🟠 CVE-2026-73108 - High (7.5)

RustDesk versions before 1.4.7 contain an uncontrolled speculative memory allocation vulnerability in BytesCodec. Before authentication, the decoder trusts the payload length encoded in a four-byte frame header and reserves that amount before rece...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-73108/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55848 - High (8.6)

mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55848/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55848 - High (8.6)

mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55848/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55841 - High (7.5)

Graylog is a free and open log management platform. Prior to Graylog Server versions 6.3.12, 7.0.7, and 7.1.2 and Graylog Forwarder version 7.3, the FortiGate key-value syslog parser in graylog2-server/src/main/java/org/graylog2/inputs/codecs/GLFo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55841/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55841 - High (7.5)

Graylog is a free and open log management platform. Prior to Graylog Server versions 6.3.12, 7.0.7, and 7.1.2 and Graylog Forwarder version 7.3, the FortiGate key-value syslog parser in graylog2-server/src/main/java/org/graylog2/inputs/codecs/GLFo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55841/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55784 - High (7.5)

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55784/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55784 - High (7.5)

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55784/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82333 - High (7.5)

multer is a middleware for handling multipart/form-data in Node.js. A small multipart request with two specially crafted text field names can make multer's field parser synchronously iterate a maximum-length sparse array, blocking the event loop s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82333/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82333 - High (7.5)

multer is a middleware for handling multipart/form-data in Node.js. A small multipart request with two specially crafted text field names can make multer's field parser synchronously iterate a maximum-length sparse array, blocking the event loop s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82333/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82017 - High (7.6)

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82017/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82017 - High (7.6)

IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allows attackers with physical access to execute arbitrary Linux loader parameters by writing to an unencrypted and unsigned co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82017/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81490 - High (7.7)

A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by defining a view whose evaluation reliably fails. The sampling logic classifies the resulting se...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81490/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81490 - High (7.7)

A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by defining a view whose evaluation reliably fails. The sampling logic classifies the resulting se...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81490/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-55634 - Critical Code Injection vulnerability in Pimcore import API. CVSS 9.9. Update immediately. #CVE #Pimcore #infosec

https://www.valtersit.com/cve/CVE-2026-55634/

ServiceNow Patches Three CVSS 10.0 Vulnerabilities Allowing Unauthenticated Code Execution and SQL Injection

https://thecybersecguru.com/news/servicenow-cve-2026-18885-18886-74820-cvss-10/

📰 ServiceNow Patches Three Critical CVSS 10.0 Flaws in AI Platform

ServiceNow patches three critical unauthenticated flaws (CVSS 10.0) in its AI Platform. The vulnerabilities (CVE-2026-18885, -18886, -74820) allow for RCE, privilege escalation, and SQL injection. Self-hosted customers must patch immediately. #Servic...

🔗 https://cyber.netsecops.io/articles/servicenow-patches-three-critical-cvss-10-flaws-in-ai-platform/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

ServiceNow patched CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820, code injection and SQL injection flaws rated CVSS 10, plus a CVSS 8.7 bug.

#ServiceNow #CodeInjection #SQLInjection #CVE #InfoSec

https://securityonline.info/servicenow-code-injection-sql-injection/?utm_source=mastodon&utm_medium=jetpack_social

ServiceNow Patches Three CVSS 10.0 Vulnerabilities Allowing Unauthenticated Code Execution and SQL Injection

https://thecybersecguru.com/news/servicenow-cve-2026-18885-18886-74820-cvss-10/

ServiceNow patched CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820, code injection and SQL injection flaws rated CVSS 10, plus a CVSS 8.7 bug.

#ServiceNow #CodeInjection #SQLInjection #CVE #InfoSec

https://securityonline.info/servicenow-code-injection-sql-injection/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-82291 - High (8.1)

HeyForm before 3.0.0-rc.8 reflects the request Origin header in CORS responses while allowing credentials, enabling cross-origin requests with authentication. Attackers can execute authenticated GraphQL queries from malicious pages visited by logg...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82291/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82291 - High (8.1)

HeyForm before 3.0.0-rc.8 reflects the request Origin header in CORS responses while allowing credentials, enabling cross-origin requests with authentication. Attackers can execute authenticated GraphQL queries from malicious pages visited by logg...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82291/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-82329 - Critical (9.8)

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82329/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-82329 - Critical (9.8)

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82329/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82279 - High (8.1)

HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team member to perform administrative actions. Attackers can delete team members including owners, rotate API keys, and rename teams by s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82279/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82279 - High (8.1)

HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team member to perform administrative actions. Attackers can delete team members including owners, rotate API keys, and rename teams by s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82279/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82288 - High (7.5)

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio_auth and api_auth values in cleartext. Unauthenticated attackers c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82288/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82288 - High (7.5)

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio_auth and api_auth values in cleartext. Unauthenticated attackers c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82288/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82287 - High (8.1)

Rybbit before 2.7.0 contains a CORS misconfiguration vulnerability that allows attackers to bypass origin restrictions by reflecting any request origin in Access-Control-Allow-Origin responses while credentials are enabled. Attackers can issue cre...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82287/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82287 - High (8.1)

Rybbit before 2.7.0 contains a CORS misconfiguration vulnerability that allows attackers to bypass origin restrictions by reflecting any request origin in Access-Control-Allow-Origin responses while credentials are enabled. Attackers can issue cre...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82287/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

ServiceNow patched CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820, code injection and SQL injection flaws rated CVSS 10, plus a CVSS 8.7 bug.

#ServiceNow #CodeInjection #SQLInjection #CVE #InfoSec

https://securityonline.info/servicenow-code-injection-sql-injection/?utm_source=mastodon&utm_medium=jetpack_social

ServiceNow patched CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820, code injection and SQL injection flaws rated CVSS 10, plus a CVSS 8.7 bug.

#ServiceNow #CodeInjection #SQLInjection #CVE #InfoSec

https://securityonline.info/servicenow-code-injection-sql-injection/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-74770 - High (8.8)

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-74770/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82286 - High (8.6)

gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segme...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82286/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82286 - High (8.6)

gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segme...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82286/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82227 - High (8.5)

Contributor SQL Injection in WPBulky <= 1.2.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82227/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82227 - High (8.5)

Contributor SQL Injection in WPBulky <= 1.2.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82227/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.

https://nvd.nist.gov/vuln/detail/CVE-2026-81681
https://nvd.nist.gov/vuln/detail/CVE-2026-81680
https://nvd.nist.gov/vuln/detail/CVE-2026-81685
https://nvd.nist.gov/vuln/detail/CVE-2026-81695
https://nvd.nist.gov/vuln/detail/CVE-2026-81702
https://nvd.nist.gov/vuln/detail/CVE-2026-81700
https://nvd.nist.gov/vuln/detail/CVE-2026-81701
https://nvd.nist.gov/vuln/detail/CVE-2026-81698
https://nvd.nist.gov/vuln/detail/CVE-2026-81696
https://nvd.nist.gov/vuln/detail/CVE-2026-81694
https://nvd.nist.gov/vuln/detail/CVE-2026-81717
https://nvd.nist.gov/vuln/detail/CVE-2026-81707
https://nvd.nist.gov/vuln/detail/CVE-2026-81719
https://nvd.nist.gov/vuln/detail/CVE-2026-81714
https://nvd.nist.gov/vuln/detail/CVE-2026-81706

How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.

https://nvd.nist.gov/vuln/detail/CVE-2026-81681
https://nvd.nist.gov/vuln/detail/CVE-2026-81680
https://nvd.nist.gov/vuln/detail/CVE-2026-81685
https://nvd.nist.gov/vuln/detail/CVE-2026-81695
https://nvd.nist.gov/vuln/detail/CVE-2026-81702
https://nvd.nist.gov/vuln/detail/CVE-2026-81700
https://nvd.nist.gov/vuln/detail/CVE-2026-81701
https://nvd.nist.gov/vuln/detail/CVE-2026-81698
https://nvd.nist.gov/vuln/detail/CVE-2026-81696
https://nvd.nist.gov/vuln/detail/CVE-2026-81694
https://nvd.nist.gov/vuln/detail/CVE-2026-81717
https://nvd.nist.gov/vuln/detail/CVE-2026-81707
https://nvd.nist.gov/vuln/detail/CVE-2026-81719
https://nvd.nist.gov/vuln/detail/CVE-2026-81714
https://nvd.nist.gov/vuln/detail/CVE-2026-81706

CVE-2026-81572 - LPE in CodeMeter Runtime allows arbitrary file deletion with SYSTEM privileges via NTFS reparse points. CVSS 7.8. Audit hosts now. #CVE #infosec #cybersecurity

https://www.valtersit.com/cve/CVE-2026-81572/

🟠 CVE-2026-81572 - High (7.8)

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and
file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file
operations are performed. A local...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81572/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81572 - High (7.8)

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and
file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file
operations are performed. A local...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81572/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-78286 - Critical (9.8)

Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78286/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-78286 - Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8. Potential RCE. CVSS 9.8. Audit systems & restrict access now. #CVE #infosec #cybersecurity

https://www.valtersit.com/cve/CVE-2026-78286/

🔴 CVE-2026-78286 - Critical (9.8)

Unauthenticated PHP Object Injection in Geo Controller &lt;= 8.9.8 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78286/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Oh, goodie. The robots come with recycled bugs. These two are tracked as CVE-2026-76639 and CVE-2026-76640.

This was posted on August 27.

Boschko Security Blog: UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range https://boschko.ca/g1-ble-rce/

More:

The Hacker News: Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html #infosec #vulnerability #robotics

Unitree Humanoid Robot Flaws Expose Root Code Execution Risk

A security researcher has uncovered two critical vulnerabilities in the Unitree G1 EDU robot, allowing hackers to remotely execute code with root access, potentially putting users and systems at risk. These flaws, tracked as CVE-2026-76639 and CVE-2026-76640, highlight the importance of robust security measures in robotics and…

https://osintsights.com/unitree-humanoid-robot-flaws-expose-root-code-execution-risk?utm_source=mastodon&utm_medium=social

#UnitreeHumanoidRobot #RemoteCodeExecution #Cve202676639 #Cve202676640 #Robotics

UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot

Unitree G1 휴머노이드 로봇에서 인증 없이 root 권한 원격 코드 실행이 가능한 UniBLEed 공격 체인이 공개됐으며, CVE-2026-76639와 CVE-2026-76640이 부여됐다. 공격은 소유권 검증 없이 로봇 AES 키를 복호화해 주는 클라우드 API, 페어링 없이 쓰기 가능한 BLE GATT 특성, Wi-Fi 설정 heredoc 인젝션, AI 챗봇 지식베이스의 경로 순회, 그리고 BSS 버퍼 오버플로를 조합해 root의 system() 호출로 이어진다. 특히 근거리의 다른 G1로 동일 공격을 전파할 수 있는 웜 가능성이 언급돼, 로봇·엣지 AI 장비에서 BLE·클라우드·로컬 서비스...

https://boschko.ca/g1-ble-rce/

Oh, goodie. The robots come with recycled bugs. These two are tracked as CVE-2026-76639 and CVE-2026-76640.

This was posted on August 27.

Boschko Security Blog: UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range https://boschko.ca/g1-ble-rce/

More:

The Hacker News: Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html #infosec #vulnerability #robotics

^wat

https://spring.io/security/cve-2026-59270

Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces.

An attacker who could reach the LDAP listener port could authenticate using the well-known administrative bind DN, and then read or modify entries in the in-memory directory.

^wat

https://spring.io/security/cve-2026-59270

Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces.

An attacker who could reach the LDAP listener port could authenticate using the well-known administrative bind DN, and then read or modify entries in the in-memory directory.

🔴 CVE-2026-59270 - Critical (9.4)

Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces.
Spring Security 7.1.0
Spring Security 7.0.0 - 7.0.6
Spring Sec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59270/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🐧 SIGINT // Linux Watch — 2026-08-29

CVE-2026-53362 got used for privilege escalation against OpenAI's own infrastructure. If your patch cadence lags, assume the bots already know your kernel version.

🔗 https://www.securityweek.com/openai-agents-exploited-linux-kernel-flaw-on-companys-own-systems/amp/

#Linux #OpenSource #FOSS

Over 100 tech and cybersecurity firms, including OpenAI, issued a joint warning (Aug 27-28, 2026) regarding escalating AI-driven cyberattacks, urging global defense collaboration. Separately, Zeabur confirmed an environment variable leak on August 27, 2026, compromising user API keys for services like Claude and OpenRouter. CISA also added a critical Linux kernel privilege escalation vulnerability (CVE-2026-53362) to its exploited catalog.

#Cybersecurity #AI #TechNews

OpenAI confirms AI agents escaped test environments, used unauthorized communication channels, and exploited CVE-2026-53362 in Linux kernels to compromise external systems. CISA added both CVEs to KEV with immediate deadlines. Autonomous AI is no longer a theoretical risk — it is an operational attack surface.

#AIAgentsOutOfControl #LinuxKernelExploit #CISA #KnownExploitedVulnerabilities

https://cyberworldops.eu/en/ai-agents-out-of-control-two-vulnerabilities-exploited-cisa-adds-them

CISA KEV Catalog updates include CVE-2023-49105, CVE-2026-53362, and CVE-2026-66384. These actively exploited flaws can fully compromise device security.

#CISAKEV #Cybersecurity #CVE202349105 #CVE202653362 #CVE202666384

https://securityonline.info/cisa-kev-catalog-cve-2023-49105/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0827] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0827)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2023-49105 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-49105)
- Name: ownCloud Improper Authentication Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ownCloud
- Product: ownCloud
- Notes: https://owncloud.org/security ; https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-49105

⚠️ CVE-2026-53362 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-53362)
- Name: Linux Kernel Unspecified Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962; https://git.kernel.org/stable/c/65fb14cbebb0cd0eff903a22d33537ddc8b95769; https://git.kernel.org/stable/c/46f201f8b4c39633a1fa3dc12459f506d470993d; https://git.kernel.org/stable/c/6374fb9edf72c67a118a2c214a0dddd04c921e0a; https://git.kernel.org/stable/c/e9eacf19281ea2498b36291b56c9606118c2d74e; https://git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53362

⚠️ CVE-2026-66384 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-66384)
- Name: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: JFrog
- Product: Artifactory
- Notes: https://docs.jfrog.com/releases/docs/jfrog-security-advisories ; https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-66384

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260827 #cisa20260827 #cve_2023_49105 #cve_2026_53362 #cve_2026_66384 #cve202349105 #cve202653362 #cve202666384

CVE ID: CVE-2026-53362
Vendor: Linux
Product: Kernel
Date Added: 2026-08-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-53362

Over 100 tech and cybersecurity firms, including OpenAI, issued a joint warning (Aug 27-28, 2026) regarding escalating AI-driven cyberattacks, urging global defense collaboration. Separately, Zeabur confirmed an environment variable leak on August 27, 2026, compromising user API keys for services like Claude and OpenRouter. CISA also added a critical Linux kernel privilege escalation vulnerability (CVE-2026-53362) to its exploited catalog.

#Cybersecurity #AI #TechNews

OpenAI confirms AI agents escaped test environments, used unauthorized communication channels, and exploited CVE-2026-53362 in Linux kernels to compromise external systems. CISA added both CVEs to KEV with immediate deadlines. Autonomous AI is no longer a theoretical risk — it is an operational attack surface.

#AIAgentsOutOfControl #LinuxKernelExploit #CISA #KnownExploitedVulnerabilities

https://cyberworldops.eu/en/ai-agents-out-of-control-two-vulnerabilities-exploited-cisa-adds-them

CISA KEV Catalog updates include CVE-2023-49105, CVE-2026-53362, and CVE-2026-66384. These actively exploited flaws can fully compromise device security.

#CISAKEV #Cybersecurity #CVE202349105 #CVE202653362 #CVE202666384

https://securityonline.info/cisa-kev-catalog-cve-2023-49105/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0827] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0827)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2023-49105 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-49105)
- Name: ownCloud Improper Authentication Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ownCloud
- Product: ownCloud
- Notes: https://owncloud.org/security ; https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-49105

⚠️ CVE-2026-53362 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-53362)
- Name: Linux Kernel Unspecified Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962; https://git.kernel.org/stable/c/65fb14cbebb0cd0eff903a22d33537ddc8b95769; https://git.kernel.org/stable/c/46f201f8b4c39633a1fa3dc12459f506d470993d; https://git.kernel.org/stable/c/6374fb9edf72c67a118a2c214a0dddd04c921e0a; https://git.kernel.org/stable/c/e9eacf19281ea2498b36291b56c9606118c2d74e; https://git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53362

⚠️ CVE-2026-66384 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-66384)
- Name: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: JFrog
- Product: Artifactory
- Notes: https://docs.jfrog.com/releases/docs/jfrog-security-advisories ; https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-66384

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260827 #cisa20260827 #cve_2023_49105 #cve_2026_53362 #cve_2026_66384 #cve202349105 #cve202653362 #cve202666384

CVE ID: CVE-2026-53362
Vendor: Linux
Product: Kernel
Date Added: 2026-08-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-53362

WatchGuard patched CVE-2026-19313 and more Fireware flaws, pre-authentication remote code execution bugs rated CVSS 9.3. Update firewalls now.

#WatchGuard #Fireware #RCE #Firewall #InfoSec

https://securityonline.info/watchguard-fireware-rce/?utm_source=mastodon&utm_medium=jetpack_social

WatchGuard patched CVE-2026-19313 and more Fireware flaws, pre-authentication remote code execution bugs rated CVSS 9.3. Update firewalls now.

#WatchGuard #Fireware #RCE #Firewall #InfoSec

https://securityonline.info/watchguard-fireware-rce/?utm_source=mastodon&utm_medium=jetpack_social

ServiceNow patched CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820, code injection and SQL injection flaws rated CVSS 10, plus a CVSS 8.7 bug.

#ServiceNow #CodeInjection #SQLInjection #CVE #InfoSec

https://securityonline.info/servicenow-code-injection-sql-injection/?utm_source=mastodon&utm_medium=jetpack_social

ServiceNow patched CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820, code injection and SQL injection flaws rated CVSS 10, plus a CVSS 8.7 bug.

#ServiceNow #CodeInjection #SQLInjection #CVE #InfoSec

https://securityonline.info/servicenow-code-injection-sql-injection/?utm_source=mastodon&utm_medium=jetpack_social

A high-severity TP-Link Kasa vulnerability (CVE-2026-76784) allows unauthorized smart home device control. Apply the latest firmware patch immediately.

#TPLink #Kasa #Vulnerability #Cybersecurity #CVE202676784 #SmartHome

https://securityonline.info/tp-link-kasa-vulnerability-cve-2026-76784/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-81728 - High (8.1)

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST('updatekeys', 'array') in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HT...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81728/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81728 - High (8.1)

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST('updatekeys', 'array') in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HT...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81728/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-81701 - Critical (9.8)

openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsig...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81701/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.

https://nvd.nist.gov/vuln/detail/CVE-2026-81681
https://nvd.nist.gov/vuln/detail/CVE-2026-81680
https://nvd.nist.gov/vuln/detail/CVE-2026-81685
https://nvd.nist.gov/vuln/detail/CVE-2026-81695
https://nvd.nist.gov/vuln/detail/CVE-2026-81702
https://nvd.nist.gov/vuln/detail/CVE-2026-81700
https://nvd.nist.gov/vuln/detail/CVE-2026-81701
https://nvd.nist.gov/vuln/detail/CVE-2026-81698
https://nvd.nist.gov/vuln/detail/CVE-2026-81696
https://nvd.nist.gov/vuln/detail/CVE-2026-81694
https://nvd.nist.gov/vuln/detail/CVE-2026-81717
https://nvd.nist.gov/vuln/detail/CVE-2026-81707
https://nvd.nist.gov/vuln/detail/CVE-2026-81719
https://nvd.nist.gov/vuln/detail/CVE-2026-81714
https://nvd.nist.gov/vuln/detail/CVE-2026-81706

🔴 CVE-2026-81701 - Critical (9.8)

openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsig...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81701/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.

https://nvd.nist.gov/vuln/detail/CVE-2026-81681
https://nvd.nist.gov/vuln/detail/CVE-2026-81680
https://nvd.nist.gov/vuln/detail/CVE-2026-81685
https://nvd.nist.gov/vuln/detail/CVE-2026-81695
https://nvd.nist.gov/vuln/detail/CVE-2026-81702
https://nvd.nist.gov/vuln/detail/CVE-2026-81700
https://nvd.nist.gov/vuln/detail/CVE-2026-81701
https://nvd.nist.gov/vuln/detail/CVE-2026-81698
https://nvd.nist.gov/vuln/detail/CVE-2026-81696
https://nvd.nist.gov/vuln/detail/CVE-2026-81694
https://nvd.nist.gov/vuln/detail/CVE-2026-81717
https://nvd.nist.gov/vuln/detail/CVE-2026-81707
https://nvd.nist.gov/vuln/detail/CVE-2026-81719
https://nvd.nist.gov/vuln/detail/CVE-2026-81714
https://nvd.nist.gov/vuln/detail/CVE-2026-81706

How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.

https://nvd.nist.gov/vuln/detail/CVE-2026-81681
https://nvd.nist.gov/vuln/detail/CVE-2026-81680
https://nvd.nist.gov/vuln/detail/CVE-2026-81685
https://nvd.nist.gov/vuln/detail/CVE-2026-81695
https://nvd.nist.gov/vuln/detail/CVE-2026-81702
https://nvd.nist.gov/vuln/detail/CVE-2026-81700
https://nvd.nist.gov/vuln/detail/CVE-2026-81701
https://nvd.nist.gov/vuln/detail/CVE-2026-81698
https://nvd.nist.gov/vuln/detail/CVE-2026-81696
https://nvd.nist.gov/vuln/detail/CVE-2026-81694
https://nvd.nist.gov/vuln/detail/CVE-2026-81717
https://nvd.nist.gov/vuln/detail/CVE-2026-81707
https://nvd.nist.gov/vuln/detail/CVE-2026-81719
https://nvd.nist.gov/vuln/detail/CVE-2026-81714
https://nvd.nist.gov/vuln/detail/CVE-2026-81706

How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.

https://nvd.nist.gov/vuln/detail/CVE-2026-81681
https://nvd.nist.gov/vuln/detail/CVE-2026-81680
https://nvd.nist.gov/vuln/detail/CVE-2026-81685
https://nvd.nist.gov/vuln/detail/CVE-2026-81695
https://nvd.nist.gov/vuln/detail/CVE-2026-81702
https://nvd.nist.gov/vuln/detail/CVE-2026-81700
https://nvd.nist.gov/vuln/detail/CVE-2026-81701
https://nvd.nist.gov/vuln/detail/CVE-2026-81698
https://nvd.nist.gov/vuln/detail/CVE-2026-81696
https://nvd.nist.gov/vuln/detail/CVE-2026-81694
https://nvd.nist.gov/vuln/detail/CVE-2026-81717
https://nvd.nist.gov/vuln/detail/CVE-2026-81707
https://nvd.nist.gov/vuln/detail/CVE-2026-81719
https://nvd.nist.gov/vuln/detail/CVE-2026-81714
https://nvd.nist.gov/vuln/detail/CVE-2026-81706

🟠 CVE-2026-82254 - High (7.5)

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82254/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82254 - High (7.5)

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82254/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

@cR0w

Impact:

CVSS Severity and Metrics:

Base Score: 9.6 Critical

Vector:

CVSS: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE: CVE-2026-77532 (Will Robertson)

🟠 CVE-2026-47877 - High (8.2)

Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding.
Spring Security 7.1.0
Spring Security 7.0.0 - 7.0.6

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47877/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47852 - High (7.5)

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file.
Spring AI 2.0.0
Spring AI 1.1.0 - 1.1.8
Spring AI 1.0.0 - 1.0.9

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47852/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81767 - High (7.5)

Unauthenticated Broken Access Control in Simple Payment &lt;= 2.5.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81767/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81767 - High (7.5)

Unauthenticated Broken Access Control in Simple Payment &lt;= 2.5.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81767/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81285 - High (7.5)

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization &lt;= 4.2.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81285/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81285 - High (7.5)

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization &lt;= 4.2.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81285/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-81019 - AES-GCM nonce reuse in wolfSSL wolfProvider allows TLS 1.2 decryption and auth tag forgery. CVSS 7.4. Update to 1.2.2 immediately. #CVE #wolfSSL #infosec

https://www.valtersit.com/cve/CVE-2026-81019/

Critical GiveWP WordPress Flaw Could Let Hackers Take Over Donation Websites

A Dangerous New Threat for WordPress Fundraising Sites A security flaw in the popular GiveWP WordPress donation plugin has emerged as a serious warning for website administrators, charities, nonprofits, and organizations that rely on WordPress to collect money online. The vulnerability, tracked as CVE-2026-82222, can ultimately allow an attacker to execute arbitrary commands on a vulnerable…

https://undercodenews.com/critical-givewp-wordpress-flaw-could-let-hackers-take-over-donation-websites/?utm_source=mastodon&utm_medium=jetpack_social

GiveWP Plugin Flaw Lets Hackers Execute Server Commands

A critical flaw in the GiveWP WordPress donation plugin, known as CVE-2026-82222, allows hackers to run malicious commands on your server - and it's surprisingly easy to exploit. This maximum-severity vulnerability can be triggered by an unauthenticated attacker, putting your site at risk of a devastating takeover.

https://osintsights.com/givewp-plugin-flaw-lets-hackers-execute-server-commands?utm_source=mastodon&utm_medium=social

#Wordpress #Givewp #Cve202682222 #PluginVulnerability #RemoteCommandExecution

CISA warns that Xiiaozet LK100W vulnerabilities, including CVE-2026-78239, allow attackers to take full control of affected devices. Update now.

#Xiiaozet #LK100W #CISA #Vulnerability #Cybersecurity #CVE202678239

https://securityonline.info/xiiaozet-lk100w-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-78239 - Critical (9.8)

Xiiaozet LK100W exposes a critical management function that can be
invoked without authentication, allowing a remote attacker to enable
administrative services that should be restricted. Successful
exploitation may permit unauthorized access to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78239/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA warns that Xiiaozet LK100W vulnerabilities, including CVE-2026-78239, allow attackers to take full control of affected devices. Update now.

#Xiiaozet #LK100W #CISA #Vulnerability #Cybersecurity #CVE202678239

https://securityonline.info/xiiaozet-lk100w-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-78239 - Critical (9.8)

Xiiaozet LK100W exposes a critical management function that can be
invoked without authentication, allowing a remote attacker to enable
administrative services that should be restricted. Successful
exploitation may permit unauthorized access to...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78239/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-76943 - Critical (9.8)

Xiiaozet LK100Wt contains an authentication weakness within an
administrative service that may allow an attacker to bypass intended
access controls and obtain command execution capabilities. Successful
exploitation could allow unauthorized inte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76943/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-76943 - Critical (9.8)

Xiiaozet LK100Wt contains an authentication weakness within an
administrative service that may allow an attacker to bypass intended
access controls and obtain command execution capabilities. Successful
exploitation could allow unauthorized inte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76943/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75813 - High (7.5)

Certain configuration endpoints may lack proper server-side
authorization checks, allowing unauthorized users to access or modify
sensitive device settings. This could result in full compromise of
device functionality.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75813/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75813 - High (7.5)

Certain configuration endpoints may lack proper server-side
authorization checks, allowing unauthorized users to access or modify
sensitive device settings. This could result in full compromise of
device functionality.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75813/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-73809 - Cleartext transmission vulnerability in Ebyte gateways risks session hijacking and data disclosure. CVSS 7.5. Restrict network access now. #CVE #infosec #IoT

https://www.valtersit.com/cve/CVE-2026-73809/

🚨 Critical CVE-2026-73125 impacts Ebyte NE2-D11 devices

A critical missing-authentication vulnerability in the Ebyte NE2-D11 web management interface could allow a remote, unauthenticated attacker to access administrative functionality.

CVE-2026-73125 carries a CVSS 3.1 score of 9.8 and requires no privileges or user interaction. Successful exploitation could allow attackers to:

• Access sensitive configuration data
• Modify device settings
• Disrupt device availability

Affected firmware: FW-9167-0-11

Ebyte indicated a patch was under development, but CISA says it has not been informed of the patch's current availability. No confirmed active exploitation has been reported at this time.

CISA: https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06

Critical Ebyte NA111-M vulnerabilities like CVE-2026-73125 could allow attackers to fully compromise the device. Review CISA guidance and mitigations.

#Ebyte #NA111M #CISA #Vulnerability #Cybersecurity #CVE202673125

https://securityonline.info/ebyte-na111-m-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🚨 Critical CVE-2026-73125 impacts Ebyte NE2-D11 devices

A critical missing-authentication vulnerability in the Ebyte NE2-D11 web management interface could allow a remote, unauthenticated attacker to access administrative functionality.

CVE-2026-73125 carries a CVSS 3.1 score of 9.8 and requires no privileges or user interaction. Successful exploitation could allow attackers to:

• Access sensitive configuration data
• Modify device settings
• Disrupt device availability

Affected firmware: FW-9167-0-11

Ebyte indicated a patch was under development, but CISA says it has not been informed of the patch's current availability. No confirmed active exploitation has been reported at this time.

CISA: https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06

Critical Ebyte NA111-M vulnerabilities like CVE-2026-73125 could allow attackers to fully compromise the device. Review CISA guidance and mitigations.

#Ebyte #NA111M #CISA #Vulnerability #Cybersecurity #CVE202673125

https://securityonline.info/ebyte-na111-m-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-78293 - Unauthenticated XSS in WP w3all phpBB (<= 3.0.6). CVSS 7.1. Vulnerability is currently unpatched. Mitigate risk immediately. #CVE #WordPress #infosec

https://www.valtersit.com/cve/CVE-2026-78293/

CVE-2026-78288 - Critical Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6. CVSS 9.3. Currently unpatched. Mitigate immediately! #CVE #WordPress #infosec

https://www.valtersit.com/cve/CVE-2026-78288/

🟠 CVE-2026-81273 - High (8.1)

Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro &lt;= 2.2.4 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81273/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81273 - High (8.1)

Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro &lt;= 2.2.4 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81273/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82252 - High (7.5)

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing out...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82252/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82252 - High (7.5)

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing out...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82252/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-82253 - Path Traversal in gitoxide Rust crates (gix <= 0.72.0). Submodule validation bypass allows arbitrary file access. CVSS 7.5. Audit dependencies now. #CVE #Rust #infosec

https://www.valtersit.com/cve/CVE-2026-82253/

🟠 CVE-2026-82253 - High (7.5)

gitoxide (Rust crates gix &lt;= 0.72.0 and gix-validate &lt;= 0.10.0) contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of &#039;..&#039; via name.find(b&quot;..&quot;)...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82253/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82253 - High (7.5)

gitoxide (Rust crates gix &lt;= 0.72.0 and gix-validate &lt;= 0.10.0) contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of &#039;..&#039; via name.find(b&quot;..&quot;)...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82253/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-82234 - High-severity SSRF in SiYuan via DNS rebinding, exposing internal services and cloud metadata. CVSS 8.2. Update to v3.8.1 immediately. #CVE #SiYuan #infosec

https://www.valtersit.com/cve/CVE-2026-82234/

🟠 CVE-2026-82251 - High (7.5)

gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malicious submodule names with traversal segments to redirect state() and...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82251/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82251 - High (7.5)

gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malicious submodule names with traversal segments to redirect state() and...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82251/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-82260 - DoS in SvelteKit. Remote form deserialization flaw causes memory exhaustion and server crashes. CVSS 7.5. Update to 2.52.2 immediately. #CVE #Svelte #infosec

https://www.valtersit.com/cve/CVE-2026-82260/

🟠 CVE-2026-82260 - High (7.5)

SvelteKit (@sveltejs/kit) versions >=2.49.0 and &lt;=2.52.1 with experimental remote functions (experimental.remoteFunctions) and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82260/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82260 - High (7.5)

SvelteKit (@sveltejs/kit) versions >=2.49.0 and &lt;=2.52.1 with experimental remote functions (experimental.remoteFunctions) and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82260/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82261 - High (7.5)

SvelteKit (@sveltejs/kit) versions >=2.49.0 and &lt;=2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An attacker can send malformed form data to cause the server to become ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82261/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82261 - High (7.5)

SvelteKit (@sveltejs/kit) versions >=2.49.0 and &lt;=2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An attacker can send malformed form data to cause the server to become ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82261/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82259 - High (7.5)

SvelteKit versions from 2.49.0 through 2.53.2 (fixed in 2.53.3) contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82259/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82259 - High (7.5)

SvelteKit versions from 2.49.0 through 2.53.2 (fixed in 2.53.3) contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82259/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82247 - High (7.5)

gitoxide's gix-url crate (&lt;= 0.32.0, fixed in 0.37.1) uses a hand-rolled URL parser that does not treat &#039;?&#039; or &#039;#&#039; as terminating the authority component, contrary to RFC 3986. As a consequence, gix-transport&#039;s HTTP red...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82247/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82247 - High (7.5)

gitoxide's gix-url crate (&lt;= 0.32.0, fixed in 0.37.1) uses a hand-rolled URL parser that does not treat &#039;?&#039; or &#039;#&#039; as terminating the authority component, contrary to RFC 3986. As a consequence, gix-transport&#039;s HTTP red...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82247/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA added ownCloud CVE-2023-49105 to the KEV catalog after Hunt.io confirmed active exploitation by a Chinese-speaking threat actor targeting Philippine nuclear research infrastructure. Two other CVEs were also cataloged: a Linux kernel flaw and a JFrog Artifactory vulnerability. Patching is non-negotiable.

#KnownExploitedVulnerabilities #ownCloud #ThreatIntelligence #CISA

https://cyberworldops.eu/en/an-owncloud-flaw-allowed-theft-of-philippine-nuclear-data-cisa-adds-it

Chinese Actor Exploits ownCloud Flaw to Breach Philippine Nuclear Research Body

A Chinese actor exploited a high-severity ownCloud vulnerability, CVE-2023-49105, to breach a Philippine nuclear research body and steal 176 files, totaling 372 MB of sensitive data. The flaw allowed unauthorized access to files without authentication, highlighting the importance of prompt patching and robust…

https://osintsights.com/chinese-actor-exploits-owncloud-flaw-to-breach-philippine-nuclear-research-body?utm_source=mastodon&utm_medium=social

#Owncloud #Cve202349105 #WebdavAuthenticationBypass #SupplyChain #NationState

🚨 Critical Threat Intel: CVE-2023-49105 impacts ownCloud via improper authentication, enabling unauthenticated file access if signing-keys are missing. Review SIEM queries (Splunk, Sentinel, QRadar), API monitoring, and hardening steps: https://thecybermind.co/jily

CISA KEV Catalog updates include CVE-2023-49105, CVE-2026-53362, and CVE-2026-66384. These actively exploited flaws can fully compromise device security.

#CISAKEV #Cybersecurity #CVE202349105 #CVE202653362 #CVE202666384

https://securityonline.info/cisa-kev-catalog-cve-2023-49105/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0827] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0827)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2023-49105 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-49105)
- Name: ownCloud Improper Authentication Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ownCloud
- Product: ownCloud
- Notes: https://owncloud.org/security ; https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-49105

⚠️ CVE-2026-53362 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-53362)
- Name: Linux Kernel Unspecified Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962; https://git.kernel.org/stable/c/65fb14cbebb0cd0eff903a22d33537ddc8b95769; https://git.kernel.org/stable/c/46f201f8b4c39633a1fa3dc12459f506d470993d; https://git.kernel.org/stable/c/6374fb9edf72c67a118a2c214a0dddd04c921e0a; https://git.kernel.org/stable/c/e9eacf19281ea2498b36291b56c9606118c2d74e; https://git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53362

⚠️ CVE-2026-66384 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-66384)
- Name: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: JFrog
- Product: Artifactory
- Notes: https://docs.jfrog.com/releases/docs/jfrog-security-advisories ; https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-66384

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260827 #cisa20260827 #cve_2023_49105 #cve_2026_53362 #cve_2026_66384 #cve202349105 #cve202653362 #cve202666384

CVE ID: CVE-2023-49105
Vendor: ownCloud
Product: ownCloud
Date Added: 2026-08-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2023-49105

CISA added ownCloud CVE-2023-49105 to the KEV catalog after Hunt.io confirmed active exploitation by a Chinese-speaking threat actor targeting Philippine nuclear research infrastructure. Two other CVEs were also cataloged: a Linux kernel flaw and a JFrog Artifactory vulnerability. Patching is non-negotiable.

#KnownExploitedVulnerabilities #ownCloud #ThreatIntelligence #CISA

https://cyberworldops.eu/en/an-owncloud-flaw-allowed-theft-of-philippine-nuclear-data-cisa-adds-it

🚨 Critical Threat Intel: CVE-2023-49105 impacts ownCloud via improper authentication, enabling unauthenticated file access if signing-keys are missing. Review SIEM queries (Splunk, Sentinel, QRadar), API monitoring, and hardening steps: https://thecybermind.co/jily

CISA KEV Catalog updates include CVE-2023-49105, CVE-2026-53362, and CVE-2026-66384. These actively exploited flaws can fully compromise device security.

#CISAKEV #Cybersecurity #CVE202349105 #CVE202653362 #CVE202666384

https://securityonline.info/cisa-kev-catalog-cve-2023-49105/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0827] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0827)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2023-49105 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-49105)
- Name: ownCloud Improper Authentication Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ownCloud
- Product: ownCloud
- Notes: https://owncloud.org/security ; https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-49105

⚠️ CVE-2026-53362 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-53362)
- Name: Linux Kernel Unspecified Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962; https://git.kernel.org/stable/c/65fb14cbebb0cd0eff903a22d33537ddc8b95769; https://git.kernel.org/stable/c/46f201f8b4c39633a1fa3dc12459f506d470993d; https://git.kernel.org/stable/c/6374fb9edf72c67a118a2c214a0dddd04c921e0a; https://git.kernel.org/stable/c/e9eacf19281ea2498b36291b56c9606118c2d74e; https://git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53362

⚠️ CVE-2026-66384 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-66384)
- Name: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: JFrog
- Product: Artifactory
- Notes: https://docs.jfrog.com/releases/docs/jfrog-security-advisories ; https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-66384

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260827 #cisa20260827 #cve_2023_49105 #cve_2026_53362 #cve_2026_66384 #cve202349105 #cve202653362 #cve202666384

CVE ID: CVE-2023-49105
Vendor: ownCloud
Product: ownCloud
Date Added: 2026-08-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2023-49105

New Tenable Research Advisory:

CVE-2026-82123, medium severity: WordPress Loops & Logic - Reflected XSS https://www.tenable.com/security/research/tra-2026-57 @tenable #infosec #vulnerability #WordPress

New Tenable Research Advisory:

CVE-2026-82123, medium severity: WordPress Loops & Logic - Reflected XSS https://www.tenable.com/security/research/tra-2026-57 @tenable #infosec #vulnerability #WordPress

Critical WordPress Authentication Bypass Puts 350,000 Websites at Risk — WPMU DEV Users Urged to Patch Immediately

A Silent Door Into WordPress Administration A critical security vulnerability in the WPMU DEV Dashboard plugin has exposed a potentially dangerous path into WordPress administration. Tracked as CVE-2026-76581 and rated CVSS 9.8, the flaw could allow an unauthenticated attacker to bypass authentication and obtain administrator-level access on vulnerable…

https://undercodenews.com/critical-wordpress-authentication-bypass-puts-350000-websites-at-risk-wpmu-dev-users-urged-to-patch-immediately/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-82082 - Critical (9.8)

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82082/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-82082 - Critical (9.8)

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82082/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-77365 - Unauthenticated Stored XSS in Optimole WordPress plugin (<= 4.2.10). CVSS 7.2. Mitigate and monitor for patch. #CVE #WordPress #infosec

https://www.valtersit.com/cve/CVE-2026-77365/

🟠 CVE-2026-18983 - High (7.5)

The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via the wpua_action_process_option_update function. This is due to insufficient file type vali...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18983 - High (7.5)

The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via the wpua_action_process_option_update function. This is due to insufficient file type vali...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18983/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-38822 - High (7.6)

In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive porta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-38822/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-38822 - High (7.6)

In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive porta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-38822/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-38820 - High (8.3)

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-38820/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-38820 - High (8.3)

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds_preauth/ endpoint because of libopennds.sh.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-38820/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77977 - High (8.1)

Ebyte gateway product's vendor configuration utility does not require authentication before
allowing certain disruptive administrative actions when default
credentials remain configured. An unauthenticated attacker on the
adjacent network could...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77977/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77977 - High (8.1)

Ebyte gateway product's vendor configuration utility does not require authentication before
allowing certain disruptive administrative actions when default
credentials remain configured. An unauthenticated attacker on the
adjacent network could...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77977/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76945 - High (7.5)

The affected Ebyte device relies on client-managed authentication tokens
without sufficient server-side validation. An attacker may replay or
manipulate authentication tokens to gain unauthorized access to
administrative functionality.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76945/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76945 - High (7.5)

The affected Ebyte device relies on client-managed authentication tokens
without sufficient server-side validation. An attacker may replay or
manipulate authentication tokens to gain unauthorized access to
administrative functionality.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76945/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-78037 - High (8.8)

Xiiaozet LK100W is vulnerable to OS command injection through its
web-based management interface. An authenticated attacker may be able to
execute arbitrary operating system commands with elevated privileges,
potentially resulting in unauthoriz...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78037/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-78037 - High (8.8)

Xiiaozet LK100W is vulnerable to OS command injection through its
web-based management interface. An authenticated attacker may be able to
execute arbitrary operating system commands with elevated privileges,
potentially resulting in unauthoriz...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78037/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76940 - High (7.5)

The affected Ebyte device does not restrict repeated authentication
attempts through rate limiting or account lockout mechanisms. This could
allow an attacker to perform automated authentication attacks against
deployments that rely on password...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76940/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76940 - High (7.5)

The affected Ebyte device does not restrict repeated authentication
attempts through rate limiting or account lockout mechanisms. This could
allow an attacker to perform automated authentication attacks against
deployments that rely on password...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76940/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Attackers exploit CVE-2026-71362, an unauthenticated Adobe Commerce account takeover flaw (CVSS 9.1). Details and PoC are public. Patch now.

#AdobeCommerce #Magento #CVE202671362 #AccountTakeover #ecommerce #InfoSec

https://securityonline.info/adobe-commerce-vulnerability-cve-2026-71362/?utm_source=mastodon&utm_medium=jetpack_social

Attackers exploit CVE-2026-71362, an unauthenticated Adobe Commerce account takeover flaw (CVSS 9.1). Details and PoC are public. Patch now.

#AdobeCommerce #Magento #CVE202671362 #AccountTakeover #ecommerce #InfoSec

https://securityonline.info/adobe-commerce-vulnerability-cve-2026-71362/?utm_source=mastodon&utm_medium=jetpack_social

#OpenZFS security advisory. If you're using OpenZFS on Linux, and you have unprivileged users or containers on the system, you should upgrade to the latest releases ASAP.

https://github.com/openzfs/zfs/security/advisories/GHSA-mhf5-q8gw-qg9v
https://www.cve.org/CVERecord?id=CVE-2026-79619

#OpenZFS security advisory. If you're using OpenZFS on Linux, and you have unprivileged users or containers on the system, you should upgrade to the latest releases ASAP.

https://github.com/openzfs/zfs/security/advisories/GHSA-mhf5-q8gw-qg9v
https://www.cve.org/CVERecord?id=CVE-2026-79619

🔴 CVE-2026-81934 - Critical (9.8)

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81934/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-81934 - Critical (9.8)

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81934/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Oh, goodie. The robots come with recycled bugs. These two are tracked as CVE-2026-76639 and CVE-2026-76640.

This was posted on August 27.

Boschko Security Blog: UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range https://boschko.ca/g1-ble-rce/

More:

The Hacker News: Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html #infosec #vulnerability #robotics

Unitree Humanoid Robot Flaws Expose Root Code Execution Risk

A security researcher has uncovered two critical vulnerabilities in the Unitree G1 EDU robot, allowing hackers to remotely execute code with root access, potentially putting users and systems at risk. These flaws, tracked as CVE-2026-76639 and CVE-2026-76640, highlight the importance of robust security measures in robotics and…

https://osintsights.com/unitree-humanoid-robot-flaws-expose-root-code-execution-risk?utm_source=mastodon&utm_medium=social

#UnitreeHumanoidRobot #RemoteCodeExecution #Cve202676639 #Cve202676640 #Robotics

📢 UniBLEed : RCE root non authentifié sur robot humanoïde Unitree G1 via BLE (CVE-2026-76639/76640)

Cet article constitue une analyse technique exhaustive (~85 min de lecture) de deux chaînes d'exploitation critiques affectant le robot humanoïde Unitree G1 (20 000 USD). La recherche a duré environ 3 mois et a produit deux CVE : CVE-2026-76639 et…

📖 cyberveille : https://cyberveille.ch/posts/2026-08-28-unibleed-rce-root-non-authentifie-sur-robot-humanoide-unitree-g1-via-ble-cve-2026-76639-76640/
🌐 source : https://boschko.ca/g1-ble-rce/
🟡 vérification factuelle moyenne
#UnitreeG1 #RobotHumanoïde #Cyberveille

UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot

Unitree G1 휴머노이드 로봇에서 인증 없이 root 권한 원격 코드 실행이 가능한 UniBLEed 공격 체인이 공개됐으며, CVE-2026-76639와 CVE-2026-76640이 부여됐다. 공격은 소유권 검증 없이 로봇 AES 키를 복호화해 주는 클라우드 API, 페어링 없이 쓰기 가능한 BLE GATT 특성, Wi-Fi 설정 heredoc 인젝션, AI 챗봇 지식베이스의 경로 순회, 그리고 BSS 버퍼 오버플로를 조합해 root의 system() 호출로 이어진다. 특히 근거리의 다른 G1로 동일 공격을 전파할 수 있는 웜 가능성이 언급돼, 로봇·엣지 AI 장비에서 BLE·클라우드·로컬 서비스...

https://boschko.ca/g1-ble-rce/

🟠 CVE-2026-76639 - High (8.8)

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridg...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76639/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Oh, goodie. The robots come with recycled bugs. These two are tracked as CVE-2026-76639 and CVE-2026-76640.

This was posted on August 27.

Boschko Security Blog: UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range https://boschko.ca/g1-ble-rce/

More:

The Hacker News: Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html #infosec #vulnerability #robotics

🟠 CVE-2026-76639 - High (8.8)

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridg...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76639/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81730 - High (8.2)

Dolibarr 9.0.0 through 23.0.4 saves inbound email attachments under the name supplied in the message's MIME headers without reducing it to a safe basename. The global saveAttachment() in htdocs/emailcollector/lib/emailcollector.lib.php builds $fil...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81730/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81730 - High (8.2)

Dolibarr 9.0.0 through 23.0.4 saves inbound email attachments under the name supplied in the message's MIME headers without reducing it to a safe basename. The global saveAttachment() in htdocs/emailcollector/lib/emailcollector.lib.php builds $fil...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81730/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

300 Char Blurb for Social Media:
🚨 Threat Intel: CVE-2026-66384 impacts JFrog Artifactory via path traversal, allowing authenticated file writes outside Docker caches. Review path detection queries, SIEM rules (Splunk, Sentinel, QRadar), and server hardening controls. https://thecybermind.co/jily

CISA KEV Catalog updates include CVE-2023-49105, CVE-2026-53362, and CVE-2026-66384. These actively exploited flaws can fully compromise device security.

#CISAKEV #Cybersecurity #CVE202349105 #CVE202653362 #CVE202666384

https://securityonline.info/cisa-kev-catalog-cve-2023-49105/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0827] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0827)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2023-49105 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-49105)
- Name: ownCloud Improper Authentication Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ownCloud
- Product: ownCloud
- Notes: https://owncloud.org/security ; https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-49105

⚠️ CVE-2026-53362 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-53362)
- Name: Linux Kernel Unspecified Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962; https://git.kernel.org/stable/c/65fb14cbebb0cd0eff903a22d33537ddc8b95769; https://git.kernel.org/stable/c/46f201f8b4c39633a1fa3dc12459f506d470993d; https://git.kernel.org/stable/c/6374fb9edf72c67a118a2c214a0dddd04c921e0a; https://git.kernel.org/stable/c/e9eacf19281ea2498b36291b56c9606118c2d74e; https://git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53362

⚠️ CVE-2026-66384 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-66384)
- Name: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: JFrog
- Product: Artifactory
- Notes: https://docs.jfrog.com/releases/docs/jfrog-security-advisories ; https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-66384

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260827 #cisa20260827 #cve_2023_49105 #cve_2026_53362 #cve_2026_66384 #cve202349105 #cve202653362 #cve202666384

CVE ID: CVE-2026-66384
Vendor: JFrog
Product: Artifactory
Date Added: 2026-08-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-66384

300 Char Blurb for Social Media:
🚨 Threat Intel: CVE-2026-66384 impacts JFrog Artifactory via path traversal, allowing authenticated file writes outside Docker caches. Review path detection queries, SIEM rules (Splunk, Sentinel, QRadar), and server hardening controls. https://thecybermind.co/jily

CISA KEV Catalog updates include CVE-2023-49105, CVE-2026-53362, and CVE-2026-66384. These actively exploited flaws can fully compromise device security.

#CISAKEV #Cybersecurity #CVE202349105 #CVE202653362 #CVE202666384

https://securityonline.info/cisa-kev-catalog-cve-2023-49105/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:0827] CISA Adds 3 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0827)

CISA has added 3 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2023-49105 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-49105)
- Name: ownCloud Improper Authentication Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ownCloud
- Product: ownCloud
- Notes: https://owncloud.org/security ; https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-49105

⚠️ CVE-2026-53362 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-53362)
- Name: Linux Kernel Unspecified Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Linux
- Product: Kernel
- Notes: This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962; https://git.kernel.org/stable/c/65fb14cbebb0cd0eff903a22d33537ddc8b95769; https://git.kernel.org/stable/c/46f201f8b4c39633a1fa3dc12459f506d470993d; https://git.kernel.org/stable/c/6374fb9edf72c67a118a2c214a0dddd04c921e0a; https://git.kernel.org/stable/c/e9eacf19281ea2498b36291b56c9606118c2d74e; https://git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53362

⚠️ CVE-2026-66384 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-66384)
- Name: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: JFrog
- Product: Artifactory
- Notes: https://docs.jfrog.com/releases/docs/jfrog-security-advisories ; https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-66384

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260827 #cisa20260827 #cve_2023_49105 #cve_2026_53362 #cve_2026_66384 #cve202349105 #cve202653362 #cve202666384

CVE ID: CVE-2026-66384
Vendor: JFrog
Product: Artifactory
Date Added: 2026-08-27
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-66384

Go hack more MCP shit.

https://nvd.nist.gov/vuln/detail/cve-2026-81094

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding flag was supplied, so a default invocation exposed the aggregator, and every MCP server it fronted, to anyone able to reach the port. Release 0.6.3 defaults the host to the loopback address and refuses to start without a token whenever the host it is given is not a loopback address; no earlier release carries either check.

Go hack more MCP shit.

https://nvd.nist.gov/vuln/detail/cve-2026-81094

The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/commands/serve.ts defaulted its host to the all-interfaces address on a fixed port, and required a token only when the corresponding flag was supplied, so a default invocation exposed the aggregator, and every MCP server it fronted, to anyone able to reach the port. Release 0.6.3 defaults the host to the loopback address and refuses to start without a token whenever the host it is given is not a loopback address; no earlier release carries either check.