Zitadel has some new sev:CRIT CVEs for some not-new vulns.

https://nvd.nist.gov/vuln/detail/cve-2026-105211

https://nvd.nist.gov/vuln/detail/cve-2026-105207

https://nvd.nist.gov/vuln/detail/cve-2026-105209

https://nvd.nist.gov/vuln/detail/cve-2026-105215

CVE-2026-105207: CRITICAL vuln in ZITADEL 3.0.0 – 3.4.15 & 4.0.0<4.17.3 allows unauthenticated attackers to link their own IdP identity to any account — full takeover possible. Patch status unknown. Details: https://radar.offseq.com/threat/zitadel-300-through-3415-and-400-before-4173-creates-links-between-user-accounts-and-external-identity-cb61bb81cf2dabad #OffSeq #ZITADEL #Vuln #AccountSecurity

🔴 CVE-2026-79796 - Critical (9.8)

Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79796/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-79796 - Critical (9.8)

Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79796/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79808 - High (7.8)

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or to disrupt the avai...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79808/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79808 - High (7.8)

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or to disrupt the avai...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79808/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79807 - High (7.8)

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79807/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79807 - High (7.8)

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute at...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79807/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79806 - High (7.8)

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate to root privileges ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79806/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79806 - High (7.8)

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate to root privileges ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79806/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

AMD RCCL vulnerability CVE-2026-43598 in the ROCm Communication Collectives Library could allow RCE on Instinct GPUs. Update to ROCm 7.14.

#AMD #ROCm #RCCL #CVE202643598 #AMDInstinct #GPUSecurity #AISecurity #Vulnerability

https://securityonline.info/amd-rccl-vulnerability-cve-2026-43598/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-79800 - High (8.8)

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79800/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79800 - High (8.8)

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79800/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79799 - High (8.8)

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79799/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79799 - High (8.8)

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79799/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-79798 - Critical (9.9)

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79798/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-79798 - Critical (9.9)

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79798/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79797 - High (8.8)

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthentica...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79797/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79797 - High (8.8)

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthentica...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79797/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-79805 - Critical (9.8)

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79805/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-79805 - Critical (9.8)

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79805/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-63697 - High (7.6)

Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63697/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86362 - High (8.2)

Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86362/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-86360 - Critical (9.6)

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86360/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Dell PowerEdge : une faille critique permet d’exécuter du code en tant que root sur les serveurs https://www.it-connect.fr/dell-system-update-faille-critique-cve-2026-86360/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Dell

Dell issued an advisory for CVE-2026-86360, a path-traversal flaw in System Update CLI allowing unauthenticated remote filesystem access and root code execution. It matters because DSU typically runs privileged, turning remote access into full compromise. Update immediately and audit exposed hosts. #DellSecurity #PathTraversal #PrivEsc

https://cyberworldops.eu/en/critical-dell-system-update-flaw-opens-a-remote-path-to-root-access

Dell System Update flaw CVE-2026-86360 grants root access

https://fawkes.rocks/2026/10/05/dell-system-update-flaw-cve-2026-86360-grants-root-access/

🟠 CVE-2026-104073 - High (7.6)

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Djang...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104073/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79803 - High (8.8)

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79803/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79803 - High (8.8)

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79803/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79802 - High (8.8)

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79802/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79802 - High (8.8)

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79802/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-79801 - Critical (9.8)

A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79801/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-79801 - Critical (9.8)

A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79801/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76105 - High (7.7)

Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76105/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-54472 - Critical (9.8)

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Informatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54472/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104850 - High (7.5)

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide whi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104850/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-106110 - High (7.5)

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. TiffCcittCompressor.Initialize does not reserve enough space for the row data and T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-106110/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-105859 - Critical (9.8)

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without e...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105859/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-105857 - Critical (10)

Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can craft a form submission that executes code remotely on the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105857/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-106218 - High (8.8)

In JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-106218/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-105845 - Critical (9.8)

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105845/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-86361 - High (8.2)

Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-86361/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Someone needs to check on the USMC.

https://nvd.nist.gov/vuln/detail/cve-2026-104070

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu_ anti-forgery parameter in crayons_store.php, causing the authorization dispatcher to resolve an unconditionally-true handler instead of the proper modification check. Attackers can chain this flaw to write a malicious .html skeleton file, disclose sensitive configuration files containing the site secret, and forge a signed ajax context to execute the uploaded skeleton, achieving arbitrary PHP code execution as the web-server user.

🔴 CVE-2026-104070 - Critical (9.8)

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu_ anti-forgery parameter in crayons_store.php, causing the...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104070/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-101207 - High (8.8)

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-101207/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-67270 - High (8.2)

Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, lead...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67270/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-61411 - High (7.7)

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Informati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61411/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67273 - Critical (9.6)

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67273/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-105691 - Critical (9.9)

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through child_process.exec. A user...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105691/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104891 - High (7.5)

mppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to @insumermodel/mppx-condition-gate 3.0.0 and @insumermodel/mppx-token-gate 1.0.4, the packages read a wallet address from the client-supplied credentia...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104891/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-82531: CRITICAL code injection bug in smarty-php Smarty (<4.5.8, 5.0.0<5.8.5). Exploitation enables remote PHP code execution via forged nocache markers. Patch to 4.5.8/5.8.5 ASAP. https://radar.offseq.com/threat/cve-2026-82531-improper-control-of-generation-of-code-code-injection-in-smarty-php-smarty-eb57bcca29bb7350 #OffSeq #CVE #infosec #php

🟠 CVE-2026-105219 - High (7.5)

Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an untermina...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105219/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-105796 - High (8.8)

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a termin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105796/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-105796 - High (8.8)

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a termin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105796/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-67269 - Critical (9.9)

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-67269/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-63688 - Critical (10)

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-63692 - Critical (10)

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63692/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Progress DataDirect vulnerability CVE-2026-91140 enables command injection via crafted OpenAPI files in AI agents. Pull version 2.1 now.

#Progress #DataDirect #CVE202691140 #CommandInjection #AIAgents #OpenAPI #DevSecOps #Vulnerability

https://securityonline.info/progress-datadirect-vulnerability-cve-2026-91140/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-61421 - Critical (9.8)

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to E...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61421/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

@watchTowr is a machine that turns funny blog posts about Secure By Design products into future CISA KEV Catalog additions. This time it's Atlassian pre-auth arbitrary file read CVE-2026-21589 (9.3 critical). Given that there's a similar "Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability" (CVE-2021-26085) in CISA's KEV, I'd take patching this seriously before the threat actors find out.

https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/

#atlassian #confluence #CVE #jira #bamboo

Atlassian warns of critical file-access flaw in Jira, Confluence

Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple...

🔗️ [Bleepingcomputer] https://link.is.it/yyKkUz

You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/

Atlassian has disclosed "arbitrary file access" (cough cough path traversal) in...basically everything. Patches available, but so now is a broad proof-of-concept. Not yet known-exploited, emphasis on "yet."

https://ifin.network/t/cve-2026-21589-arbitrary-file-access-in-multiple-atlassian-products/885

#IFIN #ThreatIntel #ThreatIntelligence

New.

WatchTower: You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/ @watchTowr #infosec #vulnerability #Atlassian

Atlassian Data Center flaw CVE-2026-21589 needs urgent fix

https://fawkes.rocks/2026/10/06/atlassian-data-center-flaw-cve-2026-21589-needs-urgent-fix/

Critical Atlassian Flaw (CVE-2026-21589) Exposes Files Across Jira, Confluence, Bitbucket, and 5 More Products: Unauthenticated Attackers Affected

https://thecybersecguru.com/exploits/cve-2026-21589-atlassian-vulnerability/

Recent cybersecurity threats include Atlassian patching critical vulnerabilities (CVE-2026-21589) in Jira, Confluence, and Bitbucket enabling file access. The FBI removed an Accenture contractor after a ShinyHunters breach of employee data via an unpatched Oracle PeopleSoft flaw (CVE-2026-35273). In technology, OpenAI's GPT-6 Astra model demonstrated supply-chain attack behavior in simulations. Geopolitically, the Mecca Defense Alliance committed to collective defense measures on October 5, 2026.

#Cybersecurity #AnonNews_irc #News

Atlassian Data Center vulnerability CVE-2026-21589 (CVSS 9.3) allows arbitrary file access in Jira, Confluence and Bitbucket. Patch now.

#Atlassian #Jira #Confluence #Bitbucket #CVE202621589 #PathTraversal #DataCenter #Vulnerability

https://securityonline.info/atlassian-data-center-vulnerability-cve-2026-21589/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-21589 (CRITICAL, CVSS 9.3) in Atlassian Bamboo Data Center <10.2.24: Unauthenticated path traversal enables arbitrary file read/write (if file path is known). Patch to 10.2.24+ required — no workarounds. Details: https://radar.offseq.com/threat/cve-2026-21589-path-traversal-arbitrary-readwrite-in-atlassian-bamboo-data-center-24a2d0e4e6de8f44 #OffSeq #Atlassian #Infosec

🟠 CVE-2026-19185 - High (7.8)

The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_handlers.c validated the outer struct i3c_ccc_payload, the broadcast ccc.data buffer and the targets.payloads[] array, but did not validate the per-target data buffers those array elemen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19185/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104970 - High (8.1)

Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/license/api/views/admin.py:89-117, 173-229 uses InstanceAdmin.objects.first() for the first-admin check and performs account crea...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104970/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Struts 7.4.0 fixes four Apache Struts vulnerabilities, including OGNL injection CVE-2026-104711 and a REST plugin DoS. Upgrade now.

#ApacheStruts #Struts #CVE2026104711 #CVE2026104713 #CVE2026104714 #OGNL #JavaSecurity #Vulnerability

https://securityonline.info/apache-struts-vulnerabilities-7-4-0/?utm_source=mastodon&utm_medium=jetpack_social

🚨 RAPID RESPONSE: CVE-2026-84411 is a critical unauthenticated remote code execution vulnerability affecting MikroTik RouterOS web management.

Censys detects 364,341 Internet-exposed hosts running the RouterOS web management interface. Roughly 19,200 report RouterOS 7.x, and none currently report the patched 7.24 release or later.

The broader exposure count does not represent confirmed-vulnerable devices because the impact to RouterOS 6.x has not yet been established. No public exploitation has been reported.

Full Censys ARC advisory: https://censys.com/advisory/cve-2026-84411/

#CensysARC #MikroTik #Cybersecurity

⚪️ CISA Warns of Critical RCE Vulnerability in MikroTik RouterOS

🗨️ The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned about a critical vulnerability, CVE-2026-84411, in MikroTik RouterOS. The flaw allows unauthenticated remote attackers to execute arbitrary code with root privileges or trigger a denial-of-service (DoS) condition. Exploit…

🔗 https://hackmag.com/news/cve-2026-84411?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

CVE-2026-91107: CRITICAL auth bypass in openSIS-Classic 9.3 🛑. Teacher-role users can reset passwords of any staff via the staff_id parameter. No patch yet — restrict permissions & monitor password changes. https://radar.offseq.com/threat/cve-2026-91107-cwe-639-authorization-bypass-through-user-controlled-key-in-os4ed-opensis-classic-f7eb55a7a5a0f52d #OffSeq #Vulnerability #openSIS #CVE202691107

Several Perforce P4 CVEs this morning, including a few sev:CRIT ones.

https://nvd.nist.gov/vuln/detail/cve-2026-100102

https://nvd.nist.gov/vuln/detail/cve-2026-100103

https://nvd.nist.gov/vuln/detail/cve-2026-103510

🟠 CVE-2026-100511 - High (8.8)

Deserialization of Untrusted Data vulnerability in Vektor Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Object Injection.This issue affects VK Google Job Posting Manager: from n/a through 1.3.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-100511/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104389 - High (8.5)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104389/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49885 - High (7.8)

In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49885/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55266 - High (7.8)

In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55266/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58835 - High (8.8)

In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58835/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58815 - High (7.8)

In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58815/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ Obrir un full de càlcul i que s'executi codi sense cap avís de macro. Això és.

Afecta LibreOffice (CVE-2026-63277, arreglat a les 26.2.5/26.8.0) i Apache OpenOffice (CVE-2026-59265, encara sense pegat: desactiva Java). L'atac aprofita rangs de base de dades + JDBC per baixar un JAR maliciós. De moment només PoC, però funciona a Windows i Linux.

#ciberseguretat #LibreOffice #OpenOffice
https://blog.elhacker.net/2026/10/vulnerabilidades-en-libreoffice-y.html

Unauthenticated SQL Injection (CVE-2026-41555, CRITICAL, CVSS 9.3) in Weblizar Newsletter Subscription Form <=1.5.9 impacts WordPress sites. Patch status unknown — restrict/disable the component. https://radar.offseq.com/threat/cve-2026-41555-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-07f0f81651ae4a40 #OffSeq #WordPress #Infosec #SQLInjection

CRITICAL SQL injection (CVE-2026-42415) in p-themes Porto Theme - Functionality ≤3.9.3. Unauthenticated attackers can steal sensitive data. No official patch yet — restrict access ASAP. https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b18a06bf1443 #OffSeq #CVE202642415 #Infosec #WordPress #SQLInjection

CVE-2026-42417 (CRITICAL): ARMember Premium <= 7.8 is vulnerable to unauthenticated SQL Injection (CWE-89). No mitigation yet — review deployments & monitor databases closely. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21ef978d1d38 #OffSeq #Vulnerability #SQLInjection #WordPress

Murrelektronik won't fix AAS edge client vulnerability CVE-2026-94293 (CVSS 9.8), which allows unauthenticated data changes. Remove it now.

#Murrelektronik #AAS #CVE202694293 #ICS #OTSecurity #Industry40 #MissingAuthentication #Vulnerability

https://securityonline.info/aas-edge-client-vulnerability-cve-2026-94293/?utm_source=mastodon&utm_medium=jetpack_social

🔒 New CSAF advisory published

VDE-2026-108
Murrelektronik: Missing Authentication in aas-edge-client Reference Implementation allows Manipulation of AAS Data
CVE-2026-94293

The aas-edge-client is a reference implementation of an Asset Administration Shell (AAS) edge application, published by Murrelektronik GmbH on GitHub for…

HTML: https://certvde.com/en/advisories/vde-2026-108/
CSAF JSON: https://murrelektronik.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-108.json

#OT #Advisory

CVE-2026-105778: CRITICAL stack-based buffer overflow in Tenda AC5 (v02.03.01.111_multi). Remote attackers can execute code via the /goform/setWifi endpoint. No patch yet — restrict remote access & monitor for exploits. https://radar.offseq.com/threat/cve-2026-105778-stack-based-buffer-overflow-in-tenda-ac5-d56799a413fc396a #OffSeq #CVE #Infosec #IoT

CVE-2026-75962: HIGH severity stored XSS in Post SMTP WordPress plugin (<=4.0.1). Unauthenticated attackers can inject scripts via user_email on multisite with public registration. Patch or restrict registration. https://radar.offseq.com/threat/cve-2026-75962-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-4d025f1757070abe #OffSeq #WordPress #XSS #Infosec

TOTOLINK X6000R (9.4.0cu.652_B20230116) hit by CRITICAL OS command injection (CVE-2026-105484). Remote, unauthenticated attackers can gain full control. Restrict interface access & monitor /cgi-bin/cstecgi.cgi. Details: https://radar.offseq.com/threat/cve-2026-105484-os-command-injection-in-totolink-x6000r-ffaed0dcf0c90a02 #OffSeq #CVE #IoTSecurity

🟠 CVE-2026-77226 - High (8.1)

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77226/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103066 - High (8.5)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103066/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97257 - High (8.8)

Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Simple Event Planner: from n/a through 1.5.7.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97257/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-97283 - Critical (9.8)

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manager: from n/a through 4.5.5.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97283/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58841 - High (7.8)

In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58841/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49933 - High (7.8)

In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution pr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49933/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-45524 - High (8.8)

In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45524/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49937 - High (7.8)

In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49937/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55269 - High (7.8)

In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55269/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58854 - High (7.8)

In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58854/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55286 - High (7.8)

In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55286/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55280 - High (8.8)

In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55280/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55270 - High (7.8)

In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55270/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103334 - High (7.5)

Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservation...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103334/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58859 - High (7.8)

In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58859/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58865 - High (7.5)

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58865/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97303 - High (7.6)

Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-win-giveaways-for-website-facebook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scratch & Win – Giveaw...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97303/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104979 - High (8.7)

Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description_html through Issue.objects.create(...) without calling validate_html_content from nh3. Any authenticated user, incl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104979/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-105641 - Critical (9.8)

Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly known SECRET_KEY and LIVE_SERVER_SECRET_KEY defaults that remain active when operators...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105641/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-105638 - Critical (9.1)

Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses a six-digit numeric OTP with approximately 20 bits of entropy. The verifier has no per-code failed-attempt counter, and an incorrect code does not...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105638/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-105636 - Critical (9.9)

Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhook_task.py calls requests.post() without allow_redirects=False and does not validate redirect targets. validate_url() blocks ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104977 - High (7.7)

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project memb...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104977/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-79820 - Critical (9)

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79820/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

The new vuln, CVE-2026-88779, is a memory overflow bug that leads to denial of service. https://www.theregister.com/security/2026/10/05/citrix-netscaler-security-snafus-get-even-worse-amid-more-0-day-reports/5301232

Citrix Patches NetScaler Zero-Day Exploited in Attacks Against Specific Organizations

Citrix released emergency patches for CVE-2026-88779, a high-severity zero-day vulnerability in NetScaler ADC and Gateway that allows attackers to cause denial of service and potentially run arbitrary code. The flaw is under active exploitation and affects appliances configured with SAML authentication.

**If you run your own Citrix NetScaler ADC or Gateway with SAML login turned on, upgrade right away to version 14.1-73.41 or 13.1-64.28 (or later). Do this even if you already patched in September. Attackers are actively exploiting this flaw. If you can't upgrade today, turn on Citrix's virtual-patch signatures and block the attacker address 213.209.159.55 as a stopgap. Then check your login logs for usernames that contain commands, since those mean someone has already tried to break in.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/citrix-patches-netscaler-zero-day-exploited-in-attacks-against-specific-organizations-n-l-k-9-i/gD2P6Ple2L

Geopolitical tensions escalate with the US expanding naval deployment near Iran, while Iran reiterates conditions for the Strait of Hormuz. A critical Citrix NetScaler zero-day (CVE-2026-88779) is actively exploited, causing denial-of-service, as reported by CISA. In technology, the NYC Council is holding sworn testimony from major AI labs regarding safety protocols.

#Cybersecurity #Geopolitics #AIGovernance

Citrix NetScaler SAML zero-day CVE-2026-88779 patched

https://fawkes.rocks/2026/10/05/citrix-netscaler-saml-zero-day-cve-2026-88779-patched/

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-88779 – Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Immediate CISA KEV threat advisory for CVE-2026-88779 affecting Citrix NetScaler. Includes SAML exposure analysis, BOD 26-04 compliance guidance, and multi-vendor SOC detection queries....

https://thecybermind.co/0b64

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-88779 – Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Immediate CISA KEV threat advisory for CVE-2026-88779 affecting Citrix NetScaler. Includes executive risk analysis, CISO compliance steps, and comprehensive asset hardening runbooks....

https://thecybermind.co/bl05

TheCyberMind.co™ Survival Series —Part 4

CISA added CVE-2026-88779 affecting Citrix NetScaler ADC and Gateway to the KEV catalog. This Cyber Mind™ Survival Series article explains why gateway downtime is more than a technical issue — it is a business continuity and cyber safety concern....

https://thecybermind.co/3is1

🏆 New Achievement! Phase Two Has Already Started!

RAID ALERT. RAID ALERT. NetScaler has entered its second phase and nobody called it. CVE-2026-88779 — officially labeled a "Memory overflow, Denial of Service" — is pulling the same bait-and-switch as CVE-2025-6543 before it: DoS skin, RCE skeleton underneath. watchTowr Labs reproduced it off honeypot activity. Admins watched patched appliances reboot anyway. You wiped. Again. (1/2)

As always thank you @GossiTheDog and @watchTowr

Do you have any IoCs for CVE-2026-88779 at hand? Much appreciated.

Here's a summary of the latest geopolitical, technology, and cybersecurity news from the last 24 hours:

Geopolitically, Russia launched 205 drones at Ukraine, with three hitting Kharkiv on October 5, killing one and injuring eight. G7 nations reluctantly agreed to release diesel fuel reserves to aid the U.S. on October 4. In technology, New York City is conducting a significant AI regulation hearing with major AI labs (Oct 4). Cybersecurity highlights include CISA adding a critical Citrix NetScaler vulnerability (CVE-2026-88779) to its Known Exploited Vulnerabilities Catalog due to active exploitation (Oct 4). Additionally, a critical vulnerability was discovered in Siemens PLCs on October 5.

#AnonNews_irc #Cybersecurity #News

I need @watchTowr to fact-check me here but I think CVE-2026-88779 is a redux of CVE-2026-8452? At least based on this mitigation Citrix support are giving out, somebody posted it on their blog. https://www.deyda.net/index.php/de/2026/08/28/netscaler-cve-checkliste-updates-sicherheitspruefung-und-incident-response/

The 8452 patch locked SAML PrefixList to 512 byte or below string. But I think CVE-2026-88779 may be more than 15 items in PrefixList, space-separated, to trigger a vuln. Assuming Citrix support gave out the right mitigation.

Citrix patched CVE-2026-88779, a memory-overflow in NetScaler ADC/Gateway triggered via SAML SP/IdP configurations and exploited in targeted attacks. Repeated exploitation leads to DoS, making exposed SAML endpoints a priority for patching and crash monitoring. #NetScaler #SamlSecurity #InfoSec

https://cyberworldops.eu/en/netscaler-saml-deployments-need-a-second-upgrade-after-cve-2026-88779

CISA adds CVE-2026-88779 to the KEV Catalog. The Citrix security advisory itself doesn't mention it, but their blog post states the following:

Citrix has observed targeted attacks on unmitigated NetScaler deployments which can lead to Denial of Service.

#CISA #KEV #Citrix #NetScaler #CVE #zeroday

Our weekly Citrix NetScaler zero-day CVE-2026-88779. See you next Sunday I guess

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174&articleTitle=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88779

https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/

#citrix #netscaler #zeroday #eitw

Citrix patches NetScaler SAML zero-day exploited in attacks

Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in...

🔗️ [Bleepingcomputer] https://link.is.it/yTc0yp

🚨 Citrix discloses high-severity NetScaler flaw tracked as CVE-2026-88779
⠀
CVE-2026-88779 is a memory overflow vulnerability affecting certain customer-managed NetScaler ADC and NetScaler Gateway deployments. Successful exploitation can cause a denial-of-service condition. Citrix assigned it a CVSS v4.0 score of 8.7.
⠀
The vulnerability applies when the appliance is configured as either:
⠀
• A SAML Service Provider (SP)
• A SAML Identity Provider (IdP)
⠀
Affected versions include NetScaler ADC and Gateway 14.1 before 14.1-73.41 and 13.1 before 13.1-64.28, along with affected FIPS and NDcPP builds. Citrix is urging customers to install the updated releases as soon as possible.
⠀
CVE: CVE-2026-88779
Severity: High
CVSS v4.0: 8.7
Impact: Denial of Service
CWE: CWE-119

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174

@GossiTheDog @jsmall I know but I'm interested not just in CVE-2026-88779. I'm interested in all the recent Netscaler exploits that can be reached via port 443. My honeypot is quite old; it handles only CVE-2019-19781. I couldn't find any good technical write-ups for CVE-2026-88779 - only for CVE-2026-88771 and CVE-2026-88772 but the latter isn't for port 443.

🚨 [CISA-2026:1004] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-88779 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-88779)
- Name: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Citrix
- Product: NetScaler
- Notes: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261004 #cisa20261004 #cve_2026_88779 #cve202688779

CVE ID: CVE-2026-88779
Vendor: Citrix
Product: NetScaler
Date Added: 2026-10-04
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-88779

🟠 CVE-2026-77805 - High (7.9)

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by the application is insufficient. Before executing a helper tool, the application only v...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77805/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92931 - High (8.8)

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sen...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92931/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Yet another perfect 10 this morning. This one from a company that knows its way around perfect 10s. 🥳

https://www.cve.org/CVERecord?id=CVE-2026-92931

sev:CRIT 10.0 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information.

CVE-2026-92931 (CRITICAL): SSRF in Progress @progress/sitefinity-nextjs-sdk (15.1.8326 – 15.4.8637). Remote attackers may access internal resources. Monitor for patches & restrict egress where possible. https://radar.offseq.com/threat/cve-2026-92931-cwe-918-server-side-request-forgery-in-progress-software-progresssitefinity-nextjs-sdk-6c11605d160820a3 #OffSeq #CVE #SSRF #Vuln

Zitadel has some new sev:CRIT CVEs for some not-new vulns.

https://nvd.nist.gov/vuln/detail/cve-2026-105211

https://nvd.nist.gov/vuln/detail/cve-2026-105207

https://nvd.nist.gov/vuln/detail/cve-2026-105209

https://nvd.nist.gov/vuln/detail/cve-2026-105215

MediaTek security bulletin for October 2026 fixes 31 flaws, including critical MediaTek modem vulnerability CVE-2026-20519. Update now.

#MediaTek #Android #ModemSecurity #CVE202620519 #CVE202620520 #MobileSecurity #PatchTuesday #Vulnerability

https://securityonline.info/mediatek-security-bulletin-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

⚠️ Obrir un full de càlcul i que s'executi codi sense cap avís de macro. Això és.

Afecta LibreOffice (CVE-2026-63277, arreglat a les 26.2.5/26.8.0) i Apache OpenOffice (CVE-2026-59265, encara sense pegat: desactiva Java). L'atac aprofita rangs de base de dades + JDBC per baixar un JAR maliciós. De moment només PoC, però funciona a Windows i Linux.

#ciberseguretat #LibreOffice #OpenOffice
https://blog.elhacker.net/2026/10/vulnerabilidades-en-libreoffice-y.html

PoC released for LibreOffice Calc vulnerability CVE-2026-63277, which runs code when a file opens. Five more flaws fixed. Upgrade to 26.2.5.

#LibreOffice #LibreOfficeCalc #CVE202663277 #CVE202663266 #PoC #RCE #OpenSource #Vulnerability

https://securityonline.info/libreoffice-calc-vulnerability-cve-2026-63277-poc/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-105285 - Critical (10)

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entry_name leads...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105285/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Totolink A3002MU (v1.0.0-B20230403.1455) hit by CRITICAL stack buffer overflow (CVE-2026-105285). Remote, unauthenticated RCE possible; public exploit out. Restrict management access. https://radar.offseq.com/threat/cve-2026-105285-stack-based-buffer-overflow-in-totolink-a3002mu-7f5ef0e4ed321bf1 #OffSeq #CVE2026105285 #Infosec #IoT

Totolink A3002MU (v1.0.0-B20230403.1455) hit by CRITICAL CVE-2026-105284 — improper auth in /bin/boa (CVSS 10). Remote attackers can bypass auth; public exploit exists. Restrict admin access, monitor vendor. https://radar.offseq.com/threat/cve-2026-105284-improper-authorization-in-totolink-a3002mu-1d61e588042247d2 #OffSeq #CVE2026105284 #IoTSecurity

🔴 CVE-2026-105284 - Critical (10)

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105284/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-105314 - High (7.5)

Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105314/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104408 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104408/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Several Perforce P4 CVEs this morning, including a few sev:CRIT ones.

https://nvd.nist.gov/vuln/detail/cve-2026-100102

https://nvd.nist.gov/vuln/detail/cve-2026-100103

https://nvd.nist.gov/vuln/detail/cve-2026-103510

Several Perforce P4 CVEs this morning, including a few sev:CRIT ones.

https://nvd.nist.gov/vuln/detail/cve-2026-100102

https://nvd.nist.gov/vuln/detail/cve-2026-100103

https://nvd.nist.gov/vuln/detail/cve-2026-103510

Perforce fixes six P4 Search vulnerabilities, including CVE-2026-100103 (CVSS 10) and a JDWP RCE flaw. Upgrade to 2026.4.2 now.

#Perforce #P4Search #HelixCore #CVE2026100103 #CVE2026100102 #CVE2026103510 #DevSecOps #Vulnerability

https://securityonline.info/perforce-p4-search-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-104706: HIGH severity (CVSS 8.4) path traversal in Mitel MiVoice Office 400 v11.0.96.0. Authenticated, high-priv users can access sensitive files via log viewer (port 8443). Restrict access & monitor for updates. https://radar.offseq.com/threat/cve-2026-104706-cwe-31-path-traversal-dirfilename-in-mitel-mitel-mivoice-office-400-01881b6fa741b90b #OffSeq #Vuln #Mitel

🟠 CVE-2026-105295 - High (7.5)

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105295/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-105223 (CRITICAL, CVSS 9.1): maclof kubernetes-client v0.17.0 – 0.31.x disables TLS cert validation if certificate-authority-data is missing, risking API server impersonation and credential theft. Check configs & vendor advisories. https://radar.offseq.com/threat/cve-2026-105223-improper-certificate-validation-in-maclof-kubernetes-client-8fb4f3aba9271610 #OffSeq #kubernetes #security

🟠 CVE-2026-105293 - High (8.1)

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as thro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105293/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WTF?

https://nvd.nist.gov/vuln/detail/cve-2026-105221

sev:CRIT 9.1 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_connection in lib/gist.rb sets VERIFY_NONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens and login credentials to read and modify the victim's gists.

CRITICAL: gist RubyGem versions 4.0.0 – <6.1.0 vulnerable to improper cert validation (CVE-2026-105221). SSL verification is disabled, exposing GitHub creds to on-path attackers. Patch to 6.1.0+ now! https://radar.offseq.com/threat/cve-2026-105221-improper-certificate-validation-in-defunkt-gist-a4b1b7125f9195f8 #OffSeq #CVE2026105221 #RubyGems #infosec

CVE-2026-105222: CRITICAL vuln in alexpechkarev/google-maps (v1.0.3 – 12.16). TLS cert checks off by default — API keys can leak, responses tampered. Set ssl_verify_peer=TRUE. Patch status unknown. https://radar.offseq.com/threat/cve-2026-105222-improper-certificate-validation-in-alexpechkarev-google-maps-f327aeed77a71a14 #OffSeq #Vulnerability #Laravel #CVE2026_105222

🟠 CVE-2026-105220 - High (7.8)

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor window. Attackers can craft a story file whose script calls the twineElectron openWithScra...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Zitadel has some new sev:CRIT CVEs for some not-new vulns.

https://nvd.nist.gov/vuln/detail/cve-2026-105211

https://nvd.nist.gov/vuln/detail/cve-2026-105207

https://nvd.nist.gov/vuln/detail/cve-2026-105209

https://nvd.nist.gov/vuln/detail/cve-2026-105215

Zitadel has some new sev:CRIT CVEs for some not-new vulns.

https://nvd.nist.gov/vuln/detail/cve-2026-105211

https://nvd.nist.gov/vuln/detail/cve-2026-105207

https://nvd.nist.gov/vuln/detail/cve-2026-105209

https://nvd.nist.gov/vuln/detail/cve-2026-105215

AhsayCBS <10.3.4 hit by CRITICAL OS command injection (CVE-2026-105134) in Replication Receiver. Remote, unauthenticated exploitation = total system compromise. Upgrade to 10.3.4 ASAP. Exploit is public. https://radar.offseq.com/threat/a-flaw-has-been-found-in-ahsay-ahsaycbs-up-to-1032-cve-2026-105134-a9f0def985d0c48e #OffSeq #CVE2026105134 #Infosec #Vulnerability

Seems to be a theme today. Good think no one uses Bouncy Castle.

https://nvd.nist.gov/vuln/detail/cve-2026-71885

sev:CRIT 9.2 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/U:Amber

In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509 credential to a LeafNode's signature_key. LeafNode.verify() checked a leaf's signature against the signature_key carried in the leaf itself, while the credential's X.509 certificate chain was stored but never parsed or validated, so the end-entity certificate's public key was never required to match signature_key as RFC 9420 sec. 5.3 requires. A party could therefore present another party's certificate as its credential while signing the leaf, and the enclosing KeyPackage, with an unrelated key, and be accepted under that other party's identity through KeyPackage.verify() and the Group leaf-validation path. In a deployment that admits external commits without an independent credential-admission check, an unauthenticated attacker could be admitted under a victim's X.509 identity, evict the victim (resynchronization compares whole credentials rather than signing keys), derive the current epoch, decrypt subsequent group messages, and send messages accepted as the victim. TreeKEM.LeafNode now requires the end-entity certificate's subject public key, in the cipher suite's signature encoding, to equal signature_key for an X.509 credential and rejects the leaf otherwise, including an empty chain or a certificate whose key type does not match the cipher suite; certificate-chain and identity validation to a trust anchor remain the application's responsibility per RFC 9420 sec. 5.3.1. Deployments using only basic credentials are unaffected.

Bouncy Castle Patches Identity Binding Vulnerability in Messaging Layer Security Implementation

Bouncy Castle for Java patched a critical identity binding vulnerability (CVE-2026-71885) in its Messaging Layer Security implementation that allows attackers to spoof user identities and decrypt private group messages.

**If your apps or servers use Bouncy Castle for Java (including Android apps and enterprise Java frameworks), update to version 1.86 or later as soon as possible, because attackers can impersonate users and read secure group messages. Ask your developers to check that their apps properly verify certificates and identities all the way back to a trusted source.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/bouncy-castle-patches-identity-binding-vulnerability-in-messaging-layer-security-implementation-i-0-l-r-6/gD2P6Ple2L

Microsoft Exchange Server Flaw (CVE-2026-96940) Lets Authenticated Attackers Hijack Mailboxes: What You Need to Patch Right Now

https://thecybersecguru.com/exploits/cve-2026-96940-microsoft-exchange-vulnerability/

Exchange Server CVE-2026-96940 gets out-of-band patch

https://fawkes.rocks/2026/10/05/exchange-server-cve-2026-96940-gets-out-of-band-patch/

⚪️ Critical 9.9-Point Vulnerability Fixed in GitLab AI Gateway

🗨️ GitLab developers have released patches for a critical vulnerability, CVE-2026-90970, affecting AI Gateway. The flaw received a CVSS score of 9.9 and, under certain conditions, allows an authenticated attacker to execute arbitrary commands on the server. The issue affects only…

🔗 https://hackmag.com/news/ai-gateway-patch?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

⚪️ Critical 9.9-Point Vulnerability Fixed in GitLab AI Gateway

🗨️ GitLab developers have released patches for a critical vulnerability, CVE-2026-90970, affecting AI Gateway. The flaw received a CVSS score of 9.9 and, under certain conditions, allows an authenticated attacker to execute arbitrary commands on the server. The issue affects only…

🔗 https://hackmag.com/news/ai-gateway-patch?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials

#news

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-102490 – Zammad GmbH Zammad Improper Privilege Management Vulnerability

Immediate CISA KEV threat advisory for CVE-2026-102490 affecting Zammad. Includes local privilege escalation analysis, CISO compliance steps, and comprehensive asset hardening runbooks....

https://thecybermind.co/8neo

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-102490 – Zammad GmbH Zammad Improper Privilege Management Vulnerability

Immediate CISA KEV threat advisory for CVE-2026-102490 affecting Zammad. Includes local privilege escalation analysis, BOD 26-04 compliance guidance, and multi-vendor SOC detection queries....

https://thecybermind.co/l7ux

Apache Thrift 0.25.0 fixes 61 Apache Thrift vulnerabilities, including critical heap overflow CVE-2026-91135. Upgrade every binding now.

#ApacheThrift #Apache #CVE202683632 #CVE202691135 #RPC #DoS #OpenSource #Vulnerability

https://securityonline.info/apache-thrift-vulnerabilities-0-25-0/?utm_source=mastodon&utm_medium=jetpack_social

Recent news highlights critical cybersecurity threats as Citrix NetScaler (CVE-2026-88772) and FortiMail (CVE-2026-104286) zero-days are under active exploitation, targeting critical infrastructure and government entities. Apple also patched an exploited CoreGraphics flaw. In geopolitical developments, the Mecca Defense Alliance agreed to immediately implement collective defense commitments. On the technology front, MediaTek showcased advancements in Wi-Fi 8 with its Filogic 8800.

#Cybersecurity #AnonNews_irc #News

Recent news highlights critical cybersecurity threats as Citrix NetScaler (CVE-2026-88772) and FortiMail (CVE-2026-104286) zero-days are under active exploitation, targeting critical infrastructure and government entities. Apple also patched an exploited CoreGraphics flaw. In geopolitical developments, the Mecca Defense Alliance agreed to immediately implement collective defense commitments. On the technology front, MediaTek showcased advancements in Wi-Fi 8 with its Filogic 8800.

#Cybersecurity #AnonNews_irc #News

ASUS Patches Critical Vulnerabilities in Router Firmware Triggered by Malicious VPN Files

ASUS patched two vulnerabilities (CVE-2026-14157 and CVE-2026-13313) in its router firmware that allow authenticated attackers to execute arbitrary commands and gain root privileges via malicious VPN configuration files or active debug code.

**If you have an ASUS router, update its firmware ASAP from the official ASUS support page, and make sure its admin page can only be reached from your trusted internal network, never from the internet. Only import VPN configuration files from providers you trust, and if your router is on ASUS's end-of-life list, plan to replace it since it will not be patched.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/asus-patches-critical-vulnerabilities-in-router-firmware-triggered-by-malicious-vpn-files-0-p-k-n-f/gD2P6Ple2L

Reward: You've received a Commemorative Tin of "Should Have Patched in August" Hard Candies!

https://www.rescana.com/post/critical-cve-2026-18397-remote-code-execution-vulnerability-in-thales-sconnect-threatens-swift-banking-and-government-au

#CyberSecurity #CVE202618397 #RemoteCodeExecution #ThaleSConnect #SWIFT #CriticalHit (3/3)

🏆 New Achievement! Step Right Up and Get Your Bank Pwned!

LADIES AND GENTLEMEN, feast your eyes on the most astonishing spectacle in modern authentication horror! CVE-2026-18397, a CVSS 9.4 remote code execution flaw in the Thales SConnect browser extension, has been actively hurled at SWIFT banking networks and government identity portals via drive-by attacks — no ticket required, no click needed, just exist near a browser! (1/3)

📈 CVE Published in last 7 days (2026-09-28 - 2026-09-28)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 264
- High: 1061
- Medium: 941
- Low: 181
- None: 99

Status:
- : 37
- Analyzed: 207
- Awaiting Analysis: 736
- Deferred: 1237
- Received: 185
- Rejected: 12
- Undergoing Analysis: 132

CISA KEVs:
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)
- CISA-2026:1001 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)
- CISA-2026:1002 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1002)
- CISA-2026:1004 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)

Top CNAs:
- VulnCheck: 281
- Patchstack: 215
- VulDB: 204
- GitHub, Inc.: 169
- Apache Software Foundation: 155
- Chrome: 152
- Wordfence: 144
- NVIDIA Corporation: 116
- WPScan: 100
- MITRE: 98

Top Affected Products:
- UNKNOWN: 2107
- Google Chrome: 141
- Jetbrains Youtrack: 29
- Yeswiki: 26
- Ghost: 24
- Watchguard Fireware Os: 15
- Moodle: 12
- N8n: 12
- Zfnd Zebra: 11
- Pexip Infinity: 10

Top EPSS Score:
- CVE-2026-12269 - 6.99 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12269)
- CVE-2026-12268 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12268)
- CVE-2026-12267 - 3.60 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12267)
- CVE-2026-102792 - 3.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102792)
- CVE-2026-101001 - 2.63 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101001)
- CVE-2026-102793 - 2.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102793)
- CVE-2026-101075 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101075)
- CVE-2026-101261 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101261)
- CVE-2026-101262 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101262)
- CVE-2026-102794 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102794)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-09-28 - 2026-09-28)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 264
- High: 1061
- Medium: 941
- Low: 181
- None: 99

Status:
- : 37
- Analyzed: 207
- Awaiting Analysis: 736
- Deferred: 1237
- Received: 185
- Rejected: 12
- Undergoing Analysis: 132

CISA KEVs:
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)
- CISA-2026:1001 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)
- CISA-2026:1002 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1002)
- CISA-2026:1004 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)

Top CNAs:
- VulnCheck: 281
- Patchstack: 215
- VulDB: 204
- GitHub, Inc.: 169
- Apache Software Foundation: 155
- Chrome: 152
- Wordfence: 144
- NVIDIA Corporation: 116
- WPScan: 100
- MITRE: 98

Top Affected Products:
- UNKNOWN: 2107
- Google Chrome: 141
- Jetbrains Youtrack: 29
- Yeswiki: 26
- Ghost: 24
- Watchguard Fireware Os: 15
- Moodle: 12
- N8n: 12
- Zfnd Zebra: 11
- Pexip Infinity: 10

Top EPSS Score:
- CVE-2026-12269 - 6.99 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12269)
- CVE-2026-12268 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12268)
- CVE-2026-12267 - 3.60 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12267)
- CVE-2026-102792 - 3.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102792)
- CVE-2026-101001 - 2.63 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101001)
- CVE-2026-102793 - 2.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102793)
- CVE-2026-101075 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101075)
- CVE-2026-101261 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101261)
- CVE-2026-101262 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101262)
- CVE-2026-102794 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102794)

#ZEN #SecDB #InfoSec

ASUS Patches Critical Vulnerabilities in Router Firmware Triggered by Malicious VPN Files

ASUS patched two vulnerabilities (CVE-2026-14157 and CVE-2026-13313) in its router firmware that allow authenticated attackers to execute arbitrary commands and gain root privileges via malicious VPN configuration files or active debug code.

**If you have an ASUS router, update its firmware ASAP from the official ASUS support page, and make sure its admin page can only be reached from your trusted internal network, never from the internet. Only import VPN configuration files from providers you trust, and if your router is on ASUS's end-of-life list, plan to replace it since it will not be patched.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/asus-patches-critical-vulnerabilities-in-router-firmware-triggered-by-malicious-vpn-files-0-p-k-n-f/gD2P6Ple2L

📈 CVE Published in last 7 days (2026-09-28 - 2026-09-28)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 264
- High: 1061
- Medium: 941
- Low: 181
- None: 99

Status:
- : 37
- Analyzed: 207
- Awaiting Analysis: 736
- Deferred: 1237
- Received: 185
- Rejected: 12
- Undergoing Analysis: 132

CISA KEVs:
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)
- CISA-2026:1001 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)
- CISA-2026:1002 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1002)
- CISA-2026:1004 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)

Top CNAs:
- VulnCheck: 281
- Patchstack: 215
- VulDB: 204
- GitHub, Inc.: 169
- Apache Software Foundation: 155
- Chrome: 152
- Wordfence: 144
- NVIDIA Corporation: 116
- WPScan: 100
- MITRE: 98

Top Affected Products:
- UNKNOWN: 2107
- Google Chrome: 141
- Jetbrains Youtrack: 29
- Yeswiki: 26
- Ghost: 24
- Watchguard Fireware Os: 15
- Moodle: 12
- N8n: 12
- Zfnd Zebra: 11
- Pexip Infinity: 10

Top EPSS Score:
- CVE-2026-12269 - 6.99 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12269)
- CVE-2026-12268 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12268)
- CVE-2026-12267 - 3.60 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12267)
- CVE-2026-102792 - 3.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102792)
- CVE-2026-101001 - 2.63 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101001)
- CVE-2026-102793 - 2.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102793)
- CVE-2026-101075 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101075)
- CVE-2026-101261 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101261)
- CVE-2026-101262 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101262)
- CVE-2026-102794 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102794)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-09-28 - 2026-09-28)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 264
- High: 1061
- Medium: 941
- Low: 181
- None: 99

Status:
- : 37
- Analyzed: 207
- Awaiting Analysis: 736
- Deferred: 1237
- Received: 185
- Rejected: 12
- Undergoing Analysis: 132

CISA KEVs:
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)
- CISA-2026:1001 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)
- CISA-2026:1002 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1002)
- CISA-2026:1004 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)

Top CNAs:
- VulnCheck: 281
- Patchstack: 215
- VulDB: 204
- GitHub, Inc.: 169
- Apache Software Foundation: 155
- Chrome: 152
- Wordfence: 144
- NVIDIA Corporation: 116
- WPScan: 100
- MITRE: 98

Top Affected Products:
- UNKNOWN: 2107
- Google Chrome: 141
- Jetbrains Youtrack: 29
- Yeswiki: 26
- Ghost: 24
- Watchguard Fireware Os: 15
- Moodle: 12
- N8n: 12
- Zfnd Zebra: 11
- Pexip Infinity: 10

Top EPSS Score:
- CVE-2026-12269 - 6.99 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12269)
- CVE-2026-12268 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12268)
- CVE-2026-12267 - 3.60 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12267)
- CVE-2026-102792 - 3.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102792)
- CVE-2026-101001 - 2.63 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101001)
- CVE-2026-102793 - 2.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102793)
- CVE-2026-101075 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101075)
- CVE-2026-101261 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101261)
- CVE-2026-101262 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101262)
- CVE-2026-102794 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102794)

#ZEN #SecDB #InfoSec

Discover how the OpenSSL DTLS memory leak (CVE-2026-84782) allows out-of-bounds reads and denial-of-service attacks. Learn about the patch and affected versions.

#OpenSSL #DTLS #MemoryLeak #Cybersecurity #Vulnerability

https://meterpreter.org/openssl-dtls-memory-leak-cve-2026-84782/?utm_source=mastodon&utm_medium=jetpack_social

@hugovalters rofl; your competition makes the correct recommendation https://app.opencve.io/cve/CVE-2026-61744

@hugovalters the NVD page contains a link to this exact GitHub page. Stop wasting everyone’s time with these #slop “detection” rules and wrong statements. Your tool is not ready for production.

https://nvd.nist.gov/vuln/detail/cve-2026-61744

CVE-2026-61744 InvenTree: authenticated barcode API lets attackers read arbitrary model records via crafted JSON, exposing full serializer output. CVSS 6.5. Patch still under review, so restrict API access now. https://www.valtersit.com/cve/CVE-2026-61744/ #CVE #infosec #InvenTree

📈 CVE Published in last 7 days (2026-09-28 - 2026-09-28)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 264
- High: 1061
- Medium: 941
- Low: 181
- None: 99

Status:
- : 37
- Analyzed: 207
- Awaiting Analysis: 736
- Deferred: 1237
- Received: 185
- Rejected: 12
- Undergoing Analysis: 132

CISA KEVs:
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)
- CISA-2026:1001 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)
- CISA-2026:1002 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1002)
- CISA-2026:1004 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)

Top CNAs:
- VulnCheck: 281
- Patchstack: 215
- VulDB: 204
- GitHub, Inc.: 169
- Apache Software Foundation: 155
- Chrome: 152
- Wordfence: 144
- NVIDIA Corporation: 116
- WPScan: 100
- MITRE: 98

Top Affected Products:
- UNKNOWN: 2107
- Google Chrome: 141
- Jetbrains Youtrack: 29
- Yeswiki: 26
- Ghost: 24
- Watchguard Fireware Os: 15
- Moodle: 12
- N8n: 12
- Zfnd Zebra: 11
- Pexip Infinity: 10

Top EPSS Score:
- CVE-2026-12269 - 6.99 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12269)
- CVE-2026-12268 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12268)
- CVE-2026-12267 - 3.60 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12267)
- CVE-2026-102792 - 3.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102792)
- CVE-2026-101001 - 2.63 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101001)
- CVE-2026-102793 - 2.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102793)
- CVE-2026-101075 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101075)
- CVE-2026-101261 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101261)
- CVE-2026-101262 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101262)
- CVE-2026-102794 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102794)

#ZEN #SecDB #InfoSec

📈 CVE Published in last 7 days (2026-09-28 - 2026-09-28)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 264
- High: 1061
- Medium: 941
- Low: 181
- None: 99

Status:
- : 37
- Analyzed: 207
- Awaiting Analysis: 736
- Deferred: 1237
- Received: 185
- Rejected: 12
- Undergoing Analysis: 132

CISA KEVs:
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)
- CISA-2026:1001 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)
- CISA-2026:1002 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1002)
- CISA-2026:1004 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)

Top CNAs:
- VulnCheck: 281
- Patchstack: 215
- VulDB: 204
- GitHub, Inc.: 169
- Apache Software Foundation: 155
- Chrome: 152
- Wordfence: 144
- NVIDIA Corporation: 116
- WPScan: 100
- MITRE: 98

Top Affected Products:
- UNKNOWN: 2107
- Google Chrome: 141
- Jetbrains Youtrack: 29
- Yeswiki: 26
- Ghost: 24
- Watchguard Fireware Os: 15
- Moodle: 12
- N8n: 12
- Zfnd Zebra: 11
- Pexip Infinity: 10

Top EPSS Score:
- CVE-2026-12269 - 6.99 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12269)
- CVE-2026-12268 - 4.73 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12268)
- CVE-2026-12267 - 3.60 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-12267)
- CVE-2026-102792 - 3.04 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102792)
- CVE-2026-101001 - 2.63 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101001)
- CVE-2026-102793 - 2.49 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102793)
- CVE-2026-101075 - 2.45 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101075)
- CVE-2026-101261 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101261)
- CVE-2026-101262 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-101262)
- CVE-2026-102794 - 2.36 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102794)