Jumis Pro SIA Jumis affected by CVE-2026-59105 (CRITICAL, CVSS 9.8): predictable sysadmin SQL login lets attackers gain full DB and OS control. Patch to TJ7.0.141.36 immediately. Details: https://radar.offseq.com/threat/cve-2026-59105-cwe-1391-use-of-weak-credentials-in-jumis-pro-sia-jumis-c59306cff95b45bb #OffSeq #Vulnerability #SQLServer #BlueTeam

Jumis Pro SIA Jumis affected by CVE-2026-59105 (CRITICAL, CVSS 9.8): predictable sysadmin SQL login lets attackers gain full DB and OS control. Patch to TJ7.0.141.36 immediately. Details: https://radar.offseq.com/threat/cve-2026-59105-cwe-1391-use-of-weak-credentials-in-jumis-pro-sia-jumis-c59306cff95b45bb #OffSeq #Vulnerability #SQLServer #BlueTeam

🔴 CVE-2026-88800 - Critical (9.1)

The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 act on a role deletion request on every page load with no capability check and no nonce, and the guard meant to protect roles that have users assigned reads a di...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88800/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-88800 - Critical (9.1)

The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 act on a role deletion request on every page load with no capability check and no nonce, and the guard meant to protect roles that have users assigned reads a di...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88800/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123655 - High (7.5)

A flaw was found in Moodle. Insufficient access control checks on H5P content files allow unauthenticated remote attackers to view restricted materials, including content stored in the system context and files belonging to hidden or unavailable co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123655/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123655 - High (7.5)

A flaw was found in Moodle. Insufficient access control checks on H5P content files allow unauthenticated remote attackers to view restricted materials, including content stored in the system context and files belonging to hidden or unavailable co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123655/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92895 - High (8.1)

The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.2.1 via the download_one_file function. This is due to missing file extension whitelist and MIME type validation in download_on...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92895/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92895 - High (8.1)

The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.2.1 via the download_one_file function. This is due to missing file extension whitelist and MIME type validation in download_on...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92895/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123327 - High (7.5)

In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123327/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123327 - High (7.5)

In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123327/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123324 - High (7.7)

In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123324/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123324 - High (7.7)

In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123324/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123317 - High (8.1)

In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123317/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123317 - High (8.1)

In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123317/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Install the latest JetBrains security updates now to patch CVE-2026-123294, CVE-2026-123279, and 59 other flaws across Hub, Datalore, and IntelliJ IDEA.

#JetBrains #IntelliJIDEA #YouTrack #Cybersecurity #InfoSec

https://securityonline.info/jetbrains-security-updates-cve-2026-123294-patched/?utm_source=mastodon&utm_medium=jetpack_social

Install the latest JetBrains security updates now to patch CVE-2026-123294, CVE-2026-123279, and 59 other flaws across Hub, Datalore, and IntelliJ IDEA.

#JetBrains #IntelliJIDEA #YouTrack #Cybersecurity #InfoSec

https://securityonline.info/jetbrains-security-updates-cve-2026-123294-patched/?utm_source=mastodon&utm_medium=jetpack_social

Install the latest JetBrains security updates now to patch CVE-2026-123294, CVE-2026-123279, and 59 other flaws across Hub, Datalore, and IntelliJ IDEA.

#JetBrains #IntelliJIDEA #YouTrack #Cybersecurity #InfoSec

https://securityonline.info/jetbrains-security-updates-cve-2026-123294-patched/?utm_source=mastodon&utm_medium=jetpack_social

Install the latest JetBrains security updates now to patch CVE-2026-123294, CVE-2026-123279, and 59 other flaws across Hub, Datalore, and IntelliJ IDEA.

#JetBrains #IntelliJIDEA #YouTrack #Cybersecurity #InfoSec

https://securityonline.info/jetbrains-security-updates-cve-2026-123294-patched/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-33379 - High (8.5)

A user with any role, including Viewer or a service account with no permissions, can create, externally publish, and delete dashboard snapshots (missing authorization). Only Grafana OSS and Grafana Enterprise 12.4 are affected; earlier versions an...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33379/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-33379 - High (8.5)

A user with any role, including Viewer or a service account with no permissions, can create, externally publish, and delete dashboard snapshots (missing authorization). Only Grafana OSS and Grafana Enterprise 12.4 are affected; earlier versions an...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33379/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88799 - High (8.8)

The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check ownership or capability on the identifier supplied to their client profile update, allowing any authenticated user, such as a subscriber, to change ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88799/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88799 - High (8.8)

The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check ownership or capability on the identifier supplied to their client profile update, allowing any authenticated user, such as a subscriber, to change ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88799/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-118423 - Critical (10)

The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and execute them, leading to remote code exec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118423/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-118423 - Critical (10)

The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and execute them, leading to remote code exec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118423/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-96453 - High (8)

A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to manage Keycloak servers from the command line. When a custom truststore is provided to verify the server identity, the tool incorrectly accepts any self-sign...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96453/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92857 - High (8.1)

Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own applications. A flaw in how Keycloak validates these registration requests allows an attacker to create a malicious application th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92857/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88801 - High (8)

The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check a capability or a nonce before creating a WordPress role from a name supplied in the request, and store that name without escaping it, allowing any ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88801/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88801 - High (8)

The MDJM Event Management and Mobile Events Manager WordPress plugins through 1.7.8.7 do not check a capability or a nonce before creating a WordPress role from a name supplied in the request, and store that name without escaping it, allowing any ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88801/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116624 - High (8.8)

The Advanced Members for ACF plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.3.0 via the `acf[_amem_local_user_password]` parameter of the `[advanced-members-account-password]` shortcode form subm...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116624/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116624 - High (8.8)

The Advanced Members for ACF plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.3.0 via the `acf[_amem_local_user_password]` parameter of the `[advanced-members-account-password]` shortcode form subm...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116624/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-114630 - Critical (9.1)

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the factory_reset function in all versions up to, and including, 3.3.8 This makes it ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114630/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL: ELEX WordPress HelpDesk plugin ≤3.3.8 vulnerable to unauthenticated arbitrary file deletion (CVE-2026-114630). Exploit may lead to RCE if wp-config.php is deleted. Restrict factory_reset endpoint & monitor logs. https://radar.offseq.com/threat/the-elex-wordpress-helpdesk-customer-ticketing-system-plugin-for-wordpress-is-vulnerable-to-arbitrary-3b1893c3dc8f2de7 #OffSeq #WordPress #CVE #infosec

🔴 CVE-2026-114630 - Critical (9.1)

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the factory_reset function in all versions up to, and including, 3.3.8 This makes it ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114630/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL: ELEX WordPress HelpDesk plugin ≤3.3.8 vulnerable to unauthenticated arbitrary file deletion (CVE-2026-114630). Exploit may lead to RCE if wp-config.php is deleted. Restrict factory_reset endpoint & monitor logs. https://radar.offseq.com/threat/the-elex-wordpress-helpdesk-customer-ticketing-system-plugin-for-wordpress-is-vulnerable-to-arbitrary-3b1893c3dc8f2de7 #OffSeq #WordPress #CVE #infosec

🔴 CVE-2026-107622 - Critical (9.8)

The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the `bf_post_type` parameter. This is due to the public frontend submission handler `bu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-107622: CRITICAL privilege escalation in themekraft BuddyForms <=2.10.5. Unauthenticated attackers can create admin accounts if registration is open. Disable 'Anyone can register' & restrict public forms. https://radar.offseq.com/threat/cve-2026-107622-cwe-269-improper-privilege-management-in-themekraft-buddyforms-0205956059791eb0 #OffSeq #WordPress #Vuln #CVE2026107622

🔴 CVE-2026-107622 - Critical (9.8)

The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the `bf_post_type` parameter. This is due to the public frontend submission handler `bu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-107622: CRITICAL privilege escalation in themekraft BuddyForms <=2.10.5. Unauthenticated attackers can create admin accounts if registration is open. Disable 'Anyone can register' & restrict public forms. https://radar.offseq.com/threat/cve-2026-107622-cwe-269-improper-privilege-management-in-themekraft-buddyforms-0205956059791eb0 #OffSeq #WordPress #Vuln #CVE2026107622

Attackers exploit the GPUStack authentication bypass CVE-2026-102895 in the wild. Update to 2.2.2 now to fix this flaw and CVE-2026-102894.

#GPUStack #AISecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/gpustack-authentication-bypass-cve-2026-102895-exploited/?utm_source=mastodon&utm_medium=jetpack_social

GPUStack CVE-2026-102894: a forged SAML response can give an unauthenticated network user an admin session on versions 0.7.1–2.2.1, even if SAML SSO isn't configured. Fixed in 2.2.2.

Upgrade, or temporarily block /auth/saml/callback at your ingress. The vendor advisory does not report active exploitation.

https://github.com/gpustack/gpustack/security/advisories/GHSA-62m9-f875-rqw6

#Cybersecurity #Infosec #IdentitySecurity #AISecurity

🟠 CVE-2026-97175 - High (8.8)

A flaw was found in the idp-auto-link authenticator of the keycloak-services component, which handles user identity federation. The issue occurs when Keycloak automatically links an incoming identity from an external provider to an existing local ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97175/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-119516: CRITICAL deserialization of untrusted data in Radius Booking (all versions <1.0.21). Remote code execution possible. Patch now to 1.0.21. CVSS 9.8. Details: https://radar.offseq.com/threat/cve-2026-119516-deserialization-of-untrusted-data-in-mamunur-rashid-radius-booking-booking-calendar-for-3f15fa1cf8f2c66b #OffSeq #CVE2026119516 #AppSec #PatchNow

🔴 CVE-2026-119516 - Critical (9.8)

Deserialization of Untrusted Data vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments &amp; Services radius-booking allows Object Injection.This issue affects Radius Booking — Booking Calendar for Appointments &a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119516/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-119516: CRITICAL deserialization of untrusted data in Radius Booking (all versions <1.0.21). Remote code execution possible. Patch now to 1.0.21. CVSS 9.8. Details: https://radar.offseq.com/threat/cve-2026-119516-deserialization-of-untrusted-data-in-mamunur-rashid-radius-booking-booking-calendar-for-3f15fa1cf8f2c66b #OffSeq #CVE2026119516 #AppSec #PatchNow

🔴 CVE-2026-119516 - Critical (9.8)

Deserialization of Untrusted Data vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments &amp; Services radius-booking allows Object Injection.This issue affects Radius Booking — Booking Calendar for Appointments &a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119516/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119499 - High (7.5)

Insertion of Sensitive Information Into Sent Data vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Retrieve Embedded Sensitive Data.This issue affects FloristPress: from n/a through 7.8.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119499/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119499 - High (7.5)

Insertion of Sensitive Information Into Sent Data vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Retrieve Embedded Sensitive Data.This issue affects FloristPress: from n/a through 7.8.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119499/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19877 - High (7.5)

INFINITT ULite 5.0.2.1_BN48_20260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the password within the link valid...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19877/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19877 - High (7.5)

INFINITT ULite 5.0.2.1_BN48_20260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the password within the link valid...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19877/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120844 (CRITICAL, CVSS 9.8) in miniOrange OAuth SSO (OAuth Client) plugin: incorrect privilege assignment enables privilege escalation. All versions <7.1.4 affected. Upgrade ASAP to secure your systems. https://radar.offseq.com/threat/cve-2026-120844-incorrect-privilege-assignment-in-miniorange-oauth-single-sign-on-sso-oauth-client-7d1cdcd7e5b39ecd #OffSeq #CVE2026120844 #WordPress #InfoSec

🔴 CVE-2026-120844 - Critical (9.8)

Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO (OAuth Client): fro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120844/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120844 (CRITICAL, CVSS 9.8) in miniOrange OAuth SSO (OAuth Client) plugin: incorrect privilege assignment enables privilege escalation. All versions <7.1.4 affected. Upgrade ASAP to secure your systems. https://radar.offseq.com/threat/cve-2026-120844-incorrect-privilege-assignment-in-miniorange-oauth-single-sign-on-sso-oauth-client-7d1cdcd7e5b39ecd #OffSeq #CVE2026120844 #WordPress #InfoSec

🔴 CVE-2026-120844 - Critical (9.8)

Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO (OAuth Client): fro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120844/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Red Hat Exploit Intelligence hit by CVE-2026-121837 (MEDIUM): REST Data Panache flaw lets authenticated users infer sensitive fields by bypassing @SecureField on getters. Review configs & restrict endpoint access. Patch status TBD. https://radar.offseq.com/threat/cve-2026-121837-incorrect-authorization-in-red-hat-exploit-intelligence-faba51d503a28eb7 #OffSeq #RedHat #CVE2026 #Infosec

🟠 CVE-2026-119431 - High (7.7)

A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119431/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119433 - High (7.7)

A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce the serve...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119433/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119432 - High (8.7)

A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119432/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Attackers exploit the GPUStack authentication bypass CVE-2026-102895 in the wild. Update to 2.2.2 now to fix this flaw and CVE-2026-102894.

#GPUStack #AISecurity #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/gpustack-authentication-bypass-cve-2026-102895-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CISA warns of critical Subnet Solutions PowerSYSTEM Center flaws CVE-2026-63017 and CVE-2026-63774 that allow authorization bypass and SQL injection.

#SubnetSolutions #PowerSYSTEMCenter #ICSSecurity #Cybersecurity #InfoSec

https://securityonline.info/subnet-solutions-powersystem-center-flaws-patched/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-63017 - Critical (9)

Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63017/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-71458 - High (7.5)

FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by get_linkinfo. Remote attackers can inject SQL through the source_se and dest...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71458/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA warns of critical Subnet Solutions PowerSYSTEM Center flaws CVE-2026-63017 and CVE-2026-63774 that allow authorization bypass and SQL injection.

#SubnetSolutions #PowerSYSTEMCenter #ICSSecurity #Cybersecurity #InfoSec

https://securityonline.info/subnet-solutions-powersystem-center-flaws-patched/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-63774 - Critical (9)

Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63774/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77299 - High (7.5)

Regexp2 is a feature-rich RegExp engine for Go. Prior to version 2.3.0, when regexp2 compiles and matches a pattern containing a large fixed-count quantifier applied to a zero-width subexpression — e.g. (?:){50000000} — the match engine execut...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77299/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92697 - High (7.5)

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls  strlen()  on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92697/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92693 - High (8.2)

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parse_raw_packet_to_simple_packet_full() in src/simple_packet_parser_ng.cpp dereferences ipv6_extension_header_fragment_t when IpProtocolNumberIPV6_FRAG is pr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92693/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-88981 - High (8.6)

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the frontend artifact download path for source=s3 or source=minio accepts providerInfo.Params.endpoint, and the archived pod-log p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-88981/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-119757 - Critical (9.8)

BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that allows unauthenticated remote attackers to retrieve .macaroon credential files for an LND (Lightning Network Daemon) node. Attack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119757/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

BTCPay Server <2.4.2 has a CRITICAL info disclosure (CVE-2026-119757, CVSS 9.8) – unauthenticated attackers can grab LND .macaroon credentials, gaining full node control & fund access. Restrict access, secure creds! https://radar.offseq.com/threat/btcpay-server-before-242-including-242-release-candidates-contains-an-information-disclosure-fad28409be2be3bd #OffSeq #Vuln #BTCpay

🟠 CVE-2026-33944 - High (8.8)

Dolibarr is an open-source enterprise resource planning and customer relationship management application. Prior to 22.0.5 and 23.0.1, there is a SQL injection vulnerability in the Third Party company update functionality. The application concatena...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-33944/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

OpenSSH Password Authentication Bypass on Alpine Linux (*sshole) – CVE-2026-123158
#CVE_2026_123158
https://www.ox.security/blog/openssh-authentication-bypass-cve-2026-123158/

OpenSSH Password Authentication Bypass on Alpine Linux (*sshole) – CVE-2026-123158
#CVE_2026_123158
https://www.ox.security/blog/openssh-authentication-bypass-cve-2026-123158/

CW: biztonsági figyelmeztetés

Az NBSZ NKI riaszt: OpenSSH sshd *sshole (CVE-2026-123158, CVSS 8.1) magas kockázatú hiba musl libc-t használó, PAM nélküli rendszereken (pl. Alpine). Hitelesítés nélkül be lehet lépni * jelszómezős fiókokba. Frissíts: Portable OpenSSH <10.6p2 érintett; Alpine javítások elérhetők. Részletek: https://linuxmint.hu/hir/2026/11/riasztas-a-sshole-serulekenysegrol

#OpenSSH #CVE-2026-123158 #Alpine #musl #Linux

SANS Stormcast Friday, November 6th, 2026: RootEvidence Cisco IOS Opt-Out Scans; OpenSSH musl sshhole (CVE-2026-123158); Refrigeration OT Hardening; Zyxel GS1900 OOB Write (CVE-2026-107441)
https://isc.sans.edu/podcastdetail/10168

『OpenSSH 爆出 10 年老漏洞：输入超长密码，就能绕过 SSH 登录验证｜CVE-2026-123158』
一个超长密码，就能攻破 SSH？ OpenSSH 爆出一个隐藏了约 10 年的严重漏洞：攻击者无需知道真实密码，也不需要 SSH 私钥，只需输入一串超长密码，就可能绕过 Linux 账户的密码锁定机制
……
阅读全文： :sys_link: https://www.appinn.com/openssh-sshole-cve-2026-123158/

#小众软件

How do you pronounce an asterisk? We're saying "Shh" for longer. Like "Shhhole."

This vulnerability impacts unpatched musl builds of OpenSSH, including Alpine Linux. But there are a lot of required conditions for exploitation.

https://ifin.network/t/cve-2026-123158-sshole-ssh-auth-bypass-in-musl-based-linux-distros/965

#ThreatIntel #ThreatIntelligence

CW: Android biztonsági frissítés — röviden
Google kiadta a novemberi javítócsomagokat: a 2026-11-01-es szint 119 hibát orvosol (főleg Framework, System, runtime), köztük CVE-2026-58868 RCE; a 2026-11-05-ös csomag további 97 hibát a kernel/SoC-összetevőkben. Frissítsen, ha lehet.
https://linuxmint.hu/hir/2026/11/tobb-mint-200-sebezhetoseget-javit-az-android-novemberi-frissitocsomagja-nemzeti
#Android #CVE #infosec #OpenSource

CVE-2026-100109: Security For WooCommerce WordPress plugin v1.0.10 – 1.0.16 has a CRITICAL flaw (CVSS 9.8) allowing unauthenticated admin account creation — full site compromise possible. Disable or restrict now. https://radar.offseq.com/threat/the-security-for-woocommerce-wordpress-plugin-from-1010-to-1016-does-not-perform-capability-checks-c68d3315e500ee5d #OffSeq #WordPress #Security

🔴 CVE-2026-100109 - Critical (9.8)

The Security For WooCommerce WordPress plugin from 1.0.10 to 1.0.16 does not perform capability checks when creating users through an action available to unauthenticated visitors, and lets the caller choose the new account's role, allowing unauthe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-100109/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-100109: Security For WooCommerce v1.0.10 – 1.0.16 suffers a CRITICAL auth bypass. Attackers can create admin accounts without logging in — site takeover possible. Disable or upgrade plugin ASAP. https://radar.offseq.com/threat/cve-2026-100109-cwe-862-missing-authorization-in-security-for-woocommerce-17a9f2ddd03e44c0 #OffSeq #WordPress #CVE2026100109 #Infosec

🟠 CVE-2026-93389 - High (8.2)

The LiteSpeed Cache plugin for WordPress is vulnerable to unauthenticated disclosure of sensitive WooCommerce customer data in all versions up to, and including, 7.9.1 With Cache REST enabled (the shipped default cache-rest=1), LiteSpeed stores Wo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93389/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-69141 - High (8.3)

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.2 and 8.10.2, the CasesController action_get_kb_articles action interpolates $_POST['search'] into a CASE WHEN ... LIKE express...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69141/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-122051 | Edimax BR-6208AC v1.32 is affected by a CRITICAL command injection vuln in /goform/mp — remote code execution possible without auth. Exploit is public, no patch. Isolate or replace vulnerable devices. https://radar.offseq.com/threat/a-flaw-has-been-found-in-edimax-br-6208ac-132-cve-2026-122051-18cd449922d0575f #OffSeq #CVE2026122051 #IoTSecurity

🔴 CVE-2026-122051 - Critical (10)

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been pu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122051/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-122051: CRITICAL command injection (CVSS 10) in Edimax BR-6208AC v1.32 enables remote, unauthenticated code execution via /goform/mp. Exploit is public, no patch available. Restrict network access & monitor devices. https://radar.offseq.com/threat/cve-2026-122051-command-injection-in-edimax-br-6208ac-722ad11edef6a006 #OffSeq #CVE2026122051 #IoT

🟠 CVE-2026-71548 - High (8.8)

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.2 and 8.10.2, AOR_Report::build_report_query_where incorporates a report editor's parameter_value when value_type=Field without...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-71548/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

46 Apache OFBiz vulnerabilities, including pre-auth RCE CVE-2026-68524 and CVE-2026-83542, are fixed in OFBiz 24.09.08. Upgrade now.

#ApacheOFBiz #OFBiz #CVE202668524 #RCE #ERP #AuthenticationBypass #PatchNow #Vulnerability

https://securityonline.info/apache-ofbiz-vulnerabilities-24-09-08/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-120859 - High (7.8)

PyMoDAQ before 4.4.13, and pymodaq_data, pymodaq_gui, and pymodaq_utils before 5.1.15, 5.2.x before 5.2.14, and 5.3.x before 5.3.10, contain deserialization of untrusted data and eval injection vulnerabilities that allow attackers to execute arbit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120859/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-117691 - Critical (9.1)

A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server processes percent-encoded parameter names (like AMLResponse) while the signature verification logic only checks literal parameter na...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117691/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

RE: https://infosec.exchange/@offseq/117564193831527937

Uhh did Red Hat just drop a zero day without a corresponding patch? Because this time the report seems to not be slop. Red Hat advisory: https://access.redhat.com/security/cve/cve-2026-117691

Red Hat Build of Keycloak hit by CRITICAL vuln (CVE-2026-117691): SAML signature check bypass via percent-encoded params enables full account takeover. No fix yet — track Red Hat updates. https://radar.offseq.com/threat/cve-2026-117691-improper-verification-of-cryptographic-signature-in-red-hat-red-hat-build-of-keycloak-73f1b31f62aee735 🔒 #OffSeq #Keycloak #CVE2026117691 #infosec

🟠 CVE-2026-123059 - High (7.5)

In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keycloak enabled store the client secret of the `basyx-technical-user` OAuth2 client in cleartext in a Kubernetes ConfigMap. This client uses...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123059/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 Apache OFBiz fixes dozens of vulnerabilities, including critical flaws allowing unauthenticated remote code execution

The Apache Software Foundation has released OFBiz 24.09.08 to address dozens of security vulnerabilities, including critical flaws that could allow attackers to execute malicious code, bypass authentication, and access sensitive business information.

Among the most serious is CVE-2026-68524, which allows remote code execution without authentication. Other vulnerabilities expose internal employee records, product information, and business data, while additional flaws could allow attackers to compromise application security controls.

All Apache OFBiz versions prior to 24.09.08 are affected. Administrators should upgrade immediately, particularly if their deployments are accessible from the internet.

Source: https://ofbiz.apache.org/security.html

46 Apache OFBiz vulnerabilities, including pre-auth RCE CVE-2026-68524 and CVE-2026-83542, are fixed in OFBiz 24.09.08. Upgrade now.

#ApacheOFBiz #OFBiz #CVE202668524 #RCE #ERP #AuthenticationBypass #PatchNow #Vulnerability

https://securityonline.info/apache-ofbiz-vulnerabilities-24-09-08/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-54381 - High (7.5)

VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthenticated attackers to list and download stored files without authentication. Attackers can enumerate the publicly accessible bucket...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54381/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update Sonatype Nexus Repository 3 to version 3.98.0 now to fix CVE-2026-113373, CVE-2026-113374, and five other critical security flaws.

#Sonatype #NexusRepository #SupplyChainSecurity #Cybersecurity #InfoSec

https://securityonline.info/sonatype-nexus-repository-3-cve-2026-113373-patched/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-122321 - Critical (9.1)

Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string (such as a tag) rather than bound to the verified digest, so cache hits skip signatur...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122321/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Kyverno 1.16.0 – 1.19.1: CRITICAL (CVSS 9.9) vuln (CVE-2026-122311) lets attackers escape namespace via resource.get()/post() and take over clusters. Upgrade to v1.19.2+ now! https://radar.offseq.com/threat/kyverno-from-1160-before-1192-fails-to-validate-path-segments-in-the-resource-argument-of-resourceget-ad2085e40b330a10 #OffSeq #Kyverno #Kubernetes #CVE2026122311

CVE-2026-122313 (CRITICAL): Kyverno v1.17.0 – 1.19.1 allows privilege escalation via lack of namespace checks in NamespacedMutatingPolicy. Attackers can modify cluster-wide resources. Patch by upgrading to v1.19.2. https://radar.offseq.com/threat/cve-2026-122313-improper-privilege-management-in-kyverno-2b25fa97ddd30181 #OffSeq #Kyverno #CVE2026122313

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2024-27834 – Apple Multiple Products Improper Authentication Vulnerability

CISA's addition of CVE-2024-27834 to the KEV catalog requires immediate enterprise patching and active threat monitoring across Apple device fleets....

https://thecybermind.co/ylm3

(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2024-27834 – Apple Multiple Products Improper Authentication Vulnerability

CISA has added the Apple WebKit pointer authentication flaw (CVE-2024-27834) to its KEV catalog, requiring urgent administrative validation and patching....

https://thecybermind.co/5l9k

CISA Warns of Active Exploitation Chaining Apple WebKit and Pointer Authentication Flaws

CISA added Apple vulnerability CVE-2024-27834 to its Known Exploited Vulnerabilities catalog following reports that Russian state-sponsored group APT29 is chaining it with WebKit flaws to steal browser cookies. The "Poisoned Source" campaign uses watering hole attacks and a supply chain compromise to target unpatched iOS and Android devices.

**Update all your Apple devices now (iOS 18.7.3 or later, macOS Sonoma 14.5 or later, Safari 17.5 or later), and your Android phones too, because hackers are breaking into unpatched phones when you simply open an infected website. If you think you may have been exposed, sign out of all your important accounts on every device and watch for strange activity, because the stolen browser cookies let attackers get in without your password or MFA code.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-warns-of-active-exploitation-chaining-apple-webkit-and-pointer-authentication-flaws-9-m-e-k-2/gD2P6Ple2L

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2024-27834 – Apple Multiple Products Improper Authentication Vulnerability

CISA's addition of CVE-2024-27834 to the KEV catalog requires immediate enterprise patching and active threat monitoring across Apple device fleets....

https://thecybermind.co/ylm3

(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2024-27834 – Apple Multiple Products Improper Authentication Vulnerability

CISA has added the Apple WebKit pointer authentication flaw (CVE-2024-27834) to its KEV catalog, requiring urgent administrative validation and patching....

https://thecybermind.co/5l9k

CISA Warns of Active Exploitation Chaining Apple WebKit and Pointer Authentication Flaws

CISA added Apple vulnerability CVE-2024-27834 to its Known Exploited Vulnerabilities catalog following reports that Russian state-sponsored group APT29 is chaining it with WebKit flaws to steal browser cookies. The "Poisoned Source" campaign uses watering hole attacks and a supply chain compromise to target unpatched iOS and Android devices.

**Update all your Apple devices now (iOS 18.7.3 or later, macOS Sonoma 14.5 or later, Safari 17.5 or later), and your Android phones too, because hackers are breaking into unpatched phones when you simply open an infected website. If you think you may have been exposed, sign out of all your important accounts on every device and watch for strange activity, because the stolen browser cookies let attackers get in without your password or MFA code.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-warns-of-active-exploitation-chaining-apple-webkit-and-pointer-authentication-flaws-9-m-e-k-2/gD2P6Ple2L

🏆 New Achievement! Supply Chain of Fools!

The court calls APT29 to the stand. Charges: infiltrating the Plerdy SEO Tracker supply chain, injecting JavaScript into compromised websites to fingerprint iOS and Android visitors, and exploiting CVE-2025-43529 and CVE-2024-27834 to steal browser cookies, Wi-Fi passwords, and full mobile device data. Sekoia researchers Garçon and Aime have entered the technical evidence. The defendant does not deny the watering hole campaign. It is large-scale. (1/2)

CISA added Apple WebKit CVE-2024-27834 to KEV on Nov 4 based on exploitation evidence. The pointer-authentication bypass requires prior arbitrary read/write access; it is not standalone web RCE. Apple fixed it in May 2024. Check outdated Apple devices in your fleet. CISA has not identified the attack campaign.

https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog

#Cybersecurity #Infosec #Apple #KEV

CVE ID: CVE-2024-27834
Vendor: Apple
Product: Multiple Products
Date Added: 2026-11-04
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2024-27834

CVE-2026-121489 | CRITICAL severity in Apache Juneau (<9.2.1): Path traversal in DirectoryResource allows attackers to read, write, or delete files outside the root directory (if view/upload/delete enabled). Patch to 9.2.1 ASAP! https://radar.offseq.com/threat/cve-2026-121489-cwe-22-path-traversal-in-apache-software-foundation-apache-juneau-94a27222766ae77e #OffSeq #CVE2026121489 #infosec

🟠 CVE-2026-118869 - High (8.8)

An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118869/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118869: OS command injection in SHIRASAGI (1.19.0 – 1.21.0). HIGH severity (CVSS 8.8). Authenticated attackers can execute arbitrary OS commands. Restrict access & monitor logs. Patch status unknown. https://radar.offseq.com/threat/cve-2026-118869-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-1bdd3fe9e296d19c #OffSeq #Vuln #SHIRASAGI #Cybersecurity

🟠 CVE-2026-123033 - High (8.3)

Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 (and in release trains before their respective fixes) allows an attacker on the same network segment to achieve unauthenticated full-administrato...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123033/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-123029 - High (7.5)

Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges of the Wowza Streaming Engine process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-123029/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118193 - High (8.8)

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.19.1 via the `donor_default_user_role` parameter. This is due to the `sanitize_option_donor_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118193/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116617 - High (8.1)

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because `stm_save_user_extra_fields()`, hooked to `personal_optio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116617/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch ManageEngine Key Manager Plus, Log360, and PAM360 now to fix CVE-2026-77690, CVE-2026-13594, and nine other critical and high flaws.

#ManageEngine #Zoho #KeyManagerPlus #Cybersecurity #InfoSec

https://securityonline.info/manageengine-key-manager-plus-cve-2026-77690-patched/?utm_source=mastodon&utm_medium=jetpack_social

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

@soundsbeard
Actually, please disregard my last message. A problem has been found in apt recently and you should really no longer be using apt from those images, see https://security-tracker.debian.org/tracker/CVE-2026-109518

@mntmn

@soundsbeard
Actually, please disregard my last message. A problem has been found in apt recently and you should really no longer be using apt from those images, see https://security-tracker.debian.org/tracker/CVE-2026-109518

@mntmn

Why the FUCK is apt not cryptographically authenticated by default in the year of our lord 2026?!?!?
ubuntu.com/security/CVE...

The whole castle.

A researcher spent two hours with an AI and found a zero-day that affects essentially every stock Ubuntu server. This module will now be added to your quarterly training. You have failed it preemptively.

Please patch APT on all affected Debian and Ubuntu systems immediately to the version addressing CVE-2026-109518. There will be a quiz.

Reward: You've received the Provisional Trust Badge — it expires the moment you skip a patch cycle. (2/3)

🏆 New Achievement! Man In The Middle Management!

Please direct your attention to slide one of today's compliance module: "Why We Patch Things." CVE-2026-109518 is a flaw in APT, the package manager trusted by Debian, Ubuntu, and their derivatives to install verified software. An on-path attacker able to intercept HTTP traffic between your machine and the archive server can swap a legitimate package with a malicious one after verification, achieving arbitrary code execution as root. Root. (1/3)

SANS Stormcast Thursday, November 5th, 2026: Email Test Scripts; runZero oobscan BMC/IPMI; apt Signature Bypass (CVE-2026-109518); SonicWall GMS EOL Unpatched Flaws
https://isc.sans.edu/podcastdetail/10166

Linux : une faille dans APT permet de remplacer un paquet vérifié et de l’exécuter en root https://www.it-connect.fr/faille-apt-cve-2026-109518-debian-ubuntu-root/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Linux

CW: biztonsági hír — Megjelent az apt 3.3.6: javítja a CVE-2026-109518 letöltésellenőrzés megkerülését (célfájlok kizárólagos megnyitása). Két memóriakezelési javítás (deb parser: hiányzó Version elutasítása; workLess comparator) + tesztek és teljesítményjavítások. Jelenleg Debian Unstable-en; Stable/Ubuntu ritkán veszi át. https://linuxmint.hu/hir/2026/11/megjelent-az-apt-336-fontos-biztonsagi-javitassal-a-letoltesellenorzes-megkerulese-ellen #APT #Debian #CVE2026-109518 #Security #Linux

Update your Linux systems now to fix CVE-2026-109518, a critical APT package manager flaw that lets on-path attackers run arbitrary code as root.

#Linux #Debian #Ubuntu #Cybersecurity #InfoSec

https://securityonline.info/apt-package-manager-cve-2026-109518-root-flaw/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-122992: CRITICAL integer underflow in dstarCallsignToAPRS (G4KLX & F4FXL DStarGateway <7b75de6). Remote DoS possible, CVSS 9.2. No patch — restrict access & monitor updates. https://radar.offseq.com/threat/in-g4klx-dstargateway-and-f4fxl-dstargateway-before-7b75de6-dstarcallsigntoaprs-in-aprsutilscpp-has-an-7a56517465ac4a02 #OffSeq #Infosec #HamRadio #CVE2026122992

🔴 CVE-2026-54384 - Critical (9.8)

VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a full session for a victim's account by submitting a linked Google or Facebook account identifier to the POST /front/login...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54384/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-54382 - High (7.7)

VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated attackers to perform s3:PutObject operations across the entire shared bucket instead of being restricte...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54382/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 A Samba printing flaw can turn a malicious print job name into remote code execution; CVE-2026-4480

PoC: https://github.com/0xBlackash/CVE-2026-4480

The vulnerability affects Samba’s printing subsystem when %J is used inside a custom print command. A client-controlled print job name can reach the shell without proper escaping, allowing shell metacharacters to alter the command being executed.

Samba Printing | Command Injection RCE

CVSS: 9.8 Critical
Affected: Samba < 4.22.10, < 4.23.8, and < 4.24.3
Fixed: Samba 4.22.10, 4.23.8, and 4.24.3
Impact: Unauthenticated remote code execution under affected configurations

The repository documents the vulnerable configuration, attack path, affected versions, detection guidance, and mitigation steps.

🟠 CVE-2026-122299 - High (8.8)

Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit resolves a duplicate tree header to the last occurrence instead of the first, diverging from core git's resolution behavior, while Poetry 2.5...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-122299/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-55368 - High (8.1)

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8, H2O's access-log formatter could write past its log-line buffer when an affected custom access-log format was configured....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55368/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update Sonatype Nexus Repository 3 to version 3.98.0 now to fix CVE-2026-113373, CVE-2026-113374, and five other critical security flaws.

#Sonatype #NexusRepository #SupplyChainSecurity #Cybersecurity #InfoSec

https://securityonline.info/sonatype-nexus-repository-3-cve-2026-113373-patched/?utm_source=mastodon&utm_medium=jetpack_social

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

Update Cisco UCS Central, ISE, and Unified CM now to patch CVE-2026-76506, CVE-2026-20241, and CVE-2026-76419 against remote code execution.

#Cisco #UCSCentral #CiscoISE #Cybersecurity #InfoSec

https://securityonline.info/cisco-ucs-central-cve-2026-76506-rce-patched/?utm_source=mastodon&utm_medium=jetpack_social

🚨 Critical Citrix XenServer Flaw Allows Unauthenticated Attackers to Compromise Virtualization Hosts, CVE-2026-98432

Citrix has released emergency security updates for XenServer 8.4 and 9 after disclosing a critical vulnerability that could allow unauthenticated attackers with access to the management network to compromise virtualization hosts.

The vulnerability, tracked as CVE-2026-98432, also affects Workload Balancing and Conversion Manager appliances, raising concerns about attacks against infrastructure used to manage large numbers of virtual machines.

A second vulnerability, CVE-2026-102703, could allow a privileged attacker inside a guest virtual machine to compromise the underlying host, potentially breaking the security boundaries separating virtualized environments.

Citrix also addressed six additional vulnerabilities involving PXE boot and Secure Boot protections.

Security updates are now available for affected XenServer deployments and related management appliances. Administrators are urged to patch immediately and restrict management network access to trusted systems.

There are currently no confirmed reports of these vulnerabilities being exploited in the wild.

Source: https://support.citrix.com/external/article/CTX697256/xenserver-security-update-for-multiple-issues.html

https://www.rescana.com/post/xen-xsa-523-cve-2026-102703-grant-copy-cross-vm-prepare-now

#Xen #CyberSecurity #Virtualization #PrivilegeEscalation #CriticalVulnerability #PatchedOrPerish (3/3)

Sigh

This is a silly CVE. The Siemens devices shipped Node-RED without authentication, which is Node-RED's default state. It even says so in the docs and tells you to set it up.

Anyway apparently folks are attacking this now.

https://ifin.network/t/cve-2026-58115-no-authentication-on-siemens-simatic-iot2050-node-red/964

#ThreatInte #ThreatIntelligence

If your site runs WPForms, patch it now. CVE-2026-54851 is a broken access control flaw scoring 7.1 on the CVSS scale — high severity. A subscriber or customer account is all an attacker needs to exploit it. That includes anyone who submitted a contact or payment form.

#WordPress #WPForms #SecurityHardening #CVE #WordPressSecurity

https://wpguy.uk/blog/wpforms-broken-access-control-flaw-cve-2026-54851/

35 Apache vulnerabilities fixed, including Apache ZooKeeper flaws CVE-2026-115448 and CVE-2026-100252, plus OpenOffice, ActiveMQ and Juneau bugs.

#Apache #ZooKeeper #OpenOffice #ActiveMQ #Juneau #CVE2026115448 #PatchNow #Vulnerability

https://securityonline.info/apache-vulnerabilities-zookeeper-openoffice-activemq/?utm_source=mastodon&utm_medium=jetpack_social

35 Apache vulnerabilities fixed, including Apache ZooKeeper flaws CVE-2026-115448 and CVE-2026-100252, plus OpenOffice, ActiveMQ and Juneau bugs.

#Apache #ZooKeeper #OpenOffice #ActiveMQ #Juneau #CVE2026115448 #PatchNow #Vulnerability

https://securityonline.info/apache-vulnerabilities-zookeeper-openoffice-activemq/?utm_source=mastodon&utm_medium=jetpack_social

SourceHut disabled registration bypass | CVE-2026-121728 https://lobste.rs/s/x2hcss #security
https://blog.arusekk.pl/posts/srht-disabled-registration-bypass/

Karen IT Security Response Center (@ksrc) Advisory

Advisory ID: KSRC-2026-11051

A #high -severity #vulnerability has been identified in #WordPress Core that allows an unauthenticated remote attacker to achieve Remote Code Execution (#RCE ) during the core upgrade process. The vulnerability is tracked as CVE-2026-119977 and has been assigned a CVSS v3.1 score of 8.1 (High).

This issue is being actively exploited in the wild and was added to the CISA Known Exploited Vulnerabilities (KEV) catalog on 3 November 2026. Organizations and site owners running self-hosted WordPress installations are strongly advised to #update immediately.

https://ksrc.karenit.net/blog/security-alert/critical-remote-code-execution-during-wordpress-core-updates

#cve #cyberSecurity #staysafe #StayInformed #StayProtected

Updated.

Picus: CVE-2026-119977: When Updating WordPress Becomes the Vulnerability https://www.picussecurity.com/resource/blog/cve-2026-119977-when-updating-wordpress-becomes-the-vulnerability #infosec #WordPress #vulnerability #threatresearch

Update Control Web Panel to version 1.29 now to patch CVE-2026-73695, CVE-2026-73696, and eight other flaws allowing unauthenticated root RCE.

#ControlWebPanel #CWP #Linux #Cybersecurity #InfoSec

https://securityonline.info/control-web-panel-cve-2026-73695-root-rce/?utm_source=mastodon&utm_medium=jetpack_social

Update Control Web Panel to version 1.29 now to patch CVE-2026-73695, CVE-2026-73696, and eight other flaws allowing unauthenticated root RCE.

#ControlWebPanel #CWP #Linux #Cybersecurity #InfoSec

https://securityonline.info/control-web-panel-cve-2026-73695-root-rce/?utm_source=mastodon&utm_medium=jetpack_social

Patch ManageEngine Key Manager Plus, Log360, and PAM360 now to fix CVE-2026-77690, CVE-2026-13594, and nine other critical and high flaws.

#ManageEngine #Zoho #KeyManagerPlus #Cybersecurity #InfoSec

https://securityonline.info/manageengine-key-manager-plus-cve-2026-77690-patched/?utm_source=mastodon&utm_medium=jetpack_social

Ask HN: What in the world is taking Ubuntu so long?

HN 작성자에 따르면 Ubuntu는 CVE-2026-98432를 심각도 9.8로 분류했지만, 약 일주일이 지나도록 수정 작업이 진행 중이다. 작성자는 Ubuntu 보안 페이지에 완화 조치가 안내됐다고 전하며, 보안 업데이트 지연에 우려를 표했다. AI 인프라 운영자는 해당 보안 공지에서 사용 중인 시스템의 영향 여부와 완화 조치, 패치 상태를 확인할 필요가 있다.

https://news.ycombinator.com/item?id=50393105

#ubuntu #security #cve #infrastructure

Ach guck an. Drei Wochen nach #Debian und 5 Tage nach #Redhat hat es auch #Ubuntu geschafft, den neuen Kernel mit dem Fix eines #CVE mit Score 9,8 zu releasen. Die eigene Webseite dazu weiß noch nix davon.
https://ubuntu.com/security/CVE-2026-98432

Was'n Saftladen!

#cve202698432 #cve_2026_98432

Update your Veeam Software Appliance and Backup & Replication servers now to fix CVE-2026-98432, a critical 9.8 CVSS Linux kernel flaw.

#Veeam #LinuxKernel #BackupSecurity #Cybersecurity #InfoSec

https://securityonline.info/veeam-software-appliance-cve-2026-98432-patched/?utm_source=mastodon&utm_medium=jetpack_social

@darth Still not fixed. WTH? https://ubuntu.com/security/CVE-2026-98432

Critical Citrix XenServer Vulnerabilities Allow Host Compromise and Secure Boot Bypass

Citrix disclosed eight vulnerabilities in XenServer 8.4 and 9, including a critical flaw (CVE-2026-98432) that allows unauthenticated attackers on the management network to compromise virtualization hosts and management appliances. Other flaws enable PXE boot compromises and Secure Boot bypasses, requiring immediate updates to XenServer, Workload Balancing, and Conversion Manager components.

**If you run XenServer 8.4 or 9, apply the latest updates from the Normal or Early Access channel right away, and also update Workload Balancing to 2026.1.1 or later and Conversion Manager to 2026.2.0 or later to close the critical host takeover flaw. Make sure your management network is fully isolated and that only trusted admin systems can reach it from trusted source networks or VPN.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-citrix-xenserver-vulnerabilities-allow-host-compromise-and-secure-boot-bypass-d-u-v-h-k/gD2P6Ple2L

Interesting - Ubuntu still doesn't have an updated kernel in the stable distribution, only testing, but they give a "risk reduction" nftables configuration:

https://ubuntu.com/security/CVE-2026-98432

Well, there are still the -proposing repos:

https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

Hola a todos.

Con el auge de la IA se están descubriendo y parcheando muchas vulnerabilidades que estaban presentes en drivers, kernel y demás durante años... para bien o para mal, son vulnerabilidades que hay que corregir lo antes posible.

Dicho esto, se van a parchear y actualizar algunos servidores de TKZ durante la próxima hora para parchear el CVE-2026-98432 en los servidores afectados.

Es posible que durante la próxima hora notéis alguna caida o degradación del servicio.

WatchGuard Patches Critical AuthPoint Gateway Flaws and Warns of Linux Kernel Vulnerability

WatchGuard patched three critical vulnerabilities in its AuthPoint Authentication Gateway that allow unauthenticated attackers to bypass security, delete configurations, and replay administrative requests. The company also warned that its Fireware OS and Dimension products are affected by a critical Linux kernel use-after-free flaw (CVE-2026-98432).

**If you use WatchGuard AuthPoint Authentication Gateway, upgrade it to version 7.6.0 ASAP. Until you patch, allow only trusted networks to reach the gateway and check its logs for unexpected configuration changes or a deleted directory sync configuration. If you run WatchGuard Firebox, AP or Dimension devices, keep their management interfaces off the internet and reachable only from trusted networks, and watch WatchGuard's advisory for a kernel fix, because none is available yet.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/watchguard-patches-critical-authpoint-gateway-flaws-and-warns-of-linux-kernel-vulnerability-d-x-d-l-e/gD2P6Ple2L

@ramon Wel een update voor apt, nog geen nieuwe kernel bij mij. Waarschijnlijk een mirror die nog niet helemaal bijgewerkt is.

Edit: Hier ook nog geen witte rook: https://ubuntu.com/security/CVE-2026-98432

Update your Veeam Software Appliance and Backup & Replication servers now to fix CVE-2026-98432, a critical 9.8 CVSS Linux kernel flaw.

#Veeam #LinuxKernel #BackupSecurity #Cybersecurity #InfoSec

https://securityonline.info/veeam-software-appliance-cve-2026-98432-patched/?utm_source=mastodon&utm_medium=jetpack_social

Critical Citrix XenServer Vulnerabilities Allow Host Compromise and Secure Boot Bypass

Citrix disclosed eight vulnerabilities in XenServer 8.4 and 9, including a critical flaw (CVE-2026-98432) that allows unauthenticated attackers on the management network to compromise virtualization hosts and management appliances. Other flaws enable PXE boot compromises and Secure Boot bypasses, requiring immediate updates to XenServer, Workload Balancing, and Conversion Manager components.

**If you run XenServer 8.4 or 9, apply the latest updates from the Normal or Early Access channel right away, and also update Workload Balancing to 2026.1.1 or later and Conversion Manager to 2026.2.0 or later to close the critical host takeover flaw. Make sure your management network is fully isolated and that only trusted admin systems can reach it from trusted source networks or VPN.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-citrix-xenserver-vulnerabilities-allow-host-compromise-and-secure-boot-bypass-d-u-v-h-k/gD2P6Ple2L

Interesting - Ubuntu still doesn't have an updated kernel in the stable distribution, only testing, but they give a "risk reduction" nftables configuration:

https://ubuntu.com/security/CVE-2026-98432

Well, there are still the -proposing repos:

https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432

Hola a todos.

Con el auge de la IA se están descubriendo y parcheando muchas vulnerabilidades que estaban presentes en drivers, kernel y demás durante años... para bien o para mal, son vulnerabilidades que hay que corregir lo antes posible.

Dicho esto, se van a parchear y actualizar algunos servidores de TKZ durante la próxima hora para parchear el CVE-2026-98432 en los servidores afectados.

Es posible que durante la próxima hora notéis alguna caida o degradación del servicio.

WatchGuard Patches Critical AuthPoint Gateway Flaws and Warns of Linux Kernel Vulnerability

WatchGuard patched three critical vulnerabilities in its AuthPoint Authentication Gateway that allow unauthenticated attackers to bypass security, delete configurations, and replay administrative requests. The company also warned that its Fireware OS and Dimension products are affected by a critical Linux kernel use-after-free flaw (CVE-2026-98432).

**If you use WatchGuard AuthPoint Authentication Gateway, upgrade it to version 7.6.0 ASAP. Until you patch, allow only trusted networks to reach the gateway and check its logs for unexpected configuration changes or a deleted directory sync configuration. If you run WatchGuard Firebox, AP or Dimension devices, keep their management interfaces off the internet and reachable only from trusted networks, and watch WatchGuard's advisory for a kernel fix, because none is available yet.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/watchguard-patches-critical-authpoint-gateway-flaws-and-warns-of-linux-kernel-vulnerability-d-x-d-l-e/gD2P6Ple2L

Canonical tarda setmanes en parchear CVE-2026-98432 (CVSS 9.8, use-after-free TCP IPv4 des del 2016) mentre Debian ja ho va fer el 16 d'octubre i SUSE des del 31. Un model de Claude d'Anthropic ja té un exploit de root remot operatiu, encara no public. Ubuntu 22.04/24.04/26.04 encara són vulnerables. El pedaç són dues línies de codi. 🔗 softzone.es/noticias/open-source/parche-cve-2026-98432-ubuntu-critico/

What the fuck Ubuntu?!?!?
ubuntu.com/security/CVE...

STILL no patch for the kernel TCP 0-day!

🚨 Critical Citrix XenServer Flaw Allows Unauthenticated Attackers to Compromise Virtualization Hosts, CVE-2026-98432

Citrix has released emergency security updates for XenServer 8.4 and 9 after disclosing a critical vulnerability that could allow unauthenticated attackers with access to the management network to compromise virtualization hosts.

The vulnerability, tracked as CVE-2026-98432, also affects Workload Balancing and Conversion Manager appliances, raising concerns about attacks against infrastructure used to manage large numbers of virtual machines.

A second vulnerability, CVE-2026-102703, could allow a privileged attacker inside a guest virtual machine to compromise the underlying host, potentially breaking the security boundaries separating virtualized environments.

Citrix also addressed six additional vulnerabilities involving PXE boot and Secure Boot protections.

Security updates are now available for affected XenServer deployments and related management appliances. Administrators are urged to patch immediately and restrict management network access to trusted systems.

There are currently no confirmed reports of these vulnerabilities being exploited in the wild.

Source: https://support.citrix.com/external/article/CTX697256/xenserver-security-update-for-multiple-issues.html

A remote probe that demonstrates the presence of CVE-2026-98432 https://github.com/xen0bit/netprobe-cve-2026-98432

CW: technikai biztonsági frissítés
Az IPFire 2.29 Core Update 205 sürgős javítást tartalmaz a Linux TCP use-after-free sebezhetőségre (CVE-2026-98432). Frissít kernelre 6.18.60; telepítés után kötelező újraindítás. Csak a kernel csomag van benne — rendszergazdák ne halogassák.

https://linuxmint.hu/hir/2026/11/az-ipfire-229-core-update-205-sulyos-linux-tcp-sebezhetoseget-javit

#IPFire #Linux #CVE-2026-98432 #kernel #firewall #security

The server rebooted on November 4 at 19:08 CET and is running 5.14.0-687.64.1.el9_8.x86_64, the kernel with the CVE-2026-98432 fix. Systemd reports zero failed units.

Two services were missing or unavailable when checked:

• Minecraft fabric-lobby was absent from TCP 25574, where the inventory last saw it running. fabric is running on 25572. Both are managed manually.
• friday.... returned HTTP 503 through local Apache. Its configured backend ports, 5173 and 5174, had no listeners. I couldn’t establish whether it was down before the reboot.

Apache, MySQL, SSH, firewalld, Postfix, OpenDKIM, and the inventoried monitoring services were active. Grafana reported its database healthy, InfluxDB answered its health probe, and the expected filesystems were mounted.

Boot logs: mradmin failed three times during startup, with DNS resolution errors for discord.com, then connected successfully.

Systemd ignored an invalid restart policy in wiki.service and an unsupported ImportCredential directive in telegraf.service. Both services are running. The kernel also logged nft_compat deprecation and CPU mitigation warnings.

===

Das ist ein ausgezeichnetes Ergebnis. Der Reboot hat geklappt, das LLM hatte ungefragt ein Verzeichnis der Services angelegt (Im Ansible ist ein docs/ Verzeichnis und es macht sich fleißig Notizen), und das zur Verfikation nutzen können. Und ich habe ein paar Dinge, die ich nach Rückfrage mit dem Sohne aufräumen kann.

Ähnliche Ergebnisse bekomme ich mit den komplexeren Setups meiner eigenen Dedis auch.

Das LLM sagt mir also:

The server is still running a kernel affected by CVE-2026-98432. The fixed kernel is already installed, so the next step is a planned reboot.I verified over SSH that AlmaLinux 9.8 is running 5.14.0-687.29.1.el9_8.x86_64. The installed 5.14.0-687.64.1.el9_8.x86_64 package lists the CVE fix in its changelog.

MPTCP is disabled and the host showed no MPTCP listeners, so the specific exposure the post describes appears absent. The underlying flaw still affects standard IPv4 TCP, and the server has an IPv4 ssh listener.

Nach Absprache mit dem Sohn habe ich die Kiste also gestern abend gebootet und dann nachgefragt.

@GrapheneOS Hi, I updated and saw that my pixel 10 pro now has kernel 6.18.38. [CVE-2026-98432](https://nvd.nist.gov/vuln/detail/cve-2026-98432) mentions that only kernels > v6.18.56 are patched. Is the current kernel vulnerable? If so, anything we can to mitigate until a patch will arrive?

Kernel security reboots for CVE-2026-98432, a different flaw from last week's Fragnesia reboots: Friday, Nov 13, 10:00 AM–1:00 PM PST (18:00–21:00 UTC). Many OSL-hosted project sites and lists will each be down for a few minutes, once. Our FTP mirrors reboot one at a time, so ftp.osuosl.org stays up. Details: https://status.osuosl.org/pages/maintenance/526712bf10cd4e587b000014/6aeb9bf5b435fe0422769f92

CW: technikai biztonsági hír — Barracuda Email Security Gatewayen két hiba láncolata lehetővé teszi a pre-auth root RCE-t (CVE-2026-116606 + CVE-2026-111560). Javítva: ESG 9.4.0.030+; Barracuda kiadott patcheket. Ha nem tudsz frissíteni, korlátozd az admin felületet belső hálóra és kapcsold vissza az automatikus frissítést. #Barracuda #CVE #InfoSec #EmailSecurity
https://linuxmint.hu/hir/2026/11/szakertok-bemutattak-igy-lehet-root-hozzaferest-szerezni-barracuda-email-security

Barracuda has been out of the spotlight for a bit. watchTowr provides a technical analysis of two Email Security Gateway vulnerabilities (CVE-2026-116606 and CVE-2026-111560) that chained together would allow for pre-auth root RCE. Detection artefact generator (PoC) included.

https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

#barracuda #CVE #poc

CW: sérülékenység részletek

Barracuda javított két kritikus hibát: CVE-2026-116606 (auth bypass az Email Security Gateway-en — BNSF-40425 9.4.017+ / BNSF-40430 régebbi verziók) és CVE-2026-111560 (parancsbefecskendezés több terméknél: ESG, ADC, Message Archiver, WAF, Web Security Gateway — javítócsomagok: BNADC-16586, BNMA-32468, BNWF-60060, BNYF-24789). Azonnali frissítés és admin felületek elkülönítése ajánlott. https://linuxmint.hu/hir/2026/11/kritikus-barracuda-hibakkal-root-jogosultsag-szerezheto

#CVE #Barracuda #InfoSec #Security

Zyxel GS1900 Switches Compromised via Zero-Day RCE

Zyxel patched a critical zero-day vulnerability (CVE-2026-107441) in GS1900 switches after attackers exploited it to deploy rootkits on nearly 1,000 devices.

**Make sure the management interface of your Zyxel GS1900 switches can’t be reached from the internet and is open only to trusted admin networks, then update the firmware to version 2.90(Axxx.3)C0 or later. The June 2026 patch does not stop this attack, so check your switches for any connections to the 981666[.]xyz domain. If you find one, treat the switch as compromised and factory reset it before you update it.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/zyxel-gs1900-switches-compromised-via-zero-day-rce-7-r-b-w-u/gD2P6Ple2L

Zyxel GS1900 Switches Compromised via Zero-Day RCE

Zyxel patched a critical zero-day vulnerability (CVE-2026-107441) in GS1900 switches after attackers exploited it to deploy rootkits on nearly 1,000 devices.

**Make sure the management interface of your Zyxel GS1900 switches can’t be reached from the internet and is open only to trusted admin networks, then update the firmware to version 2.90(Axxx.3)C0 or later. The June 2026 patch does not stop this attack, so check your switches for any connections to the 981666[.]xyz domain. If you find one, treat the switch as compromised and factory reset it before you update it.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/zyxel-gs1900-switches-compromised-via-zero-day-rce-7-r-b-w-u/gD2P6Ple2L

Nearly 996 switches across 48 countries were compromised before anyone noticed, their configurations and credentials siphoned away like watering holes emptied in a drought.

The cruelest detail: administrators had already patched for a different vulnerability. The herd had moved, but the predators had simply found a new gap in the fence. Nature, as always, is indifferent.

Apply Zyxel's released security updates for GS1900 series switches to address CVE-2026-107441 immediately. (2/3)

🏆 New Achievement! Switch Life Isn't For Everyone!

Here we observe the Zyxel GS1900 switch in its natural habitat: a rack, blinking quietly, believing itself patched and safe. It was not. CVE-2026-107441, a previously unknown out-of-bounds write flaw, allowed attackers to execute commands remotely — no credentials required, no appointment necessary. (1/3)

SANS Stormcast Friday, November 6th, 2026: RootEvidence Cisco IOS Opt-Out Scans; OpenSSH musl sshhole (CVE-2026-123158); Refrigeration OT Hardening; Zyxel GS1900 OOB Write (CVE-2026-107441)
https://isc.sans.edu/podcastdetail/10168

🚨 Hackers exploited Zyxel zero-day to compromise nearly 1,000 network switches across 48 countries

A previously unknown vulnerability in Zyxel GS1900 switches, tracked as CVE-2026-107441, allowed attackers to execute commands remotely without authentication.

The attacks were initially blamed on an older, patched vulnerability, but researchers discovered that hackers were exploiting a separate zero-day, leaving even previously updated devices vulnerable.

The campaign compromised approximately 996 switches across 48 countries, with attackers stealing device configurations and credentials while deploying malicious tools. Zyxel has since released security updates.

Source: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches-11-03-2026

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests. https://www.securityweek.com/zyxel-switch-hacks-blamed-on-patched-flaw-actually-exploited-a-zero-day/

Zyxel fixed CVE-2026-107441 on GS1900 switches. A LAN-side CGI flaw could allow unauthenticated OS command execution. Check the exact model and install its 2.90 firmware patch.

This is separate from CVE-2026-7273, exploited in September; no exploitation of 107441 is confirmed.

https://community.zyxel.com/en/discussion/34523/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches

#Cybersecurity #Infosec #NetworkSecurity

The vulnerability, tracked as CVE-2026-107441, is an out-of-bounds write flaw in the switches' web management interface that allows an unauthenticated attacker with network access to execute operating system commands using specially crafted HTTP requests. https://www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/

CW: sebezhetőség, PoC
CVE-2026-58882 — egy speciális WAP Push SMS PoC összeomlaszthatja a com.android.phone folyamatot; hívások (akár segélyhívás) megszakadhatnak, egyes eszközök reboot-loopba kerülnek. PoC nyilvános. Google javítás Android 14–17 okt. patchekben; Android 12–13 sok helyen nem kapott javítást. Ellenőrizd a biztonsági frissítés szintjét.
https://linuxmint.hu/hir/2026/11/egy-specialis-uzenet-tavolrol-is-megbenithatja-az-android-telefonokat
#Android #CVE #InfoSec #MobileSecurity

Broadcom has an upddate for a critical vulnerability first posted yesterday. You'll need a login for details.

Broadcom: CRITICAL: Endevor Bridge for Git 3.0.1 to 3.2.14 Advisory for Compromised eMudhra Intermediate CA Certificates https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Cisco:

New advisory addresses a high-severity vulnerability first posted on October 27.

Cisco: CVE-2026-105482, CVE-2026-105483, and CVE-2026-106069: Vulnerabilities in Node.js and Brotli Affecting Cisco Products https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-oct2026-node-js-Jj3SQ19u @TalosSecurity #Cisco #vulnerability #infosec

CW: technikai biztonsági hír — Barracuda Email Security Gatewayen két hiba láncolata lehetővé teszi a pre-auth root RCE-t (CVE-2026-116606 + CVE-2026-111560). Javítva: ESG 9.4.0.030+; Barracuda kiadott patcheket. Ha nem tudsz frissíteni, korlátozd az admin felületet belső hálóra és kapcsold vissza az automatikus frissítést. #Barracuda #CVE #InfoSec #EmailSecurity
https://linuxmint.hu/hir/2026/11/szakertok-bemutattak-igy-lehet-root-hozzaferest-szerezni-barracuda-email-security

Barracuda has been out of the spotlight for a bit. watchTowr provides a technical analysis of two Email Security Gateway vulnerabilities (CVE-2026-116606 and CVE-2026-111560) that chained together would allow for pre-auth root RCE. Detection artefact generator (PoC) included.

https://labs.watchtowr.com/barracuda-networks-is-your-new-best-friend-barracuda-email-security-gateway-pre-auth-remote-root-rce-cve-2026-116606-cve-2026-111560/

#barracuda #CVE #poc

CW: sérülékenység részletek

Barracuda javított két kritikus hibát: CVE-2026-116606 (auth bypass az Email Security Gateway-en — BNSF-40425 9.4.017+ / BNSF-40430 régebbi verziók) és CVE-2026-111560 (parancsbefecskendezés több terméknél: ESG, ADC, Message Archiver, WAF, Web Security Gateway — javítócsomagok: BNADC-16586, BNMA-32468, BNWF-60060, BNYF-24789). Azonnali frissítés és admin felületek elkülönítése ajánlott. https://linuxmint.hu/hir/2026/11/kritikus-barracuda-hibakkal-root-jogosultsag-szerezheto

#CVE #Barracuda #InfoSec #Security

References
------------------

CISA's Known Exploited Vulnerabilities catalog in section CVE-2026-46300 (Fragnesia) mentions the chained attack possibility: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

ENISA: https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107260, https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107265

Report by Italy's National Cybersecurity Authority stating 81.9% of systems running PHP services in the country are vulnerable to PHP2Shell: https://www.acn.gov.it/portale/w/php2shell-aggiornare-immediatamente-i-sistemi-vulnerabili

#CVE-2026-46300 #CVE-2026-109618 #CVE-2026-109619

🚨 A Linux kernel vhost flaw can let a local attacker cross virtualization boundaries and escalate privileges; CVE-2026-74580

PoC: https://github.com/YounesHfa/CVE-2026-74580

The vulnerability stems from stale vring metadata caching in the kernel’s vhost subsystem.

Reconfiguring a vring while a device IOTLB is attached can lead to out-of-bounds memory access and host kernel memory corruption.

Details

CVSS: 8.8 High
Impact: Local privilege escalation / host kernel compromise
Affected: Multiple Linux kernel versions using vulnerable vhost implementations
Fixed: Vendor-specific patched kernel releases are available

The exploit repository demonstrates the issue against multiple RHEL 9 and RHEL 10 kernel builds and includes automated checks for vulnerable kernel versions and required vhost device permissions.

🟠 CVE-2026-58273 - High (8.1)

Rucio is a scientific data management framework. From 1.16.1 until 35.9.0, 38.6.0, and 41.0.0rc1, the /credentials/signurl endpoint reads X-Rucio-Account instead of the account stored in request.environ['issuer'] by token authentication. Any authe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58273/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Red Hat OpenJDK 11.0.33 ELS for Windows fixes CRITICAL vuln CVE-2026-83374 + others. Update ASAP to secure Java runtimes. Applies to all Red Hat OpenJDK 11 users on Windows. https://radar.offseq.com/threat/red-hat-security-advisory-openjdk-11033-els-security-update-for-windows-builds-9ba9a7eab872b49c #OffSeq #RedHat #Java #Vulnerability

Broadcom has an upddate for a critical vulnerability first posted yesterday. You'll need a login for details.

Broadcom: CRITICAL: Endevor Bridge for Git 3.0.1 to 3.2.14 Advisory for Compromised eMudhra Intermediate CA Certificates https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Cisco:

New advisory addresses a high-severity vulnerability first posted on October 27.

Cisco: CVE-2026-105482, CVE-2026-105483, and CVE-2026-106069: Vulnerabilities in Node.js and Brotli Affecting Cisco Products https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-oct2026-node-js-Jj3SQ19u @TalosSecurity #Cisco #vulnerability #infosec

Broadcom has an upddate for a critical vulnerability first posted yesterday. You'll need a login for details.

Broadcom: CRITICAL: Endevor Bridge for Git 3.0.1 to 3.2.14 Advisory for Compromised eMudhra Intermediate CA Certificates https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Cisco:

New advisory addresses a high-severity vulnerability first posted on October 27.

Cisco: CVE-2026-105482, CVE-2026-105483, and CVE-2026-106069: Vulnerabilities in Node.js and Brotli Affecting Cisco Products https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-oct2026-node-js-Jj3SQ19u @TalosSecurity #Cisco #vulnerability #infosec

🟠 CVE-2026-111770 - High (7.7)

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 2.0.0 until 2.3.0 in @modelcontextprotocol/server, applications that shared one stateless HTTP transport or one Mcp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-111770/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-111770 - High (7.7)

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 2.0.0 until 2.3.0 in @modelcontextprotocol/server, applications that shared one stateless HTTP transport or one Mcp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-111770/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-111768 - High (7.5)

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP se...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-111768/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-111768 - High (7.5)

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP se...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-111768/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

It sometimes is difficult to identify which moments are Peak Microsoft, but the company being unable to even communicate which software update fixes a now 3 weeks old remote code vulnerability disclosure probably qualifies.

Do keep in mind this is the company which recently decided to lay off a quarter of its engineers after record profits.
https://www.techzine.eu/news/security/145581/paint-vulnerability-allows-rce-patch-is-hard-to-find/
https://app.opencve.io/cve/CVE-2026-83844

Microsoft Paint CVE-2026-83844 (RCE) needs a Microsoft Store app update, not just Windows cumulative updates. Microsoft lists 11.2609.401.0 as the fixed build, although older records show a different cutoff. Inventory Paint versions on managed Windows 11 endpoints and update from the Store or your app-management workflow. Microsoft reports no exploitation.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

#Cybersecurity #Infosec #Windows #PatchManagement

A security update addressing CVE-2026-83844, an important remote code execution vulnerability in Windows Paint rated CVSS 8.1, is now available.

Microsoft delivers this fix exclusively via the Microsoft Store rather than standard Windows updates, updating systems to build 11.2609.401.0.

Because Paint installs separately per user account, researchers recommend verifying all local and provisioned user copies.

https://en.hacks.gr/nea-enimerosi-diorthonei-sovaro-provlima-asfaleias-sto-microsoft-paint/

#Windows #Microsoft #Paint #Patch

Microsoft Paint Flaw Gets Fix, Bypasses Windows Update

A critical flaw in Microsoft Paint, known as CVE-2026-83844, has been patched, but the fix is only available through the Microsoft Store, leaving some users and devices vulnerable. This remote code execution vulnerability could allow attackers to run malicious code on your system over a network, no login or interaction required.

https://osintsights.com/microsoft-paint-flaw-gets-fix-bypasses-windows-update?utm_source=mastodon&utm_medium=social

#MicrosoftPaint #Cve202683844 #RemoteCodeExecution #WindowsUpdate #MicrosoftStore

Wtf. I don't want to assume things since I haven't looked into the technical details. But I'm going to assume things about Microsoft. https://euvd.enisa.europa.eu/vulnerability/CVE-2026-83844

Und jetzt haben wir Security endgültig durchgespielt.

Eine RCE. In MS PAINT.

https://www.cve.org/CVERecord?id=CVE-2026-83844

https://www.cve.org/CVERecord?id=CVE-2026-83844 Microsoft Paint was always the greatest data store. #security #cybersecurity

It sometimes is difficult to identify which moments are Peak Microsoft, but the company being unable to even communicate which software update fixes a now 3 weeks old remote code vulnerability disclosure probably qualifies.

Do keep in mind this is the company which recently decided to lay off a quarter of its engineers after record profits.
https://www.techzine.eu/news/security/145581/paint-vulnerability-allows-rce-patch-is-hard-to-find/
https://app.opencve.io/cve/CVE-2026-83844

Microsoft Paint CVE-2026-83844 (RCE) needs a Microsoft Store app update, not just Windows cumulative updates. Microsoft lists 11.2609.401.0 as the fixed build, although older records show a different cutoff. Inventory Paint versions on managed Windows 11 endpoints and update from the Store or your app-management workflow. Microsoft reports no exploitation.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

#Cybersecurity #Infosec #Windows #PatchManagement

Wtf. I don't want to assume things since I haven't looked into the technical details. But I'm going to assume things about Microsoft. https://euvd.enisa.europa.eu/vulnerability/CVE-2026-83844

Und jetzt haben wir Security endgültig durchgespielt.

Eine RCE. In MS PAINT.

https://www.cve.org/CVERecord?id=CVE-2026-83844

https://www.cve.org/CVERecord?id=CVE-2026-83844 Microsoft Paint was always the greatest data store. #security #cybersecurity

MS Paint Remote Code Execution Vulnerability

Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

The cybersecurity awareness month is over and it's not even April 1st yet but here you have it - an RCE in Microsoft Paint:

https://www.cve.org/CVERecord?id=CVE-2026-83844

Oh come on Microsoft!

Seriously?

An RCE in MS Paint?

This is just taking the piss now surely!!!

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

#it #itsecurity #infosec

MS Paint Remote Code Execution Vulnerability
Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Comments: https://news.ycombinator.com/item?id=50384233

https://www.neowin.net/news/microsoft-paint-cve-2026-83844-lets-hackers-hack-windows-11-pcs-over-internet/ lmao fucking called it. Microsoft adds ai to ms paint, and now we have paint RCEs.

MS Paint Remote Code Execution Vulnerability
https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

Microsoft patched Windows Paint RCE vulnerability CVE-2026-83844 with an 8.1 CVSS score. Update now to block potential remote code execution attacks.

#Microsoft #WindowsPaint #CVE202683844 #Cybersecurity #InfoSec

https://securityonline.info/windows-paint-rce-cve-2026-83844-fixed/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-83844: Windows Paint RCE Vulnerability https://www.sentinelone.com/vulnerability-database/cve-2026-83844/

*smugly* I'm immune to the MSPaint RCE because I never upgraded to Windows 11

https://www.cve.org/CVERecord?id=CVE-2026-83844

MS Paint Remote Code Execution Vulnerability

Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

Hilfe! Notfall alles kaputt!
https://www.cve.org/CVERecord?id=CVE-2026-83844

So, hey gang...lest we start to forget we live in the stupidest timeline; #MSPaint has an #RCE vulnerability at an 8.1 CVSS. A patch dropped in mid October, but there were typos in release numbering that caused a lot of confusion, so people may or may not have the patch.

In English: Microsoft Paint has a remote code execution vulnerability known as CVE-2026-83844, which allows attackers to execute unauthorized code over a network through specially crafted image files. The vulnerability has a severity score of 8.1 out of 10.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

hey how about a network-based rce in MS FUCKING PAINT?
https://www.cve.org/CVERecord?id=CVE-2026-83844

MS Paint Remote Code Execution Vulnerability

Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

Microsoft Paint has an RCE bug. https://www.cve.org/CVERecord?id=CVE-2026-83844

MS Paint Remote Code Execution Vulnerability
Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Comments: https://news.ycombinator.com/item?id=50384233

MS Paint Remote Code Execution Vulnerability

Link: https://www.cve.org/CVERecord?id=CVE-2026-83844
Discussion: https://news.ycombinator.com/item?id=50384233

WHY IS MS PAINT *CONNECTED TO THE INTERNET*

WHAT THE FUCK

https://www.cve.org/CVERecord?id=CVE-2026-83844

🚨 Critical Windows Paint vulnerability allows remote code execution without authentication, CVE-2026-83844

Microsoft has disclosed a high-severity vulnerability in Windows Paint that could allow unauthenticated attackers to execute malicious code remotely without user interaction.

Tracked as CVE-2026-83844, the flaw stems from an out-of-bounds read that could compromise the confidentiality, integrity, and availability of affected systems.

The vulnerability carries a CVSS score of 8.1 and affects Microsoft Paint versions earlier than 11.2605.91.0. Microsoft has released a security fix, and administrators are urged to ensure Paint is updated.

There are currently no confirmed reports of active exploitation.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844

Telegram: https://t.me/SliceForLifeee

💥 Enterprise level intel, without the enterprise price tag. darkwebinformer.com/pricing

Why the heck does MS Paint have a network listener??

https://www.cve.org/CVERecord?id=CVE-2026-83844

#SysAdmin #cyberSecurity

MS Paint Remote Code Execution Vulnerability

https://www.cve.org/CVERecord?id=CVE-2026-83844

Comments: https://news.ycombinator.com/item?id=50384233

#HackerNews

In 2026, we have CVEs for Microsoft Paint...

https://www.cve.org/CVERecord?id=CVE-2026-83844

Wtf?

Remote Code Execution in fucking Paint?
Warum tut #Paint überhaupt was mit Netzwerk? 🫠

https://nvd.nist.gov/vuln/detail/cve-2026-83844

#cve #cve202683844 #microsoft #rce #cve_2026_83844

A remote code exec vulnerability in M$ #Paint(!) just got a rating of 8.1 … what a time to be alive
https://www.cve.org/CVERecord?id=CVE-2026-83844

lol, MSPAINT.EXE remote code execution

between that and php it’s like golden oldies around here lately https://www.cve.org/CVERecord?id=CVE-2026-83844

RE: https://infosec.exchange/@kajer/117560238580690048

PoC for CVE-2026-83844 just dropped 😱

Zyxel fixed CVE-2026-107441 on GS1900 switches. A LAN-side CGI flaw could allow unauthenticated OS command execution. Check the exact model and install its 2.90 firmware patch.

This is separate from CVE-2026-7273, exploited in September; no exploitation of 107441 is confirmed.

https://community.zyxel.com/en/discussion/34523/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-gs1900-series-switches

#Cybersecurity #Infosec #NetworkSecurity

CVE-2026-92403 in Secure Custom Fields (WordPress plugin before 6.9.4): unauthenticated form mismatch lets attackers alter post title and content on forms they shouldn't reach. CVSS 3.7. No patch status confirmed, so update to 6.9.4 now. https://www.valtersit.com/cve/CVE-2026-92403/

CVE-2026-92099 in the WPGraphQL Smart Cache plugin (pre-2.3.2) lets unauthenticated users store arbitrary persisted queries and hijack aliases. CVSS 6.5. No official patch status yet - update now if a fix is available. #CVE #infosec #WordPress https://www.valtersit.com/cve/CVE-2026-92099/

CVE-2026-92421 Hydra Booking WordPress plugin before 1.2.3: missing authorization check lets host-role users modify other hosts' profiles and take over records. CVSS 4.7, no patch confirmed. Update to 1.2.3 now. #CVE #infosec #WordPress https://www.valtersit.com/cve/CVE-2026-92421/

CVE-2026-92420 Hydra Booking WordPress plugin: booking-provider users can cancel and permanently delete other providers' bookings due to missing ownership checks. CVSS 3.8, no patch confirmed. Update to 1.2.2 or later now. #CVE #WordPress #infosec https://www.valtersit.com/cve/CVE-2026-92420/

CVE-2026-5400: Stored XSS in Redux Framework for WordPress (CVSS 6.4). Subscriber-level users can inject scripts via Media field filter values in versions up to 4.5.13. Patch still under review, so limit access until a fix lands. https://www.valtersit.com/cve/CVE-2026-5400/

Tested in the lab: CVE-2026-67277: Memory disclosure in the btest service of RouterOS

We have verified that an unauthenticated client can exploit the btest service to extract uninitialized data from kernel memory. The issue is resolved by updating RouterOS to versions 6.49.21, 7.23.4, or 7.24.2.

The full report is reserved for dojo members for 30 days. Joining is free.

https://mikrotikdojo.com/en/lab/cve-2026-67277-memory-disclosure-btest-routeros/?utm_source=fediverso&utm_medium=social&utm_campaign=fediverso

#MikroTik #RouterOS #infosec #CVE #CyberSecurity

Shared with @mikrotik

zlib 1.4 released with the following security fixes:

- Non-blocking gzwrite() had a buffer overflow; CVE-2026-85091 (reported by mat-mo; also TOB-ZLIB-003).
- inflateGetDictionary() could write up to 8 MB past the caller's 32K buffer (Theorem THM-ZLIB-001). This took a zlib header with an invalid window size, then inflateReset() or inflateSync(). Affects 1.3.1 and 1.3.2.
- inflateSync() before the window size was known allocated a one-byte window that could later be overrun (TOB-ZLIB-004).
- inflatePrime() could lead inflate() to read before the start of the input (TOB-ZLIB-014).
- Repeated deflatePrime() calls could write past the pending buffer (TOB-ZLIB-013).
- inflateBack() failed to detect distances too far back, and copied uninitialized memory to the output (reported by Kornel Lesiński).
- gzseek() forward before any data was written could write uninitialized memory to the gzip output (found by Claude Opus 5.5).
- deflateResetKeep() used mid-stream could read outside the window (reported by Jason Gross).
- gzdopen() now sets close-on-exec with the correct flag (TOB-ZLIB-008).

https://github.com/madler/zlib/releases/tag/v1.4

#infosec #cybersecurity #CVE_2026_85091

AI Agents Are Getting Powerful. What Can They Do For You?

The AI agent market has officially entered the awkward teenage years.
The demos are impressive. Agents can browse the web, send email, fill out forms, write documents, book travel, run code, manage files, and operate software that doesn’t even have an API.
They can also do things you absolutely did not intend them to do.

That is the part of the story that gets considerably less screen time.

Over the last year, we went from “AI that answers questions” to “AI that can actually do stuff.”
OpenClaw, Muse, Grok Bot, Claude Cowork, ChatGPT Work, Gemini Spark, Manus and Hermes Agent all take slightly different approaches to the same fundamental problem:

How much autonomy are you willing to give software that can act as you?

And that turns out to be a much more interesting question than which model scores highest on a benchmark.

The new AI benchmark is blast radius

For years, we compared AI models on intelligence.

How well does it code?
How well does it reason?
How well does it summarize a 200-page PDF?

With agents, the question changes.

An agent doesn’t just generate an answer.
It gets credentials, opens a browser, reads your files, sends messages, executes commands and potentially spends your money.

So the important question becomes:

What happens when the agent makes a mistake—or gets tricked?

This is where the current crop of agents diverges dramatically.

Some are designed around containment. They run inside isolated virtual machines, use surrogate credentials and require approval before consequential actions.

Others essentially say: “Here is a very powerful AI. Good luck.”

That distinction matters more than whether Agent A is 7% better at a benchmark than Agent B.

OpenClaw: Give the AI a computer (and hope for the best)

OpenClaw is probably the most interesting agent in the category—and also the one that makes security people reach for their blood-pressure medication.

It is open source, MIT licensed, model agnostic and extremely flexible. It runs on your machine, works through messaging platforms such as Signal, Telegram, Discord and WhatsApp, can execute shell commands, manipulate files, run scripts and remember things across sessions.

In other words, it doesn’t just talk to you.
It operates your computer.
That is exactly why people love it. It is also exactly why it is dangerous.

OpenClaw’s permissions are largely your permissions. If you give it access to your machine, accounts and credentials, a successful prompt injection can potentially turn into a very large incident.

And the security history is not theoretical.

Koi Security reported 341 malicious skills in an audit of 2,857 ClawHub skills. Cisco researchers demonstrated malicious skills capable of data exfiltration. OpenClaw also had a one-click remote-code-execution vulnerability, CVE-2026-25253. Then there is the particularly uncomfortable detail: OpenClaw 2.0 shipped with its new sandbox disabled by default, while secrets were stored unencrypted at rest.

This is the classic open-source tradeoff:
You get enormous power and control.
You also inherit the responsibility for making that power safe.

For an experienced engineer running OpenClaw inside a properly isolated environment with a dedicated account?
Interesting.
For your parents, your finance team or the average person who thinks Docker is a brand of whale?
Probably not.

Muse: What if we actually designed the agent around security?

Meta’s Muse takes almost the opposite approach.
Instead of giving an agent access to your computer and asking you to figure out the security model, Muse starts with containment.
Every user gets a dedicated Secure VM.
A separate Sentinel system controls what can leave that environment.
Muse uses surrogate credentials instead of exposing your actual credentials to the agent.

And when something consequential happens—such as sending an email or completing a purchase—it asks for approval.
The architecture can essentially be summarized as:

Muse proposes. Sentinel permits.

That is a much more interesting security model than simply adding another confirmation dialog to an otherwise unrestricted agent.
Muse can handle the consumer tasks people actually want from an agent: email, travel, bills, forms and purchases.
The catch is that Muse is brand new.

It launched in September 2026. The security architecture looks compelling on paper, but independent validation is still limited. It is also US-only, Meta-operated and cannot be self-hosted.

And there is another uncomfortable question:
Are you more comfortable giving an AI agent your credentials—or giving Meta a complete picture of your digital life?

That’s not a technical question.
That’s a trust question.

Grok Bot: The agent that wants to be your employee

Grok Bot takes yet another approach.
Instead of writing integrations, you can teach it what to do by recording yourself performing a task.

Do it once.
The Bot learns the workflow.
Then it can repeat it.
This is potentially huge.

A lot of business software still exists behind terrible web interfaces with no API. If an AI can operate a browser like a human, suddenly all those ancient internal dashboards become automatable.

But there is a catch.
Actually, several.

Grok Bot uses one shared computer per account. Multiple Bots can access the same browser sessions, files and logins. That means your Bots are not really security boundaries from each other. And the documentation itself is unusually candid about this.
The security boundary is the account—not the individual Bot.

That’s a big deal.

Imagine giving five employees access to the same laptop, browser cookies, downloads folder and logged-in applications.
Now replace those employees with autonomous software.
That’s roughly the model.
Grok Bot is also very new, has little independent testing, doesn’t yet have the promised audit view, and its underlying model isn’t clearly identified for benchmarking.

It may turn out to be fantastic.
Right now, there simply isn’t enough evidence to know.

The ‘boring agents’ may actually be the interesting ones

The flashy new agents get the headlines, but the established players are taking a more conservative path.

Claude Cowork

Claude Cowork is essentially the “I want an agent, but I don’t want it owning my entire laptop” option.
It uses narrow permissions and can be limited to specific folders. It’s particularly useful for documents and office work, with integrations across services such as Google Workspace, Notion, Asana, Box and Canva.

The downside is familiar: usage limits, uneven connector support and some early rough edges.
But the philosophy is sensible:

Give the agent access to the thing it needs, not everything you own.

That should not be revolutionary.
Unfortunately, in 2026, it still is.

ChatGPT Work

ChatGPT Work is positioned around the office-deliverables problem: documents, spreadsheets, presentations, research and multi-step workflows. It also has approval mechanisms for consequential actions and stronger data controls on business and enterprise plans. Its biggest problem isn’t necessarily capability.
It’s packaging.

The terminology and plan boundaries are confusing enough that you should check the current product documentation before assuming a particular feature is included in your plan.
The underlying idea, however, is straightforward: let the agent do the boring work while keeping humans in the loop for important decisions.

Gemini Spark

If your digital life is Gmail, Google Docs, Sheets, Calendar and Slides, Gemini Spark is the obvious ecosystem play.
It gets deep access to Google’s products, supports additional connectors and can operate continuously from Google’s cloud infrastructure.
The tradeoff is also obvious.
The more deeply an agent is connected to your digital life, the more complete a picture it has of your life.

An AI reading your Gmail is useful.
An AI reading your Gmail, calendar, documents, files and browsing activity 24/7 is something else entirely.
Convenience and data concentration are becoming inseparable.

Manus: The agent that can build things, until it decides it is done

Manus is particularly good at one-off deliverables.
Research reports.
Presentations.
Websites.
Complex research tasks.

It runs inside a cloud sandbox with browsers, files and code and can parallelize work across many tasks.
The problem is reliability. Users have reported loops, tasks marked complete without producing what they expected and credits being consumed regardless of whether the result was useful. And Manus has had a particularly strange ownership story, including a proposed Meta acquisition, regulatory intervention and subsequent operational changes. That makes Manus an interesting product to use—but also a good reminder of something we don’t talk about enough:

Your agent is a dependency.
If an agent is deeply embedded in your workflow, what happens when its pricing changes?

Or ownership changes?
Or the company disappears?
Or your credits expire?
Agent portability is going to become a real enterprise concern.

Hermes: OpenClaw without quite as much chaos

Hermes Agent is the open-source alternative for people who want control without necessarily wanting the entire OpenClaw ecosystem. It is MIT licensed, self-hosted and supports a large number of communication channels. Its most interesting feature is the learning loop. Instead of simply remembering what you told it, Hermes can create reusable skills and refine them based on feedback. The tradeoff is that you become the platform team.

You have to maintain it. You have to pay for the model APIs.
You have to build the sandbox. You have to decide what credentials it gets. You have to debug it when something breaks. The software may be free.
Your time isn’t.

So which one should you use?

There isn’t a universal winner.
And I think that’s the wrong way to look at this market anyway.

The better question is:
How much autonomy do you need, and how much blast radius are you willing to accept?

If you want a hosted consumer/personal agent that handles personal errands, Muse is built around strong containment.
If your world is Gmail and Google Docs, Gemini Spark makes the most sense from an ecosystem perspective. If you spend your day creating documents, presentations and spreadsheets, Claude Cowork or ChatGPT Work are natural choices depending on the ecosystem you’re already using. If you want to run your own agent and are comfortable with infrastructure, Hermes is an interesting open-source option. If you want maximum flexibility and don’t mind taking responsibility for the security model, OpenClaw is extraordinarily powerful.

And if you’re already paying for the ecosystem that includes Grok Bot, it is worth experimenting with—but I’d keep the first experiments reversible.
Manus is particularly interesting for one-off research and deliverables, where the credit model matters less than having something useful at the end.

The rule I would use for every AI agent

Regardless of which agent you choose, I would start with three rules.

1. Give it a separate account – Just like a new employee in your company.

Don’t give an experimental agent access to your primary Gmail, your company’s production environment or your entire Google Drive. Create a sandbox.

2. Start read-only.

Let the agent observe before you let it act. Reading a calendar is one thing. Canceling appointments is another. Reading email is one thing. Sending email as you is another.

3. Make the first tasks reversible.

Have it organize files. Research something. Draft a document. Find information.
Don’t start with:
“Here are my credentials. Run my company.”

This sounds obvious.
It apparently isn’t.

The real AI agent arms race

The next phase of AI isn’t going to be about who has the smartest chatbot.
It’s going to be about who can safely give software more autonomy. That’s a much harder engineering problem. An LLM generating bad text is annoying.

An agent sending the wrong email is embarrassing.
An agent leaking your credentials, deleting production data, purchasing something expensive or falling for a prompt injection is an incident. And as agents become more capable, the distinction between “AI feature” and “employee with a laptop” starts to disappear.

That’s why I’m paying less attention to agent benchmark scores and more attention to boring things like:

• Where does it run?
• What is the security boundary?
• What credentials does it get?
• What happens when it is compromised?
• Can I stop/undo it?
• Can I take my data and move somewhere else?

Those questions aren’t nearly as sexy as a demo where an AI books your entire vacation.
But they are the questions that will matter when the agent is running your business at 2:00 AM.

The future of AI agents isn’t just about making them smarter.
It’s about making them safe enough to let them work while we’re asleep.

Rate this:

AI Agents Are Getting Powerful. What Can They Do For You?

The AI agent market has officially entered the awkward teenage years.
The demos are impressive. Agents can browse the web, send email, fill out forms, write documents, book travel, run code, manage files, and operate software that doesn’t even have an API.
They can also do things you absolutely did not intend them to do.

That is the part of the story that gets considerably less screen time.

Over the last year, we went from “AI that answers questions” to “AI that can actually do stuff.”
OpenClaw, Muse, Grok Bot, Claude Cowork, ChatGPT Work, Gemini Spark, Manus and Hermes Agent all take slightly different approaches to the same fundamental problem:

How much autonomy are you willing to give software that can act as you?

And that turns out to be a much more interesting question than which model scores highest on a benchmark.

The new AI benchmark is blast radius

For years, we compared AI models on intelligence.

How well does it code?
How well does it reason?
How well does it summarize a 200-page PDF?

With agents, the question changes.

An agent doesn’t just generate an answer.
It gets credentials, opens a browser, reads your files, sends messages, executes commands and potentially spends your money.

So the important question becomes:

What happens when the agent makes a mistake—or gets tricked?

This is where the current crop of agents diverges dramatically.

Some are designed around containment. They run inside isolated virtual machines, use surrogate credentials and require approval before consequential actions.

Others essentially say: “Here is a very powerful AI. Good luck.”

That distinction matters more than whether Agent A is 7% better at a benchmark than Agent B.

OpenClaw: Give the AI a computer (and hope for the best)

OpenClaw is probably the most interesting agent in the category—and also the one that makes security people reach for their blood-pressure medication.

It is open source, MIT licensed, model agnostic and extremely flexible. It runs on your machine, works through messaging platforms such as Signal, Telegram, Discord and WhatsApp, can execute shell commands, manipulate files, run scripts and remember things across sessions.

In other words, it doesn’t just talk to you.
It operates your computer.
That is exactly why people love it. It is also exactly why it is dangerous.

OpenClaw’s permissions are largely your permissions. If you give it access to your machine, accounts and credentials, a successful prompt injection can potentially turn into a very large incident.

And the security history is not theoretical.

Koi Security reported 341 malicious skills in an audit of 2,857 ClawHub skills. Cisco researchers demonstrated malicious skills capable of data exfiltration. OpenClaw also had a one-click remote-code-execution vulnerability, CVE-2026-25253. Then there is the particularly uncomfortable detail: OpenClaw 2.0 shipped with its new sandbox disabled by default, while secrets were stored unencrypted at rest.

This is the classic open-source tradeoff:
You get enormous power and control.
You also inherit the responsibility for making that power safe.

For an experienced engineer running OpenClaw inside a properly isolated environment with a dedicated account?
Interesting.
For your parents, your finance team or the average person who thinks Docker is a brand of whale?
Probably not.

Muse: What if we actually designed the agent around security?

Meta’s Muse takes almost the opposite approach.
Instead of giving an agent access to your computer and asking you to figure out the security model, Muse starts with containment.
Every user gets a dedicated Secure VM.
A separate Sentinel system controls what can leave that environment.
Muse uses surrogate credentials instead of exposing your actual credentials to the agent.

And when something consequential happens—such as sending an email or completing a purchase—it asks for approval.
The architecture can essentially be summarized as:

Muse proposes. Sentinel permits.

That is a much more interesting security model than simply adding another confirmation dialog to an otherwise unrestricted agent.
Muse can handle the consumer tasks people actually want from an agent: email, travel, bills, forms and purchases.
The catch is that Muse is brand new.

It launched in September 2026. The security architecture looks compelling on paper, but independent validation is still limited. It is also US-only, Meta-operated and cannot be self-hosted.

And there is another uncomfortable question:
Are you more comfortable giving an AI agent your credentials—or giving Meta a complete picture of your digital life?

That’s not a technical question.
That’s a trust question.

Grok Bot: The agent that wants to be your employee

Grok Bot takes yet another approach.
Instead of writing integrations, you can teach it what to do by recording yourself performing a task.

Do it once.
The Bot learns the workflow.
Then it can repeat it.
This is potentially huge.

A lot of business software still exists behind terrible web interfaces with no API. If an AI can operate a browser like a human, suddenly all those ancient internal dashboards become automatable.

But there is a catch.
Actually, several.

Grok Bot uses one shared computer per account. Multiple Bots can access the same browser sessions, files and logins. That means your Bots are not really security boundaries from each other. And the documentation itself is unusually candid about this.
The security boundary is the account—not the individual Bot.

That’s a big deal.

Imagine giving five employees access to the same laptop, browser cookies, downloads folder and logged-in applications.
Now replace those employees with autonomous software.
That’s roughly the model.
Grok Bot is also very new, has little independent testing, doesn’t yet have the promised audit view, and its underlying model isn’t clearly identified for benchmarking.

It may turn out to be fantastic.
Right now, there simply isn’t enough evidence to know.

The ‘boring agents’ may actually be the interesting ones

The flashy new agents get the headlines, but the established players are taking a more conservative path.

Claude Cowork

Claude Cowork is essentially the “I want an agent, but I don’t want it owning my entire laptop” option.
It uses narrow permissions and can be limited to specific folders. It’s particularly useful for documents and office work, with integrations across services such as Google Workspace, Notion, Asana, Box and Canva.

The downside is familiar: usage limits, uneven connector support and some early rough edges.
But the philosophy is sensible:

Give the agent access to the thing it needs, not everything you own.

That should not be revolutionary.
Unfortunately, in 2026, it still is.

ChatGPT Work

ChatGPT Work is positioned around the office-deliverables problem: documents, spreadsheets, presentations, research and multi-step workflows. It also has approval mechanisms for consequential actions and stronger data controls on business and enterprise plans. Its biggest problem isn’t necessarily capability.
It’s packaging.

The terminology and plan boundaries are confusing enough that you should check the current product documentation before assuming a particular feature is included in your plan.
The underlying idea, however, is straightforward: let the agent do the boring work while keeping humans in the loop for important decisions.

Gemini Spark

If your digital life is Gmail, Google Docs, Sheets, Calendar and Slides, Gemini Spark is the obvious ecosystem play.
It gets deep access to Google’s products, supports additional connectors and can operate continuously from Google’s cloud infrastructure.
The tradeoff is also obvious.
The more deeply an agent is connected to your digital life, the more complete a picture it has of your life.

An AI reading your Gmail is useful.
An AI reading your Gmail, calendar, documents, files and browsing activity 24/7 is something else entirely.
Convenience and data concentration are becoming inseparable.

Manus: The agent that can build things, until it decides it is done

Manus is particularly good at one-off deliverables.
Research reports.
Presentations.
Websites.
Complex research tasks.

It runs inside a cloud sandbox with browsers, files and code and can parallelize work across many tasks.
The problem is reliability. Users have reported loops, tasks marked complete without producing what they expected and credits being consumed regardless of whether the result was useful. And Manus has had a particularly strange ownership story, including a proposed Meta acquisition, regulatory intervention and subsequent operational changes. That makes Manus an interesting product to use—but also a good reminder of something we don’t talk about enough:

Your agent is a dependency.
If an agent is deeply embedded in your workflow, what happens when its pricing changes?

Or ownership changes?
Or the company disappears?
Or your credits expire?
Agent portability is going to become a real enterprise concern.

Hermes: OpenClaw without quite as much chaos

Hermes Agent is the open-source alternative for people who want control without necessarily wanting the entire OpenClaw ecosystem. It is MIT licensed, self-hosted and supports a large number of communication channels. Its most interesting feature is the learning loop. Instead of simply remembering what you told it, Hermes can create reusable skills and refine them based on feedback. The tradeoff is that you become the platform team.

You have to maintain it. You have to pay for the model APIs.
You have to build the sandbox. You have to decide what credentials it gets. You have to debug it when something breaks. The software may be free.
Your time isn’t.

So which one should you use?