CRITICAL OS command injection (CVE-2026-124580) in Chengdu Feiyuxing VW2100 & VEC10GP: remote, unauthenticated attackers can run OS commands. Exploit is public, no fix available. Isolate or filter at network level. https://radar.offseq.com/threat/cve-2026-124580-os-command-injection-in-chengdu-feiyuxing-technology-vw2100-068caf8e4a2c88ff #OffSeq #infosec #vulnerability #CVE2026_124580

🔴 CVE-2026-124580 - Critical (10)

A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the function handle_wechat_cn_wifi of the file var/html/webserver of the component Weixin Auth Endpoint. The manipulation of the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124580/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL OS command injection (CVE-2026-124580) in Chengdu Feiyuxing VW2100 & VEC10GP: remote, unauthenticated attackers can run OS commands. Exploit is public, no fix available. Isolate or filter at network level. https://radar.offseq.com/threat/cve-2026-124580-os-command-injection-in-chengdu-feiyuxing-technology-vw2100-068caf8e4a2c88ff #OffSeq #infosec #vulnerability #CVE2026_124580

🔴 CVE-2026-124580 - Critical (10)

A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the function handle_wechat_cn_wifi of the file var/html/webserver of the component Weixin Auth Endpoint. The manipulation of the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124580/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-124577 - Critical (9.8)

A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCU_SHELL of the component Web Management Interface. Executing a manipulation can lead to improper authenticatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124577/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-124577 (CRITICAL): Intelbras SG 2404 PoE L2+ (1.00.70, 1.00.72) has improper authentication in /EXCU_SHELL. Remote attackers can bypass auth; public exploit exists. Upgrade to 1.00.74 ASAP. https://radar.offseq.com/threat/cve-2026-124577-improper-authentication-in-intelbras-sg-2404-poe-l2-c908961ef439a43c #OffSeq #CVE #Intelbras #Vuln

🔴 CVE-2026-124577 - Critical (9.8)

A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCU_SHELL of the component Web Management Interface. Executing a manipulation can lead to improper authenticatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124577/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-124577 (CRITICAL): Intelbras SG 2404 PoE L2+ (1.00.70, 1.00.72) has improper authentication in /EXCU_SHELL. Remote attackers can bypass auth; public exploit exists. Upgrade to 1.00.74 ASAP. https://radar.offseq.com/threat/cve-2026-124577-improper-authentication-in-intelbras-sg-2404-poe-l2-c908961ef439a43c #OffSeq #CVE #Intelbras #Vuln

WP Duplicate vulnerability CVE-2026-123751 is exploited in the wild, letting attackers upload files and run code. No patch exists, so remove the plugin.

#WordPress #WPDuplicate #CVE2026123751 #ExploitedInTheWild #FileUpload #RCE #WordPressSecurity #Vulnerability

https://securityonline.info/wp-duplicate-vulnerability-cve-2026-123751-exploited/?utm_source=mastodon&utm_medium=jetpack_social

WP Duplicate vulnerability CVE-2026-123751 is exploited in the wild, letting attackers upload files and run code. No patch exists, so remove the plugin.

#WordPress #WPDuplicate #CVE2026123751 #ExploitedInTheWild #FileUpload #RCE #WordPressSecurity #Vulnerability

https://securityonline.info/wp-duplicate-vulnerability-cve-2026-123751-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-113364: CRITICAL heap-based buffer overflow in NEC WebSAM WinShare (Windows, up to 7.7.2) enables unauthenticated RCE as SYSTEM via malformed packets. No patch yet — restrict access & monitor traffic. https://radar.offseq.com/threat/cve-2026-113364-cwe-122-heap-based-buffer-overflow-in-nec-corporation-websam-winshare-a6f050bc5c3b8ffd #OffSeq #CVE2026113364 #vuln #infosec

CVE-2026-113364: CRITICAL heap-based buffer overflow in NEC WebSAM WinShare (Windows, up to 7.7.2) enables unauthenticated RCE as SYSTEM via malformed packets. No patch yet — restrict access & monitor traffic. https://radar.offseq.com/threat/cve-2026-113364-cwe-122-heap-based-buffer-overflow-in-nec-corporation-websam-winshare-a6f050bc5c3b8ffd #OffSeq #CVE2026113364 #vuln #infosec

🟠 CVE-2026-124563 - High (7.5)

A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Secondary results in buffer overflow. The attack m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124563/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124563 - High (7.5)

A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Secondary results in buffer overflow. The attack m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124563/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124561 - High (7.5)

A vulnerability was determined in D-Link DIR-878 1.20B05. This impacts the function SetVLANSettings of the file prog.cgi of the component HNAP Handler. Executing a manipulation of the argument VID can lead to stack-based buffer overflow. The attac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124561/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124561 - High (7.5)

A vulnerability was determined in D-Link DIR-878 1.20B05. This impacts the function SetVLANSettings of the file prog.cgi of the component HNAP Handler. Executing a manipulation of the argument VID can lead to stack-based buffer overflow. The attac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124561/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124562 - High (7.5)

A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be ini...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124562/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124562 - High (7.5)

A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be ini...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124562/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-124560 – D-Link DIR-878 v1.20B05 hit by CRITICAL heap overflow in GetCAPTCHAsetting (HNAP Handler). Remote RCE risk, public exploit, no patch. Isolate or decommission unsupported routers. Details: https://radar.offseq.com/threat/cve-2026-124560-heap-based-buffer-overflow-in-d-link-dir-878-ce9830bb79f15e9b #OffSeq #CVE2026124560 #Infosec #RouterSec

🔴 CVE-2026-124560 - Critical (9.8)

A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid results in heap-based buffer overflow. The attac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124560/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-124560 – D-Link DIR-878 v1.20B05 hit by CRITICAL heap overflow in GetCAPTCHAsetting (HNAP Handler). Remote RCE risk, public exploit, no patch. Isolate or decommission unsupported routers. Details: https://radar.offseq.com/threat/cve-2026-124560-heap-based-buffer-overflow-in-d-link-dir-878-ce9830bb79f15e9b #OffSeq #CVE2026124560 #Infosec #RouterSec

🔴 CVE-2026-124560 - Critical (9.8)

A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid results in heap-based buffer overflow. The attac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124560/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-119506 - Critical (9.1)

Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119506/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

DynamiApps Frontend Admin <3.30.2 hit by CRITICAL vuln (CVE-2026-119506): incorrect privilege assignment → privilege escalation risk. No user action needed. Update to 3.30.2+ ASAP. https://radar.offseq.com/threat/cve-2026-119506-incorrect-privilege-assignment-in-dynamiapps-frontend-admin-by-dynamiapps-04549f32603e3940 #OffSeq #CVE2026119506 #Infosec #PrivilegeEscalation

🔴 CVE-2026-119506 - Critical (9.1)

Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119506/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

DynamiApps Frontend Admin <3.30.2 hit by CRITICAL vuln (CVE-2026-119506): incorrect privilege assignment → privilege escalation risk. No user action needed. Update to 3.30.2+ ASAP. https://radar.offseq.com/threat/cve-2026-119506-incorrect-privilege-assignment-in-dynamiapps-frontend-admin-by-dynamiapps-04549f32603e3940 #OffSeq #CVE2026119506 #Infosec #PrivilegeEscalation

🟠 CVE-2026-116499 - High (8.4)

IBM Qiskit SDK 1.4.2 through 2.6.2 could allow a local attacker to execute arbitrary code due to deserialization of untrusted data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116499/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116499 - High (8.4)

IBM Qiskit SDK 1.4.2 through 2.6.2 could allow a local attacker to execute arbitrary code due to deserialization of untrusted data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116499/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118904 - High (8.1)

IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118904/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118904 - High (8.1)

IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118904/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-96146 - High (7.5)

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96146/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-96146 - High (7.5)

IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96146/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8639 - High (8.8)

IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session fixation. An attacker can establish a session and, after the victim authenticates, hijack the authenticated session to gain unauthorized a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8639/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8639 - High (8.8)

IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session fixation. An attacker can establish a session and, after the victim authenticates, hijack the authenticated session to gain unauthorized a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8639/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9764 - High (8.8)

IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9764/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-9764 - High (8.8)

IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9764/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-6715 - Critical (9.8)

IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating system command without adequate validation or sanitization. Successful exploitation allows remote attackers to execute arbitrary com...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6715/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-6715 - Critical (9.8)

IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating system command without adequate validation or sanitization. Successful exploitation allows remote attackers to execute arbitrary com...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6715/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19133 - High (8.1)

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19133/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19133 - High (8.1)

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19133/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97677 - High (8.1)

IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into any directory writable by the service account, bypassing the platform's local file access isolation safeguard. Via a crafted on-di...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97677/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97677 - High (8.1)

IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into any directory writable by the service account, bypassing the platform's local file access isolation safeguard. Via a crafted on-di...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97677/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-15266 - Critical (9.8)

IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15266/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-15266 in IBM Concert 1.0 – 3.0.1.1 (CRITICAL, CVSS 9.8): Remote, unauthenticated attackers can execute arbitrary system commands (CWE-78). No patch available — restrict access & monitor for abuse. https://radar.offseq.com/threat/ibm-concert-10-through-3011-contains-components-that-allow-potentially-unsafe-command-execution-which-582f933b76d9b314 #OffSeq #IBM #Vuln #CyberSec

🔴 CVE-2026-15266 - Critical (9.8)

IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be exploited to run arbitrary system commands on the host.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15266/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-15266 in IBM Concert 1.0 – 3.0.1.1 (CRITICAL, CVSS 9.8): Remote, unauthenticated attackers can execute arbitrary system commands (CWE-78). No patch available — restrict access & monitor for abuse. https://radar.offseq.com/threat/ibm-concert-10-through-3011-contains-components-that-allow-potentially-unsafe-command-execution-which-582f933b76d9b314 #OffSeq #IBM #Vuln #CyberSec

🟠 CVE-2026-18093 - High (7.5)

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to broken access control.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18093/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18093 - High (7.5)

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to broken access control.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18093/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-107331 - Critical (9.9)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107331/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-107331 - Critical (9.9)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107331/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107330 - High (7.7)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to a Server-Side Request Forgery (SSRF) vulnerability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107330/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107330 - High (7.7)

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to a Server-Side Request Forgery (SSRF) vulnerability.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107330/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-17466 - Critical (9.1)

IBM Optim 1.0.0, 1.1.0, and 1.2.0 could allow a remote authenticated attacker to obtain sensitive information due to path traversal.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17466/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-17466 - Critical (9.1)

IBM Optim 1.0.0, 1.1.0, and 1.2.0 could allow a remote authenticated attacker to obtain sensitive information due to path traversal.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17466/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-105467 - High (8.1)

IBM QRadar 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 is vulnerable to Reflected XSS. A victim must open a specifically crafted URL while authenticated to QRadar to trigger this.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105467/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-105467 - High (8.1)

IBM QRadar 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 is vulnerable to Reflected XSS. A victim must open a specifically crafted URL while authenticated to QRadar to trigger this.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105467/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

OpenSSH has released emergency patches for a high-severity authentication bypass (CVE-2026-123158, CVSS 8.1). The flaw allows attackers to bypass SSH password authentication using passwords between 257 and 1,024 characters on certain Linux systems. Users should update to the patched version immediately.

SSHOLE (CVE-2026-123158) live tracking. sshole.events.greynoise.io
#ssh #cve #sshhole #sshole #security

SANS Stormcast Monday, November 9th, 2026: sshole Scans (CVE-2026-123158); SonicWall SonicOS MFA Bypass (CVE-2026-19868); Entra Device Registration (CVE-2026-109469); Claude Code Secrets Leak
https://isc.sans.edu/podcastdetail/10170

🚨🔓 SIGINT // Cybersecurity Watch — 2026-11-09
Critical OpenSSH/musl 'SSHole' bug (CVE-2026-123158) lets attackers bypass SSH passwords on Alpine and other musl-based Linux systems. Emergency patches are out; update now.
https://www.tomshardware.com/tech-industry/cyber-security/combined-flaws-let-anyone-into-alpine-linux-and-other-distros-by-typing-anything-over-256-characters-as-a-password-emergency-fixes-for-openssh-and-musl-libc-issued-for-millions-of-systems-patch-immediately
#CVE #OpenSSH #Linux #InfoSec

OpenSSH Password Authentication Bypass on Alpine Linux

CVE-2026-123158 was publicly disclosed on 5 November 2026.

An attacker reaching SSH on certain musl-based Linux systems, including Alpine Linux, may log in to accounts that should not accept passwords.

Get a FREE vulnerability scan:
https://www.secpoint.com/free-vulnerability-scan.php

Become a SecPoint partner:
https://www.secpoint.com/partner-signup.php

#SecPoint #OpenSSH #AlpineLinux #AuthenticationBypass #CyberSecurity

Scans for Sshole Vulnerability (CVE-2026-123158)
#CVE_2026_123158
https://isc.sans.edu/diary/rss/33498

SSHOLE (CVE-2026-123158) live tracking. sshole.events.greynoise.io
#ssh #cve #sshhole #sshole #security

SSHOLE (CVE-2026-123158) live tracking. sshole.events.greynoise.io
#ssh #cve #sshhole #sshole #secirity

SANS Stormcast Monday, November 9th, 2026: sshole Scans (CVE-2026-123158); SonicWall SonicOS MFA Bypass (CVE-2026-19868); Entra Device Registration (CVE-2026-109469); Claude Code Secrets Leak
https://isc.sans.edu/podcastdetail/10170

Scans for Sshole Vulnerability (CVE-2026-123158)
#CVE_2026_123158
https://isc.sans.edu/diary/rss/33498

🟠 CVE-2026-124477 - High (8.8)

OpenEMR before 8.3.0 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete arbitrary patient recall records via the delete_Recall action. Attackers can send POST requests to /interface/main/message...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124477/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124477 - High (8.8)

OpenEMR before 8.3.0 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete arbitrary patient recall records via the delete_Recall action. Attackers can send POST requests to /interface/main/message...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124477/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124484 - High (8.8)

OpenEMR before 8.4.0 contains a missing authorization vulnerability in portal onsite-document APIs that allows any authenticated core user to access cross-patient documents. Attackers can omit the patientId parameter and supply arbitrary record ID...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124484/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124484 - High (8.8)

OpenEMR before 8.4.0 contains a missing authorization vulnerability in portal onsite-document APIs that allows any authenticated core user to access cross-patient documents. Attackers can omit the patientId parameter and supply arbitrary record ID...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124484/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-124469 - Critical (9.9)

OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Sheet drug-inventory lookup (DrugSalesService::sellDrug) that interpolates the prod[N][warehouse] POST field into an ORDER BY clause. Low-privileged authenticated users can su...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124469/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-124469 - Critical (9.9)

OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Sheet drug-inventory lookup (DrugSalesService::sellDrug) that interpolates the prod[N][warehouse] POST field into an ORDER BY clause. Low-privileged authenticated users can su...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124469/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124483 - High (8.3)

OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API routes check the patients.med ACL instead of patients.rx and request no specific permission bit, so read-only Medical/History access passes th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124483/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124483 - High (8.3)

OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API routes check the patients.med ACL instead of patients.rx and request no specific permission bit, so read-only Medical/History access passes th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124483/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124472 - High (8.1)

OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_patient_note.php that allows any authenticated user to read and modify patient billing notes. Attackers with low-privilege accounts can enumerate the p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124472/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124472 - High (8.1)

OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_patient_note.php that allows any authenticated user to read and modify patient billing notes. Attackers with low-privilege accounts can enumerate the p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124472/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124471 - High (8.1)

OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_invoice.php that allows any authenticated user to read and modify billing data for any encounter. Attackers can iterate the id parameter to read patien...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124471/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124471 - High (8.1)

OpenEMR before 8.3.0 contains a missing authorization vulnerability in interface/billing/sl_eob_invoice.php that allows any authenticated user to read and modify billing data for any encounter. Attackers can iterate the id parameter to read patien...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124471/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124467 - High (8.8)

OpenEMR before 8.4.0 contains a local file inclusion in the ESign router (library/ESign/Router.php), which passes the unsanitized module parameter into a require_once of '/Controller.php', and the fax module's faxProcessUploads writes attacker-nam...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124467/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124467 - High (8.8)

OpenEMR before 8.4.0 contains a local file inclusion in the ESign router (library/ESign/Router.php), which passes the unsanitized module parameter into a require_once of '/Controller.php', and the fax module's faxProcessUploads writes attacker-nam...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124467/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124463 - High (8.7)

OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with CAMOS access to inject HTML by saving malicious CAMOS content through ajax_save.php. Attackers can store a script payload that executes ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124463/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124463 - High (8.7)

OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with CAMOS access to inject HTML by saving malicious CAMOS content through ajax_save.php. Attackers can store a script payload that executes ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124463/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124457 - High (7.6)

OpenEMR before 8.3.0 contains a path traversal vulnerability in interface/billing/sl_eob_process.php that allows authenticated users to write and read files by supplying unsanitized eraname values. Attackers without billing privileges can inject ....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124457/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-124457 - High (7.6)

OpenEMR before 8.3.0 contains a path traversal vulnerability in interface/billing/sl_eob_process.php that allows authenticated users to write and read files by supplying unsanitized eraname values. Attackers without billing privileges can inject ....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-124457/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

UnrealIRCd vulnerability CVE-2026-114713 is exploited in the wild, letting users run IRCOp commands. Hot-patch or upgrade to 6.2.7.1 now.

#UnrealIRCd #IRC #CVE2026114713 #ExploitedInTheWild #HotPatch #CommandInjection #PatchNow #Vulnerability

https://securityonline.info/unrealircd-vulnerability-cve-2026-114713-exploited/?utm_source=mastodon&utm_medium=jetpack_social

UnrealIRCd vulnerability CVE-2026-114713 is exploited in the wild, letting users run IRCOp commands. Hot-patch or upgrade to 6.2.7.1 now.

#UnrealIRCd #IRC #CVE2026114713 #ExploitedInTheWild #HotPatch #CommandInjection #PatchNow #Vulnerability

https://securityonline.info/unrealircd-vulnerability-cve-2026-114713-exploited/?utm_source=mastodon&utm_medium=jetpack_social

SonicWall SonicOS: CISA ha aggiunto alla KEV la CVE-2026-19868, bypass dell'autenticazione SAML (MFA incluso) sulla SSL VPN, esposta solo se il login SAML è attivo.

SonicWall ha indagato una segnalazione di possibile sfruttamento; nessun dettaglio su attacchi o attori. Colpiti Gen7 (SonicOS 7.3.3-7015 e precedenti) e Gen8 (8.2.2-8015 e precedenti). Fix: 7.3.4-7013 e 8.2.3-8015, nessun workaround. Scadenza FCEB: 20/11.

https://thehackernews.com/2026/11/cisa-flags-sonicwall-sonicos-mfa-bypass.html
#SonicWall #infosec

CISA Warns of SonicWall SonicOS MFA Bypass Flaw Exploitation

Beware: a high-severity flaw in SonicWall's SonicOS has been exploited in the wild, allowing hackers to bypass multi-factor authentication and gain unauthorized access with just a valid username and password. CISA has flagged this vulnerability, CVE-2026-19868, as a priority threat.

https://osintsights.com/cisa-warns-of-sonicwall-sonicos-mfa-bypass-flaw-exploitation?utm_source=mastodon&utm_medium=social

#MfaBypass #Sonicwall #Sonicos #Cve202619868 #Cisa

CISA added a SonicWall SonicOS authentication flaw tracked as CVE-2026-19868 to its Known Exploited Vulnerabilities catalog.

The issue may allow users with valid alternate credentials to bypass SAML and MFA controls.

SonicWall investigated potential exploitation and urged customers to apply updates alongside fixes for other interface and service vulnerabilities.

https://en.hacks.gr/sto-stochastro-ton-amerikanikon-archon-sovaro-keno-asfaleias-sta-systimata-tis-sonicwall/

#SonicWall #SonicOS #CISA #CVE202619868

SANS Stormcast Monday, November 9th, 2026: sshole Scans (CVE-2026-123158); SonicWall SonicOS MFA Bypass (CVE-2026-19868); Entra Device Registration (CVE-2026-109469); Claude Code Secrets Leak
https://isc.sans.edu/podcastdetail/10170

Tracked as CVE-2026-19868, the flaw affects the SSL VPN component of SonicOS, the operating system that runs on SonicWall firewalls. It’s one of seven vulnerabilities described in an advisory published on November 6. https://www.securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins/

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-19868 – SonicWall SonicOS SSLVPN Use of SFA Vulnerability

CVE-2026-19868 - SonicWall Introduction The Cybersecurity and Infrastructure Security Agency has added CVE-2026-19868, a critical SonicOS SSLVPN authentication bypass vulnerability affecting SonicWall gateways, to its Known Exploited Vulnerabilities catalog....

https://thecybermind.co/5l9k

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-19868 – SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

CISA's inclusion of SonicWall's CVE-2026-19868 in the KEV catalog requires urgent executive oversight, risk assessment, and rapid gateway patching....

https://thecybermind.co/595r

SANS Stormcast Monday, November 9th, 2026: sshole Scans (CVE-2026-123158); SonicWall SonicOS MFA Bypass (CVE-2026-19868); Entra Device Registration (CVE-2026-109469); Claude Code Secrets Leak
https://isc.sans.edu/podcastdetail/10170

Tracked as CVE-2026-19868, the flaw affects the SSL VPN component of SonicOS, the operating system that runs on SonicWall firewalls. It’s one of seven vulnerabilities described in an advisory published on November 6. https://www.securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins/

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-19868 – SonicWall SonicOS SSLVPN Use of SFA Vulnerability

CVE-2026-19868 - SonicWall Introduction The Cybersecurity and Infrastructure Security Agency has added CVE-2026-19868, a critical SonicOS SSLVPN authentication bypass vulnerability affecting SonicWall gateways, to its Known Exploited Vulnerabilities catalog....

https://thecybermind.co/5l9k

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-19868 – SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

CISA's inclusion of SonicWall's CVE-2026-19868 in the KEV catalog requires urgent executive oversight, risk assessment, and rapid gateway patching....

https://thecybermind.co/595r

SANS Stormcast Monday, November 9th, 2026: sshole Scans (CVE-2026-123158); SonicWall SonicOS MFA Bypass (CVE-2026-19868); Entra Device Registration (CVE-2026-109469); Claude Code Secrets Leak
https://isc.sans.edu/podcastdetail/10170

SANS Stormcast Monday, November 9th, 2026: sshole Scans (CVE-2026-123158); SonicWall SonicOS MFA Bypass (CVE-2026-19868); Entra Device Registration (CVE-2026-109469); Claude Code Secrets Leak
https://isc.sans.edu/podcastdetail/10170

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

🔎 NEXUS8 WEEKLY DIGEST · 🎣 PHISHING

CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue

Veeam warned customers about boot failures affecting Software Appliance virtual machines (VMs) on hosts with AMD EPYC processors. The company's Software Appliance VMs are pre-configured, Linux-based virtual machines…

Also tracked this week: Fresh WordPress Vulnerability in Attackers’ Crosshairs · OpenSSH Rushes Patches for ‘SSHole’…

https://nexus8.8bitsecurity.com/entity/signal_event-13682511

Hey @ubuntu, I really want to know: Do you just not care about CVE-2026-98432 or what's the issue?

I have been presented this screen for 1.5 weeks now:

- https://ubuntu.com/security/CVE-2026-98432

1 affected source package is installed: linux
(1/1) linux:
A fix is coming soon. Try again tomorrow.

1 package is still affected: linux
✘ CVE-2026-98432 is not resolved.

#Ubuntu

Red Hat OpenShift Container Platform 4.21.42 patches CRITICAL flaws: kernel IPv4 memory handling (CVE-2026-98432) & Brotli decoder OOB write. Upgrade images and RPMs now for protection. https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42142-bug-fix-and-security-update-9fbc9537938fbdfb #OffSeq #RedHat #OpenShift #CVE202698432 #Infosec

Finally got around to updating my #TrueNAS OS version. The recent 9.8 scaled CVE-2026-98432 scared me enough to do it. Didn't even take 20 min.. It is a strange time when a minor OS update contains fixes for 1600+ CVEs

So far I've been more concerned with myself potentially losing some secrets and locking myself out of my own systems. Now, with selfhosting a web server in 2026, perhaps I need to update my threat model..

🔎 NEXUS8 WEEKLY DIGEST · 🎣 PHISHING

CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue

Veeam warned customers about boot failures affecting Software Appliance virtual machines (VMs) on hosts with AMD EPYC processors. The company's Software Appliance VMs are pre-configured, Linux-based virtual machines…

Also tracked this week: Fresh WordPress Vulnerability in Attackers’ Crosshairs · OpenSSH Rushes Patches for ‘SSHole’…

https://nexus8.8bitsecurity.com/entity/signal_event-13682511

Hey @ubuntu, I really want to know: Do you just not care about CVE-2026-98432 or what's the issue?

I have been presented this screen for 1.5 weeks now:

- https://ubuntu.com/security/CVE-2026-98432

1 affected source package is installed: linux
(1/1) linux:
A fix is coming soon. Try again tomorrow.

1 package is still affected: linux
✘ CVE-2026-98432 is not resolved.

#Ubuntu

Red Hat OpenShift Container Platform 4.21.42 patches CRITICAL flaws: kernel IPv4 memory handling (CVE-2026-98432) & Brotli decoder OOB write. Upgrade images and RPMs now for protection. https://radar.offseq.com/threat/red-hat-security-advisory-openshift-container-platform-42142-bug-fix-and-security-update-9fbc9537938fbdfb #OffSeq #RedHat #OpenShift #CVE202698432 #Infosec

📢 New #updates · 8 Nov #15

· cmux cmux-app-ffi-f2cc44d0c55d833af1f7393ac798d783d30ca2e6 — Updated FFI library for remote desktop core
· fluxer fluxer-unfurl@2026.1108.192345
· freehire deploy-20261108-2008 — UI fixes and performance tweaks
· FileWizard 0.5.2 — Security update fixes CVE-2026-111497

Full changelogs → https://selfhost.directory?utm_source=mastodon&utm_medium=social

#homelab #backup #docker #security

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

ModSecurity vulnerabilities CVE-2026-104269 and CVE-2026-73857 now have public details and a proof-of-concept. Upgrade to libmodsecurity 3.0.17.

#ModSecurity #OWASP #WAF #CVE2026104269 #CVE202673857 #PoC #WebSecurity #PatchNow

https://securityonline.info/modsecurity-vulnerabilities-poc/?utm_source=mastodon&utm_medium=jetpack_social

ModSecurity vulnerabilities CVE-2026-104269 and CVE-2026-73857 now have public details and a proof-of-concept. Upgrade to libmodsecurity 3.0.17.

#ModSecurity #OWASP #WAF #CVE2026104269 #CVE202673857 #PoC #WebSecurity #PatchNow

https://securityonline.info/modsecurity-vulnerabilities-poc/?utm_source=mastodon&utm_medium=jetpack_social

🐧 SIGINT // Ubuntu Watch — 2026-11-09

An APT CVE rated High and marked actively exploited hits the one tool every Debian/Ubuntu box trusts to deliver code as root. This write-up pairs patching with hunting, so check your fleet for compromise indicators while you update, and don't just run apt upgrade and move on.

🔗 https://threatdefence.com/article/debian-ubuntu-apt-cve-2026-109518-patching-hunting

#Ubuntu #Linux #infosec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

Security Vulnerability in WordPress Puts Versions 4.7 to 7.1.3 at Risk of Site Takeover Attacks #wordpress

A critical WordPress flaw, CVE-2026-119977, puts versions 4.7–7.1.3 at risk of unauthenticated remote code execution during updates. Learn how the vulnerability works and why site owners should act: https://ift.tt/uMWO5fp

Source: https://ift.tt/uMWO5fp | Image: https://ift.tt/8Yn2ud6

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

Hugging Face datasets RCE CVE-2026-57845 (CVSS 8.8) has a public proof-of-concept. The library sees 38M monthly downloads, and no fixed release exists.

#HuggingFace #Python #CVE202657845 #RCE #PoC #MachineLearning #SupplyChain #Vulnerability #8879

https://securityonline.info/hugging-face-datasets-rce-cve-2026-57845-poc/?utm_source=mastodon&utm_medium=jetpack_social

Hugging Face datasets RCE CVE-2026-57845 (CVSS 8.8) has a public proof-of-concept. The library sees 38M monthly downloads, and no fixed release exists.

#HuggingFace #Python #CVE202657845 #RCE #PoC #MachineLearning #SupplyChain #Vulnerability #8879

https://securityonline.info/hugging-face-datasets-rce-cve-2026-57845-poc/?utm_source=mastodon&utm_medium=jetpack_social

Meta Patches Critical React Server Components Flaws Allowing Remote Code Execution

Meta patched a critical remote code execution vulnerability (CVE-2025-55182) in React Server Components affecting several build tool packages. The flaw allows unauthenticated attackers to run arbitrary code by sending crafted payloads containing multiple typed arrays.

**If you use React Server Components, update your server-dom packages to versions 19.0.9, 19.1.10, 19.2.9, or 19.3.1 ASAP. This flaw allows unauthenticated remote code execution, and similar vulnerabilities have been used in ransomware attacks.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/meta-patches-critical-react-server-components-flaws-allowing-remote-code-execution-3-u-l-z-e/gD2P6Ple2L

Meta Patches Critical React Server Components Flaws Allowing Remote Code Execution

Meta patched a critical remote code execution vulnerability (CVE-2025-55182) in React Server Components affecting several build tool packages. The flaw allows unauthenticated attackers to run arbitrary code by sending crafted payloads containing multiple typed arrays.

**If you use React Server Components, update your server-dom packages to versions 19.0.9, 19.1.10, 19.2.9, or 19.3.1 ASAP. This flaw allows unauthenticated remote code execution, and similar vulnerabilities have been used in ransomware attacks.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/meta-patches-critical-react-server-components-flaws-allowing-remote-code-execution-3-u-l-z-e/gD2P6Ple2L

Openwave Webtop vulnerability CVE-2026-111793 is exploited in the wild, per JPCERT/CC. Upgrade Webtop Media Transcoder to 1.1.22.0 or later.

#Openwave #Webtop #CVE2026111793 #ExploitedInTheWild #JPCERT #Webmail #PatchNow #Vulnerability

https://securityonline.info/openwave-webtop-cve-2026-111793-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Openwave Webtop vulnerability CVE-2026-111793 is exploited in the wild, per JPCERT/CC. Upgrade Webtop Media Transcoder to 1.1.22.0 or later.

#Openwave #Webtop #CVE2026111793 #ExploitedInTheWild #JPCERT #Webmail #PatchNow #Vulnerability

https://securityonline.info/openwave-webtop-cve-2026-111793-exploited/?utm_source=mastodon&utm_medium=jetpack_social

A proof-of-concept exploit for CVE-2026-97798, a Windows Error Reporting vulnerability, gives a SYSTEM shell. Install the October 2026 update now.

#Windows #CVE202697798 #PrivilegeEscalation #PoC #WindowsErrorReporting #Microsoft #PatchNow #Vulnerability

https://securityonline.info/windows-error-reporting-cve-2026-97798-poc/?utm_source=mastodon&utm_medium=jetpack_social

A proof-of-concept exploit for CVE-2026-97798, a Windows Error Reporting vulnerability, gives a SYSTEM shell. Install the October 2026 update now.

#Windows #CVE202697798 #PrivilegeEscalation #PoC #WindowsErrorReporting #Microsoft #PatchNow #Vulnerability

https://securityonline.info/windows-error-reporting-cve-2026-97798-poc/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft Paint has a remote-code flaw, and Windows Update will not fix it...

Microsoft Paint has a remote code execution bug, and The Hacker News reports on Nov. 6 that the fix arrives only through a Microsoft Store update, not through Windows Update. The headline says it plainly: the fix is available, but Windows Update won't deliver it.

The flaw is CVE-2026-83844. The CVE Program's record, published by Microsoft on Oct.

Microsoft Paint has a remote-code flaw, and Windows Update will not fix it...

Microsoft Paint has a remote code execution bug, and The Hacker News reports on Nov. 6 that the fix arrives only through a Microsoft Store update, not through Windows Update. The headline says it plainly: the fix is available, but Windows Update won't deliver it.

The flaw is CVE-2026-83844. The CVE Program's record, published by Microsoft on Oct.

🚨 EUVD-2023-44284

📊 Score: 7.0/10 (CVSS v3.1)
📅 Published: 2023-07-24 | Updated: 2026-11-09

📝 A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44284

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2023-44284

📊 Score: 7.0/10 (CVSS v3.1)
📅 Published: 2023-07-24 | Updated: 2026-11-09

📝 A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44284

#cybersecurity #infosec #euvd #cve #vulnerability

ModSecurity vulnerabilities CVE-2026-104269 and CVE-2026-73857 now have public details and a proof-of-concept. Upgrade to libmodsecurity 3.0.17.

#ModSecurity #OWASP #WAF #CVE2026104269 #CVE202673857 #PoC #WebSecurity #PatchNow

https://securityonline.info/modsecurity-vulnerabilities-poc/?utm_source=mastodon&utm_medium=jetpack_social

ModSecurity vulnerabilities CVE-2026-104269 and CVE-2026-73857 now have public details and a proof-of-concept. Upgrade to libmodsecurity 3.0.17.

#ModSecurity #OWASP #WAF #CVE2026104269 #CVE202673857 #PoC #WebSecurity #PatchNow

https://securityonline.info/modsecurity-vulnerabilities-poc/?utm_source=mastodon&utm_medium=jetpack_social

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-11-02 - 2026-11-02)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 277
- High: 1179
- Medium: 1260
- Low: 202
- None: 602

Status:
- : 106
- Analyzed: 264
- Awaiting Analysis: 992
- Deferred: 1085
- Modified: 19
- Received: 603
- Rejected: 268
- Undergoing Analysis: 183

CISA KEVs:
- CISA-2026:1103 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1103)
- CISA-2026:1104 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1104)
- CISA-2026:1106 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1106)

Top CNAs:
- VulnCheck: 544
- GitHub, Inc.: 317
- IBM Corporation: 246
- Adobe Systems Incorporated: 228
- Chrome: 215
- Wordfence: 166
- WPScan: 146
- VulDB: 140
- Android (associated with Google Inc. or Open Handset Alliance): 139
- Patchstack: 132

Top Affected Products:
- UNKNOWN: 3070
- Google Chrome: 160
- Google Android: 45
- Freerdp: 42
- Am System Alo Suite: 15
- Apache Openoffice: 12
- Dell Openmanage Enterprise: 10
- Sensiolabs Symfony: 9
- Wso2 Identity Server: 8
- Netpbm Project Netpbm: 7

Top EPSS Score:
- CVE-2026-77690 - 15.58 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-77690)
- CVE-2026-121943 - 5.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121943)
- CVE-2026-119742 - 4.09 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-119742)
- CVE-2026-69137 - 3.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69137)
- CVE-2026-120276 - 3.21 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-120276)
- CVE-2026-92198 - 2.80 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-92198)
- CVE-2026-121930 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121930)
- CVE-2026-121931 - 2.72 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-121931)
- CVE-2026-122051 - 2.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-122051)
- CVE-2026-18199 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-18199)

#ZEN #SecDB #InfoSec

🟠 CVE-2026-93879 - High (7.5)

Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language (EL) expressions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93879/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93879 - High (7.5)

Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language (EL) expressions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93879/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack