FediSecfeeds

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260821 #cisa20260821 #cve_2026_69836 #cve_2026_73570 #cve202669836 #cve202673570

##

secdb at 2026-08-21T19:00:10.468Z ##

🚨 [CISA-2026:0821] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-69836 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69836)
- Name: Microsoft Entra ID Deserialization of Untrusted Data Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Entra ID
- Notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-69836

⚠️ CVE-2026-73570 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-73570)
- Name: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Synacor
- Product: Zimbra Collaboration Suite (ZCS)
- Notes: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-73570

##

cR0w at 2026-08-21T17:04:39.206Z ##

CVE-2026-69836 was added to the KEV. It was published yesterday by Microsoft:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836

Microsoft says:

Publicly disclosed: No
Exploited: No
Exploitability assessment: Exploitation Less Likely

and

This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.

So does this mean that Microsoft was made aware by a third party that it was EITW? Because presumably it was exploited before it was published if no action is needed by the customer and Microsoft doesn't list it as EITW.

Edit: I now see this revision in the advisory:

Corrected Exploited to No. This vulnerability was not exploited in the wild. This is an informational change only.

So I assume that because it was incorrectly listed as EITW it ended up in the KEV. But now they say it wasn't EITW. Which is it? That's kind of important you fucking sloppy ass clanker fuckers.

##

cisakevtracker@mastodon.social at 2026-08-21T17:00:49.000Z ##

CVE ID: CVE-2026-69836
Vendor: Microsoft
Product: Entra ID
Date Added: 2026-08-21
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-69836

##

benzogaga33@mamot.fr at 2026-08-21T15:40:03.000Z ##

Entra ID : une faille critique a été exploitée, mais vous n’avez rien à patcher https://www.it-connect.fr/entra-id-cve-2026-69836-faille-cvss-10-exploitee/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Microsoft #EntraID

##

CapTechGroup@mastodon.social at 2026-08-21T12:52:36.000Z ##

A maximum-severity CVSS 10.0 flaw in Microsoft Entra ID is under active exploitation, allowing remote code execution. Two CVEs are in play, CVE-2026-68820 and CVE-2026-69836, with activity attributed to the Lazarus Group.

https://captechgroup.com/threat-intelligence-center/microsoft-entra-id-flaw-cve-2026-68820-exploited-f-894873?utm_source=mastodon&utm_medium=social&utm_campaign=threat_intel&utm_content=microsoft-entra-id-flaw-cve-2026-68820-exploited-for-remote-code-execution

##

cyberworldops at 2026-08-21T12:20:00.667Z ##

A critical deserialization vulnerability (CVE-2026-69836) has been actively exploited in Microsoft Entra ID. The flaw could allow unauthorized access to identity and access management functions across Azure, M365, and Dynamics CRM Online.

#CriticalVulnerability #MicrosoftEntra #IdentitySecurity #Deserialization

https://cyberworldops.eu/en/cve-2026-69836-critical-vulnerability-exploited-in-microsoft-entra-id

##

tugatech@masto.pt at 2026-08-21T12:07:17.000Z ##

Microsoft corrige falha crítica no Entra ID, uma vulnerabilidade que permitia a execução de código malicioso sem privilégios. A falha, classificada como CVE-2026-69836, já foi explorada em ataques informáticos. 🛡️

🔗 https://tugatech.com.pt/t89674-microsoft-corrige-falha-critica-no-entra-id-ja-explorada-em-ataques-informaticos

#falha #microsoft

##

Analyst207@mastodon.social at 2026-08-21T11:25:44.000Z ##

Microsoft patches exploited Entra ID flaw amid rising attacks

Microsoft has patched a critical vulnerability in its Entra ID platform, known as CVE-2026-69836, which allowed attackers to execute code remotely with ease, and has already been exploited in recent attacks. This flaw enabled unauthorized threat actors to gain control and wreak havoc, making swift action crucial to prevent…

https://osintsights.com/microsoft-patches-exploited-entra-id-flaw-amid-rising-attacks?utm_source=mastodon&utm_medium=social

#MicrosoftEntraId #IdentityManagement #Cve202669836 #ZeroDay #EmergingThreats

##

teezeh@ieji.de at 2026-08-22T07:18:36.000Z ##

“Microsoft warned on Aug. 20 that a maximum-severity deserialization flaw in Entra ID was actively exploited.

In releasing a patch for CVE-2026-69836, Microsoft said it had already fully mitigated the vulnerability, so there’s no further action for Entra ID users to take.”

https://www.scworld.com/news/microsoft-patches-flaw-in-entra-id-identity-software

##

ottoto2017@prattohome.com at 2026-08-22T05:43:19.000Z ##

「マイクロソフトが警鐘を鳴らす、Entra IDの完全な欠陥が攻撃を受けている
/マイクロソフトはクラウドIDのバグは既に修正済みだと述べているが、誰がどの程度悪用したのかは明らかにしていない。」： #TheRegister

「マイクロソフトは、攻撃者が既に悪用していたEntra IDの深刻度が最大レベルの脆弱性を修正した。

CVE-2026-69836として追跡されているこの脆弱性は、CVSSスコアが最高値の10.0であり、認証されていない攻撃者がMicrosoftのクラウドIDサービス上でリモートからコードを実行できる可能性がある。Microsoft は木曜日にこの脆弱性を公表し、既に悪用が確認されているという残念なニュースも同時に発表した。

Entra ID（旧称Azure Active Directory）は、マイクロソフトのお客様向けIDおよびアクセス管理の中核を担い、クラウドアプリケーションやその他の企業リソースへの認証とアクセスを管理します。」

https://www.theregister.com/cyber-crime/2026/08/21/microsoft-sounds-alarm-as-perfect-10-entra-id-flaw-comes-under-attack/5290925

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260821 #cisa20260821 #cve_2026_69836 #cve_2026_73570 #cve202669836 #cve202673570

##

secdb@infosec.exchange at 2026-08-21T19:00:10.000Z ##

🚨 [CISA-2026:0821] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-69836 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69836)
- Name: Microsoft Entra ID Deserialization of Untrusted Data Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Entra ID
- Notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-69836

⚠️ CVE-2026-73570 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-73570)
- Name: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Synacor
- Product: Zimbra Collaboration Suite (ZCS)
- Notes: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-73570

##

cR0w@infosec.exchange at 2026-08-21T17:04:39.000Z ##

CVE-2026-69836 was added to the KEV. It was published yesterday by Microsoft:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836

Microsoft says:

Publicly disclosed: No
Exploited: No
Exploitability assessment: Exploitation Less Likely

and

This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.

So does this mean that Microsoft was made aware by a third party that it was EITW? Because presumably it was exploited before it was published if no action is needed by the customer and Microsoft doesn't list it as EITW.

Edit: I now see this revision in the advisory:

Corrected Exploited to No. This vulnerability was not exploited in the wild. This is an informational change only.

So I assume that because it was incorrectly listed as EITW it ended up in the KEV. But now they say it wasn't EITW. Which is it? That's kind of important you fucking sloppy ass clanker fuckers.

##

cisakevtracker@mastodon.social at 2026-08-21T17:00:49.000Z ##

CVE ID: CVE-2026-69836
Vendor: Microsoft
Product: Entra ID
Date Added: 2026-08-21
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-69836

##

benzogaga33@mamot.fr at 2026-08-21T15:40:03.000Z ##

Entra ID : une faille critique a été exploitée, mais vous n’avez rien à patcher https://www.it-connect.fr/entra-id-cve-2026-69836-faille-cvss-10-exploitee/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Microsoft #EntraID

##

cyberworldops@infosec.exchange at 2026-08-21T12:20:00.000Z ##

A critical deserialization vulnerability (CVE-2026-69836) has been actively exploited in Microsoft Entra ID. The flaw could allow unauthorized access to identity and access management functions across Azure, M365, and Dynamics CRM Online.

#CriticalVulnerability #MicrosoftEntra #IdentitySecurity #Deserialization

https://cyberworldops.eu/en/cve-2026-69836-critical-vulnerability-exploited-in-microsoft-entra-id

##

tugatech@masto.pt at 2026-08-21T12:07:17.000Z ##

Microsoft corrige falha crítica no Entra ID, uma vulnerabilidade que permitia a execução de código malicioso sem privilégios. A falha, classificada como CVE-2026-69836, já foi explorada em ataques informáticos. 🛡️

🔗 https://tugatech.com.pt/t89674-microsoft-corrige-falha-critica-no-entra-id-ja-explorada-em-ataques-informaticos

#falha #microsoft

##

ottoto2017@prattohome.com at 2026-08-21T07:08:22.000Z ##

「Microsoft Entra IDの脆弱性（CVSS 10.0）が実際に悪用され、リモートコード実行が可能になる」： #TheHackerNews

「マイクロソフトは木曜日、Entra IDに重大なセキュリティ上の欠陥があり、既に悪用されていると警告したが、顧客による対応は不要であると述べた。

CVE-2026-69836 （CVSSスコア：10.0）として追跡されているこの脆弱性は、リモートコード実行によって、このテクノロジー大手企業のクラウドベースのIDおよびアクセス管理サービスに影響を与える事例です。このサービスは以前はAzure Active DirectoryまたはAzure ADと呼ばれていました。

マイクロソフトは木曜日に発表した警告の中で、「Microsoft Entra IDにおける信頼できないデータの逆シリアル化により、権限のない攻撃者がネットワーク上でコードを実行できる可能性がある」と述べた。」

https://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html

#CVE202669836 #EntraID #RemoteCodeExecution #Microsoft #CloudSecurity #RCE

##

DailyCyberSecurity@infosec.exchange at 2026-08-21T02:29:49.000Z ##

CVE-2026-69836, a CVSS 10 Entra ID remote code execution flaw, was exploited in the wild. Microsoft has fully mitigated it server-side.

https://securityonline.info/cve-2026-69836-entra-id-rce/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-47827
(7.5 HIGH)

EPSS: 1.96%

updated 2026-08-22T04:17:47.820000

2 posts

Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities

thehackerwire@mastodon.social at 2026-08-23T09:00:17.000Z ##

🟠 CVE-2026-47827 - High (7.5)

Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47827/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-23T09:00:17.000Z ##

🟠 CVE-2026-47827 - High (7.5)

Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47827/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-19883
(8.8 HIGH)

EPSS: 0.37%

updated 2026-08-22T03:31:33

2 posts

The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the wpematico_import_settings function in all versions up to, and including, 2.8.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to update arbitrary options on the WordPress

thehackerwire@mastodon.social at 2026-08-22T03:59:57.000Z ##

🟠 CVE-2026-19883 - High (8.8)

The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the wpematico_import_settings function in all versions up to, and inc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19883/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T03:59:57.000Z ##

🟠 CVE-2026-19883 - High (8.8)

The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the wpematico_import_settings function in all versions up to, and inc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19883/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-34948
(7.7 HIGH)

EPSS: 0.23%

updated 2026-08-21T23:16:24.153000

2 posts

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This issue has been fixed in version 3.2.3.

thehackerwire@mastodon.social at 2026-08-22T00:00:16.000Z ##

🟠 CVE-2026-34948 - High (7.7)

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This issue has been fixed in version 3.2.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34948/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T00:00:16.000Z ##

🟠 CVE-2026-34948 - High (7.7)

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This issue has been fixed in version 3.2.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34948/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-62867
(9.9 CRITICAL)

EPSS: 0.52%

updated 2026-08-21T22:16:41.900000

2 posts

Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-provided `block.create_options` in storage volume configuration leads to argument injection in the constructed filesystem creation command line. This allows a project-scoped user to inject arbitrary arguments into the binary executed as root. Version 7.3.0 patches the issue.

thehackerwire@mastodon.social at 2026-08-22T10:00:33.000Z ##

🔴 CVE-2026-62867 - Critical (9.9)

Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-provided `block.create_options` in storage volume configuration leads to argument injection in the constructed filesystem creation command...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62867/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T10:00:33.000Z ##

🔴 CVE-2026-62867 - Critical (9.9)

Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-provided `block.create_options` in storage volume configuration leads to argument injection in the constructed filesystem creation command...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62867/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-54071
(7.8 HIGH)

EPSS: 0.14%

updated 2026-08-21T22:16:40.203000

2 posts

BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB._load_data() loads CMap files. PDF-controlled Encoding or CMapName values and embedded PostScript usecmap operators can reach this sink after path separators are decoded, while _normalize_cmap_name() removes only a leading slash. Abso

thehackerwire@mastodon.social at 2026-08-21T20:00:43.000Z ##

🟠 CVE-2026-54071 - High (7.8)

BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB._load_data() loads CMap files. PDF-controlled Encoding or CMapName values and emb...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54071/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T20:00:43.000Z ##

🟠 CVE-2026-54071 - High (7.8)

BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB._load_data() loads CMap files. PDF-controlled Encoding or CMapName values and emb...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-54071/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-48755
(9.9 CRITICAL)

EPSS: 0.44%

updated 2026-08-21T22:16:37.973000

2 posts

Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided backup compression algorithm leads to argument injection in the constructed command line. This leads to an arbitrary file write on the host, possibly leading to arbitrary command execution. Version 7.1.0 patches the issue.

thehackerwire@mastodon.social at 2026-08-23T01:01:24.000Z ##

🔴 CVE-2026-48755 - Critical (9.9)

Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided backup compression algorithm leads to argument injection in the constructed command line. This leads to an arbitrary file write o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48755/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-23T01:01:24.000Z ##

🔴 CVE-2026-48755 - Critical (9.9)

Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided backup compression algorithm leads to argument injection in the constructed command line. This leads to an arbitrary file write o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48755/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-34741
(8.6 HIGH)

EPSS: 0.45%

updated 2026-08-21T22:16:37.143000

2 posts

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3.

thehackerwire@mastodon.social at 2026-08-21T23:01:12.000Z ##

🟠 CVE-2026-34741 - High (8.6)

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34741/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T23:01:12.000Z ##

🟠 CVE-2026-34741 - High (8.6)

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34741/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-76017
(8.8 HIGH)

EPSS: 0.47%

updated 2026-08-21T21:31:48

1 posts

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

DailyCyberSecurity@infosec.exchange at 2026-08-20T20:50:32.000Z ##

Google patches CVE-2026-76017, a critical use-after-free in Chrome, among 7 security fixes. Update to 151.0.7922.173 or later now.

#Chrome #CVE #UseAfterFree #Google #BrowserSecurity #InfoSec #PatchNow

https://securityonline.info/chrome-cve-2026-76017/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-77811
(8.7 HIGH)

EPSS: 0.37%

updated 2026-08-21T21:17:08.903000

2 posts

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset with arbitrary web content.

thehackerwire@mastodon.social at 2026-08-21T22:00:00.000Z ##

🟠 CVE-2026-77811 - High (8.7)

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other user...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77811/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T22:00:00.000Z ##

🟠 CVE-2026-77811 - High (8.7)

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other user...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77811/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-77647
(9.8 CRITICAL)

EPSS: 0.81%

updated 2026-08-21T21:17:08.777000

3 posts

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of <?php blocks, and var_export's mishandling of certain cases such as presence of a '<' character.

netsecio@mastodon.social at 2026-08-21T17:46:07.000Z ##

📰 Critical RCE Flaw in SPIP CMS Under Active Exploitation

🚨 Critical RCE vulnerability (CVE-2026-77647, CVSS 9.8) in SPIP CMS is under active exploitation. The unauthenticated flaw allows full server takeover. All versions before 4.4.20 are vulnerable. #SPIP #RCE #Vulnerability #PatchNow

🔗 https://cyber.netsecops.io/articles/critical-rce-flaw-in-spip-cms-cve-2026-77647-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

##

DailyCyberSecurity@infosec.exchange at 2026-08-21T02:49:11.000Z ##

CVE-2026-77647, a CVSS 9.8 unauthenticated RCE in SPIP before 4.4.20, is exploited in the wild. Update now.

updated 2026-08-21T21:17:06.320000

3 posts

kin-openapi is a Go project for handling OpenAPI files. From 0.10.0 until 0.141.0, openapi3filter.convertParseError in openapi3filter/validation_error_encoder.go dereferences e.Parameter.In without checking whether e.Parameter is nil. A malformed non-string scalar field in a multipart/form-data request body produces a nested ParseError with a nil RequestError.Parameter, and applications that rende

hugovalters@mastodon.social at 2026-08-22T11:08:04.000Z ##

CVE-2026-76905 - Unpatched DoS in kin-openapi. Malformed multipart request triggers nil pointer panic in error handling. CVSS 7.5. No fix yet - monitor for updates and apply workarounds. #CVE #infosec #Go

https://www.valtersit.com/cve/CVE-2026-76905/

##

thehackerwire@mastodon.social at 2026-08-21T22:00:22.000Z ##

🟠 CVE-2026-76905 - High (7.5)

kin-openapi is a Go project for handling OpenAPI files. From 0.10.0 until 0.141.0, openapi3filter.convertParseError in openapi3filter/validation_error_encoder.go dereferences e.Parameter.In without checking whether e.Parameter is nil. A malformed ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76905/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T22:00:22.000Z ##

🟠 CVE-2026-76905 - High (7.5)

kin-openapi is a Go project for handling OpenAPI files. From 0.10.0 until 0.141.0, openapi3filter.convertParseError in openapi3filter/validation_error_encoder.go dereferences e.Parameter.In without checking whether e.Parameter is nil. A malformed ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76905/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-63421
(7.5 HIGH)

EPSS: 0.47%

updated 2026-08-21T21:17:01.643000

2 posts

Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake, allowing a remote unauthenticated GraphQL client to provide a negative take value whose magnitude exceeds the configured bound. The bypass also applies to relationship queries and can return mo

thehackerwire@mastodon.social at 2026-08-22T01:00:27.000Z ##

🟠 CVE-2026-63421 - High (7.5)

Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake, allowing a remote unauthenticated GraphQ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63421/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T01:00:27.000Z ##

🟠 CVE-2026-63421 - High (7.5)

Keystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in packages/core/src/lib/core/queries/resolvers.ts compares the signed take argument directly with graphql.maxTake, allowing a remote unauthenticated GraphQ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63421/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-61824
(8.2 HIGH)

EPSS: 0.23%

updated 2026-08-21T21:17:01.017000

2 posts

Defuddle cleans up HTML pages. Prior to 0.19.1, site extractors interpolate page-derived image alt and src values, og:image values, and video descriptions into HTML strings without context-appropriate escaping, and buildExtractorResponse() returns this contentHtml without the main pipeline's DOM-based sanitization. The affected paths include src/extractors/x-article.ts, src/extractors/substack.ts,

thehackerwire@mastodon.social at 2026-08-22T00:01:05.000Z ##

🟠 CVE-2026-61824 - High (8.2)

Defuddle cleans up HTML pages. Prior to 0.19.1, site extractors interpolate page-derived image alt and src values, og:image values, and video descriptions into HTML strings without context-appropriate escaping, and buildExtractorResponse() returns...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61824/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T00:01:05.000Z ##

🟠 CVE-2026-61824 - High (8.2)

Defuddle cleans up HTML pages. Prior to 0.19.1, site extractors interpolate page-derived image alt and src values, og:image values, and video descriptions into HTML strings without context-appropriate escaping, and buildExtractorResponse() returns...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61824/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-30890
(8.0 HIGH)

EPSS: 0.23%

updated 2026-08-21T21:16:57.103000

2 posts

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the synchro import script. This issue has been fixed in version 3.2.3.

thehackerwire@mastodon.social at 2026-08-22T03:02:20.000Z ##

🟠 CVE-2026-30890 - High (8)

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the synchro import script. This issue has been fixed in version 3.2.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30890/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T03:02:20.000Z ##

🟠 CVE-2026-30890 - High (8)

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the synchro import script. This issue has been fixed in version 3.2.3.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30890/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-18290
(7.8 HIGH)

EPSS: 0.26%

updated 2026-08-21T21:16:55.823000

1 posts

OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OGG fil

hugovalters@mastodon.social at 2026-08-21T12:07:43.000Z ##

CVE-2026-18290 - RCE in OriginLab OriginPro via OGG parsing. Out-of-bounds write leads to arbitrary code execution. CVSS 7.8. No patch yet; avoid opening untrusted OGG files. #CVE #OriginPro #infosec

https://www.valtersit.com/cve/CVE-2026-18290/

##

CVE-2026-77414(CVSS UNKNOWN)

EPSS: 0.35%

updated 2026-08-21T20:58:02

2 posts

Before JSONata `2.2.1` and `1.8.8` it was possible to execute arbitrary code with crafted expressions, due to a bypassable `hasOwnProperty` check in `environment.lookup` https://github.com/jsonata-js/jsonata/blob/8ee4476f8a228bfc7a62979ae0a9c13a4043cd03/src/jsonata.js#L1863-L1871 This was fixed in https://github.com/jsonata-js/jsonata/pull/799 (https://github.com/jsonata-js/jsonata/pull/799/files

offseq at 2026-08-22T03:00:24.208Z ##

CRITICAL: CVE-2026-77414 in jsonata-js (<1.8.8, <2.2.1) enables remote code execution via code injection (CWE-94). Update to 1.8.8/2.2.1 now. No workaround. Details: https://radar.offseq.com/threat/cve-2026-77414-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-js-jsonata-247817ff13af01bb #OffSeq #CVE202677414 #infosec #security

##

offseq@infosec.exchange at 2026-08-22T03:00:24.000Z ##

CRITICAL: CVE-2026-77414 in jsonata-js (<1.8.8, <2.2.1) enables remote code execution via code injection (CWE-94). Update to 1.8.8/2.2.1 now. No workaround. Details: https://radar.offseq.com/threat/cve-2026-77414-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-js-jsonata-247817ff13af01bb #OffSeq #CVE202677414 #infosec #security

##

CVE-2026-68508
(7.8 HIGH)

EPSS: 0.25%

updated 2026-08-21T20:57:32

2 posts

## Summary `hydra.utils.instantiate()` resolves and calls Python objects from config. If an application passes untrusted config to `instantiate()`, an attacker who controls `_target_` and its arguments can cause arbitrary code execution in the consuming process. Hydra is not a network service. Exploitation requires a consuming application, library, or user workflow to load attacker-controlled co

thehackerwire@mastodon.social at 2026-08-22T00:00:54.000Z ##

🟠 CVE-2026-68508 - High (7.8)

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate() resolves and calls Python objects selected by configuration through _resolve_target() in hydra/_internal/instantiate/_instantiate2.py, a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68508/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T00:00:54.000Z ##

🟠 CVE-2026-68508 - High (7.8)

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate() resolves and calls Python objects selected by configuration through _resolve_target() in hydra/_internal/instantiate/_instantiate2.py, a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-68508/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-63135
(8.2 HIGH)

EPSS: 0.23%

updated 2026-08-21T20:57:24

2 posts

### Summary YOURLS stores the HTTP `Referer` header for short URL redirects and later renders aggregated referrer domains in the per-link statistics page. An unauthenticated attacker can send a crafted `Referer` header to any existing short URL. When an authenticated administrator or stats-page viewer opens that short URL's statistics page, the crafted referrer is embedded into Google Charts Java

thehackerwire@mastodon.social at 2026-08-22T01:00:16.000Z ##

🟠 CVE-2026-63135 - High (8.2)

YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through yourls_get_referrer(), yourls_sanitize_url_safe(), and yourls_log_redirect(), then aggregates the value in y...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63135/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T01:00:16.000Z ##

🟠 CVE-2026-63135 - High (8.2)

YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through yourls_get_referrer(), yourls_sanitize_url_safe(), and yourls_log_redirect(), then aggregates the value in y...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63135/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-61539
(10.0 CRITICAL)

EPSS: 0.66%

updated 2026-08-21T20:56:39

4 posts

### Summary Xinference used Python's unsafe `eval()` function when parsing Llama3 tool-call output generated by a large language model. Because the model output can be influenced by attacker-controlled prompts sent to the chat completion API, a remote attacker can craft prompts that cause the model to return a Python expression. Xinference then evaluates that expression on the server while post-p

offseq at 2026-08-22T06:00:25.516Z ##

CVE-2026-61539: CRITICAL RCE in xorbitsai Xinference <=2.5.0 — attacker-controlled input reaches Python eval(), enabling unauthenticated code execution. Patch to 2.7.0. CVSS: 10.0 🛡️ https://radar.offseq.com/threat/cve-2026-61539-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-03188a31614e6f78 #OffSeq #CVE202661539 #infosec #remotecodeexecution

##

thehackerwire@mastodon.social at 2026-08-22T02:01:29.000Z ##

🔴 CVE-2026-61539 - Critical (10)

Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eval() in xinference/model/llm/tool_parsers/llama3_tool_parser.py and xin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61539/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-08-22T06:00:25.000Z ##

CVE-2026-61539: CRITICAL RCE in xorbitsai Xinference <=2.5.0 — attacker-controlled input reaches Python eval(), enabling unauthenticated code execution. Patch to 2.7.0. CVSS: 10.0 🛡️ https://radar.offseq.com/threat/cve-2026-61539-cwe-95-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-03188a31614e6f78 #OffSeq #CVE202661539 #infosec #remotecodeexecution

##

thehackerwire@mastodon.social at 2026-08-22T02:01:29.000Z ##

🔴 CVE-2026-61539 - Critical (10)

Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eval() in xinference/model/llm/tool_parsers/llama3_tool_parser.py and xin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-61539/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-64679
(8.1 HIGH)

EPSS: 0.38%

updated 2026-08-21T20:55:33

2 posts

### Summary Atlantis versions `>= 0.19.8` and `< 0.45.0` did not consistently validate user-controlled `workspace` values before using them to construct local workspace paths. A crafted workspace value containing path traversal segments could cause Atlantis to resolve workspace paths outside the intended per-pull workspace directory. In vulnerable versions or code paths, Atlantis could create, us

thehackerwire@mastodon.social at 2026-08-22T02:01:08.000Z ##

🟠 CVE-2026-64679 - High (8.1)

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From 0.19.8 until 0.45.0, Atlantis does not consistently validate user-controlled workspace values supplied through accepted repository-level...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64679/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T02:01:08.000Z ##

🟠 CVE-2026-64679 - High (8.1)

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From 0.19.8 until 0.45.0, Atlantis does not consistently validate user-controlled workspace values supplied through accepted repository-level...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-64679/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-76904
(9.8 CRITICAL)

EPSS: 0.43%

updated 2026-08-21T20:26:30

2 posts

### Summary An SQL Injection Vulnerability has been found when executing OGC Filters with PostGIS DataStore implementation: * `jsonArrayContains` function Requires PostGIS 12 or greater with a String or JSON field For PostGIS 12 and greater `jsonArrayContains(<column>, <pointer>, <value>)` function writes `<value>` into generated SQL without escaping. ### Patches * GeoTools 35.1 * GeoTo

1 repos

https://github.com/YonLiud/CVE-2026-76904

thehackerwire@mastodon.social at 2026-08-21T22:00:11.000Z ##

🔴 CVE-2026-76904 - Critical (9.8)

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore imple...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76904/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T22:00:11.000Z ##

🔴 CVE-2026-76904 - Critical (9.8)

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore imple...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76904/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-27462
(7.5 HIGH)

EPSS: 0.31%

updated 2026-08-21T20:16:33.870000

2 posts

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3.

thehackerwire@mastodon.social at 2026-08-21T21:01:09.000Z ##

🟠 CVE-2026-27462 - High (7.5)

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-27462/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T21:01:09.000Z ##

🟠 CVE-2026-27462 - High (7.5)

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-27462/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-41449
(7.8 HIGH)

EPSS: 0.64%

updated 2026-08-21T19:17:01.520000

2 posts

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can exploit this vulnerability through crafted evidence inputs, mounted images with hostile filenames, or

thehackerwire@mastodon.social at 2026-08-22T07:03:17.000Z ##

🟠 CVE-2026-41449 - High (7.8)

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as us...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41449/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T07:03:17.000Z ##

🟠 CVE-2026-41449 - High (7.8)

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as us...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41449/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-63462
(7.5 HIGH)

EPSS: 0.38%

updated 2026-08-21T19:14:39

2 posts

## Summary An unauthenticated `POST` to any OpenAPI-validated endpoint, including the anonymous `POST /edge/validate` and `POST /edge/issue-token`, crashes the entire Unleash server with one request body of deeply-nested JSON. When request-body validation fails, Unleash builds the error message by calling `JSON.stringify` on the raw offending value taken from the request body. A value nested a f

thehackerwire@mastodon.social at 2026-08-21T20:00:16.000Z ##

🟠 CVE-2026-63462 - High (7.5)

Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the shared OpenAPI validation error path in src/lib/error/bad-data-error.ts passes a raw request value from lodash.get to JSON.stringify in genericErrorMessag...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63462/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T20:00:16.000Z ##

🟠 CVE-2026-63462 - High (7.5)

Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the shared OpenAPI validation error path in src/lib/error/bad-data-error.ts passes a raw request value from lodash.get to JSON.stringify in genericErrorMessag...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63462/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-41451
(7.8 HIGH)

EPSS: 0.72%

updated 2026-08-21T18:35:08

2 posts

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings without escaping before execution via eval. Attackers can inject shell metacharacters such as command substitution syntax or semicolons throug

thehackerwire@mastodon.social at 2026-08-22T08:01:56.000Z ##

🟠 CVE-2026-41451 - High (7.8)

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are substituted directly into comma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41451/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T08:01:56.000Z ##

🟠 CVE-2026-41451 - High (7.8)

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are substituted directly into comma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41451/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-41450
(7.8 HIGH)

EPSS: 0.70%

updated 2026-08-21T18:35:07

2 posts

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function where foreach command output lines are substituted directly into command strings via sed without proper escaping before being evaluated with eval. Attackers can exploit this by crafting malicious filenames or artifact definitions containing shell metacharacters s

thehackerwire@mastodon.social at 2026-08-22T08:01:47.000Z ##

🟠 CVE-2026-41450 - High (7.8)

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function where foreach command output lines are substituted directly into command strings via sed without proper escapi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41450/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T08:01:47.000Z ##

🟠 CVE-2026-41450 - High (7.8)

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function where foreach command output lines are substituted directly into command strings via sed without proper escapi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-41450/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-39909
(8.1 HIGH)

EPSS: 0.77%

updated 2026-08-21T18:35:07

2 posts

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with attacker-controlled content. Attackers can send RPC requests to trigger re-execution of stored graphs with dangl

thehackerwire@mastodon.social at 2026-08-21T17:59:50.000Z ##

🟠 CVE-2026-39909 - High (8.1)

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39909/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T17:59:50.000Z ##

🟠 CVE-2026-39909 - High (8.1)

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced b...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39909/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-75932
(8.6 HIGH)

EPSS: 0.40%

updated 2026-08-21T18:35:02

3 posts

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth Client ID and Client Secret if the victim is using an OAuth provider.

hugovalters@mastodon.social at 2026-08-22T14:07:12.000Z ##

CVE-2026-75932 - Critical Jet Admin vuln: malicious app can hijack custom domain & steal OAuth secrets. CVSS 8.6. Unpatched — audit configs & block app creation. #CVE #JetAdmin #infosec

https://www.valtersit.com/cve/CVE-2026-75932/

##

thehackerwire@mastodon.social at 2026-08-21T17:00:47.000Z ##

🟠 CVE-2026-75932 - High (8.6)

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75932/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T17:00:47.000Z ##

🟠 CVE-2026-75932 - High (8.6)

Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75932/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-69502
(10.0 CRITICAL)

EPSS: 0.76%

updated 2026-08-21T18:35:01

3 posts

Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

hugovalters@mastodon.social at 2026-08-22T12:06:18.000Z ##

CVE-2026-69502 - Critical SSRF in Azure SQL DB allows privilege escalation. CVSS 10. Patch under review - update when available. #CVE #Azure #infosec

https://www.valtersit.com/cve/CVE-2026-69502/

##

thehackerwire@mastodon.social at 2026-08-21T17:00:55.000Z ##

🔴 CVE-2026-69502 - Critical (10)

Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69502/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T17:00:55.000Z ##

🔴 CVE-2026-69502 - Critical (10)

Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-69502/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-22681
(8.5 HIGH)

EPSS: 0.28%

updated 2026-08-21T18:35:01

2 posts

OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a crafted URL to /api/v1/resources, causing the server to issue outbound HEAD and GET requests with redirects enabled to loopback, RFC 1918, link-local, or cl

1 repos

https://github.com/pcrosby-1990/cip-security-poc

thehackerwire@mastodon.social at 2026-08-22T10:00:23.000Z ##

🟠 CVE-2026-22681 - High (8.5)

OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a cr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22681/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T10:00:23.000Z ##

🟠 CVE-2026-22681 - High (8.5)

OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a cr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22681/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-75501(CVSS UNKNOWN)

EPSS: 0.37%

updated 2026-08-21T18:34:56

2 posts

A vulnerability in the Calix EXOS firmware for the GS7 XGS (GS5239XG) residential router allows unauthenticated remote attackers to modify NAT port‑forwarding rules via the UPnP WANIPConnection service. The device exposes the MiniUPnPd control endpoint on the WAN interface on TCP port 5000 without access controls. A remote attacker can send crafted SOAP requests to add, delete, or enumerate port m

DailyCyberSecurity at 2026-08-21T16:32:05.916Z ##

CVE-2026-75501 exposes an unauthenticated UPnP service on Calix routers. Public details and PoC code show how attackers bypass NAT and firewall protections.

#CVE202675501 #Calix #UPnP #RouterSecurity #NAT #IoTSecurity

https://securityonline.info/cve-2026-75501-calix-upnp-nat-bypass/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-21T16:32:05.000Z ##

CVE-2026-75501 exposes an unauthenticated UPnP service on Calix routers. Public details and PoC code show how attackers bypass NAT and firewall protections.

#CVE202675501 #Calix #UPnP #RouterSecurity #NAT #IoTSecurity

https://securityonline.info/cve-2026-75501-calix-upnp-nat-bypass/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-73570
(8.9 HIGH)

EPSS: 1.04%

updated 2026-08-21T18:34:48

13 posts

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands a

1 repos

https://github.com/HORKimhab/CVE-2026-73570

youranonnewsirc@nerdculture.de at 2026-08-22T10:26:23.000Z ##

Geopolitical tensions rise as the US escalates economic pressure on Iran, which labels new sanctions as a "declaration of war". Ukraine faces critical missile shortages amid intensified Russian strikes. In technology, major investments continue in AI infrastructure, with Google backing Marvell's custom AI chips. Cybersecurity sees CISA adding a critical Zimbra vulnerability (CVE-2026-73570) to its KEV catalog and new banking Trojans actively exploited globally.

#AnonNews_irc #Cybersecurity #News

##

undercodenews@mastodon.social at 2026-08-22T09:14:19.000Z ##

Critical Zimbra Vulnerability Enters CISA’s KEV Catalog as Attackers Exploit Unauthenticated Remote Code Execution + Video

A New Warning for Zimbra Administrators A serious security warning is now hanging over organizations running Zimbra Collaboration Suite (ZCS). The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-73570 to its Known Exploited Vulnerabilities (KEV) catalog after Poland’s national cybersecurity response team confirmed…

https://undercodenews.com/critical-zimbra-vulnerability-enters-cisas-kev-catalog-as-attackers-exploit-unauthenticated-remote-code-execution-video/?utm_source=mastodon&utm_medium=jetpack_social

##

security_crawler_carl at 2026-08-22T06:16:36.079Z ##

🏆 New Achievement! Patch Notes: Server Owned by Community!

CHANGELOG v-Oh-No: ADDED — unauthenticated remote attackers executing arbitrary OS commands as the Zimbra user. ADDED — full control of your enterprise email server, courtesy of CVE-2026-73570. FIXED (by the developers, on July 20, in version 10.1.20) — the exact hole threat actors are currently crawling through, per Poland's CERT Polska. KNOWN ISSUE — you haven't patched yet.

The fix shipped over a month ago. (1/2)

##

secdb at 2026-08-21T19:00:10.468Z ##

🚨 [CISA-2026:0821] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-69836 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69836)
- Name: Microsoft Entra ID Deserialization of Untrusted Data Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Entra ID
- Notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-69836

⚠️ CVE-2026-73570 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-73570)
- Name: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Synacor
- Product: Zimbra Collaboration Suite (ZCS)
- Notes: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-73570

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260821 #cisa20260821 #cve_2026_69836 #cve_2026_73570 #cve202669836 #cve202673570

##

cisakevtracker@mastodon.social at 2026-08-21T17:01:04.000Z ##

CVE ID: CVE-2026-73570
Vendor: Synacor
Product: Zimbra Collaboration Suite (ZCS)
Date Added: 2026-08-21
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-73570

##

undercodenews@mastodon.social at 2026-08-21T10:44:35.000Z ##

Zimbra Under Attack: Critical CVE-2026-73570 Turns Internet-Facing Mail Servers Into High-Value Targets + Video

A Warning That Arrived Just 28 Days After the Patch A newly confirmed exploitation campaign against Zimbra Collaboration Suite is raising the pressure on organizations that operate their own email infrastructure. Poland’s national computer emergency response team, CERT Polska, has confirmed that attackers are actively exploiting CVE-2026-73570, a critical…

https://undercodenews.com/zimbra-under-attack-critical-cve-2026-73570-turns-internet-facing-mail-servers-into-high-value-targets-video/?utm_source=mastodon&utm_medium=jetpack_social

##

youranonnewsirc@nerdculture.de at 2026-08-22T10:26:23.000Z ##

Geopolitical tensions rise as the US escalates economic pressure on Iran, which labels new sanctions as a "declaration of war". Ukraine faces critical missile shortages amid intensified Russian strikes. In technology, major investments continue in AI infrastructure, with Google backing Marvell's custom AI chips. Cybersecurity sees CISA adding a critical Zimbra vulnerability (CVE-2026-73570) to its KEV catalog and new banking Trojans actively exploited globally.

#AnonNews_irc #Cybersecurity #News

##

security_crawler_carl@infosec.exchange at 2026-08-22T06:16:36.000Z ##

🏆 New Achievement! Patch Notes: Server Owned by Community!

CHANGELOG v-Oh-No: ADDED — unauthenticated remote attackers executing arbitrary OS commands as the Zimbra user. ADDED — full control of your enterprise email server, courtesy of CVE-2026-73570. FIXED (by the developers, on July 20, in version 10.1.20) — the exact hole threat actors are currently crawling through, per Poland's CERT Polska. KNOWN ISSUE — you haven't patched yet.

The fix shipped over a month ago. (1/2)

##

secdb@infosec.exchange at 2026-08-21T19:00:10.000Z ##

🚨 [CISA-2026:0821] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0821)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-69836 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-69836)
- Name: Microsoft Entra ID Deserialization of Untrusted Data Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Microsoft
- Product: Entra ID
- Notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-69836

⚠️ CVE-2026-73570 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-73570)
- Name: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Synacor
- Product: Zimbra Collaboration Suite (ZCS)
- Notes: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-73570

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260821 #cisa20260821 #cve_2026_69836 #cve_2026_73570 #cve202669836 #cve202673570

##

cisakevtracker@mastodon.social at 2026-08-21T17:01:04.000Z ##

CVE ID: CVE-2026-73570
Vendor: Synacor
Product: Zimbra Collaboration Suite (ZCS)
Date Added: 2026-08-21
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-73570

##

beyondmachines1@infosec.exchange at 2026-08-21T09:01:12.000Z ##

Critical Zimbra RCE Vulnerability Exploited in Global Attacks

Zimbra patched nine vulnerabilities in its Collaboration Suite, including a critical RCE flaw (CVE-2026-73570) that attackers are currently exploiting to take control of mail servers. Organizations should update to version 10.1.20 and check logs for signs of compromise.

**If you run Zimbra Collaboration Suite, update to version 10.1.20 ASAP. Attackers are already exploiting this to take over mail servers, and everything older is vulnerable. Because this flaw is being actively exploited, also check for signs of breach: look for unexpected files in `/opt/zimbra/jetty/webapps/` and `/tmp/`, and review `/var/log/zimbra.log` for services restarting on their own.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/critical-zimbra-rce-vulnerability-exploited-in-global-attacks-p-1-4-k-y/gD2P6Ple2L

##

cyberworldops@infosec.exchange at 2026-08-20T22:20:00.000Z ##

CVE-2026-73570 in Zimbra Collaboration Suite is under active exploitation. CERT Polska flagged real-world attacks this week. The flaw grants unauthenticated remote OS command execution when zimbra-snmp is installed with SNMP enabled. Attacker identity and campaign goals remain unknown — patch priority is critical for affected deployments.

#Zimbra #CVE202673570 #ThreatIntelligence #PatchNow

https://cyberworldops.eu/en/zimbra-cve-2026-73570-exploited-in-the-wild-who-needs-to-patch

##

cyberworldops@infosec.exchange at 2026-08-20T18:20:00.000Z ##

Active exploitation of CVE-2026-73570 in Zimbra Collaboration Suite is underway. The command injection flaw enables unauthenticated RCE on ZCS versions prior to 10.1.20 when zimbra-snmp is installed with SNMP notifications active. Attackers exploit this via crafted SMTP requests for full server compromise. Patch or disable SNMP immediately.

#ZimbraRCE #CVE202673570 #PatchNow

https://cyberworldops.eu/en/zimbra-vulnerability-exploited-to-enable-unauthenticated-remote

##

CVE-2026-77812
(0 None)

EPSS: 0.06%

updated 2026-08-21T18:16:52.527000

2 posts

DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone over BLE, including the Wi-Fi credentials. An attacker within BLE range can passively sniff this t

cR0w at 2026-08-21T18:55:25.711Z ##

Go hack more drone shit.

https://nvd.nist.gov/vuln/detail/CVE-2026-77812

##

cR0w@infosec.exchange at 2026-08-21T18:55:25.000Z ##

Go hack more drone shit.

https://nvd.nist.gov/vuln/detail/CVE-2026-77812

##

CVE-2026-55241
(7.5 HIGH)

EPSS: 0.44%

updated 2026-08-21T18:16:48.790000

2 posts

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to 3.9.1, the public POST /api/v1/auth/register route in server/src/api/routes/authRoutes.ts passes multipart profileImage uploads through in-memory Multer parsing before registration validation, without file-size, file

thehackerwire@mastodon.social at 2026-08-22T08:02:06.000Z ##

🟠 CVE-2026-55241 - High (7.5)

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to 3.9.1, the public POST /api/v1/auth/register route in server/sr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T08:02:06.000Z ##

🟠 CVE-2026-55241 - High (7.5)

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to 3.9.1, the public POST /api/v1/auth/register route in server/sr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-54789
(7.5 HIGH)

EPSS: 0.39%

updated 2026-08-21T18:16:48.680000

2 posts

mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of `mod_auth_openidc`. The issue is fixed in version 2.4.19.4 by stopping the scan at the string terminator so a val

thehackerwire@mastodon.social at 2026-08-21T17:01:06.000Z ##

🟠 CVE-2026-54789 - High (7.5)

mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds wr...

updated 2026-08-21T16:17:19.623000

2 posts

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new project. This issue could allow an attacker to access secrets in instances they are not authorized to access.

thehackerwire@mastodon.social at 2026-08-22T13:00:01.000Z ##

🟠 CVE-2026-55622 - High (7.7)

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-22T13:00:01.000Z ##

🟠 CVE-2026-55622 - High (7.7)

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-55622/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-48751
(9.9 CRITICAL)

EPSS: 0.70%

updated 2026-08-21T16:17:17.533000

2 posts

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as `raw.lxc` and `raw.qemu`. Version 7.2.0 patches the issue.

thehackerwire@mastodon.social at 2026-08-23T05:59:55.000Z ##

🔴 CVE-2026-48751 - Critical (9.9)

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48751/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-23T05:59:55.000Z ##

🔴 CVE-2026-48751 - Critical (9.9)

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48751/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-48749
(9.9 CRITICAL)

EPSS: 0.81%

updated 2026-08-21T16:17:17.413000

2 posts

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 fixes the issue.

thehackerwire@mastodon.social at 2026-08-23T02:00:28.000Z ##

🔴 CVE-2026-48749 - Critical (9.9)

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 fixes the is...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48749/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-23T02:00:28.000Z ##

🔴 CVE-2026-48749 - Critical (9.9)

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 fixes the is...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-48749/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-50112
(8.8 HIGH)

EPSS: 0.32%

updated 2026-08-21T15:33:15

2 posts

SSRF via Metalink Mirror URL Resolution: An authenticated tenant can register a template pointing to an attacker-controlled metalink file containing internal targets. The Secondary Storage VM will retrieve the data and persist it as a template file, which can later be downloaded through normal APIs. RCE on KVM hypervisor via NFS, Metalink files with/without Direct Downloads: An authenticated Cl

DailyCyberSecurity at 2026-08-21T15:57:22.657Z ##

Apache CloudStack patched 20 flaws. CVE-2026-50112, a critical bug, allows cross-tenant remote code execution as root on KVM hypervisor hosts.

#ApacheCloudStack #CVE202650112 #RCE #KVM #CloudSecurity #IaaS

https://securityonline.info/cve-2026-50112-cloudstack-rce/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-21T15:57:22.000Z ##

Apache CloudStack patched 20 flaws. CVE-2026-50112, a critical bug, allows cross-tenant remote code execution as root on KVM hypervisor hosts.

#ApacheCloudStack #CVE202650112 #RCE #KVM #CloudSecurity #IaaS

https://securityonline.info/cve-2026-50112-cloudstack-rce/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-77814
(7.5 HIGH)

EPSS: 0.41%

updated 2026-08-21T15:32:19

2 posts

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed a request for /data/images_private/secret.txt is treated as trusted and served by FileResponse, di

thehackerwire@mastodon.social at 2026-08-21T16:00:20.000Z ##

🟠 CVE-2026-77814 - High (7.5)

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator. A directory whose name merely begins with an allowed path therefore sati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77814/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T16:00:20.000Z ##

🟠 CVE-2026-77814 - High (7.5)

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator. A directory whose name merely begins with an allowed path therefore sati...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77814/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-77806
(9.8 CRITICAL)

EPSS: 0.79%

updated 2026-08-21T15:32:18

4 posts

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyse_resultat_skel.

thehackerwire@mastodon.social at 2026-08-23T07:00:30.000Z ##

🔴 CVE-2026-77806 - Critical (9.8)

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyse_resultat_skel.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77806/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

DailyCyberSecurity at 2026-08-21T16:59:33.307Z ##

CVE-2026-77806, a CVSS 9.8 SPIP unauthenticated RCE, is exploited in the wild. A public Metasploit module and full details are now available.

#CVE202677806 #SPIP #RCE #ExploitedInTheWild #Metasploit #CMS

https://securityonline.info/cve-2026-77806-spip-unauthenticated-rce/?utm_source=mastodon&utm_medium=jetpack_social

##

thehackerwire@mastodon.social at 2026-08-23T07:00:30.000Z ##

🔴 CVE-2026-77806 - Critical (9.8)

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyse_resultat_skel.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77806/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

DailyCyberSecurity@infosec.exchange at 2026-08-21T16:59:33.000Z ##

CVE-2026-77806, a CVSS 9.8 SPIP unauthenticated RCE, is exploited in the wild. A public Metasploit module and full details are now available.

#CVE202677806 #SPIP #RCE #ExploitedInTheWild #Metasploit #CMS

https://securityonline.info/cve-2026-77806-spip-unauthenticated-rce/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-77087
(9.6 CRITICAL)

EPSS: 0.40%

updated 2026-08-21T15:32:18

3 posts

Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated API requests and execute commands through the process adapter.

hugovalters@mastodon.social at 2026-08-21T17:06:05.000Z ##

CVE-2026-77087 - Critical RCE in Paperclip <0.3.1 via DNS rebinding. Host header validation flaw allows authenticated API abuse. CVSS 9.6. No patch yet - update when available. #CVE #infosec #Paperclip

https://www.valtersit.com/cve/CVE-2026-77087/

##

thehackerwire@mastodon.social at 2026-08-21T16:00:10.000Z ##

🔴 CVE-2026-77087 - Critical (9.6)

Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77087/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T16:00:10.000Z ##

🔴 CVE-2026-77087 - Critical (9.6)

Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77087/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-77815
(7.5 HIGH)

EPSS: 0.41%

updated 2026-08-21T15:32:18

2 posts

to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison performed by is_path_trusted in scripts/iib/api.py while pointing outside that directory, and FileResponse follows the link when serving the response, so a

thehackerwire@mastodon.social at 2026-08-21T16:00:31.000Z ##

🟠 CVE-2026-77815 - High (7.5)

to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison pe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77815/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T16:00:31.000Z ##

🟠 CVE-2026-77815 - High (7.5)

to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison pe...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77815/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-63125
(9.9 CRITICAL)

EPSS: 0.66%

updated 2026-08-21T15:16:46.427000

3 posts

Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user (a non-admin TLS/RBAC identity with `can_create_images` and `can_create_instances`) can execute arbitrary code as root on the host. A crafted image ships `backup.yaml` as a symlink to a host file. When the root daemon writes the instance's backup file, it follows the symlin

thehackerwire@mastodon.social at 2026-08-22T12:00:36.000Z ##

🔴 CVE-2026-63125 - Critical (9.9)

Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user (a non-admin TLS/RBAC identity with `can_create_images` and `can_create_instances`) can execute arbitrary code as root on...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63125/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

hugovalters@mastodon.social at 2026-08-21T18:03:44.000Z ##

CVE-2026-63125 – Critical RCE/privesc in Incus. Unprivileged user can execute code as root via symlink attack. CVSS 9.9. Patch to 7.3.0 immediately. #CVE #Incus #infosec

https://www.valtersit.com/cve/CVE-2026-63125/

##

thehackerwire@mastodon.social at 2026-08-22T12:00:36.000Z ##

🔴 CVE-2026-63125 - Critical (9.9)

Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user (a non-admin TLS/RBAC identity with `can_create_images` and `can_create_instances`) can execute arbitrary code as root on...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63125/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-77767
(7.5 HIGH)

EPSS: 0.36%

updated 2026-08-21T14:16:53.773000

2 posts

Reconmap's API applies a fallback authorization policy in apps/api/app/Program.cs that requires an authenticated user holding the administrator role, so controllers without their own attribute reject anonymous callers. The report preview action in apps/api/app/Controllers/ReportsController.cs carries [AllowAnonymous] and therefore opts out of that policy. PreviewReport loads the Project row named

thehackerwire@mastodon.social at 2026-08-23T07:00:41.000Z ##

🟠 CVE-2026-77767 - High (7.5)

Reconmap's API applies a fallback authorization policy in apps/api/app/Program.cs that requires an authenticated user holding the administrator role, so controllers without their own attribute reject anonymous callers. The report preview action in...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77767/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

updated 2026-08-21T12:30:41

2 posts

SiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall endpoints, allowing authenticated administrators to perform path traversal via directory traversal sequences. Attackers with admin access can write arbitrary files to any location via install operations or recursively delete directories via uninstall operations by supplying crafted packageName values.

thehackerwire@mastodon.social at 2026-08-23T07:00:53.000Z ##

🔴 CVE-2026-77086 - Critical (9.1)

SiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall endpoints, allowing authenticated administrators to perform path traversal via directory traversal sequences. Attackers with admin access can write ar...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-23T07:00:53.000Z ##

🔴 CVE-2026-77086 - Critical (9.1)

SiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall endpoints, allowing authenticated administrators to perform path traversal via directory traversal sequences. Attackers with admin access can write ar...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-77776
(9.1 CRITICAL)

EPSS: 0.34%

updated 2026-08-21T12:30:41

5 posts

Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai.py, including the chat completion and websocket paths, and nothing binds the value to the caller. A client can therefore name another user's identifier and read or write that user's stored LLM memory. The fix introduces a single r

hugovalters@mastodon.social at 2026-08-21T15:02:38.000Z ##

CVE-2026-77776 - Critical IDOR in Headroom LLM proxy. Spoof x-headroom-user-id to read/write other users' memory. CVSS 9.1. No patch yet - restrict access now. #CVE #Headroom #infosec

https://www.valtersit.com/cve/CVE-2026-77776/

##

thehackerwire@mastodon.social at 2026-08-21T14:00:24.000Z ##

🔴 CVE-2026-77776 - Critical (9.1)

Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai.py, including the chat completion and websocket paths, and nothing binds the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77776/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq at 2026-08-21T12:00:31.471Z ##

CRITICAL: CVE-2026-77776 in Headroom Labs Headroom (<0.36.1) allows unauth'd attackers to spoof x-headroom-user-id and access/modify any user's LLM memory. Default configs expose this via 0.0.0.0 binding. Restrict access & use auth tokens. https://radar.offseq.com/threat/cve-2026-77776-authorization-bypass-through-user-controlled-key-in-headroom-labs-headroom-0c2eff15c1a3dc1f #OffSeq #CVE #infosec #LLM

##

thehackerwire@mastodon.social at 2026-08-21T14:00:24.000Z ##

🔴 CVE-2026-77776 - Critical (9.1)

Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai.py, including the chat completion and websocket paths, and nothing binds the ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77776/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-08-21T12:00:31.000Z ##

CRITICAL: CVE-2026-77776 in Headroom Labs Headroom (<0.36.1) allows unauth'd attackers to spoof x-headroom-user-id and access/modify any user's LLM memory. Default configs expose this via 0.0.0.0 binding. Restrict access & use auth tokens. https://radar.offseq.com/threat/cve-2026-77776-authorization-bypass-through-user-controlled-key-in-headroom-labs-headroom-0c2eff15c1a3dc1f #OffSeq #CVE #infosec #LLM

##

CVE-2026-77683
(9.9 CRITICAL)

EPSS: 1.51%

updated 2026-08-21T12:30:37

4 posts

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

thehackerwire@mastodon.social at 2026-08-23T09:00:03.000Z ##

🔴 CVE-2026-77683 - Critical (9.9)

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone. The manipulation of the argument timestr results in command injection. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77683/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq at 2026-08-21T10:30:27.958Z ##

CVE-2026-77683: CRITICAL command injection in Comfast CF-N1-S (2.6.0.1) via /cgi-bin/mbox-config timestr parameter. Public exploit available, remote exploitation possible. Patch unavailable. https://radar.offseq.com/threat/cve-2026-77683-command-injection-in-comfast-cf-n1-s-c0a0594c5aac367d #OffSeq #CVE202677683 #IoTSecurity #CommandInjection

##

thehackerwire@mastodon.social at 2026-08-23T09:00:03.000Z ##

🔴 CVE-2026-77683 - Critical (9.9)

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone. The manipulation of the argument timestr results in command injection. ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77683/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

offseq@infosec.exchange at 2026-08-21T10:30:27.000Z ##

CVE-2026-77683: CRITICAL command injection in Comfast CF-N1-S (2.6.0.1) via /cgi-bin/mbox-config timestr parameter. Public exploit available, remote exploitation possible. Patch unavailable. https://radar.offseq.com/threat/cve-2026-77683-command-injection-in-comfast-cf-n1-s-c0a0594c5aac367d #OffSeq #CVE202677683 #IoTSecurity #CommandInjection

##

CVE-2026-77775
(8.6 HIGH)

EPSS: 0.36%

updated 2026-08-21T12:30:35

2 posts

Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. _resolve_openai_upstream_base in headroom/proxy/handlers/openai.py accepts the header value, requires only that it parse with an http or https scheme and a hostname, and returns it for use as the upstream base; _select_passthrough_base_url in headroom/providers/proxy_routes.py reads the

thehackerwire@mastodon.social at 2026-08-21T14:00:11.000Z ##

🟠 CVE-2026-77775 - High (8.6)

Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. _resolve_openai_upstream_base in headroom/proxy/handlers/openai.py accepts the header value, requires only that it parse with an http o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77775/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T14:00:11.000Z ##

🟠 CVE-2026-77775 - High (8.6)

Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. _resolve_openai_upstream_base in headroom/proxy/handlers/openai.py accepts the header value, requires only that it parse with an http o...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77775/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-59279
(7.5 HIGH)

EPSS: 0.39%

updated 2026-08-21T12:30:34

2 posts

The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server to accumulate an unbounded number of sessions over time, gradually exhausting available memory and ultimately causing a Denial of Service that affects al

thehackerwire@mastodon.social at 2026-08-21T14:00:36.000Z ##

🟠 CVE-2026-59279 - High (7.5)

The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59279/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

thehackerwire@mastodon.social at 2026-08-21T14:00:36.000Z ##

🟠 CVE-2026-59279 - High (7.5)

The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not require clients to be authenticated. As a result, a remote attacker can cause the server ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59279/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-72529
(9.8 CRITICAL)

EPSS: 0.78%

updated 2026-08-21T04:18:15.753000

10 posts

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.

security_crawler_carl at 2026-08-22T20:01:20.418Z ##

🏆 New Achievement! Port 4307 Is Not a Safe Harbor!

Conducting inventory audit on your TrueConf Server installation. Status: compromised. Line items include two unauthenticated RCE vulnerabilities — CVE-2026-72529 and CVE-2026-72530 — currently checked out under the name Head Mare, a hacktivist group who used them to swap a server file for a web shell and deploy PhantomCore malware. Item condition: cursed. (1/2)

##

threatnoir at 2026-08-22T17:05:48.623Z ##

⚠️ CRITICAL: CISA orders feds to patch actively exploited TrueConf Server flaws

Two critical unauthenticated RCE vulnerabilities (CVE-2026-72529, CVE-2026-72530) in TrueConf Server are being actively exploited by Head Mare group to deploy backdoor malware via trojanized installers. Any organization running TrueConf Server is at immediate risk of compromise.

🤖 AI generated summary

##

thecybermind at 2026-08-21T15:01:53.473Z ##

Critical Alert: CVE-2026-72529 allows unauthenticated command execution on TrueConf Servers. Our T-SUITE report maps the attack surface and provides immediate hardening steps to secure your perimeter. Read the full brief here. https://thecybermind.co/jily

##

security_crawler_carl@infosec.exchange at 2026-08-22T20:01:20.000Z ##

🏆 New Achievement! Port 4307 Is Not a Safe Harbor!

Conducting inventory audit on your TrueConf Server installation. Status: compromised. Line items include two unauthenticated RCE vulnerabilities — CVE-2026-72529 and CVE-2026-72530 — currently checked out under the name Head Mare, a hacktivist group who used them to swap a server file for a web shell and deploy PhantomCore malware. Item condition: cursed. (1/2)

##

threatnoir@infosec.exchange at 2026-08-22T17:05:48.000Z ##

⚠️ CRITICAL: CISA orders feds to patch actively exploited TrueConf Server flaws

Two critical unauthenticated RCE vulnerabilities (CVE-2026-72529, CVE-2026-72530) in TrueConf Server are being actively exploited by Head Mare group to deploy backdoor malware via trojanized installers. Any organization running TrueConf Server is at immediate risk of compromise.

#TrueConf #CVE #ExploitedInTheWild #PhantomCore #HeadMare #InfoSec #PatchNow

🤖 AI generated summary

##

thecybermind@infosec.exchange at 2026-08-21T15:01:53.000Z ##

Critical Alert: CVE-2026-72529 allows unauthenticated command execution on TrueConf Servers. Our T-SUITE report maps the attack surface and provides immediate hardening steps to secure your perimeter. Read the full brief here. https://thecybermind.co/jily

##

DailyCyberSecurity@infosec.exchange at 2026-08-20T21:30:12.000Z ##

CISA confirms two TrueConf Server flaws, CVE-2026-72529 and CVE-2026-72530, are exploited in the wild to deliver PhantomCore malware. Patch now.

https://securityonline.info/trueconf-cve-2026-72529-exploited/?utm_source=mastodon&utm_medium=jetpack_social

##

AAKL@infosec.exchange at 2026-08-20T20:15:43.000Z ##

CISA has added two known vulnerabilities to the KEV catalogue.

- CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72529

- CVE-2026-72530: TrueConf Server Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72530 #CISA

Yesterday:

Cisco:

CRITICAL: CVE-2026-20231, CVE-2026-20315, and CVE-2026-20317: Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP @TalosSecurity #Cisco #infosec #vulnerability

##

secdb@infosec.exchange at 2026-08-20T19:00:11.000Z ##

🚨 [CISA-2026:0820] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0820)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-72529 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-72529)
- Name: TrueConf Server Missing Authentication for Critical Function Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: TrueConf
- Product: Server
- Notes: https://trueconf.com/blog/news/security-fixes-updates-and-advisories ; https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-72529

updated 2026-08-21T00:31:24

4 posts

The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/updateCustomer/route.json, which causes the admin authentication middleware to call next() without checking the caller, and no customer-session middleware guards the route; the only middleware in the chain parses the JSON body. The handler in updateCustomer.js then loads the cust

ransomnews@poliversity.it at 2026-08-23T13:37:01.000Z ##

🚨 🔃 EverShop flaw enables account takeover

CVE-2026-72843 lets attackers overwrite customer email and passwords using an exposed UUID; fixed in 2.2.1.

#ransomNews #cyberthreats #ecommerce

##

DailyCyberSecurity at 2026-08-23T06:30:49.897Z ##

A critical EverShop account takeover flaw, CVE-2026-72843, exposes systems to an eCommerce platform vulnerability. Update to version 2.2.1 immediately.

#EverShop #CyberSecurity #CVE202672843 #Vulnerability #eCommerce

https://securityonline.info/evershop-cve-2026-72843-account-takeover/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-23T06:30:49.000Z ##

A critical EverShop account takeover flaw, CVE-2026-72843, exposes systems to an eCommerce platform vulnerability. Update to version 2.2.1 immediately.

updated 2026-08-20T21:31:36

2 posts

A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from other connected clusters (peer clusters) by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious cluster, enabling it to declare arbitrary network ranges. Consequently, all network traffic intended for

hugovalters@mastodon.social at 2026-08-21T11:14:14.000Z ##

CVE-2026-66785 - Critical network redirection flaw in Submariner. Malicious clusters can hijack peer traffic via crafted endpoints. CVSS 9.9. No patch yet - isolate clusters, monitor traffic. #CVE #Submariner #infosec

https://www.valtersit.com/cve/CVE-2026-66785/

##

thehackerwire@mastodon.social at 2026-08-20T21:00:21.000Z ##

🔴 CVE-2026-66785 - Critical (9.9)

A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from other connected clusters (peer clusters) by publishing a specially crafted network endpoint. The system fails to properly valida...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66785/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

##

CVE-2026-67567
(9.9 CRITICAL)

EPSS: 0.32%

updated 2026-08-20T21:31:36

2 posts

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a tenant, who has the ability to create HelmRelease custom resources (CRs), to bypass existing security controls. The system's HelmRelease controller processes Helm chart templates using its own elevated ServiceAccount privileges without proper validation. This enables the tenant to deploy arbitrary reso

DailyCyberSecurity@infosec.exchange at 2026-08-21T08:11:18.000Z ##

Three Red Hat flaws enable privilege escalation, led by CVE-2026-67567 (CVSS 9.9) in ACM. Two FreeIPA bugs can reach full domain compromise.

#InfoSec #ZeroDay #ThreatIntel

🤖 AI generated summary

##

Matchbook3469@mastodon.social at 2026-08-21T15:06:36.000Z ##

🔴 New security advisory:

CVE-2026-72530 affects Trueconf Server.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-72530-trueconf-server-rce-exploited-in-the-wild

by Yazoul AI

##

security_crawler_carl@infosec.exchange at 2026-08-22T20:01:20.000Z ##

🏆 New Achievement! Port 4307 Is Not a Safe Harbor!

Conducting inventory audit on your TrueConf Server installation. Status: compromised. Line items include two unauthenticated RCE vulnerabilities — CVE-2026-72529 and CVE-2026-72530 — currently checked out under the name Head Mare, a hacktivist group who used them to swap a server file for a web shell and deploy PhantomCore malware. Item condition: cursed. (1/2)

##

threatnoir@infosec.exchange at 2026-08-22T17:05:48.000Z ##

⚠️ CRITICAL: CISA orders feds to patch actively exploited TrueConf Server flaws

Two critical unauthenticated RCE vulnerabilities (CVE-2026-72529, CVE-2026-72530) in TrueConf Server are being actively exploited by Head Mare group to deploy backdoor malware via trojanized installers. Any organization running TrueConf Server is at immediate risk of compromise.

#TrueConf #CVE #ExploitedInTheWild #PhantomCore #HeadMare #InfoSec #PatchNow

🤖 AI generated summary

##

DailyCyberSecurity@infosec.exchange at 2026-08-20T21:30:12.000Z ##

CISA confirms two TrueConf Server flaws, CVE-2026-72529 and CVE-2026-72530, are exploited in the wild to deliver PhantomCore malware. Patch now.

https://securityonline.info/trueconf-cve-2026-72529-exploited/?utm_source=mastodon&utm_medium=jetpack_social

##

AAKL@infosec.exchange at 2026-08-20T20:15:43.000Z ##

CISA has added two known vulnerabilities to the KEV catalogue.

- CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72529

- CVE-2026-72530: TrueConf Server Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72530 #CISA

Yesterday:

Cisco:

CRITICAL: CVE-2026-20231, CVE-2026-20315, and CVE-2026-20317: Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP @TalosSecurity #Cisco #infosec #vulnerability

##

secdb@infosec.exchange at 2026-08-20T19:00:11.000Z ##

updated 2026-08-20T15:34:03

6 posts

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

security_crawler_carl at 2026-08-22T21:32:42.872Z ##

🏆 New Achievement! No Password? No Problem!

Welcome, new player, to the Authentication Bypass Tutorial! This mandatory segment introduces CVE-2026-19490, a CVSS 9.3 critical flaw in Citrix NetScaler ADC and NetScaler Gateway. No account required. No user interaction needed. No elevated privileges. The game just... lets attackers in. Think of it as a permanent debuff applied to your enterprise perimeter. (1/2)

##

cyberveille@mastobot.ping.moi at 2026-08-22T13:00:10.000Z ##

📢 [VULN] Citrix NetScaler (CVE-2026-19490) : cette faille permet de contourner l'authentification

Le 19 août 2026, Citrix a publié un nouveau bulletin de sécurité pour NetScaler ADC et NetScaler Gateway. Il fait référence à deux failles de sécurité, dont l'une particulièrement inquiétante : la CVE-2026-19490.

🔗 https://www.it-connect.fr/citrix-netscaler-cve-2026-19490-contournement-authentification/
💬 discussion : https://infosec.pub/post/51278994
#CVE #Cyberveille

##

benzogaga33@mamot.fr at 2026-08-22T09:40:03.000Z ##

Citrix NetScaler (CVE-2026-19490) : cette faille critique permet de contourner l’authentification https://www.it-connect.fr/citrix-netscaler-cve-2026-19490-contournement-authentification/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

##

security_crawler_carl@infosec.exchange at 2026-08-22T21:32:42.000Z ##

🏆 New Achievement! No Password? No Problem!

Welcome, new player, to the Authentication Bypass Tutorial! This mandatory segment introduces CVE-2026-19490, a CVSS 9.3 critical flaw in Citrix NetScaler ADC and NetScaler Gateway. No account required. No user interaction needed. No elevated privileges. The game just... lets attackers in. Think of it as a permanent debuff applied to your enterprise perimeter. (1/2)

##

benzogaga33@mamot.fr at 2026-08-22T09:40:03.000Z ##

Citrix NetScaler (CVE-2026-19490) : cette faille critique permet de contourner l’authentification https://www.it-connect.fr/citrix-netscaler-cve-2026-19490-contournement-authentification/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

##

ottoto2017@prattohome.com at 2026-08-21T07:42:40.000Z ##

「Citrixは、NetScalerの新たな脆弱性をできるだけ早く修正するよう管理者に強く求めている。」： #BLEEPINGCOMPUTER

「Citrixは、NetScaler GatewayセキュアリモートアクセスソリューションとNetScaler ADCネットワークアプライアンスに影響を与える2つの脆弱性からシステムを保護するため、顧客に対し直ちにセキュリティ対策を講じるよう警告した。

2つのうちより深刻な脆弱性（ CVE-2026-19490 として追跡）では、NetScalerのファームウェアバージョンとSAMLアクションが構成されているかどうかに応じて、アプライアンスがAAA仮想サーバーまたはゲートウェイ（SSL VPN、ICAプロキシ、CVPN、RDPプロキシ）として構成されている場合に、権限を持たないリモート攻撃者が認証をバイパスできる可能性があります。」

https://www.bleepingcomputer.com/news/security/citrix-urges-admins-to-patch-new-netscaler-flaws-as-soon-as-possible/

https://github.com/0xBlackash/CVE-2026-32475

##

CVE-2026-32475
(9.0 CRITICAL)

EPSS: 0.42%

updated 2026-08-20T12:48:31.843000

5 posts

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.

2 repos

https://github.com/absholi7ly/Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE

cyberveille@mastobot.ping.moi at 2026-08-21T14:00:05.000Z ##

📢 [VULN] WordPress : cette faille Elementor Pro ouvre votre site aux pirates CVE-2026-32475

Nouvelle alerte à destination de tous les administrateurs de sites WordPress : la faille CVE-2026-32475, corrigée le 19 août 2026 dans Elementor Pro, permet à un visiteur anonyme de déposer un fichier PHP sur un site WordPress, puis de l'exécuter. Aucun compte, aucune interaction avec un administrateur.

🔗 https://www.it-connect.fr/elementor-pro-cve-2026-32475-rce-non-authentifiee/
💬 discussion : https://infosec.pub/post/51237084
#CVE #Cyberveille

##

cyberveille@mastobot.ping.moi at 2026-08-21T14:00:05.000Z ##

📢 [VULN] WordPress : cette faille Elementor Pro ouvre votre site aux pirates CVE-2026-32475

Nouvelle alerte à destination de tous les administrateurs de sites WordPress : la faille CVE-2026-32475, corrigée le 19 août 2026 dans Elementor Pro, permet à un visiteur anonyme de déposer un fichier PHP sur un site WordPress, puis de l'exécuter. Aucun compte, aucune interaction avec un administrateur.

🔗 https://www.it-connect.fr/elementor-pro-cve-2026-32475-rce-non-authentifiee/
💬 discussion : https://infosec.pub/post/51237084
#CVE #Cyberveille

##

benzogaga33@mamot.fr at 2026-08-21T09:40:03.000Z ##

Elementor Pro : une faille critique permet de prendre le contrôle d’un site WordPress https://www.it-connect.fr/elementor-pro-cve-2026-32475-rce-non-authentifiee/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Wordpress

##

DailyCyberSecurity@infosec.exchange at 2026-08-21T07:56:13.000Z ##

CVE-2026-32475 (CVSS 9.8) is an unauthenticated file upload flaw in Elementor Pro. It threatens complete site compromise across 6 million sites.

#ElementorPro #CVE202632475 #WordPress #RCE #FileUpload #WebSecurity

https://securityonline.info/cve-2026-32475-elementor-pro-file-upload/?utm_source=mastodon&utm_medium=jetpack_social

##

ottoto2017@prattohome.com at 2026-08-21T07:39:49.000Z ##

「Elementor Proの重大なバグにより、WordPressサイトがリモートコード実行攻撃に晒される」： #BLEEPINGCOMPUTER

「WordPressプラグイン「Elementor Pro」に存在する重大な脆弱性により、攻撃者が実行可能ファイルをアップロードして、サーバー上でリモートコードを実行できる可能性がある。

CVE-2026-32475として識別されたこの脆弱性は、Elementor Proのバージョン4.2.2より前のバージョンに影響し、ファイル検証と処理に別々のループを使用するファイルアップロードモジュールに起因しており、ファイル名が空のアップロードの処理方法が異なっています。」

https://www.bleepingcomputer.com/news/security/critical-elementor-pro-bug-exposes-wordpress-sites-to-rce-attacks/

https://github.com/DeadExpl0it/CVE-2026-19598-PoC

##

CVE-2026-19598
(9.8 CRITICAL)

EPSS: 0.50%

updated 2026-08-20T12:48:10.287000

2 posts

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the pods_admin AJAX router funnels every access check — including the method allowlist, nonce verification, login enforcement, and capability gate — through pods_error(), which under the JSON met

3 repos

https://github.com/ksotaria1337/CVE-2026-19598

https://github.com/sag-asab/CVE-2026-19598

DailyCyberSecurity at 2026-08-21T16:17:01.243Z ##

CVE-2026-19598, a CVSS 9.8 flaw in the Pods WordPress plugin, enables complete site takeover. Wordfence is already blocking attacks in the wild.

#Pods #CVE202619598 #WordPress #PrivilegeEscalation #SiteTakeover #WebSecurity

https://securityonline.info/cve-2026-19598-pods-site-takeover/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-21T16:17:01.000Z ##

CVE-2026-19598, a CVSS 9.8 flaw in the Pods WordPress plugin, enables complete site takeover. Wordfence is already blocking attacks in the wild.

#Pods #CVE202619598 #WordPress #PrivilegeEscalation #SiteTakeover #WebSecurity

https://securityonline.info/cve-2026-19598-pods-site-takeover/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-20231
(9.9 CRITICAL)

EPSS: 0.41%

updated 2026-08-19T21:31:33

3 posts

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-20231 are related to improper neutralization of special e

nyanbinary at 2026-08-22T20:23:15.512Z ##

Fuck it, CVE dumpster diving.

CVE-2026-20231 - this is one of a batch of Cisco CVEs that stood out to me because they have multiple descriptions: One by the CNA, one by an ADP, "CVE" itself. The ADP one is just "please please please dont do this (bundling multiple vulns into a single cve) :neobot_angel_pleading: ". Cisco dont care, they put out 9 of those over the last 7 days.

##

nyanbinary@infosec.exchange at 2026-08-22T20:23:15.000Z ##

Fuck it, CVE dumpster diving.

CVE-2026-20231 - this is one of a batch of Cisco CVEs that stood out to me because they have multiple descriptions: One by the CNA, one by an ADP, "CVE" itself. The ADP one is just "please please please dont do this (bundling multiple vulns into a single cve) :neobot_angel_pleading: ". Cisco dont care, they put out 9 of those over the last 7 days.

##

AAKL@infosec.exchange at 2026-08-20T20:15:43.000Z ##

CISA has added two known vulnerabilities to the KEV catalogue.

- CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72529

- CVE-2026-72530: TrueConf Server Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72530 #CISA

Yesterday:

Cisco:

CRITICAL: CVE-2026-20231, CVE-2026-20315, and CVE-2026-20317: Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP @TalosSecurity #Cisco #infosec #vulnerability

##

CVE-2026-20315
(10.0 CRITICAL)

EPSS: 0.32%

updated 2026-08-19T21:30:29

2 posts

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20315 are related to improper access control issues that are gr

ottoto2017@prattohome.com at 2026-08-21T07:22:35.000Z ##

「Ciscoのバグの深刻度警告は、オリンピック体操競技の得点のように、10、10、9.9、9.6、7.5と表示されます。
/Secure Workload Softwareには5つの重大な欠陥があり、SaaSユーザーでさえアップデートをインストールする必要がある。」： #TheRegister

「シスコは、ネットワーク内での攻撃者の横方向への移動を阻止することを目的としたマイクロセグメンテーションツールであるセキュアワークロードソフトウェア（旧称Tetration）に、4つの重大な欠陥と、さらに1つの深刻なバグが存在することを明らかにした。

CVE-2026-20315とCVE-2026-20317は、最高評価の10点満点バグです。どちらも不適切なアクセス制御に関連しています。」

EPSS: 77.90%

updated 2026-08-19T04:16:58.560000

1 posts

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

2 repos

https://github.com/EpSiLoNPoInTOrI/IKEV2-POC

https://github.com/kaleth4/CVE-2026-33824

DailyCyberSecurity@infosec.exchange at 2026-08-21T04:48:04.000Z ##

CISA confirmed active exploitation of CVE-2026-33824, an unauthenticated Windows IKE double-free flaw patched in April, ordering federal agencies to remediate within three days.

#CVE202633824 #Windows #CISA #IKE #Vulnerability

https://meterpreter.org/cve-2026-33824-windows-ike-exploited/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-18963
(9.1 CRITICAL)

EPSS: 0.39%

updated 2026-08-19T03:31:21

4 posts

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user

1 repos

https://github.com/kyos-public/keycloak-cve-2026-18963-hunt

benzogaga33@mamot.fr at 2026-08-21T15:40:04.000Z ##

Keycloak : cette faille critique permet de pirater un compte via la fonction de mot de passe oublié https://www.it-connect.fr/keycloak-cve-2026-18963-faille-critique-mot-de-passe-oublie/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

##

sayzard@mastodon.sayzard.org at 2026-08-21T11:40:29.000Z ##

Keycloak Unauthenticated Account Takeover

벨기에 사이버보안센터(CCB)는 Red Hat build of Keycloak 26.4 및 26.6의 자격 증명 재설정 흐름에서 원격 비인증 계정 탈취가 가능한 CVE-2026-18963을 경고했다. CVSS 9.1의 CWE-640 취약점으로, 공격자는 비밀번호 재설정 이메일의 검증 링크를 클릭하지 않고도 임의 사용자의 재설정을 강제하고 새 자격 증명을 설정할 수 있다. Keycloak이 SSO·인증·권한 부여의 중심에 배치되는 경우 영향 범위가 해당 계정에 연결된 다수의 AI 서비스, 에이전트,...

https://ccb.belgium.be/advisories/warning-critical-account-takeover-password-reset-flow-red-hat-build-keycloack-patch

##

benzogaga33@mamot.fr at 2026-08-21T15:40:04.000Z ##

Keycloak : cette faille critique permet de pirater un compte via la fonction de mot de passe oublié https://www.it-connect.fr/keycloak-cve-2026-18963-faille-critique-mot-de-passe-oublie/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

##

DailyCyberSecurity@infosec.exchange at 2026-08-21T09:17:33.000Z ##

A Keycloak account takeover flaw, CVE-2026-18963, lets attackers reset any user's password with no email verification. Update to 26.7.2 now.

#Keycloak #AccountTakeover #CVE #IAM #InfoSec #RedHat

https://securityonline.info/keycloak-account-takeover-cve-2026-18963/?utm_source=mastodon&utm_medium=jetpack_social

##

CVE-2026-64849
(9.3 CRITICAL)

EPSS: 8.15%

updated 2026-08-17T21:58:52

2 posts

### Summary The default MLflow Tracking Server (`mlflow server`, no authentication, default SQLite backend) exposes the model-registry webhooks API unauthenticated, including a synchronous `POST /api/2.0/mlflow/webhooks/{id}/test` endpoint that returns the upstream response status and body to the caller. The SSRF guard added in PR #20747 (`_validate_webhook_url`, shipped in 3.10.0) resolves the we

Nuclei template

3 repos

https://github.com/zavisco/CVE-2026-64849.yaml

https://github.com/BiuTrap/CVE-2026-64849

https://github.com/codeb0ssx/CVE-2026-64849-PoC

Hackread@mstdn.social at 2026-08-22T11:59:25.000Z ##

Attackers are exploiting a critical MLflow bug to reach internal systems and cloud metadata, putting cloud secrets at risk. CISA has added CVE-2026-64849 to its KEV catalog.

Listen/Read: https://hackread.com/attackers-exploit-critical-mlflow-ai-platform-flaw/

#CyberSecurity #MLflow #AI #Vulnerability #CISA

##

Hackread@mstdn.social at 2026-08-22T11:59:25.000Z ##

Attackers are exploiting a critical MLflow bug to reach internal systems and cloud metadata, putting cloud secrets at risk. CISA has added CVE-2026-64849 to its KEV catalog.

Listen/Read: https://hackread.com/attackers-exploit-critical-mlflow-ai-platform-flaw/

#CyberSecurity #MLflow #AI #Vulnerability #CISA

##

CVE-2026-19478
(9.4 CRITICAL)

EPSS: 1.94%

updated 2026-08-17T21:31:30

7 posts

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.

Nuclei template

6 repos

https://github.com/HORKimhab/CVE-2026-19650-CVE-2026-19478

https://github.com/dinosn/gitlab-cve-2026-19478-lab

https://github.com/n0xdaemon/cve-2026-19478

https://github.com/punitdarji/Gitlab-CVE-2026-19478

https://github.com/davkharrr/CVE-2026-19478-PoC

https://github.com/renzi25031469/CVE-2026-19478

DailyCyberSecurity at 2026-08-23T14:00:39.135Z ##

Critical GitLab vulnerability CVE-2026-19478 lets unauthenticated attackers delete public projects. It is exploited in the wild with public PoC.

#GitLab #CVE202619478 #Vulnerability #InfoSec #CyberSecurity #PatchNow

https://securityonline.info/gitlab-cve-2026-19478/?utm_source=mastodon&utm_medium=jetpack_social

##

undercodenews@mastodon.social at 2026-08-23T00:14:25.000Z ##

GitLab CVE-2026-19478: A Critical Zero-Click Risk Puts Public Projects and User Data in the Crosshairs + Video

A Dangerous GitLab Flaw Is Already Being Exploited A critical vulnerability in GitLab has moved from a security advisory to an active exploitation problem, raising the pressure on organizations that operate self-managed GitLab servers. Tracked as CVE-2026-19478 and rated CVSS 9.4, the flaw can allow an attacker with no credentials to remotely modify or delete…

https://undercodenews.com/gitlab-cve-2026-19478-a-critical-zero-click-risk-puts-public-projects-and-user-data-in-the-crosshairs-video/?utm_source=mastodon&utm_medium=jetpack_social

##

undercodenews@mastodon.social at 2026-08-21T10:44:40.000Z ##

Critical GitLab Flaw CVE-2026-19478 Is Under Active Attack: Why Organizations Need to Patch Now + Video

A Dangerous Warning for GitLab Administrators A critical vulnerability in self-managed GitLab installations has moved from a serious security concern to an immediate incident-response priority. Security researchers are warning that attackers are actively exploiting CVE-2026-19478, a flaw rated CVSS 9.4, that can allow completely unauthenticated attackers to remotely…

https://undercodenews.com/critical-gitlab-flaw-cve-2026-19478-is-under-active-attack-why-organizations-need-to-patch-now-video/?utm_source=mastodon&utm_medium=jetpack_social

##

DailyCyberSecurity@infosec.exchange at 2026-08-23T14:00:39.000Z ##

Critical GitLab vulnerability CVE-2026-19478 lets unauthenticated attackers delete public projects. It is exploited in the wild with public PoC.

#GitLab #CVE202619478 #Vulnerability #InfoSec #CyberSecurity #PatchNow

https://securityonline.info/gitlab-cve-2026-19478/?utm_source=mastodon&utm_medium=jetpack_social

##

cyberworldops@infosec.exchange at 2026-08-21T10:20:01.000Z ##

watchTowr reports active exploitation of CVE-2026-19478 in GitLab within days of public disclosure. The flaw is a code injection via GraphQL directives, exploitable by unauthenticated remote attackers. Reproduction was possible within minutes of the advisory going live. Patch immediately.

#GitLab #CVE202619478 #CodeInjection #PatchNow

https://cyberworldops.eu/en/gitlab-cve-2026-19478-actively-exploited-days-after-disclosure

##

benzogaga33@mamot.fr at 2026-08-21T09:40:04.000Z ##

GitLab : la faille critique CVE-2026-19478 est déjà exploitée, deux jours après le correctif https://www.it-connect.fr/gitlab-cve-2026-19478-faille-critique-exploitee/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

##

linuxmint_hun@mastodon.social at 2026-08-21T08:38:00.000Z ##

A GitLab CVE-2026-19478 sebezhetőséget napokkal a nyilvánosságra hozatal után már aktívan kihasználják

https://linuxmint.hu/hir/2026/08/a-gitlab-cve-2026-19478-sebezhetoseget-napokkal-a-nyilvanossagra-hozatal-utan-mar

##

CVE-2026-42945
(8.1 HIGH)

EPSS: 66.04%

updated 2026-08-17T12:18:36.420000

2 posts

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond it

44 repos

https://github.com/edgecases-PurpleHax/cve-images

https://github.com/simota/nginx-rift-scanner

https://github.com/p3Nt3st3r-sTAr/CVE-2026-42945-POC

https://github.com/sibersan/web-server-audit_CVE-2026-42945

https://github.com/realityone/cve-2026-42945-scan

https://github.com/Kentox493/CVE-2026-42945_NginxRift

https://github.com/soksofos/wazuh-nginx-cve-2026-42945-sca-lab

https://github.com/gagaltotal/CVE-2026-42945-NGINX-Rift-Toolkit

https://github.com/nanwinata/nginxrift-CVE-2026-42945

https://github.com/oseasfr/Scanner_CVE_2026-42945

https://github.com/ChamsBouzaiene/ai-vuln-rediscovery-nginx-cve-2026-42945

https://github.com/azilRababe/CVE-2026-42945

https://github.com/LiaoZiqi-GZFLS/CVE-2026-42945

https://github.com/Renison-Gohel/CVE-2026-42945-NGINX-Rift

https://github.com/BarAppTeam/nginx-cve-fix

https://github.com/strivepan/Nginx_cve-2026-42945-scanner-gui

https://github.com/tal7aouy/nginx-cve-2026-42945

https://github.com/0xBlackash/CVE-2026-42945

https://github.com/iammerrida-source/nginx-rift-detect

https://github.com/yusufdalbudak/CVE-2026-42945

https://github.com/rheodev/CVE-2026-42945

https://github.com/josephfelix/CVE-2026-42945-nginx-rift

https://github.com/aratane/CVE-2026-42945

https://github.com/webdev75950-ux/nginx-rce-cve-2026-42945

https://github.com/MateusVerass/nGixshell

https://github.com/nu0l/NGINX-Rift

https://github.com/dinosn/cve-2026-42945-nginx32-lab

https://github.com/jelasin/CVE-2026-42945

https://github.com/hulina9900-boop/DIY-CVE-2026-42945-POC

https://github.com/hnytgl/CVE-2026-42945

https://github.com/limo57640-crypto/nginx-rift-detector

https://github.com/RedCrazyGhost/CVE-2026-42945

https://github.com/forxiucn/nginx-cve-2026-42945-poc

https://github.com/quantumworld-dpdns-io/CVE-2026-42945

https://github.com/friparia/NGINX_RIFT_SCAN_CVE_2026_42945

https://github.com/imSre9/CVE-2026-42945

https://github.com/sec-sys/CVE-2026-42945-Reverse-Shell-POC

https://github.com/lowilol/CVE-2026-42945-NGINX-Rift-Check-Script

https://github.com/CynepMyx/nginx-rift-check

https://github.com/byezero/nginx-cve-2026-42945-check

https://github.com/cipherspy/CVE-2026-42945-POC

https://github.com/fkj-src/fix_nginx_cve_2026_42945

https://github.com/chenqin231/CVE-2026-42945

https://github.com/F2u0a0d3/CVE-2026-42945-nginx-rift-poc

kubesploit@learnk8s.news at 2026-08-21T19:06:03.000Z ##

Nginx Rift is a proof of concept for CVE-2026-42945, a heap buffer overflow in NGINX's rewrite module that allows unauthenticated remote code execution on servers using rewrite and set directives
The README lists affected and fixed versions

➜ https://ku.bz/PQSlZ7Khl

##

kubesploit@learnk8s.news at 2026-08-21T19:06:03.000Z ##

Nginx Rift is a proof of concept for CVE-2026-42945, a heap buffer overflow in NGINX's rewrite module that allows unauthenticated remote code execution on servers using rewrite and set directives
The README lists affected and fixed versions

➜ https://ku.bz/PQSlZ7Khl

##

CVE-2026-33818
(7.5 HIGH)

7 repos

https://github.com/shinthink/CVE-2026-66066

https://github.com/0xBlackash/CVE-2026-66066

https://github.com/rails/rails-forensics-CVE-2026-66066

https://github.com/Zer0SumGam3/CVE-2026-66066-POC

https://github.com/paveg/rails-activestorage-vips-audit

https://github.com/0xsha/KindaRails2Shell

https://github.com/HackSpeak/CVE-2026-66066

ottoto2017@prattohome.com at 2026-08-21T08:16:05.000Z ##

Mastodon v4.7 へのupgrade をRails v8.1.3 の脆弱性解消とは、関係ないことを学習。

Google AI:
「今回の「KindaRails2Shell (CVE-2026-66066)」という脆弱性の攻撃ルートを、Mastodon自体が完全に通らない構造になっているためです。

Active Storage（問題の部品）を完全排除している

ダイレクトアップロード機能も使っていない」

以上の回答を得ました。

Mastodon v4.7 が Rails v8.1.3 の対策で出されたと言う以前の私の投稿を訂正いたします。