high-severity flaw an attacker can exploit with no account and no elevated permissions. If my clients have not updated to 11.1.0, their customer data and payment layer are exposed right now. I recommend updating immediately.

https://wpguy.uk/blog/woocommerce-cve-2026-48888-update-to-1110-now/

##

wpguyuk@infosec.exchange at 2026-09-15T07:04:31.000Z ##

WooCommerce CVE-2026-48888 is a high-severity flaw an attacker can exploit with no account and no elevated permissions. If my clients have not updated to 11.1.0, their customer data and payment layer are exposed right now. I recommend updating immediately.

#WordPress #WooCommerce #CVE #SecurityHardening #WordPressSecurity

https://wpguy.uk/blog/woocommerce-cve-2026-48888-update-to-1110-now/

##

CVE-2026-78488
(6.5 MEDIUM)

EPSS: 3.25%

updated 2026-09-07T15:34:02

1 posts

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution.

secdb@infosec.exchange at 2026-09-14T00:02:28.000Z ##

📈 CVE Published in last 7 days (2026-09-07 - 2026-09-07)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 346
- High: 1713
- Medium: 1297
- Low: 177
- None: 301

Status:
- : 75
- Analyzed: 817
- Awaiting Analysis: 956
- Deferred: 771
- Modified: 23
- Received: 764
- Rejected: 23
- Undergoing Analysis: 405

CISA KEVs:
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)

Top CNAs:
- Microsoft Corporation: 967
- kernel.org: 443
- VulnCheck: 349
- Chrome: 230
- Adobe Systems Incorporated: 168
- VulDB: 156
- GitHub, Inc.: 134
- MITRE: 125
- Dell: 115
- WPScan: 105

Top Affected Products:
- UNKNOWN: 2097
- Microsoft Windows Server 2025: 676
- Microsoft Windows Server 2022: 638
- Microsoft Windows 11 24h2: 626
- Microsoft Windows 11 25h2: 625
- Microsoft Windows 11 26h1: 625
- Microsoft Windows Server 2019: 613
- Microsoft Windows 10 1809: 609
- Microsoft Windows 11 23h2: 599
- Microsoft Windows 10 22h2: 566

https://github.com/SneakyNachos/CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter

##

CVE-2026-85046
(8.8 HIGH)

EPSS: 1.46%

updated 2026-09-06T03:30:24

1 posts

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8 repos

https://github.com/adriyansyah-mf/cve-2026-85046-poc

https://github.com/Eliot-code/CVE-2026-85046

https://github.com/atiilla/CVE-2026-85046

https://github.com/SneakyNachos/CVE-2026-85046-who-put-the-silverback-guerilla-in-the-wasm

https://github.com/HORKimhab/CVE-2026-85046

https://github.com/ubitquity/CVE-2026-85046-Patch-confusion-zero-day-vulnerability-in-Google-Chrome-s-V8-engine

https://github.com/SneakyNachos/CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.

CapTechGroup@mastodon.social at 2026-09-15T12:46:42.000Z ##

BlueMoon chain: CVE-2026-85046 for arbitrary read/write in the Chrome V8 sandbox, CVE-2026-87491 to escape the browser sandbox, CVE-2026-85880 (Windows ALPC) to inject into the Chrome process. Delivery: reflected XSS on a...

https://captechgroup.com/threat-intelligence-center/china-linked-apt31-exploits-chrome-and-windows-zer-4c1c3d?utm_source=mastodon&utm_medium=social&utm_campaign=threat_intel&utm_content=china-linked-apt31-exploits-chrome-and-windows-zero-day-chain-to-deploy-grimwedg

##

CVE-2026-80881
(0 None)

EPSS: 0.17%

updated 2026-09-04T17:17:00.390000

1 posts

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix buffer head management in ocfs2_read_blocks() In ocfs2_read_blocks(), caller should't assume that buffer head returned by 'sb_getblk()' is exclusively owned and so 'put_bh()' always drops b_count from 1 to 0. If it is not so, buffer head remains on hold and likely to be returned by the next call to 'sb_getblk()' unch

sigint@fosstodon.org at 2026-09-15T23:45:08.000Z ##

🐧 SIGINT // Ubuntu Watch — 2026-09-16

Another kernel CVE patched upstream and in Ubuntu. If you run your own kernel builds or LTS HWE stacks, check this against your running version before your next reboot window.

🔗 https://vulners.com/osv/OSV:UBUNTU-CVE-2026-80881

#Ubuntu #Linux #infosec

##

CVE-2026-83548
(10.0 CRITICAL)

EPSS: 4.67%

updated 2026-09-03T13:06:16.053000

1 posts

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.

Nuclei template

3 repos

https://github.com/xoessie/CVE-2026-83548-SonicWall-SMA1000-Analysis

https://github.com/HORKimhab/CVE-2026-83548-CVE-2026-83549

https://github.com/xcoy0te/CVE-2026-83548-checker

cyberveille@mastobot.ping.moi at 2026-09-14T15:30:05.000Z ##

📢 SonicWall SMA1000 : module Metasploit pour chaîne RCE non authentifiée (CVE-2026-83548 + CVE-2026-83549)

Ce pull request Metasploit (PR #21883) documente l'intégration d'un module d'exploitation complet pour une chaîne de vulnérabilités zero-day affectant les appliances SonicWall Secure Mobile Access 1000 (SMA1000), divulguée début septembre 2026 comme…

📖 cyberveille : https://cyberveille.ch/posts/2026-09-14-sonicwall-sma1000-module-metasploit-pour-chaine-rce-non-authentifiee-cve-2026-83548-cve-2026-83549/
🌐 source : https://github.com/rapid7/metasploit-framework/pull/21883
🟡 vérification factuelle moyenne
#Metasploit #RCE #Cyberveille

##

CVE-2026-83549
(7.8 HIGH)

EPSS: 8.51%

updated 2026-09-02T18:32:06

1 posts

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.

2 repos

https://github.com/HORKimhab/CVE-2026-83548-CVE-2026-83549

https://github.com/xcoy0te/CVE-2026-83548-checker

cyberveille@mastobot.ping.moi at 2026-09-14T15:30:05.000Z ##

📢 SonicWall SMA1000 : module Metasploit pour chaîne RCE non authentifiée (CVE-2026-83548 + CVE-2026-83549)

Ce pull request Metasploit (PR #21883) documente l'intégration d'un module d'exploitation complet pour une chaîne de vulnérabilités zero-day affectant les appliances SonicWall Secure Mobile Access 1000 (SMA1000), divulguée début septembre 2026 comme…

📖 cyberveille : https://cyberveille.ch/posts/2026-09-14-sonicwall-sma1000-module-metasploit-pour-chaine-rce-non-authentifiee-cve-2026-83548-cve-2026-83549/
🌐 source : https://github.com/rapid7/metasploit-framework/pull/21883
🟡 vérification factuelle moyenne
#Metasploit #RCE #Cyberveille

##

CVE-2026-81573
(8.6 HIGH)

EPSS: 0.46%

updated 2026-09-01T20:56:59.203000

2 posts

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially sensitive configuration data and overwrite selected values in Server.ini. This does include the hash of the

certvde at 2026-09-15T08:17:37.359Z ##

🔒 New CSAF advisory published

VDE-2026-091
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576

The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowin…

HTML: https://certvde.com/en/advisories/VDE-2026-091
CSAF JSON: https://trumpf.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-091.json

##

certvde@infosec.exchange at 2026-09-15T08:17:37.000Z ##

🔒 New CSAF advisory published

VDE-2026-091
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576

The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowin…

HTML: https://certvde.com/en/advisories/VDE-2026-091
CSAF JSON: https://trumpf.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-091.json

##

CVE-2026-81575
(7.5 HIGH)

EPSS: 0.44%

updated 2026-09-01T20:56:59.203000

2 posts

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes the CodeMeter Runtime.

certvde at 2026-09-15T08:17:37.359Z ##

🔒 New CSAF advisory published

EPSS: 0.33%

updated 2026-08-27T12:30:27

2 posts

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to another handle.

certvde at 2026-09-15T08:17:37.359Z ##

🔒 New CSAF advisory published

VDE-2026-091
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576

The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowin…

HTML: https://certvde.com/en/advisories/VDE-2026-091
CSAF JSON: https://trumpf.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-091.json

##

certvde@infosec.exchange at 2026-09-15T08:17:37.000Z ##

🔒 New CSAF advisory published

VDE-2026-091
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576

The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowin…

HTML: https://certvde.com/en/advisories/VDE-2026-091
CSAF JSON: https://trumpf.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-091.json

##

CVE-2026-81572
(7.8 HIGH)

EPSS: 0.17%

updated 2026-08-27T12:30:27

2 posts

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local attacker can create a junction at the temporary file that points to an arbitrary system path. Because CodeMeter Runtime runs with System privileges, thi

certvde at 2026-09-15T08:17:37.359Z ##

🔒 New CSAF advisory published

VDE-2026-091
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576

The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowin…

HTML: https://certvde.com/en/advisories/VDE-2026-091
CSAF JSON: https://trumpf.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-091.json

##

certvde@infosec.exchange at 2026-09-15T08:17:37.000Z ##

🔒 New CSAF advisory published

VDE-2026-091
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576

The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowin…

HTML: https://certvde.com/en/advisories/VDE-2026-091
CSAF JSON: https://trumpf.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-091.json

##

CVE-2026-81574
(8.2 HIGH)

EPSS: 0.41%

updated 2026-08-27T12:30:27

2 posts

In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. This can be used to reliably crash CodeMeter and disclose sensitive information such as process memory and stack canaries. The attack works locally, for example by using cmu --set-proxy to set the proxy value, and remotely

certvde at 2026-09-15T08:17:37.359Z ##

🔒 New CSAF advisory published

VDE-2026-091
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576

The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowin…

HTML: https://certvde.com/en/advisories/VDE-2026-091
CSAF JSON: https://trumpf.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-091.json

##

certvde@infosec.exchange at 2026-09-15T08:17:37.000Z ##

🔒 New CSAF advisory published

VDE-2026-091
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
CVE-2026-81572, CVE-2026-81573, CVE-2026-81574, CVE-2026-81575, CVE-2026-81576

The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowin…

HTML: https://certvde.com/en/advisories/VDE-2026-091
CSAF JSON: https://trumpf.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-091.json

https://github.com/imbas007/CVE-2026-60004-POC

##

CVE-2026-60004
(9.8 CRITICAL)

EPSS: 86.78%

updated 2026-08-27T11:41:19.230000

6 posts

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

10 repos

https://github.com/HORKimhab/CVE-2026-60004

https://github.com/shinthink/CVE-2026-60004

https://github.com/fevar54/cve-2026-60004

https://github.com/Sachinart/CVE-2026-60004-gitea-0day

https://github.com/gagaltotal/CVE-2026-60004-poc-gitea

https://github.com/erberkan/CVE-2026-60004-PoC

https://github.com/HackSpeak/CVE-2026-60004

https://github.com/0xBlackash/CVE-2026-60004

https://github.com/EQSTLab/CVE-2026-60004

VirusBulletin at 2026-09-15T08:43:23.308Z ##

Acronis TRU uncovered a multinational campaign in which Red Heron, a Chinese-speaking threat actor, rapidly weaponized CVE-2026-60004 to compromise internet-facing instances of Gitea, a self-hosted source-code management platform. https://www.acronis.com/en/tru/posts/red-heron-exploits-gitea-n-day-flaw-in-multinational-campaign-exposing-new-linux-rootkit/

##

cyberworldops at 2026-09-14T19:00:01.109Z ##

Red Heron exploited CVE-2026-60004, a critical Gitea RCE, to compromise 13 organizations after scanning 1,386 exposed instances. Exposed dev platforms offer direct access to code and lateral movement. Patch, restrict exposure and review logs. #GiteaSecurity #ThreatIntel #SupplyChain

https://cyberworldops.eu/en/red-heron-exploits-critical-gitea-rce-to-breach-13-organizations

##

hackmag at 2026-09-14T15:03:08.768Z ##

⚪️ Over 8,300 Gitea Servers Vulnerable to Remote Code Execution

🗨️ Researchers at The Shadowserver Foundation warn that more than 8,300 internet-exposed Gitea instances remain unprotected against the critical CVE-2026-60004 vulnerability. The flaw is already being exploited in real-world attacks and allows arbitrary commands to be executed on vulnerable servers.…

🔗 https://hackmag.com/news/gitea-rce?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

https://cyberworldops.eu/en/red-heron-exploits-critical-gitea-rce-to-breach-13-organizations

##

VirusBulletin@infosec.exchange at 2026-09-15T08:43:23.000Z ##

Acronis TRU uncovered a multinational campaign in which Red Heron, a Chinese-speaking threat actor, rapidly weaponized CVE-2026-60004 to compromise internet-facing instances of Gitea, a self-hosted source-code management platform. https://www.acronis.com/en/tru/posts/red-heron-exploits-gitea-n-day-flaw-in-multinational-campaign-exposing-new-linux-rootkit/

##

cyberworldops@infosec.exchange at 2026-09-14T19:00:01.000Z ##

Red Heron exploited CVE-2026-60004, a critical Gitea RCE, to compromise 13 organizations after scanning 1,386 exposed instances. Exposed dev platforms offer direct access to code and lateral movement. Patch, restrict exposure and review logs. #GiteaSecurity #ThreatIntel #SupplyChain

##

hackmag@infosec.exchange at 2026-09-14T15:03:08.000Z ##

⚪️ Over 8,300 Gitea Servers Vulnerable to Remote Code Execution

🗨️ Researchers at The Shadowserver Foundation warn that more than 8,300 internet-exposed Gitea instances remain unprotected against the critical CVE-2026-60004 vulnerability. The flaw is already being exploited in real-world attacks and allows arbitrary commands to be executed on vulnerable servers.…

🔗 https://hackmag.com/news/gitea-rce?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

##

CVE-2026-56368
(3.7 LOW)

EPSS: 0.26%

updated 2026-08-26T20:48:48

2 posts

A memory leak vulnerability exists in multiple coders that write raw pixel data where an object is not freed. ``` Direct leak of 160 byte(s) in 1 object(s) allocated from: ```

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

https://github.com/HORKimhab/CVE-2026-59310

##

CVE-2026-59310
(9.8 CRITICAL)

EPSS: 45.88%

updated 2026-08-18T18:32:52

2 posts

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

2 repos

https://github.com/BiuTrap/CVE-2026-59310

undercodenews@mastodon.social at 2026-09-15T17:41:50.000Z ##

CISA Warns VMware vCenter Flaw Is Now in the Hands of Ransomware Gangs + Video

CISA Warns VMware vCenter Flaw Is Now in the Hands of Ransomware Gangs A Critical VMware Vulnerability Has Entered a More Dangerous Phase A critical vulnerability in VMware vCenter Server has moved from a serious patching concern to an active ransomware threat. CISA has warned that ransomware operators are now exploiting CVE-2026-59310, a critical directory-traversal vulnerability that can…

https://undercodenews.com/cisa-warns-vmware-vcenter-flaw-is-now-in-the-hands-of-ransomware-gangs-video/?utm_source=mastodon&utm_medium=jetpack_social

##

Analyst207@mastodon.social at 2026-09-15T12:33:40.000Z ##

Ransomware gangs exploit VMware flaw

Ransomware gangs are actively exploiting a critical VMware flaw, CVE-2026-59310, that was patched just two weeks ago, putting organizations at risk of devastating attacks. The US Cybersecurity and Infrastructure Security Agency has warned of the vulnerability, which allows unauthenticated attackers to execute arbitrary code.

https://osintsights.com/ransomware-gangs-exploit-vmware-flaw?utm_source=mastodon&utm_medium=social

#VmwareFlaw #Ransomware #Cve202659310 #EmergingThreats #SupplyChain

##

CVE-2026-72898
(10.0 CRITICAL)

EPSS: 94.22%

updated 2026-08-12T15:18:30.347000

1 posts

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.

Nuclei template

9 repos

https://github.com/ubitquity/Metabase-Setup-Endpoint-SQLi-Fix

https://github.com/codeb0ssx/CVE-2026-72898-PoC

https://github.com/EQSTLab/CVE-2026-72898

https://github.com/0xBlackash/CVE-2026-72898

https://github.com/4minx/CVE-2026-72898

https://github.com/34zY/CVE-2026-72898

https://github.com/Franc-Zar/CVE-2026-72898-safe-detection

https://github.com/d-maggipinto/CVE-2026-72898-metabase-sqli

https://github.com/VuxNx/CVE-2026-72898

netsecio@mastodon.social at 2026-09-14T16:54:33.000Z ##

📰 Mathspace Breach Affects 1M Users via Metabase Flaw

Education platform Mathspace discloses a data breach affecting over 1 million users. Attackers exploited a known SQL injection flaw (CVE-2026-72898) in a self-hosted Metabase instance to access user PII. #DataBreach #CyberSecurity #EdTech #Metabase

🔗 https://cyber.netsecops.io/articles/mathspace-education-platform-breached-via-metabase-vulnerability/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

##

CVE-2026-62721
(7.8 HIGH)

EPSS: 0.41%

updated 2026-08-11T18:31:23

2 posts

Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.

briankrebs at 2026-09-14T20:43:08.956Z ##

Microsoft today released an out of band update that includes a security update to a vulnerability they first patched in August. I guess the first patch didn't work broadly enough or introduced more flaws (or both). According to MS, though, there aren't any signs this vulnerability is actively being exploited. MS just says "The CVE was updated with links to security updates for Windows 11, version 26H1, 25H2, and 24H2 to address a missed fix."

https://support.microsoft.com/en-us/servicing/os/windows-11/2026/09/kb5129195-windows-11-24h2-25h2-security-update

https://msrc.microsoft.com/update-guide/advisory/CVE-2026-62721

##

briankrebs@infosec.exchange at 2026-09-14T20:43:08.000Z ##

Microsoft today released an out of band update that includes a security update to a vulnerability they first patched in August. I guess the first patch didn't work broadly enough or introduced more flaws (or both). According to MS, though, there aren't any signs this vulnerability is actively being exploited. MS just says "The CVE was updated with links to security updates for Windows 11, version 26H1, 25H2, and 24H2 to address a missed fix."

https://support.microsoft.com/en-us/servicing/os/windows-11/2026/09/kb5129195-windows-11-24h2-25h2-security-update

https://msrc.microsoft.com/update-guide/advisory/CVE-2026-62721

##

CVE-2026-61511
(9.8 CRITICAL)

EPSS: 70.77%

updated 2026-08-07T06:31:24

1 posts

vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying crafted input through the pagenav[pagenumber] parameter. Attackers can exploit the insufficiently restrictive regex filter by using phpfuck-style

5 repos

https://github.com/shootcannon/CVE-2026-61511

https://github.com/puj790201-lab/cve-2026-61511

https://github.com/tc4dy/CVE-2026-61511-PoC-Exploit

https://github.com/HORKimhab/CVE-2026-61511

https://github.com/codeb0ssx/Ultimate-CVE-2026-61511

_r_netsec@infosec.exchange at 2026-09-13T17:43:13.000Z ##

[CVE-2026-61511] vBulletin <= 6.2.1 (runMaths) Pre-Auth RCE Vulnerability https://karmainsecurity.com/KIS-2026-13

##

CVE-2026-62946
(5.1 MEDIUM)

EPSS: 0.09%

updated 2026-08-03T16:19:22.763000

2 posts

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer over-write. This issue has been fixed in versions 6.9.13-52 and 7.1.2-27.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

https://github.com/vulnquest58/dirtyclone-exploit

##

CVE-2026-46331
(7.8 HIGH)

EPSS: 0.58%

updated 2026-07-23T12:33:27

1 posts

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key loop using tcfp_off_max_hint, but the hint does not account for the runtime header offset added by typed keys. This can leave part of the write region un-COW'd. Fix by moving skb

15 repos

https://github.com/seguridadentrerios/CVE-2026-46331

https://github.com/MarwahHadi/CVE-2026-46331-pedit-cow

https://github.com/theendofabbys/pedit-cow

https://github.com/rjt-gupta/page-cache-corruption-lpes

https://github.com/g0thamRabb1t/CVE-2026-46331-pedit-COW-detection

https://github.com/Quaerendir/cve-2026-46331-audit

https://github.com/sgkdev/packet_edit_meme

https://github.com/douglasmun/pagecache-lpe-containment-kit

updated 2026-07-20T21:26:50

2 posts

## Summary The email search tool in `src/praisonai-agents/praisonaiagents/tools/email_tools.py` constructs IMAP SEARCH commands by interpolating LLM-controlled parameters (from_addr, subject, query) directly into IMAP protocol strings using f-string formatting with double-quote delimiters. An attacker who can influence the arguments to the `search_emails` or `reply_email` tool (via crafted agent

thehackerwire@mastodon.social at 2026-09-14T16:00:38.000Z ##

🟠 CVE-2026-57130 - High (8.1)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, src/praisonai-agents/praisonaiagents/tools/email_tools.py interpolates LLM-controlled from_addr, subject, and query values directly into quoted IMAP SEARCH criteria. Embedde...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57130/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-14T16:00:38.000Z ##

🟠 CVE-2026-57130 - High (8.1)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, src/praisonai-agents/praisonaiagents/tools/email_tools.py interpolates LLM-controlled from_addr, subject, and query values directly into quoted IMAP SEARCH criteria. Embedde...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57130/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-57126
(8.5 HIGH)

EPSS: 0.38%

updated 2026-07-20T21:25:26

2 posts

# praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS **Researcher:** Kai Aizen — SnailSploit (@SnailSploit), Adversarial & Offensive Security Research **Target:** https://github.com/MervinPraison/PraisonAI **Weakness:** CWE-918 Server-Side Request Forgery (SSRF). --- ## Summary The SSRF guard shared by PraisonAI's web tools (`SpiderTools._validate_url` → `_host_is_bl

thehackerwire@mastodon.social at 2026-09-14T16:00:16.000Z ##

🟠 CVE-2026-57126 - High (8.5)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, SpiderTools._validate_url calls _host_is_blocked, which checks literal host encodings but does not resolve DNS names before scrape_page, crawl, extract_links, extract_text, ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57126/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-09-14T16:00:16.000Z ##

🟠 CVE-2026-57126 - High (8.5)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, SpiderTools._validate_url calls _host_is_blocked, which checks literal host encodings but does not resolve DNS names before scrape_page, crawl, extract_links, extract_text, ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-57126/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-61865
(2.9 LOW)

EPSS: 0.10%

updated 2026-07-15T18:20:21.237000

2 posts

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operation: when a specific operation fails, a small memory leak occurs.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

CVE-2026-61864
(2.9 LOW)

EPSS: 0.10%

updated 2026-07-15T18:20:21.237000

2 posts

ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when the operation fails, a small amount of memory is not released.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

CVE-2026-61863
(2.9 LOW)

EPSS: 0.19%

updated 2026-07-15T12:32:05

2 posts

ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

CVE-2026-61866
(2.9 LOW)

EPSS: 0.19%

updated 2026-07-15T12:32:05

2 posts

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory leak by providing malformed JNG files that fail blob operations, causing resource exhaustion.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

CVE-2026-50458
(7.8 HIGH)

EPSS: 0.26%

updated 2026-07-14T18:32:25

1 posts

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

_r_netsec@infosec.exchange at 2026-09-13T17:43:10.000Z ##

CVE-2026-50458: Finding a UAF in the Windows Brokering File System https://rotcee.github.io/posts/CVE-2026-50458-finding-a-UAF-in-windows-brokering-file-system/

##

CVE-2026-56373
(3.7 LOW)

EPSS: 0.23%

updated 2026-07-13T15:15:51.143000

2 posts

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

CVE-2026-61857
(3.7 LOW)

EPSS: 0.27%

updated 2026-07-11T15:30:30

2 posts

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

CVE-2026-61870
(2.9 LOW)

EPSS: 0.19%

updated 2026-07-11T15:30:30

2 posts

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

CVE-2026-61465
(3.3 LOW)

EPSS: 0.17%

updated 2026-07-11T15:30:29

2 posts

ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

CVE-2026-56366
(3.3 LOW)

EPSS: 0.17%

updated 2026-07-10T15:31:48

2 posts

ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

https://github.com/Paradoxis/CVE-2026-57239

##

CVE-2026-57239
(8.2 HIGH)

EPSS: 0.17%

updated 2026-07-09T15:33:27

1 posts

The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate their privileges to NT AUTHORITY\SYSTEM.

1 repos

_r_netsec@infosec.exchange at 2026-09-13T17:43:08.000Z ##

Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239) https://blog.paradoxis.nl/escalating-all-the-privileges-with-foxit-pdf-reader-cve-2026-57239-582a78b60492

##

CVE-2026-56371
(5.3 MEDIUM)

EPSS: 0.26%

updated 2026-07-02T15:17:07.390000

2 posts

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes: the texture object allocated via ReadImage is not released when GetTypeMetrics fails, leaking memory each time a crafted TXT file with a texture attribute is processed.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

CVE-2026-56379(CVSS UNKNOWN)

EPSS: 0.88%

updated 2026-06-30T03:38:15

2 posts

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

CVE-2026-56370
(3.3 LOW)

EPSS: 0.12%

updated 2026-06-26T21:50:37.890000

2 posts

ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artifacts with invalid indices. Attackers can trigger access violations by specifying malformed connected-components definitions via CLI, causing denial of service or potential code execution.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

https://app.opencve.io/cve/CVE-2026-47203

##

CVE-2026-47203(CVSS UNKNOWN)

EPSS: 0.45%

updated 2026-06-26T21:32:44

2 posts

### Impact **CVSSv4 Baseline Score:** Moderate 6.3 **CVSSv4 Weighted Score:** Low 2.9 The full CVSSv4 Vector for this vulnerability is: > CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:L/IR:L/AR:L/MAV:N/MAC:H/MAT:N/MPR:N/MUI:N/MVC:L/MVI:N/MVA:N/MSC:N/MSI:N/MSA:N/S:N/AU:Y/R:U/V:D/RE:L/U:Green **CVSSv3.1 Baseline Score:** Low 3.7 **CVSSv3.1 Overall Score:** Medium 4.0

IanTwenty@piefed.social at 2026-09-15T19:05:41.993Z ##

Say that new authelia exploit looks like one fail2ban already recognises or relies on timing/brute-force then you’re covered even before a patch is available.

Here’s a real authelia vuln:

allowing an attacker to circumvent login throttling or account lockouts by simply altering the case of their credentials.

I think fail2ban would help protect authelia here?

##

IanTwenty@piefed.social at 2026-09-15T19:05:41.993Z ##

Say that new authelia exploit looks like one fail2ban already recognises or relies on timing/brute-force then you’re covered even before a patch is available.

Here’s a real authelia vuln:

https://app.opencve.io/cve/CVE-2026-47203

allowing an attacker to circumvent login throttling or account lockouts by simply altering the case of their credentials.

I think fail2ban would help protect authelia here?

##

CVE-2026-45051(CVSS UNKNOWN)

EPSS: 0.69%

updated 2026-06-24T17:25:29

2 posts

## Summary **Description** A deserialization of untrusted data vulnerability (CWE-502) exists in OpenAM's WebAuthn authentication module. Under certain conditions, this may allow an attacker to achieve arbitrary code execution in the context of the application server. This affects OpenAM Community Edition through version 16.0.6 and was patched in version 16.1.1. This is not the default configur

offseq at 2026-09-15T10:30:25.725Z ##

OpenAM <16.1.1 suffers from CRITICAL deserialization vuln (CVE-2026-45051, CVSS 9.2). WebAuthnAuthentication lets attackers run arbitrary code via crafted serialized data. Patch to 16.1.1 ASAP! https://radar.offseq.com/threat/cve-2026-45051-cwe-502-deserialization-of-untrusted-data-in-openidentityplatform-openam-946ad921c23871b6 #OffSeq #CVE202645051 #OpenAM #infosec

##

offseq@infosec.exchange at 2026-09-15T10:30:25.000Z ##

OpenAM <16.1.1 suffers from CRITICAL deserialization vuln (CVE-2026-45051, CVSS 9.2). WebAuthnAuthentication lets attackers run arbitrary code via crafted serialized data. Patch to 16.1.1 ASAP! https://radar.offseq.com/threat/cve-2026-45051-cwe-502-deserialization-of-untrusted-data-in-openidentityplatform-openam-946ad921c23871b6 #OffSeq #CVE202645051 #OpenAM #infosec

##

CVE-2026-56378
(3.7 LOW)

EPSS: 0.22%

updated 2026-06-21T15:31:31

2 posts

ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, resulting in denial of service and potential disclosure of an adjacent heap byte.

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

##

ottoto2017@prattohome.com at 2026-09-15T00:51:24.000Z ##

#Ubuntu 24.04.5 で #update 。

imagemagick (8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13)
CVE-2026-56366, CVE-2026-56368, CVE-2026-56370, CVE-2026-56371, CVE-2026-56373, CVE-2026-56378, CVE-2026-56379, CVE-2026-61465, CVE-2026-61857, CVE-2026-61863, CVE-2026-61864, CVE-2026-61865, CVE-2026-61866, CVE-2026-61870, CVE-2026-62946へのセキュリティ対応。
imagemagick-6-common imagemagick-6.q16
libmagickcore-6.q16-7-extra libmagickcore-6.q16-7t64
libmagickwand-6.q16-7t64

セキュリティ対応なのでお早めに。

https://github.com/Nxploited/CVE-2026-27542-CVE-2026-27540-

##

CVE-2026-4201
(7.3 HIGH)

EPSS: 0.28%

updated 2026-06-17T10:56:10.603000

1 posts

A weakness has been identified in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393. This vulnerability affects the function Upload of the file business/business-system/src/main/java/com/glowxq/system/admin/controller/SysFileController.java. Executing a manipulation can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made available to the public

cyberveille@mastobot.ping.moi at 2026-09-14T16:30:05.000Z ##

📢 Exploitation active de trois vulnérabilités critiques dans JFrog Artifactory

🔍 Contexte : Le 10 septembre 2026, Wiz Research publie une analyse technique détaillant l'exploitation active en conditions réelles de trois vulnérabilités critiques et de haute sévérité affectant JFrog Artifactory.

📖 cyberveille : https://cyberveille.ch/posts/2026-09-14-exploitation-active-de-trois-vulnerabilites-critiques-dans-jfrog-artifactory/
🌐 source : https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201
🟢 vérification factuelle haute
#JFrogArtifactory #ExploitationActive #Cyberveille

##

CVE-2026-28993
(5.5 MEDIUM)

EPSS: 0.12%

updated 2026-06-17T10:29:27.873000

2 posts

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access user-sensitive data.

jgordon@appdot.net at 2026-09-14T13:23:07.000Z ##

Sequoia 15.7.7 broke a critical shortcut I use. Terra says "Apple’s Shortcuts security fix for CVE-2026-28993,"

It doesn't always fail, just most of the time.

It feels like I run into something of this nature every day now.

##

jgordon@appdot.net at 2026-09-14T13:23:07.000Z ##

Sequoia 15.7.7 broke a critical shortcut I use. Terra says "Apple’s Shortcuts security fix for CVE-2026-28993,"

It doesn't always fail, just most of the time.

It feels like I run into something of this nature every day now.

##

CVE-2026-27540
(9.0 CRITICAL)

EPSS: 1.73%

updated 2026-06-17T10:27:18.693000

3 posts

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through <= 2.0.3.1.

1 repos

security_crawler_carl at 2026-09-15T19:55:23.914Z ##

🏆 New Achievement! Exceeded All KPIs Except Staying Uncompromised!

Your Q3 infrastructure review is in. Uptime: stellar. Deployment pipeline: smooth. WooCommerce Wholesale Lead Capture plugin: actively backdoored via CVE-2026-27540. That last one is what we in management call an "opportunity area."

Attackers are currently exploiting this critical flaw in the wild, planting PHP backdoors and achieving full takeover of WordPress stores. Everything was going so well, team. Really. (1/3)

##

undercodenews@mastodon.social at 2026-09-15T19:36:55.000Z ##

Critical WooCommerce Vulnerability Is Under Active Attack, Putting WordPress Stores at Risk of PHP Backdoors and Full Takeover + Video

Introduction: A WordPress Plugin Became an Open Door A critical vulnerability in the WooCommerce Wholesale Lead Capture plugin is now being actively exploited by attackers, turning a seemingly ordinary WordPress extension into a potential gateway for complete website compromise. The vulnerability, tracked as CVE-2026-27540, allows…

https://undercodenews.com/critical-woocommerce-vulnerability-is-under-active-attack-putting-wordpress-stores-at-risk-of-php-backdoors-and-full-takeover-video/?utm_source=mastodon&utm_medium=jetpack_social

##

security_crawler_carl@infosec.exchange at 2026-09-15T19:55:23.000Z ##

🏆 New Achievement! Exceeded All KPIs Except Staying Uncompromised!

Your Q3 infrastructure review is in. Uptime: stellar. Deployment pipeline: smooth. WooCommerce Wholesale Lead Capture plugin: actively backdoored via CVE-2026-27540. That last one is what we in management call an "opportunity area."

Attackers are currently exploiting this critical flaw in the wild, planting PHP backdoors and achieving full takeover of WordPress stores. Everything was going so well, team. Really. (1/3)

##

CVE-2025-30208
(5.3 MEDIUM)

EPSS: 74.97%

updated 2026-06-17T09:08:21.517000

2 posts

Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. `@fs` denies access to files outside of Vite serving allow list. Adding `?raw??` or `?import&raw??` to the URL bypasses this limitation and returns the file content if it exists. This bypass exists because trailing separators such as `?` are removed in several places

23 repos

https://github.com/TH-SecForge/CVE-2025-30208

https://github.com/iSee857/CVE-2025-30208-PoC

https://github.com/4m3rr0r/CVE-2025-30208-PoC

https://github.com/nkuty/CVE-2025-30208-31125-31486-32395

https://github.com/cc3305/CVE-2025-30208

https://github.com/ThemeHackers/CVE-2025-30208

https://github.com/sumeet-darekar/CVE-2025-30208

https://github.com/keklick1337/CVE-2025-30208-ViteVulnScanner

https://github.com/xuemian168/CVE-2025-30208

https://github.com/lilil3333/Vite-CVE-2025-30208-EXP

https://github.com/HazaVVIP/CVE-2025-30208

https://github.com/r0ngy40/CVE-2025-30208-Series

https://github.com/0xshaheen/CVE-2025-30208

https://github.com/On1onss/CVE-2025-30208

https://github.com/MiclelsonCN/CVE-2025-30208_POC

https://github.com/jackieya/ViteVulScan

https://github.com/sadhfdw129/CVE-2025-30208-Vite

https://github.com/4xura/CVE-2025-30208

https://github.com/imbas007/CVE-2025-30208-template

https://github.com/ThumpBo/CVE-2025-30208-EXP

https://github.com/marino-admin/Vite-CVE-2025-30208-Scanner

https://github.com/Lusensec/CVE-2025-30208

https://github.com/HaGsec/CVE-2025-30208

cyberworldops at 2026-09-15T01:00:00.926Z ##

F5 observed mass scanning of exposed Vite dev servers exploiting CVE-2026-39364 and older flaws CVE-2025-30208, CVE-2025-31125, CVE-2024-45811. Stolen AWS/Azure credentials and deployment configs enable full cloud compromise, so isolate dev servers and rotate secrets. #Vite #CloudSecurity #ThreatIntelligence

https://cyberworldops.eu/en/hackers-scan-exposed-vite-servers-for-aws-azure-and-deployment-secrets

##

cyberworldops@infosec.exchange at 2026-09-15T01:00:00.000Z ##

F5 observed mass scanning of exposed Vite dev servers exploiting CVE-2026-39364 and older flaws CVE-2025-30208, CVE-2025-31125, CVE-2024-45811. Stolen AWS/Azure credentials and deployment configs enable full cloud compromise, so isolate dev servers and rotate secrets. #Vite #CloudSecurity #ThreatIntelligence

https://cyberworldops.eu/en/hackers-scan-exposed-vite-servers-for-aws-azure-and-deployment-secrets

##

CVE-2024-45811
(4.8 MEDIUM)

EPSS: 1.06%

updated 2026-06-17T07:54:51.767000

2 posts

Vite a frontend build tooling framework for javascript. In affected versions the contents of arbitrary files can be returned to the browser. `@fs` denies access to files outside of Vite serving allow list. Adding `?import&raw` to the URL bypasses this limitation and returns the file content if it exists. This issue has been patched in versions 5.4.6, 5.3.6, 5.2.14, 4.5.5, and 3.2.11. Users are adv

cyberworldops at 2026-09-15T01:00:00.926Z ##

F5 observed mass scanning of exposed Vite dev servers exploiting CVE-2026-39364 and older flaws CVE-2025-30208, CVE-2025-31125, CVE-2024-45811. Stolen AWS/Azure credentials and deployment configs enable full cloud compromise, so isolate dev servers and rotate secrets. #Vite #CloudSecurity #ThreatIntelligence

https://cyberworldops.eu/en/hackers-scan-exposed-vite-servers-for-aws-azure-and-deployment-secrets

##

cyberworldops@infosec.exchange at 2026-09-15T01:00:00.000Z ##

F5 observed mass scanning of exposed Vite dev servers exploiting CVE-2026-39364 and older flaws CVE-2025-30208, CVE-2025-31125, CVE-2024-45811. Stolen AWS/Azure credentials and deployment configs enable full cloud compromise, so isolate dev servers and rotate secrets. #Vite #CloudSecurity #ThreatIntelligence

https://cyberworldops.eu/en/hackers-scan-exposed-vite-servers-for-aws-azure-and-deployment-secrets

##

CVE-2024-3094
(10.0 CRITICAL)

EPSS: 85.97%

updated 2026-06-17T07:43:17.830000

1 posts

Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked

90 repos

https://github.com/Dermot-lab/TryHack

https://github.com/mesutgungor/xz-backdoor-vulnerability

https://github.com/nnatsopoulos/xz-backdoor-research

https://github.com/weltregie/liblzma-scan

https://github.com/badsectorlabs/ludus_xz_backdoor

https://github.com/BOSE122/CVE-2024-3094

https://github.com/amlweems/xzbot

https://github.com/robertdfrench/ifuncd-up

https://github.com/byinarie/CVE-2024-3094-info

https://github.com/Juul/xz-backdoor-scan

https://github.com/encikayelwhitehat-glitch/CVE-2024-3094

https://github.com/FabioBaroni/CVE-2024-3094-checker

https://github.com/AndreaCicca/Sicurezza-Informatica-Presentazione

https://github.com/laxmikumari615/Linux---Security---Detect-and-Mitigate-CVE-2024-3094

https://github.com/brinhosa/CVE-2024-3094-One-Liner

https://github.com/mrk336/CVE-2024-3094

https://github.com/galacticquest/cve-2024-3094-detect

https://github.com/devjanger/CVE-2024-3094-XZ-Backdoor-Detector

https://github.com/Simplifi-ED/CVE-2024-3094-patcher

https://github.com/harekrishnarai/xz-utils-vuln-checker

https://github.com/jfrog/cve-2024-3094-tools

https://github.com/Michel-DV/xz-utils-backdoor-case-study

https://github.com/MagpieRYL/CVE-2024-3094-backdoor-env-container

https://github.com/Preacher98/Report-XZ-Utils-CVE-2024-3094

https://github.com/robertdebock/ansible-playbook-cve-2024-3094

https://github.com/ykhurshudyan-blip/CVE-2024-3094

https://github.com/been22426/CVE-2024-3094

https://github.com/namegabevictoire01-sys/cs50-cybersecurity-final-project

https://github.com/ackemed/detectar_cve-2024-3094

https://github.com/Ava-Vispilio/CVE-2024-3094

https://github.com/Fractal-Tess/CVE-2024-3094

https://github.com/0xlane/xz-cve-2024-3094

https://github.com/shefirot/CVE-2024-3094

https://github.com/Security-Phoenix-demo/CVE-2024-3094-fix-exploits

https://github.com/hackura/xz-cve-2024-3094

https://github.com/Yuma-Tsushima07/CVE-2024-3094

https://github.com/hackingetico21/revisaxzutils

https://github.com/robertdebock/ansible-role-cve_2024_3094

https://github.com/hariskhalil555000-sketch/What-utility-does-CVE-2024-3094-refer-to-

https://github.com/OpensourceICTSolutions/xz_utils-CVE-2024-3094

https://github.com/h3raklez/CVE-2024-3094

https://github.com/hazemkya/CVE-2024-3094-checker

https://github.com/bsekercioglu/cve2024-3094-Checker

https://github.com/ElinaNotElina/cve-2024-3094-analysis

https://github.com/0xBlackash/CVE-2024-3094

https://github.com/valeriot30/cve-2024-3094

https://github.com/spidygal/CVE-2024-3094-Nmap-NSE-script

https://github.com/fevar54/Detectar-Backdoor-en-liblzma-de-XZ-utils-CVE-2024-3094-

https://github.com/gensecaihq/CVE-2024-3094-Vulnerability-Checker-Fixer

https://github.com/wgetnz/CVE-2024-3094-check

https://github.com/jbnetwork-git/CVE-2024-3094-XZ-Utils-Check

https://github.com/mightysai1997/CVE-2024-3094

https://github.com/neuralinhibitor/xzwhy

https://github.com/zpxlz/CVE-2024-3094

https://github.com/mhicairo-hue/cs50-cybersecurity-final-project

https://github.com/ThomRgn/xzutils_backdoor_obfuscation

https://github.com/KaminaDuck/ansible-CVE-2024-3094

https://github.com/M1lo25/CS50FinalProject

https://github.com/stevehenderson/lab_xz_backdoor

https://github.com/24Owais/threat-intel-cve-2024-3094

https://github.com/r0binak/xzk8s

https://github.com/lypd0/CVE-2024-3094-Vulnerabity-Checker

https://github.com/isuruwa/CVE-2024-3094

https://github.com/Mustafa1986/CVE-2024-3094

https://github.com/ashwani95/CVE-2024-3094

https://github.com/vnchk1/sec_review_cve-2024-3094

https://github.com/TheTorjanCaptain/CVE-2024-3094-Checker

https://github.com/przemoc/xz-backdoor-links

https://github.com/Ikram124/CVE-2024-3094-analysis

https://github.com/vesjolyjd/Kaspersky_CVE-2024-3094

https://github.com/buluma/ansible-role-cve_2024_3094

https://github.com/lockness-Ko/xz-vulnerable-honeypot

https://github.com/pentestfunctions/CVE-2024-3094

https://github.com/iheb2b/CVE-2024-3094-Checker

https://github.com/MrBUGLF/XZ-Utils_CVE-2024-3094

https://github.com/ScrimForever/CVE-2024-3094

https://github.com/extracoding-dozen/CVE-2024-3094

https://github.com/dah4k/CVE-2024-3094

https://github.com/felipecosta09/cve-2024-3094

https://github.com/bioless/xz_cve-2024-3094_detection

https://github.com/Bella-Bc/xz-backdoor-CVE-2024-3094-Check

https://github.com/gustavorobertux/CVE-2024-3094

https://github.com/teyhouse/CVE-2024-3094

https://github.com/mightysai1997/CVE-2024-3094-info

https://github.com/emirkmo/xz-backdoor-github

EPSS: 98.95%

updated 2026-04-27T16:30:09

4 posts

## Summary Marimo (19.6k stars) has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint `/terminal/ws` lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. Unlike other WebSocket endpoints (e.g., `/ws`) that correctly call `validate_auth()` for authentication, the `/terminal/ws` endpoint only checks the

25 repos

https://github.com/Nxploited/CVE-2026-39987

https://github.com/rootdirective-sec/CVE-2026-39987-Lab

https://github.com/0xBlackash/CVE-2026-39987

https://github.com/vanhari/CVE-2026-39987

https://github.com/Ghxstsec/CVE-2026-39987

https://github.com/MADA0L/CVE-2026-39987-Poc

https://github.com/matesz44/cve-2026-39987

https://github.com/mki9/CVE-2026-39987_exploit

https://github.com/alreadyClosed/CVE-2026-39987

https://github.com/HORKimhab/CVE-2026-39987

https://github.com/K3ysTr0K3R/CVE-2026-39987

https://github.com/M3PH1569/CVE-2026-39987-POC

https://github.com/keraattin/CVE-2026-39987

https://github.com/iapetus12/cohort-htb

https://github.com/fevar54/marimo_CVE-2026-39987_RCE_PoC

https://github.com/gbuyssens/CVE-2026-39987

https://github.com/dodeepsink/CVE-2026-39987.py

https://github.com/julichaan/CVE-2026-39987_POC

https://github.com/h3raklez/CVE-2026-39987

https://github.com/Wind010/CVE-2026-39987_PoC

https://github.com/Clara-M-Grossl/Exploit-Marimo

https://github.com/0xdeadroot/CVE-2026-39987-marimo-rce

https://github.com/Dhiaelhak-Rached/CVE-2026-39987-lab-or-marimo-cve-lab

https://github.com/stapat1245/CVE-2026-39987-PoC

https://github.com/jasonbernier/CVE-2026-39987

cyberworldops at 2026-09-15T14:50:01.149Z ##

Sysdig reports a human operator exploited CVE-2026-39987, a pre-auth RCE in Marimo, and pivoted from the notebook to an SSH bastion in eight seconds with a custom Python toolkit. It shows manual tradecraft can match automation speed, shrinking detection windows for exposed dev infrastructure. #MarimoRce #SshBastion #IncidentResponse

https://cyberworldops.eu/en/human-operator-exploits-marimo-rce-and-reaches-ssh-bastion-in-eight

##

Analyst207@mastodon.social at 2026-09-15T13:03:19.000Z ##

Skilled Human Attackers Exploit Marimo Flaw to Reach SSH Bastion in 8 Seconds

In a stunning display of speed, a skilled human attacker exploited a flaw in Marimo to breach a secure SSH bastion in just 8 seconds - a pace typically associated with AI-assisted attacks. This remarkable feat was made possible by a pre-authenticated remote code execution bug, CVE-2026-39987, with a near-perfect CVSS score of 9.3.

https://osintsights.com/skilled-human-attackers-exploit-marimo-flaw-to-reach-ssh-bastion-in-8-seconds?utm_source=mastodon&utm_medium=social

#Marimo #RceExploit #Cve202639987 #SshBastion #CredentialPivot

##

Analyst207@mastodon.social at 2026-09-14T15:04:17.000Z ##

Human Exploits Marimo Flaw to Breach SSH Bastion Host in 8 Seconds

In just 8 seconds, a human attacker exploited a vulnerability in Marimo notebooks to breach an SSH bastion host, showcasing the alarming speed and ease of lateral movement within compromised systems. This lightning-fast breach was achieved without the aid of AI tools, highlighting the severity of the CVE-2026-39987 flaw.

https://osintsights.com/human-exploits-marimo-flaw-to-breach-ssh-bastion-host-in-8-seconds?utm_source=mastodon&utm_medium=social

#Marimo #Cve202639987 #SshBastionHost #RemoteCodeExecution #Preauthentication

##

cyberworldops@infosec.exchange at 2026-09-15T14:50:01.000Z ##

Sysdig reports a human operator exploited CVE-2026-39987, a pre-auth RCE in Marimo, and pivoted from the notebook to an SSH bastion in eight seconds with a custom Python toolkit. It shows manual tradecraft can match automation speed, shrinking detection windows for exposed dev infrastructure. #MarimoRce #SshBastion #IncidentResponse

https://cyberworldops.eu/en/human-operator-exploits-marimo-rce-and-reaches-ssh-bastion-in-eight

##

CVE-2026-39364(CVSS UNKNOWN)

EPSS: 2.00%

updated 2026-04-07T22:16:19

8 posts

### Summary The contents of files that are specified by [`server.fs.deny`](https://vite.dev/config/server-options#server-fs-deny) can be returned to the browser. ### Impact Only apps that match the following conditions are affected: - explicitly exposes the Vite dev server to the network (using `--host` or [`server.host` config option](https://vitejs.dev/config/server-options.html#server-host)

Analyst207@mastodon.social at 2026-09-15T13:05:37.000Z ##

Mass-Scanning Campaign Exploits Vite Flaw to Harvest Cloud Credentials

A high-severity flaw in Vite, tracked as CVE-2026-39364, has been exploited in a mass-scanning campaign, allowing attackers to bypass security restrictions and harvest cloud credentials. By manipulating query parameters, unauthenticated attackers can leak sensitive files that were meant to be blocked.

https://osintsights.com/mass-scanning-campaign-exploits-vite-flaw-to-harvest-cloud-credentials?utm_source=mastodon&utm_medium=social

#ViteFlaw #Cve202639364 #CloudCredentials #SupplyChain #EmergingThreats

##

ottoto2017@prattohome.com at 2026-09-15T05:47:23.000Z ##

「ハッカーがViteの開発サーバーを標的にAWSとAzureの機密情報を盗み出す」： #BLEEPINGCOMPUTER

「インターネットに公開されているVite開発サーバーを標的とした大規模なスキャンキャンペーンが、AWSおよびAzure環境からクラウド認証情報と設定を盗み出そうとしている。

この攻撃は、Vite バージョン 7.1.0 から 7.3.2、および 8.x ブランチの 8.0.5 より前のバージョンにおいて、ファイルの読み取り/アクセス制御を回避できる深刻な脆弱性である CVE-2026-39364 を悪用するものです。

この脆弱性は4月7日に公表され、認証されていない攻撃者がHTTP GETリクエストのクエリパラメータを操作することで、セキュリティ制限を回避し、通常はアクセスできないはずの場所から平文のファイルを取得できるというものである。」

https://www.bleepingcomputer.com/news/security/hackers-target-exposed-vite-dev-servers-to-steal-aws-azure-secrets/

#Vite #CVE202639364 #CloudSecurity #CredentialHarvesting #F5Labs #DevSecOps #FileDisclosure #InfoSec #AWS #MassScanning

##

DailyCyberSecurity at 2026-09-15T01:40:44.791Z ##

The Vite development server vulnerability CVE-2026-39364 is exploited in mass scanning for credential harvesting. F5 Labs logged 32,000 events. Patch now.

https://securityonline.info/vite-cve-2026-39364-exploited/?utm_source=mastodon&utm_medium=jetpack_social

##

cyberworldops at 2026-09-15T01:00:00.926Z ##

F5 observed mass scanning of exposed Vite dev servers exploiting CVE-2026-39364 and older flaws CVE-2025-30208, CVE-2025-31125, CVE-2024-45811. Stolen AWS/Azure credentials and deployment configs enable full cloud compromise, so isolate dev servers and rotate secrets. #Vite #CloudSecurity #ThreatIntelligence

https://cyberworldops.eu/en/hackers-scan-exposed-vite-servers-for-aws-azure-and-deployment-secrets

##

undercodenews@mastodon.social at 2026-09-14T22:00:14.000Z ##

Hackers Are Mass-Scanning Exposed Vite Servers to Steal AWS, Azure and Terraform Secrets + Video

A New Warning for Developers Modern web development depends heavily on fast local development environments, but convenience can become dangerous when those environments are accidentally exposed to the public internet. A new mass-scanning campaign is reportedly targeting exposed Vite development servers, abusing CVE-2026-39364 to access sensitive files and potentially…

https://undercodenews.com/hackers-are-mass-scanning-exposed-vite-servers-to-steal-aws-azure-and-terraform-secrets-video/?utm_source=mastodon&utm_medium=jetpack_social

##

ottoto2017@prattohome.com at 2026-09-15T05:47:23.000Z ##

「ハッカーがViteの開発サーバーを標的にAWSとAzureの機密情報を盗み出す」： #BLEEPINGCOMPUTER

「インターネットに公開されているVite開発サーバーを標的とした大規模なスキャンキャンペーンが、AWSおよびAzure環境からクラウド認証情報と設定を盗み出そうとしている。

この攻撃は、Vite バージョン 7.1.0 から 7.3.2、および 8.x ブランチの 8.0.5 より前のバージョンにおいて、ファイルの読み取り/アクセス制御を回避できる深刻な脆弱性である CVE-2026-39364 を悪用するものです。

この脆弱性は4月7日に公表され、認証されていない攻撃者がHTTP GETリクエストのクエリパラメータを操作することで、セキュリティ制限を回避し、通常はアクセスできないはずの場所から平文のファイルを取得できるというものである。」

https://www.bleepingcomputer.com/news/security/hackers-target-exposed-vite-dev-servers-to-steal-aws-azure-secrets/

#Vite #CVE202639364 #CloudSecurity #CredentialHarvesting #F5Labs #DevSecOps #FileDisclosure #InfoSec #AWS #MassScanning

##

DailyCyberSecurity@infosec.exchange at 2026-09-15T01:40:44.000Z ##

The Vite development server vulnerability CVE-2026-39364 is exploited in mass scanning for credential harvesting. F5 Labs logged 32,000 events. Patch now.

https://securityonline.info/vite-cve-2026-39364-exploited/?utm_source=mastodon&utm_medium=jetpack_social

##

cyberworldops@infosec.exchange at 2026-09-15T01:00:00.000Z ##

F5 observed mass scanning of exposed Vite dev servers exploiting CVE-2026-39364 and older flaws CVE-2025-30208, CVE-2025-31125, CVE-2024-45811. Stolen AWS/Azure credentials and deployment configs enable full cloud compromise, so isolate dev servers and rotate secrets. #Vite #CloudSecurity #ThreatIntelligence

https://cyberworldops.eu/en/hackers-scan-exposed-vite-servers-for-aws-azure-and-deployment-secrets

##

CVE-2026-2275
(9.6 CRITICAL)

EPSS: 0.44%

updated 2026-03-31T18:32:38

1 posts

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.

thehackerwire@mastodon.social at 2026-09-14T04:00:15.000Z ##

🟠 CVE-2026-37008 - High (8.1)

CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE-2026-2275. Import-time blocking of module names does not address the availability of Python's complete obj...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-37008/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2025-31125
(5.3 MEDIUM)

EPSS: 58.46%

updated 2026-01-22T21:47:41

2 posts

### Summary The contents of arbitrary files can be returned to the browser. ### Impact Only apps explicitly exposing the Vite dev server to the network (using `--host` or [`server.host` config option](https://vitejs.dev/config/server-options.html#server-host)) are affected. ### Details - base64 encoded content of non-allowed files is exposed using `?inline&import` (originally reported as `?imp

7 repos

https://github.com/xuemian168/CVE-2025-30208

https://github.com/MuhammadWaseem29/Vitejs-exploit

https://github.com/0xgh057r3c0n/CVE-2025-31125

https://github.com/nkuty/CVE-2025-30208-31125-31486-32395

https://github.com/harshgupptaa/Path-Transversal-CVE-2025-31125-

https://github.com/sunhuiHi666/CVE-2025-31125

https://github.com/jackieya/ViteVulScan

cyberworldops at 2026-09-15T01:00:00.926Z ##

F5 observed mass scanning of exposed Vite dev servers exploiting CVE-2026-39364 and older flaws CVE-2025-30208, CVE-2025-31125, CVE-2024-45811. Stolen AWS/Azure credentials and deployment configs enable full cloud compromise, so isolate dev servers and rotate secrets. #Vite #CloudSecurity #ThreatIntelligence

https://cyberworldops.eu/en/hackers-scan-exposed-vite-servers-for-aws-azure-and-deployment-secrets

##

cyberworldops@infosec.exchange at 2026-09-15T01:00:00.000Z ##

F5 observed mass scanning of exposed Vite dev servers exploiting CVE-2026-39364 and older flaws CVE-2025-30208, CVE-2025-31125, CVE-2024-45811. Stolen AWS/Azure credentials and deployment configs enable full cloud compromise, so isolate dev servers and rotate secrets. #Vite #CloudSecurity #ThreatIntelligence

https://cyberworldops.eu/en/hackers-scan-exposed-vite-servers-for-aws-azure-and-deployment-secrets

##

CVE-2021-44228
(10.0 CRITICAL)

EPSS: 100.00%

updated 2025-10-22T19:13:26

1 posts

# Summary Log4j versions prior to 2.16.0 are subject to a remote code execution vulnerability via the ldap JNDI parser. As per [Apache's Log4j security guide](https://logging.apache.org/log4j/2.x/security.html): Apache Log4j2 <=2.14.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who

100 repos

https://github.com/mergebase/log4j-detector

https://github.com/AlexandreHeroux/Fix-CVE-2021-44228

https://github.com/christophetd/log4shell-vulnerable-app

https://github.com/lfama/log4j_checker

https://github.com/toramanemre/log4j-rce-detect-waf-bypass

https://github.com/Azeemering/CVE-2021-44228-DFIR-Notes

https://github.com/CERTCC/CVE-2021-44228_scanner

https://github.com/alexandre-lavoie/python-log4rce

https://github.com/stripe/log4j-remediation-tools

https://github.com/puzzlepeaches/Log4jUnifi

https://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit

https://github.com/pedrohavay/exploit-CVE-2021-44228

https://github.com/RedDrip7/Log4Shell_CVE-2021-44228_related_attacks_IOCs

https://github.com/darkarnium/Log4j-CVE-Detect

https://github.com/corretto/hotpatch-for-apache-log4j2

https://github.com/bigsizeme/Log4j-check

https://github.com/LiveOverflow/log4shell

https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce

https://github.com/logpresso/CVE-2021-44228-Scanner

https://github.com/tippexs/nginx-njs-waf-cve2021-44228

https://github.com/redhuntlabs/Log4JHunt

https://github.com/Kadantte/CVE-2021-44228-poc

https://github.com/rubo77/log4j_checker_beta

https://github.com/dwisiswant0/look4jar

https://github.com/HyCraftHD/Log4J-RCE-Proof-Of-Concept

https://github.com/MalwareTech/Log4jTools

https://github.com/future-client/CVE-2021-44228

https://github.com/marcourbano/CVE-2021-44228

https://github.com/qingtengyun/cve-2021-44228-qingteng-online-patch

https://github.com/mr-r3b00t/CVE-2021-44228

https://github.com/Diverto/nse-log4shell

https://github.com/NorthwaveSecurity/log4jcheck

https://github.com/CreeperHost/Log4jPatcher

https://github.com/cisagov/log4j-scanner

https://github.com/r3kind1e/Log4Shell-obfuscated-payloads-generator

https://github.com/thomaspatzke/Log4Pot

https://github.com/CodeShield-Security/Log4JShell-Bytecode-Detector

https://github.com/greymd/CVE-2021-44228

https://github.com/momos1337/Log4j-RCE

https://github.com/Jeromeyoung/log4j2burpscanner

https://github.com/puzzlepeaches/Log4jHorizon

https://github.com/simonis/Log4jPatch

https://github.com/mzlogin/CVE-2021-44228-Demo

https://github.com/fireeye/CVE-2021-44228

https://github.com/claranet/ansible-role-log4shell

https://github.com/toramanemre/apache-solr-log4j-CVE-2021-44228

https://github.com/mubix/CVE-2021-44228-Log4Shell-Hashes

https://github.com/kozmer/log4j-shell-poc

https://github.com/justakazh/Log4j-CVE-2021-44228

https://github.com/1lann/log4shelldetect

https://github.com/puzzlepeaches/Log4jCenter

https://github.com/0xDexter0us/Log4J-Scanner

https://github.com/fullhunt/log4j-scan

https://github.com/leonjza/log4jpwn

https://github.com/BinaryDefense/log4j-honeypot-flask

https://github.com/HynekPetrak/log4shell-finder

https://github.com/kubearmor/log4j-CVE-2021-44228

https://github.com/takito1812/log4j-detect

https://github.com/KosmX/CVE-2021-44228-example

https://github.com/Adikso/minecraft-log4j-honeypot

https://github.com/ssl/scan4log4j

https://github.com/thecyberneh/Log4j-RCE-Exploiter

https://github.com/irgoncalves/f5-waf-quick-patch-cve-2021-44228

https://github.com/yahoo/check-log4j

https://github.com/mufeedvh/log4jail

https://github.com/lucab85/log4j-cve-2021-44228

https://github.com/wortell/log4j

https://github.com/faisalfs10x/Log4j2-CVE-2021-44228-revshell

https://github.com/Malwar3Ninja/Exploitation-of-Log4j2-CVE-2021-44228

https://github.com/boundaryx/cloudrasp-log4j2

https://github.com/NCSC-NL/log4shell

https://github.com/blake-fm/vcenter-log4j

https://github.com/fox-it/log4j-finder

https://github.com/nu11secur1ty/CVE-2021-44228-VULN-APP

https://github.com/corelight/cve-2021-44228

https://github.com/giterlizzi/nmap-log4shell

https://github.com/hackinghippo/log4shell_ioc_ips

https://github.com/cyberxml/log4j-poc

https://github.com/jas502n/Log4j2-CVE-2021-44228

https://github.com/0xInfection/LogMePwn

https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words

https://github.com/irgoncalves/f5-waf-enforce-sig-CVE-2021-44228

https://github.com/alexbakker/log4shell-tools

https://github.com/DragonSurvivalEU/RCE

https://github.com/CrackerCat/CVE-2021-44228-Log4j-Payloads

https://github.com/dtact/divd-2021-00038--log4j-scanner

https://github.com/qingtengyun/cve-2021-44228-qingteng-patch

https://github.com/Labout/log4shell-rmi-poc

https://github.com/infiniroot/nginx-mitigate-log4shell

https://github.com/aws-samples/kubernetes-log4j-cve-2021-44228-node-agent

https://github.com/f0ng/log4j2burpscanner

https://github.com/roxas-tan/CVE-2021-44228

https://github.com/sunnyvale-it/CVE-2021-44228-PoC

https://github.com/twseptian/spring-boot-log4j-cve-2021-44228-docker-lab

https://github.com/sec13b/CVE-2021-44228-POC

https://github.com/Nanitor/log4fix

https://github.com/nccgroup/log4j-jndi-be-gone

https://github.com/mr-vill4in/log4j-fuzzer

https://github.com/NS-Sp4ce/Vm4J

https://github.com/back2root/log4shell-rex

hugovalters@mastodon.social at 2026-09-15T03:20:32.000Z ##

GET /api/cve/CVE-2021-44228 returns CVSS, CPEs, affected vendors, and known exploits in one call. No scraping, no joins. Docs: https://www.valtersit.com/cve/pricing/

##

CVE-2026-87886
(0 None)

EPSS: 0.00%

5 posts

N/A

undercodenews@mastodon.social at 2026-09-16T03:27:17.000Z ##

Acronis Backup Plugin Under Attack: Critical Linux Privilege Escalation Flaw Puts Hosting Servers at Risk + Video

A New Warning for Web Hosting Administrators Acronis has disclosed CVE-2026-87886, a high-severity Linux local privilege escalation vulnerability affecting its backup integrations for cPanel & WHM and Plesk. The vulnerability carries a CVSS score of 7.8 and, more importantly, Acronis says exploitation has already been detected in limited, targeted attacks…

https://undercodenews.com/acronis-backup-plugin-under-attack-critical-linux-privilege-escalation-flaw-puts-hosting-servers-at-risk-video/?utm_source=mastodon&utm_medium=jetpack_social

##

cyberworldops at 2026-09-16T01:00:01.227Z ##

Acronis confirmed active exploitation of CVE-2026-87886, a CVSS 7.8 local privilege escalation in its backup plugin for cPanel and WHM and Plesk. Any local user on shared hosting could escalate to root and compromise all tenants, making immediate patching and audit critical. #LinuxSecurity #PrivilegeEscalation #CpanelSecurity

https://cyberworldops.eu/en/acronis-warns-of-exploited-privilege-escalation-flaw-in-cpanel-backup

##

Analyst207@mastodon.social at 2026-09-15T22:03:31.000Z ##

Acronis Discloses Exploited Flaw in cPanel Backup Plugin

A high-severity flaw, CVE-2026-87886, has been discovered in the Acronis Backup plugin for cPanel & WHM deployments, and it's been exploited in limited, targeted attacks. This Linux local privilege-escalation vulnerability has a CVSS severity score of 7.8, making it a critical issue that needs attention.

https://osintsights.com/acronis-discloses-exploited-flaw-in-cpanel-backup-plugin?utm_source=mastodon&utm_medium=social

#Cve202687886 #Acronis #Cpanel #Linux #LocalPrivilegeEscalation

##

undercodenews@mastodon.social at 2026-09-15T22:00:28.000Z ##

Acronis Backup Vulnerability Puts Linux Hosting Servers at Risk as Limited Attacks Begin + Video

Introduction: A Quiet Flaw With Serious Consequences A vulnerability hiding inside a widely used server-backup integration has turned into an urgent warning for Linux hosting administrators. Acronis has disclosed CVE-2026-87886, a high-severity local privilege escalation flaw affecting its backup integrations for cPanel & WHM and Plesk, two platforms commonly used to manage…

https://undercodenews.com/acronis-backup-vulnerability-puts-linux-hosting-servers-at-risk-as-limited-attacks-begin-video/?utm_source=mastodon&utm_medium=jetpack_social

##

cyberworldops@infosec.exchange at 2026-09-16T01:00:01.000Z ##

Acronis confirmed active exploitation of CVE-2026-87886, a CVSS 7.8 local privilege escalation in its backup plugin for cPanel and WHM and Plesk. Any local user on shared hosting could escalate to root and compromise all tenants, making immediate patching and audit critical. #LinuxSecurity #PrivilegeEscalation #CpanelSecurity

https://cyberworldops.eu/en/acronis-warns-of-exploited-privilege-escalation-flaw-in-cpanel-backup

##

CVE-2026-90711
(0 None)

EPSS: 0.19%

4 posts

N/A

DailyCyberSecurity at 2026-09-16T01:18:01.291Z ##

A critical proxy-addr IP spoofing flaw (CVE-2026-90711) exposes Node.js apps to access control bypasses. Patch this proxy-addr IP spoofing bug today.

#ProxyAddr #NodeJS #IPspoofing #CVE202690711 #Cybersecurity

http://securityonline.info/proxy-addr-ip-spoofing-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

thehackerwire@mastodon.social at 2026-09-15T08:00:18.000Z ##

🔴 CVE-2026-90711 - Critical (9.1)

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-si...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90711/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

DailyCyberSecurity@infosec.exchange at 2026-09-16T01:18:01.000Z ##

A critical proxy-addr IP spoofing flaw (CVE-2026-90711) exposes Node.js apps to access control bypasses. Patch this proxy-addr IP spoofing bug today.

#ProxyAddr #NodeJS #IPspoofing #CVE202690711 #Cybersecurity

http://securityonline.info/proxy-addr-ip-spoofing-flaw/?utm_source=mastodon&utm_medium=jetpack_social

##

thehackerwire@mastodon.social at 2026-09-15T08:00:18.000Z ##

🔴 CVE-2026-90711 - Critical (9.1)

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-si...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-90711/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-61642
(0 None)

EPSS: 0.00%

2 posts

N/A

DailyCyberSecurity at 2026-09-16T00:32:00.460Z ##

Multiple critical Squid proxy vulnerabilities, including CVE-2026-61642, allow request smuggling and buffer overflows. Patch your servers immediately.

#SquidProxy #CVE202661642 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/squid-proxy-vulnerabilities-cve-2026-61642/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-09-16T00:32:00.000Z ##

Multiple critical Squid proxy vulnerabilities, including CVE-2026-61642, allow request smuggling and buffer overflows. Patch your servers immediately.

#SquidProxy #CVE202661642 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/squid-proxy-vulnerabilities-cve-2026-61642/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-85498
(0 None)

EPSS: 0.00%

2 posts

N/A

ottoto2017@prattohome.com at 2026-09-16T00:18:47.000Z ##

#Ubuntu 24.04.5 で #update 。

krb5 (1.20.1-6ubuntu2.10)
セキュリティ対応ではない。
krb5-locales
libgssapi-krb5-2
libk5crypto3
libkrb5-3
libkrb5support0

netplan.io (1.1.2-8ubuntu1~24.04.3)
セキュリティ対応ではない。
libnetplan1
netplan-generator
python3-netplan

policykit-1 (124-2ubuntu1.24.04.4)
CVE-2026-85498へのセキュリティ対応。
libpolkit-agent-1-0
libpolkit-gobject-1-0
libsrt1.5-gnutls
polkitd

セキュリティ対応もあるので、お早めに。

##

ottoto2017@prattohome.com at 2026-09-16T00:18:47.000Z ##

#Ubuntu 24.04.5 で #update 。

krb5 (1.20.1-6ubuntu2.10)
セキュリティ対応ではない。
krb5-locales
libgssapi-krb5-2
libk5crypto3
libkrb5-3
libkrb5support0

netplan.io (1.1.2-8ubuntu1~24.04.3)
セキュリティ対応ではない。
libnetplan1
netplan-generator
python3-netplan

policykit-1 (124-2ubuntu1.24.04.4)
CVE-2026-85498へのセキュリティ対応。
libpolkit-agent-1-0
libpolkit-gobject-1-0
libsrt1.5-gnutls
polkitd

セキュリティ対応もあるので、お早めに。