Review the latest Juniper security bulletin to patch critical Junos OS vulnerabilities, including RCE flaws CVE-2026-102182 and CVE-2026-101954.

#JuniperNetworks #JunosOS #JunosOSEvolved #Cybersecurity #Vulnerability #NetworkSecurity #InfoSec

https://securityonline.info/juniper-patches-critical-junos-os-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

two of my findings are in today's Microsoft Patch Tuesday.

CVE-2026-88156, Outlook RCE, 9.8 critical. stack-based buffer overflow, no click needed: previewing the mail in the reading pane is enough.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88156

CVE-2026-70343, MPEG-2 Video Extension RCE, 8.8. heap-based buffer overflow, the user has to open a crafted file.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70343

#InfoSec #PatchTuesday #CVE #Outlook #microsoft #vulnerability #cybersecurity #security

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

CVE-2026-16438 (CRITICAL, CVSS 9.4): Incorrect privilege assignment in Mitsubishi GENESIS64 & related products. Admin users can launch DCOM objects, risking DoS & data loss. Restrict admin access & monitor usage. https://radar.offseq.com/threat/cve-2026-16438-cwe-266-incorrect-privilege-assignment-in-mitsubishi-electric-corporation-genesis64-980e045a57b35746 #OffSeq #ICS #Vulnerability

🟠 CVE-2026-92150 - High (7.5)

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::GenericHub fromBufferDriver_handler deserialization is vulnerable because the receive handler uses F...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92150/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New advisory.

Arctic Wolf: CVE-2026-76461: Active Exploitation of Cisco Secure Email Gateway Critical Zero-Day Vulnerability Immediate Mitigation Required https://arcticwolf.com/resources/blog/cve-2026-76461-active-exploitation-of-cisco-secure-email-gateway-critical-zero-day-vulnerability-immediate-mitigation-required/

There were other vulnerabilities that Cisco addressed yesterday

CRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm

CRITICAL: CVE-2026-76519: Cisco Secure Email Gateway Arbitrary File Write Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp #infosec #Cisco #vulnerability

Tracked as CVE-2026-76519, this vulnerability stems from a relative path traversal weakness in SEG's Advanced Malware Protection (AMP) feature, caused by improper handling of email attachments. https://www.bleepingcomputer.com/news/security/cisco-patches-actively-exploited-secure-email-gateway-zero-day/

New advisory.

Arctic Wolf: CVE-2026-76461: Active Exploitation of Cisco Secure Email Gateway Critical Zero-Day Vulnerability Immediate Mitigation Required https://arcticwolf.com/resources/blog/cve-2026-76461-active-exploitation-of-cisco-secure-email-gateway-critical-zero-day-vulnerability-immediate-mitigation-required/

There were other vulnerabilities that Cisco addressed yesterday

CRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm

CRITICAL: CVE-2026-76519: Cisco Secure Email Gateway Arbitrary File Write Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp #infosec #Cisco #vulnerability

Tracked as CVE-2026-76519, this vulnerability stems from a relative path traversal weakness in SEG's Advanced Malware Protection (AMP) feature, caused by improper handling of email attachments. https://www.bleepingcomputer.com/news/security/cisco-patches-actively-exploited-secure-email-gateway-zero-day/

Attackers are exploiting CVE-2026-76519 (CVSS 9.8), a critical Cisco Secure Email Gateway vulnerability allowing root RCE via attachments. Patch right now.

#CVE202676519 #Cisco #EmailSecurity #AsyncOS #RCE #ZeroDay #Cybersecurity

https://securityonline.info/cisco-secure-email-gateway-cve-2026-76519-exploited/?utm_source=mastodon&utm_medium=jetpack_social

🚨 [CISA-2026:1014] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1014)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-0322 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-0322)
- Name: Palo Alto Networks PAN-OS Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Palo Alto Networks
- Product: PAN-OS
- Notes: https://security.paloaltonetworks.com/CVE-2026-0322 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-0322

⚠️ CVE-2026-105133 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105133)
- Name: Ahsay AhsayCBS Improper Authentication Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ahsay
- Product: AhsayCBS
- Notes: https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105133

⚠️ CVE-2026-105134 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105134)
- Name: Ahsay AhsayCBS Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ahsay
- Product: AhsayCBS
- Notes: https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105134

⚠️ CVE-2026-76519 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76519)
- Name: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Email Gateway
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76519

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261014 #cisa20261014 #cve_2026_0322 #cve_2026_105133 #cve_2026_105134 #cve_2026_76519 #cve20260322 #cve2026105133 #cve2026105134 #cve202676519

Cisco zero-day: CVE-2026-76519 (CVSS3.1: 9.8 critical) Cisco Secure Email Gateway Arbitrary File Write Vulnerability

In October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp

CISA added this to the KEV Catalog today: https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog

#Cisco #zeroday #CVE #KEV #CISA

CVE ID: CVE-2026-76519
Vendor: Cisco
Product: Secure Email Gateway
Date Added: 2026-10-14
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-76519

Cisco confirmed CVE-2026-76519, a critical path traversal in Secure Email Gateway AMP enabling unauthenticated root command execution via email attachments. It is actively exploited, so exposed appliances should be treated as potentially compromised. #CiscoSeg #ThreatIntel #Cve202676519

https://cyberworldops.eu/en/cisco-seg-flaw-cve-2026-76519-enables-unauthenticated-root-command

Cisco Secure Email Gateway zero-day CVE-2026-76519 patched

https://fawkes.rocks/2026/10/14/cisco-secure-email-gateway-zero-day-cve-2026-76519-patched/

🚨 [CISA-2026:1014] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1014)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-0322 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-0322)
- Name: Palo Alto Networks PAN-OS Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Palo Alto Networks
- Product: PAN-OS
- Notes: https://security.paloaltonetworks.com/CVE-2026-0322 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-0322

⚠️ CVE-2026-105133 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105133)
- Name: Ahsay AhsayCBS Improper Authentication Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ahsay
- Product: AhsayCBS
- Notes: https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105133

⚠️ CVE-2026-105134 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105134)
- Name: Ahsay AhsayCBS Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ahsay
- Product: AhsayCBS
- Notes: https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105134

⚠️ CVE-2026-76519 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76519)
- Name: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Email Gateway
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76519

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261014 #cisa20261014 #cve_2026_0322 #cve_2026_105133 #cve_2026_105134 #cve_2026_76519 #cve20260322 #cve2026105133 #cve2026105134 #cve202676519

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-105133 and CVE-2026-105134- AhsayCBS Security Brief: Protect the Systems Your Recovery Depends On

Executive briefing on AhsayCBS vulnerabilities CVE-2026-105133 and CVE-2026-105134, covering incomplete patch re-verification, command injection risks, and recovery readiness....

https://thecybermind.co/mcs0

CVE ID: CVE-2026-105134
Vendor: Ahsay
Product: AhsayCBS
Date Added: 2026-10-14
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-105134

AhsayCBS Deep-Dive: Auth Bypass to RCE https://horizon3.ai/attack-research/attack-blogs/ahsaycbs-cve-2026-105133-cve-2026-105134-technical-analysis/

Fluent CRM <3.2.6 hit by CRITICAL CVE-2026-109694: incorrect privilege assignment enables unauth’d privilege escalation (CVSS 9.8) 🚨. Patch status TBC — restrict access & monitor activity. https://radar.offseq.com/threat/cve-2026-109694-incorrect-privilege-assignment-in-wp-manageninja-llc-fluent-crm-b55f33b4a658d6f8 #OffSeq #WordPress #Vuln #PrivilegeEscalation

Fluent CRM <3.2.6 hit by CRITICAL CVE-2026-109694: incorrect privilege assignment enables unauth’d privilege escalation (CVSS 9.8) 🚨. Patch status TBC — restrict access & monitor activity. https://radar.offseq.com/threat/cve-2026-109694-incorrect-privilege-assignment-in-wp-manageninja-llc-fluent-crm-b55f33b4a658d6f8 #OffSeq #WordPress #Vuln #PrivilegeEscalation

F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.

#NGINX #F5Networks #CVE202697205 #CVE202693479 #CVE202615176 #Cybersecurity #InfoSec

https://securityonline.info/f5-patches-three-critical-nginx-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

The cURL CVE-2026-92392 vulnerability enables remote code execution during HTTP/2 uploads. Update to cURL 8.23.0 or disable HTTP/2 to protect systems.

#cURL #CVE202692392 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/curl-cve-2026-92392-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

The cURL CVE-2026-92392 vulnerability enables remote code execution during HTTP/2 uploads. Update to cURL 8.23.0 or disable HTTP/2 to protect systems.

#cURL #CVE202692392 #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/curl-cve-2026-92392-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

"No way to prevent this" say users of only language where this regularly happens

https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/

"No way to prevent this" say u...

"No way to prevent this" say users of only language where this regularly happens

https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/?utm_campaign=mi_irl&utm_medium=social&utm_source=mastodon

A UAF turned RCE

In the #curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free.

https://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/

🟠 CVE-2026-79821 - High (8.2)

A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79821/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-81534 - High (8.8)

The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the send_test_mail() function, whic...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-81534/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL: CVE-2026-108587 in 10Web Booster <=2.34.10 enables unauthenticated file upload (RCE via leaked REST nonce). Restrict wp-content/uploads & monitor uploads. Patch status pending. https://radar.offseq.com/threat/cve-2026-108587-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-10web-10web-booster-website-6312bf250c702c31 #OffSeq #WordPress #Vuln #RCE

Znuny ≤7.3.6 vulnerable to CRITICAL auth bypass (CVE-2026-93483). Attackers can forge the 'Remote-User' HTTP header to access any account, incl. admins. Avoid HTTPBasicAuth and check vendor guidance. https://radar.offseq.com/threat/in-znuny-through-736-an-attacker-can-bypass-specific-standard-login-procedures-and-gain-unauthorized-0c8a601d6b37802f #OffSeq #Znuny #CVE202693483 #infosec

New advisory for a high-severity vulnerability.

Fortinet: CVE-2026-84393: Improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure https://app.opencve.io/cve/CVE-2026-84393 #Fortinet #infosec #vulnerability

New advisory for a high-severity vulnerability.

Fortinet: CVE-2026-84393: Improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure https://app.opencve.io/cve/CVE-2026-84393 #Fortinet #infosec #vulnerability

CVE-2026-110858 | GitPython 3.1.30 – 3.2.0: CRITICAL RCE via improper argument neutralization in Remote.pull(). Attackers can run arbitrary OS commands over SSH/local. Limit use & watch for patches. https://radar.offseq.com/threat/cve-2026-110858-improper-neutralization-of-argument-delimiters-in-a-command-argument-injection-in-eb08373a6f0fb8af #OffSeq #GitPython #RCE #infosec

CVE-2026-110867: CRITICAL vuln in renovatebot renovate (<44.60.1). Attackers can bypass allowlists via presets, setting restricted env vars & risking privilege escalation on self-hosted. Patch with 44.60.1+. https://radar.offseq.com/threat/cve-2026-110867-incorrect-authorization-in-renovatebot-renovate-241a3325f973ab24 #OffSeq #CVE2026110867 #Renovatebot #Infosec

CVE-2026-0322: Actively Exploited PAN-OS RCE Flaw Enables Root Access
#CVE_2026_0322
https://socprime.com/blog/cve-2026-0322-analysis/

🏆 New Achievement! Root Access For Fun And Profit (Yours Is The Fun, Theirs Is The Profit)!

Item Drop: CVE-2026-0322 has been added to your inventory — cursed, naturally. Palo Alto Networks just disclosed a flaw in PAN-OS that lets an authenticated attacker run arbitrary code with root privileges on your firewall's management interface. No special configuration required. (1/3)

🟠 New security advisory:

CVE-2026-0322 affects multiple systems.

• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-0322-pan-os-management-rce-exploited-in-the-wild

by Yazoul AI

#CVE #SecurityPatching #HackerNews

CVE-2026-0322: Actively Exploited PAN-OS RCE Flaw Enables Root Access
#CVE_2026_0322
https://socprime.com/blog/cve-2026-0322-analysis/

🏆 New Achievement! Root Access For Fun And Profit (Yours Is The Fun, Theirs Is The Profit)!

Item Drop: CVE-2026-0322 has been added to your inventory — cursed, naturally. Palo Alto Networks just disclosed a flaw in PAN-OS that lets an authenticated attacker run arbitrary code with root privileges on your firewall's management interface. No special configuration required. (1/3)

And a Palo Alto Networks zero-day too

https://security.paloaltonetworks.com/CVE-2026-0322

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in...

🔗️ [Bleepingcomputer] https://link.is.it/SUCUwg

I forgot to mention that Palo Alto listed these IOC for CVE-2026-0322 exploitation:

• 66.42.72.14
• 208.83.239.114
• 149.248.47.234

Fanged for your pleasure. No open source information on them Vultr IPs outside of today's disclosure.

#threatintel #paloaltonetworks #zeroday #IOC #KEV

PAN-OS zero-day CVE-2026-0322 exploited to gain root

https://fawkes.rocks/2026/10/15/pan-os-zero-day-cve-2026-0322-exploited-to-gain-root/

🚨 [CISA-2026:1014] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1014)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-0322 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-0322)
- Name: Palo Alto Networks PAN-OS Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Palo Alto Networks
- Product: PAN-OS
- Notes: https://security.paloaltonetworks.com/CVE-2026-0322 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-0322

⚠️ CVE-2026-105133 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105133)
- Name: Ahsay AhsayCBS Improper Authentication Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ahsay
- Product: AhsayCBS
- Notes: https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105133

⚠️ CVE-2026-105134 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105134)
- Name: Ahsay AhsayCBS Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ahsay
- Product: AhsayCBS
- Notes: https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105134

⚠️ CVE-2026-76519 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76519)
- Name: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Email Gateway
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76519

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261014 #cisa20261014 #cve_2026_0322 #cve_2026_105133 #cve_2026_105134 #cve_2026_76519 #cve20260322 #cve2026105133 #cve2026105134 #cve202676519

If your Palo Alto management interface is internet-exposed, you might notice even more traffic on it today. But if that was your security posture, maybe you're fine with that.

Anyway this is exploited in the wild. Authenticated, so creds required.

https://ifin.network/t/cve-2026-0322-authenticated-rce-in-pan-os/903

#ThreatIntel #ThreatIntelligence #IFIN

@winterknight1337 https://security.paloaltonetworks.com/CVE-2026-0322

Palo Alto Networks zero-day: CVE-2026-0322 (CVSS4: 8.6 high)PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface https://security.paloaltonetworks.com/CVE-2026-0322

Very limited exploitation has been observed targeting the Palo Alto Networks management interface.

CISA added this to the KEV Catalog today: https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog

#paloaltonetworks #zeroday #KEV #CISA #eitw

CVE ID: CVE-2026-0322
Vendor: Palo Alto Networks
Product: PAN-OS
Date Added: 2026-10-14
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-0322

Attackers are actively exploiting CVE-2026-0322, a high-severity Palo Alto PAN-OS RCE vulnerability in the management interface. Apply patches right now.

#CVE20260322 #PaloAltoNetworks #PANOS #RCE #FirewallSecurity #Cybersecurity #InfoSec

https://securityonline.info/palo-alto-pan-os-rce-cve-2026-0322-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-0322 is an EITW post-auth RCE in PAN-OS management interface.

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.

The security risk posed by this issue is minimized by restricting access to the management interface to only trusted internal IP addresses according to our recommended best practice deployment guidelines.

This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series).

Cloud NGFW and Prisma® Access are not impacted by this vulnerability.

Very limited exploitation has been observed targeting the Palo Alto Networks management interface.

https://security.paloaltonetworks.com/CVE-2026-0322

🚨 [CISA-2026:1014] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1014)

CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-0322 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-0322)
- Name: Palo Alto Networks PAN-OS Code Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Palo Alto Networks
- Product: PAN-OS
- Notes: https://security.paloaltonetworks.com/CVE-2026-0322 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-0322

⚠️ CVE-2026-105133 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105133)
- Name: Ahsay AhsayCBS Improper Authentication Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ahsay
- Product: AhsayCBS
- Notes: https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105133

⚠️ CVE-2026-105134 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105134)
- Name: Ahsay AhsayCBS Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ahsay
- Product: AhsayCBS
- Notes: https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105134

⚠️ CVE-2026-76519 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76519)
- Name: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Secure Email Gateway
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76519

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261014 #cisa20261014 #cve_2026_0322 #cve_2026_105133 #cve_2026_105134 #cve_2026_76519 #cve20260322 #cve2026105133 #cve2026105134 #cve202676519

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-105133 and CVE-2026-105134- AhsayCBS Security Brief: Protect the Systems Your Recovery Depends On

Executive briefing on AhsayCBS vulnerabilities CVE-2026-105133 and CVE-2026-105134, covering incomplete patch re-verification, command injection risks, and recovery readiness....

https://thecybermind.co/mcs0

CVE ID: CVE-2026-105133
Vendor: Ahsay
Product: AhsayCBS
Date Added: 2026-10-14
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-105133

AhsayCBS Deep-Dive: Auth Bypass to RCE https://horizon3.ai/attack-research/attack-blogs/ahsaycbs-cve-2026-105133-cve-2026-105134-technical-analysis/

Patch two high-severity SonicWall NSM On-Prem vulnerabilities (CVE-2026-96540, CVE-2026-100232) allowing admin privilege escalation and OS command RCE.

#SonicWall #CVE202696540 #CVE2026100232 #NetworkSecurity #RCE #Cybersecurity #InfoSec

https://securityonline.info/sonicwall-nsm-on-prem-vulnerabilities-snwlid-2026-0018/?utm_source=mastodon&utm_medium=jetpack_social

Patch two high-severity SonicWall NSM On-Prem vulnerabilities (CVE-2026-96540, CVE-2026-100232) allowing admin privilege escalation and OS command RCE.

#SonicWall #CVE202696540 #CVE2026100232 #NetworkSecurity #RCE #Cybersecurity #InfoSec

https://securityonline.info/sonicwall-nsm-on-prem-vulnerabilities-snwlid-2026-0018/?utm_source=mastodon&utm_medium=jetpack_social

D-Link DIR-868L v2.01b05 has a CRITICAL OS command injection (CVE-2026-110536, CVSS 10). Remote, unauthenticated exploit possible — public code released. No patch yet. Restrict access & check vendor guidance. https://radar.offseq.com/threat/a-vulnerability-was-determined-in-d-link-dir-868l-201b05-cve-2026-110536-3b13ecc45e7b5b0a #OffSeq #CVE2026110536 #infosec #routersecurity

CVE-2026-110770: Databasus 3.7.0 – 3.61.0 has a CRITICAL auth bypass flaw — unauthenticated attackers can brute-force password reset codes via /api/v1/users/reset-password. Patch unconfirmed — apply external mitigations. https://radar.offseq.com/threat/databasus-370-through-3610-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-6e4063880853e9f3 #OffSeq #CVE2026110770 #infosec

Nextcloud : des serveurs piratés via une faille critique de l’application Collabora Built-in CODE https://www.it-connect.fr/nextcloud-collabora-built-in-code-faille-webshell-cve-2026-110447/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

Nextcloud : des serveurs piratés via une faille critique de l’application Collabora Built-in CODE https://www.it-connect.fr/nextcloud-collabora-built-in-code-faille-webshell-cve-2026-110447/ #ActuCybersécurité #Cybersécurité #Vulnérabilité

Attackers are actively exploiting CVE-2026-110447 (CVSS 9.2), a critical Nextcloud Collabora Online RCE flaw in richdocumentscode, to deploy PHP webshells.

#CVE2026110447 #Nextcloud #CollaboraOnline #RCE #Webshell #Cybersecurity #InfoSec #354

https://securityonline.info/nextcloud-collabora-online-cve-2026-110447-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-110447 (CRITICAL, CVSS 9.2) allows RCE via OS command injection in Collabora Online Built-in CODE Server <26.4.303 (richdocumentscode, Nextcloud). Exploited in the wild since Sept 2026. Patch required. https://radar.offseq.com/threat/cve-2026-110447-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-f68ba52513af6028 #OffSeq #Infosec #Nextcloud #CVE2026110447

🟠 CVE-2026-106627 - High (7.5)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denia...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-106627/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Review the latest Juniper security bulletin to patch critical Junos OS vulnerabilities, including RCE flaws CVE-2026-102182 and CVE-2026-101954.

#JuniperNetworks #JunosOS #JunosOSEvolved #Cybersecurity #Vulnerability #NetworkSecurity #InfoSec

https://securityonline.info/juniper-patches-critical-junos-os-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

I heard some of you nerds like to MOVEit MOVEit. Have fun. No indication of exploitation in the advisory but I haven't read through the CVEs yet.

https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026

CWE-288: Authentication bypass using an alternate path or channel (CVE-2026-89067), CVSS 8.8

CWE-732: Incorrect Permission Assignment for Critical Resource (CVE-2026-87093), CVSS 8.8

CWE-304: Missing critical step in authentication (CVE-2026-89068), CVSS 8.1

CWE-79: Improper neutralization of input during web page generation ('cross-site scripting') (CVE-2026-89069), CVSS 8.0

CWE-176: Improper handling of unicode encoding (CVE-2026-89074), CVSS 7.5

CWE-294: Authentication bypass by capture-replay (CVE-2026-89070), CVSS 7.5

CWE-303: Incorrect implementation of authentication algorithm (CVE-2026-89077), CVSS 7.5

CWE-613: Insufficient Session Expiration (CVE-2026-89073), CVSS 7.5

CWE-863: Incorrect Authorization (CVE-2026-89072), CVSS 7.5

CWE-90: Improper neutralization of special elements used in an LDAP query ('LDAP injection') (CVE-2026-89071), CVSS 7.5

CWE-922: Insecure Storage of Sensitive Information (CVE-2026-89075), CVSS 7.3

CWE-89: Improper neutralization of special elements used in an SQL command ('SQL injection') (CVE-2026-89076), CVSS 7.2

CW: Riasztás — Ivanti Connect Secure (CVE-2026-104935) és Microsoft Windows Shell (CVE-2026-96951) aktívan kihasznált, magas kockázatú sérülékenységek. Ivanti: érintett 25.1.3.0/25.1.3.1 és 22.8R2.5 előtti verziók; 25.1.1.2+ javasolt. Microsoft: MotW megkerülés, e-mail/üzenet útján terjesztett támadások. Frissíts, ellenőrizd naplókat és EDR-forensic vizsgálatokat. #Ivanti #CVE-2026-104935 #CVE-2026-96951 #Windows #infosec https://linuxmint.hu/hir/2026/10/riasztas-az-ivanti-connect-secure-es-a-microsoft-windows-shell-serulekenysegeirol

CVE-2026-96951: Actively Exploited Windows Shell Zero-Day Bypasses Mark of the Web
#CVE_2026_96951 #MicrosoftOperatingSystems
https://socprime.com/blog/cve-2026-96951-analysis/

CW: sebezhetőség(ek) — Microsoft októberi Patch Tuesday: 1 413 javítás, ebből 1 102 Windows-hoz. Aktívan kihasznált: CVE-2026-96951 (Windows Shell, CVSS 8.8) — bekerült a CISA KEV listájára, szövetségi határidő: 2026-10-16. Figyelem még: CVE-2026-108398 (.NET, WDAC kerülés). Részletek: https://linuxmint.hu/hir/2026/10/rekordot-dontott-a-microsoft-1-413-sebezhetoseget-foltoztak-koztuk-egy-aktivan
#Windows #CVE #infosec #cybersecurity

⚠️ CRITICAL: Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

Microsoft patched 1,411 vulnerabilities in October 2026, including three zero-days: CVE-2026-96951 (Windows Shell, actively exploited) and CVE-2026-108398 (.NET Framework, publicly disclosed). CVE-2026-108398 allows attackers to bypass Windows Defender Application Control and execute unauthorized a…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

⚠️ CRITICAL: Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

Microsoft released patches for 1,413 vulnerabilities in October 2026, including CVE-2026-96951, a critical Windows zero-day that bypasses Mark of the Web security controls. This flaw is actively exploited in the wild and tracked by CISA. Windows systems are the primary target across 1,102 of the pa…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

Microsoft Patches 1,411 Vulnerabilities in October 2026 Update Including Actively Exploited Zero-Day

Microsoft's October 2026 Patch Tuesday fixed a record 1,411 vulnerabilities, including 70 critical ones (mostly remote code execution) and three zero-days. The actively exploited zero-day is CVE-2026-96951, a Windows Shell Mark of the Web bypass. A .NET Framework WDAC bypass and a MessagePack-CSharp denial-of-service flaw were publicly disclosed. This month is the final security update for Windows 11 24H2 Home/Pro and Windows 10 Enterprise LTSB 2016.

**Patch the Windows OS first because it has an actively exploited flaw. Next, update .NET Framework on endpoints and servers that depend on Windows Defender Application Control. If you are developing ASP.NET apps, prioritize rebuilding and redeploying anything that ships MessagePack-CSharp, including ASP.NET Core SignalR apps, on version 2.5.303 or 3.1.9. Then work through the 70 critical flaws, starting with the 57 remote code execution bugs on internet-facing and domain-joined systems. Use the Microsoft's new risk cohorts to batch related fixes. Finally, check your fleet for support status: Windows 11 24H2 Home and Pro and Windows 10 Enterprise LTSB 2016 received their last update this month, Windows 11 23H2 Enterprise and Education get their final one on November 10, and Windows Server 2012 and 2012 R2 need manual remediation for the AD FS hardening tied to CVE-2026-56155.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/microsoft-s-record-october-patch-tuesday-fixes-1400-flaws-including-zero-day-under-z-s-e-q-y/gD2P6Ple2L

🚨 NEW on CISA KEV — exploited in the wild

🛡 Microsoft Windows
Microsoft Windows Command Injection Vulnerability
CVE: CVE-2026-96951 · patch by 2026-10-16

Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

🔗 https://ninjasignal.ninja/intel/cve/CVE-2026-96951
#cybersecurity #KEV #CVE #infosec

Placeholder CISA blog post about Ivanti Connect Secure zero-day CVE-2026-104935 and Microsoft Windows Shell Security Feature Bypass zero-day CVE-2026-96951

https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-adds-two-known-exploited-vulnerabilities-catalog

#CISA #KEV #eitw #zeroday #PatchTuesday

CVE ID: CVE-2026-96951
Vendor: Microsoft
Product: Windows
Date Added: 2026-10-13
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-96951

Microsoft Patch Tuesday with an exploited zero-day: CVE-2026-96951 (8.8 high) Windows Shell Security Feature Bypass Vulnerability
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96951

Looks like 1408 CVEs for Patch Tuesday.

#microsoft #zeroday #CVE #PatchTuesday #eitw

🟠 CVE-2026-104909 - High (8.1)

The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '_type (e.g. foo_type)' parameter parameter. This makes it possible for unauthenticated attackers to include and execute ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104909/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-74041 - Critical (9.1)

Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users with manager:update_config can inject an uppercase LOG_FORMAT comm...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-74041/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch four IBM WebSphere Liberty vulnerabilities, including critical 9.1-rated CVE-2026-93895 and CVE-2026-93909 authentication and access bypass flaws.

#IBM #WebSphereLiberty #CVE202693895 #CVE202693909 #Cybersecurity #InfoSec #EnterpriseSecurity

https://securityonline.info/critical-ibm-websphere-liberty-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-110165 — CRITICAL use-after-free in Chrome Core for Android <155.0.8059.79. Allows remote code execution outside sandbox via crafted HTML. Patch ASAP: update to 155.0.8059.79+. Details: https://radar.offseq.com/threat/cve-2026-110165-use-after-free-in-google-chrome-a8d190779682275f #OffSeq #Chrome #Android #Infosec

F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.

#NGINX #F5Networks #CVE202697205 #CVE202693479 #CVE202615176 #Cybersecurity #InfoSec

https://securityonline.info/f5-patches-three-critical-nginx-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

F5 patched three NGINX vulnerabilities (CVE-2026-97205, CVE-2026-93479, CVE-2026-15176) rated 9.2 Critical in F5 NGINX Plus and Open Source. Upgrade today.

#NGINX #F5Networks #CVE202697205 #CVE202693479 #CVE202615176 #Cybersecurity #InfoSec

https://securityonline.info/f5-patches-three-critical-nginx-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

TR7 ASP (TR7 Cyber Defense Inc.) is vulnerable to unauthenticated OS command injection (CVE-2026-16740, CVSS 9.8, CRITICAL). Remote attackers can fully compromise affected versions. Restrict access & monitor for abuse. https://radar.offseq.com/threat/cve-2026-16740-cwe-306-missing-authentication-for-critical-function-in-tr7-cyber-defense-inc-tr7-asp-604c8853c8296eb5 #OffSeq #Vuln #TR7 #CVE202616740

CVE-2026-104800: CRITICAL RCE flaw in streetforce1 AGE-GATE WordPress plugin (≤1.0). Unauthenticated attackers can run arbitrary code via unsafe admin.php endpoint. Remove or restrict plugin use ASAP. https://radar.offseq.com/threat/cve-2026-104800-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-streetforce1-age-gate-02cdeee893e722b9 #OffSeq #WordPress #Vuln #RCE

New.

Rapid7: CVE-2026-108065: Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce https://www.rapid7.com/blog/post/ve-unauthenticated-sql-injection-in-channel-software-weballiance-ecommerce/ @Rapid7Official #infosec #SQL #vulnerability

Apply the NLnet Labs NSD patch for 4 flaws, including CVE-2026-101341. Each NSD stack overwrite vulnerability risks remote command execution.

#NSD #NLnetLabs #DNS #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/nsd-stack-overwrite-vulnerability-patched/?utm_source=mastodon&utm_medium=jetpack_social

Patch your GitLabs https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/#cve-2026-97229---integer-overflow-issue-in-cicd-regular-expression-compiler-impacts-gitlab-ceee

Patch your GitLabs https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/#cve-2026-97229---integer-overflow-issue-in-cicd-regular-expression-compiler-impacts-gitlab-ceee

🚨 PoC published for a critical GitLab CI/CD remote code execution vulnerability; CVE-2026-97229

PoC: https://github.com/jburgess-r7/CVE-2026-97229-PoC

The flaw is caused by an integer overflow in GitLab's regular expression compiler. A crafted CI/CD configuration combined with a specially formed repository path can corrupt Onigmo regex bytecode and ultimately execute operating system commands as the GitLab git user.

CVSS: 10.0 Critical
Affected: GitLab 19.2 < 19.2.8, 19.3 < 19.3.5, and 19.4 < 19.4.2
Fixed: GitLab 19.2.8, 19.3.5, and 19.4.2

The PoC was validated against GitLab CE 19.4.1 on Linux amd64 and demonstrates command execution through the public CI lint endpoint after the required malicious project setup.

GitLab corrige une faille critique qui permet d’exécuter du code sans authentification (CVE-2026-97229) https://www.it-connect.fr/gitlab-cve-2026-97229-faille-critique-regex-ci-cd/ #ActuCybersécurité #Cybersécurité

GitLab CI lint integer-overflow RCE PoC https://github.com/jburgess-r7/CVE-2026-97229-PoC

Technical details and PoC exploit code for CVE-2026-97229, a CVSS 10.0 GitLab RCE vulnerability exposing 25,766 hosts, are now public. Patch to 19.4.2 now.

#CVE202697229 #GitLab #RCE #DevSecOps #Cybersecurity #InfoSec #Vulnerability

https://securityonline.info/gitlab-rce-cve-2026-97229-poc-disclosed/?utm_source=mastodon&utm_medium=jetpack_social

Vorfall-Lagebild: GitLab: kritische Lücke CVE-2026-97229

Erstmeldung zu „GitLab: kritische Lücke CVE-2026-97229“: was bekannt ist, was offen ist und was wahrscheinlich passiert ist.

#OTSecurity #ICS #KRITIS #NIS2 #Cybersicherheit
https://ot-cyber.de/blog/vorfall-lagebild-gitlab-kritische-luecke-cve-2026-97229.html

A GitLab critical vulnerability, CVE-2026-97229, allows unauthenticated code execution. Update to 19.2.8, 19.3.5, or 19.4.2 now.

#GitLab #CVE202697229 #RCE #CICD #DevSecOps #Vulnerability #PatchNow #GitLabDuo

https://meterpreter.org/gitlab-critical-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

🚨 Rapid Response: Critical GitLab CI/CD Remote Code Execution (CVE-2026-97229)
A critical vulnerability (CVSS 10.0) in GitLab Community Edition and Enterprise Edition could allow an unauthenticated attacker to execute arbitrary code on the GitLab server.

Censys currently detects 25,766 hosts and 79,224 web properties with a version of GitLab affected by this vulnerability. This is 31% and 39% of all GitLab hosts and web properties, respectively. These figures reflect detected software versions, not confirmed exploitable instances.

GitLab has released patches for affected versions. Organizations running self-managed GitLab should prioritize updating.

Full Censys ARC advisory, including affected versions, exposure data, and remediation guidance: https://censys.com/advisory/cve-2026-97229/

#CensysARC #GitLab #Cybersecurity #VulnerabilityManagement #InfoSec

CW: Biztonsági hír

GitLab CI/CD-ben távoli kódfuttatást lehetővé tevő, maximális súlyosságú hibát javítottak (CVE-2026-97229). Érintett: CE/EE 19.2–19.4. Javítás: 19.2.8, 19.3.4, 19.4.2. GitLab.com már frissítve; self‑managed rendszerek azonnali frissítése és a CI-regexek átvizsgálása ajánlott. https://linuxmint.hu/hir/2026/10/maximalis-sulyossagu-hibat-javitott-a-gitlab

#GitLab #CVE #Infosec #DevOps #CI

🚨 PoC published for a critical unauthenticated Splunk Enterprise remote code execution vulnerability; CVE-2026-76268

PoC: https://github.com/murrez/CVE-2026-76268

The flaw affects the Patroni REST API used by the PostgreSQL sidecar on Splunk Enterprise search head cluster members. Critical configuration operations can be accessed without authentication, allowing an attacker with network access to the Patroni service to modify PostgreSQL configuration and execute operating system commands.

CVSS: 9.8 Critical
Affected: Splunk Enterprise 10.2.0 - 10.2.6 and 10.4.0 - 10.4.2
Fixed: Splunk Enterprise 10.2.7 and 10.4.3

The PoC includes vulnerability checking, Patroni port discovery, multi-target scanning, out-of-band verification, and an exploit mode demonstrating the RCE chain.

Attackers are exploiting CVE-2026-103671 in the wild, an EC-CUBE AmazonPay Plugin vulnerability that redirects shoppers to steal account credentials.

#CVE2026103671 #ECCUBE #AmazonPay #EcommerceSecurity #JPCERT #Cybersecurity #InfoSec

https://securityonline.info/ec-cube-amazonpay-plugin-cve-2026-103671-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-14851 (CRITICAL, CVSS 9.2): Copart billing service leaks PII & financial data via unauthenticated PDF invoice endpoints. Some URLs are indexed by search engines. Restrict access & block public indexing now. https://radar.offseq.com/threat/cve-2026-14851-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-copart-coparts-ef462fbc1a47157a #OffSeq #CVE #infosec #databreach

🟠 CVE-2026-110284 - High (7.5)

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlms_checkout] shortcode. This is...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110284/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-109901 - High (8.5)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109901/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-104748: CRITICAL privilege escalation in SimpleForm WordPress plugin (<=3.10.0). Unauth users can gain admin via exposed AJAX and weak nonce. Disable/limit access until patched. Full details: https://radar.offseq.com/threat/cve-2026-104748-cwe-269-improper-privilege-management-in-wpazleen-simpleform-form-maker-to-chat-apps-e30303ee252058a1 #OffSeq #WordPress #PrivilegeEscalation #CVE2026104748

CVE-2026-89310: CRITICAL SQL injection in JTL-WMS (<2.0.7, <2.1.3, <2.2.1) 🛑 Remote code execution possible via unsanitized request body. No patch yet. Implement input validation & monitor vendor info: https://radar.offseq.com/threat/cve-2026-89310-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-4dc7d194ff0633df #OffSeq #SQLInjection #Vuln #Infosec

Vghost: Beyond the Privilege Boundary
#CVE_2026_74580
https://matrix.tencent.com/en/2026/10/12/vghost-cve-2026-74580

Vghost (CVE-2026-74580): Linux kernel vhost stale IOTLB cache leading to universal LPE and Guest-to-Host escape vector https://www.openwall.com/lists/oss-security/2026/10/14/2

Technical details and PoC exploit code for CVE-2026-74580 (Vghost), an 8.8-severity Linux vhost vulnerability allowing root LPE and VM escape, are out.

#CVE202674580 #Vghost #LinuxKernel #PrivilegeEscalation #VMEscape #Cybersecurity #InfoSec

https://securityonline.info/vghost-cve-2026-74580-linux-vhost-poc-disclosed/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-87855: CRITICAL RCE in ntbyk JTL-Connector for WooCommerce (<=2.4.3). Unauthenticated file upload due to weak auth & validation. Restrict/disable plugin while awaiting patch. https://radar.offseq.com/threat/cve-2026-87855-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ntbyk-jtl-connector-for-8335c9f626fb9c36 #OffSeq #WordPress #Security #CVE202687855

A SiteGuard Server Edition vulnerability, CVE-2026-106931, is exploited in the wild and grants root or SYSTEM access. Update to Ver8.00 Update 5 now.

#SiteGuard #CVE2026106931 #ExploitedInTheWild #WAF #CommandInjection #JPCERT #PatchNow #CyberSecurity

https://securityonline.info/siteguard-cve-2026-106931-exploited/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-93907 - High (8.1)

IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93907/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104749 - High (7.5)

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execution in all versions up to, and including, 2.10.6 The vulnerability exists bec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104749/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-92097 - Critical (9.1)

The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialog() function building the {url} template placeholder from a sanitize_text_f...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92097/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17092 - High (8.1)

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1. This is due to the plugin not properly verifying that a user is au...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17092/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-93388 - Critical (9.8)

The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading to remote code execution in all versions up to, and including, 2.9.1 The nbdesigner_copy_image_from_url AJAX actio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93388/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-110392 - Critical (9.8)

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-110392/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-82715 - High (7.9)

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.

This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82715/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-95634 - High (8.6)

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95634/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-95633 - High (7.5)

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorize...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95633/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77206 - High (7.5)

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77206/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-95632 - High (7.5)

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorize...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95632/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-105902 - High (7.5)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denia...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105902/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-97816 - Critical (9.8)

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97816/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CW: sebezhetőség(ek) — Microsoft októberi Patch Tuesday: 1 413 javítás, ebből 1 102 Windows-hoz. Aktívan kihasznált: CVE-2026-96951 (Windows Shell, CVSS 8.8) — bekerült a CISA KEV listájára, szövetségi határidő: 2026-10-16. Figyelem még: CVE-2026-108398 (.NET, WDAC kerülés). Részletek: https://linuxmint.hu/hir/2026/10/rekordot-dontott-a-microsoft-1-413-sebezhetoseget-foltoztak-koztuk-egy-aktivan
#Windows #CVE #infosec #cybersecurity

⚠️ CRITICAL: Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

Microsoft patched 1,411 vulnerabilities in October 2026, including three zero-days: CVE-2026-96951 (Windows Shell, actively exploited) and CVE-2026-108398 (.NET Framework, publicly disclosed). CVE-2026-108398 allows attackers to bypass Windows Defender Application Control and execute unauthorized a…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

🟠 CVE-2026-94453 - High (7.5)

Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicious) is received for the same tuple. IKE state is retained in memory after the cl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-94453/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-77207 - High (7.5)

Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS#7 blob with SEC_PKCS7ContainsCertsOrCrls() ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77207/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

Patch four IBM WebSphere Liberty vulnerabilities, including critical 9.1-rated CVE-2026-93895 and CVE-2026-93909 authentication and access bypass flaws.

#IBM #WebSphereLiberty #CVE202693895 #CVE202693909 #Cybersecurity #InfoSec #EnterpriseSecurity

https://securityonline.info/critical-ibm-websphere-liberty-vulnerabilities-patched/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-97830 - High (7.5)

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97830/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

🚨 PoC published for a Windows privilege escalation vulnerability involving the Windows Health and Optimized Experiences service; CVE-2026-85884

PoC: https://github.com/Beardhammer/CVE-2026-85884

The issue allows low-privileged code with access to the Windows diagnostics workflow to trigger a trusted ETW event containing an attacker-controlled Lua module path. The LocalSystem whesvc service can then execute that module through WinDiag without properly validating the producer or restricting the module location.

Affected: Windows 11 x64 builds including 26200.8457 and 29617.1000
Impact: Local privilege escalation to SYSTEM

The PoC demonstrates the full chain from a standard non-administrator PowerShell session to execution as NT AUTHORITY\SYSTEM.

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

two of my findings are in today's Microsoft Patch Tuesday.

CVE-2026-88156, Outlook RCE, 9.8 critical. stack-based buffer overflow, no click needed: previewing the mail in the reading pane is enough.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88156

CVE-2026-70343, MPEG-2 Video Extension RCE, 8.8. heap-based buffer overflow, the user has to open a crafted file.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70343

#InfoSec #PatchTuesday #CVE #Outlook #microsoft #vulnerability #cybersecurity #security

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

Adobe releases October 2026 patches for multiple products

Adobe's October 2026 security updates fix critical, high and medium vulnerabilities across eleven product families. The most severe (several rated CVSS 10.0) in ColdFusion, Adobe Commerce/Magento and Experience Manager. Adobe reports no known exploits in the wild but urges urgent updating. Commerce/Magento customers must also apply the separate September 7 hotfix for CVE-2026-75650.

**If you run Adobe products, review the advisory. Prioritize ColdFusion, Adobe Commerce or Magento Open Source, or Adobe Experience Manager, update them first. Each received fixes for critical flaws with a CVSS score of 10.0. In Commerce, CVE-2026-103849 is the same weakness type as last month's actively exploited CVE-2026-75650, so also confirm that the September hotfix for CVE-2026-75650 is installed, since Adobe requires it in addition to this update. Update the Content Credentials SDK components (Rust SDK, C2PA Tool, and JS SDK), which contain network-reachable flaws that could lead to security feature bypass and application denial-of-service. Then update Photoshop, FrameMaker, Dimension, Substance 3D Stager, Substance 3D Designer, Substance 3D Sampler, and Bridge. If you can't update right away, restrict network access to ColdFusion, Commerce, and Experience Manager servers, and avoid opening untrusted files in Photoshop, FrameMaker, Dimension, Substance 3D Stager, Substance 3D Designer, Substance 3D Sampler, and Bridge until patches are applied.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/adobe-releases-october-2026-patches-for-multiple-products-n-n-r-1-8/gD2P6Ple2L

PoC and technical details for CVE-2026-103572, an 8.8-severity Visual Studio Copilot RCE and SSMS flaw, are now public. Patch your IDE immediately.

#CVE2026103572 #VisualStudio #Copilot #RCE #MicrosoftSecurity #SSMS #Cybersecurity

https://securityonline.info/cve-2026-103572-visual-studio-copilot-rce-disclosed/?utm_source=mastodon&utm_medium=jetpack_social

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

@GossiTheDog

#alttext

www.google.com/search
microsoft cves october 2026 DWM
In the October 2026 Patch Tuesday release, Microsoft addressed several vulnerabilities in the Windows Desktop Window Manager (DWM) and its Core Library. These flaws are part of a record-breaking update cycle fixing over 1,400 vulnerabilities. Qualys +3
The DWM vulnerabilities are categorized below by their primary security impact:
Elevation of Privilege (EoP) Vulnerabilities
Most DWM flaws patched this month are rated Important with a CVSS score of 7.8 or 7.0, allowing a local attacker with low privileges to execute code with SYSTEM-level permissions. Notably, Microsoft flags CVE-2026-69880 as "Exploitation More
Likely":
Zero Day Initiative (ZDI) +2
CVE-2026-69880 (CVSS 7.8) - Exploitation More Likely
CVE-2026 Ask about 7.8)
CVE-2026-70255 (CVSS 7.8)
CVE-2026-96108 (CVSS 7.8)
CVE-2026-88093 (CVSS 7.8)
CVE-2026-83726 (CVSS 7.8)
CVE-2026-88128 (CVSS 7.8)
CVE-2026-88177 (CVSS 7.8)
CVE-2026-85855 (High Severity)
CVE-2026-85853 (CVSS 7.0)
CVE-2026-85854 (CVSS 7.0)
Tenable +4
Information Disclosure Vulnerabilities

🟠 CVE-2026-82416 - High (7.7)

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVE_PHP_SESSION at compile...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82416/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Patch CVE-2026-110005 (CVSS 9.9), a critical Komodo Periphery vulnerability allowing authenticated users to run arbitrary OS commands as root on the host.

#Komodo #CVE2026110005 #DockerSecurity #CommandInjection #CERTCC #Cybersecurity #LinuxSecurity

https://securityonline.info/komodo-periphery-command-injection-cve-2026-110005/?utm_source=mastodon&utm_medium=jetpack_social

An unpatched Shopware vulnerability, CVE-2026-104937, lets stored XSS steal admin tokens and lead to RCE in Shopware 6.7. Restrict media uploads now.

#Shopware #CVE2026104937 #StoredXSS #Ecommerce #CERTCC #RCE #Unpatched #CyberSecurity

https://securityonline.info/shopware-vulnerability-cve-2026-104937/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-92892 - Critical (9)

Potential arbitrary code execution, under specific configurations.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92892/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Fortinet has several new advisories today, one of them relates to a critical vulnerability.

Fortinet: CRITICAL: CVE-2026-106173: improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets https://app.opencve.io/cve/CVE-2026-106173 #Fortinet #infosec #vulnerability

@cR0w Not a perfect 10, but you've been quieter recently, so I thought I'd gift you this.

Fortinet has around 11 advisories. Stand outs are

• CVE-2026-106173 (9.4 critical) path traversal in FortiSIEM leads to RCE
• CVE-2026-107656 (9.6 critical) authentication bypass in FortiSandbox GUI

No exploitation mentioned.

https://fortiguard.fortinet.com/psirt/FG-IR-26-180
https://fortiguard.fortinet.com/psirt/FG-IR-26-185

#fortinet #CVE #PatchTuesday

GhostPat : cette faille critique Docker Hub permettait d’usurper n’importe quel utilisateur https://www.it-connect.fr/docker-hub-faille-ghostpat-cve-2026-105445/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Docker

SANS Stormcast Thursday, October 15th, 2026: Orphaned VBA Macros in AutoCAD DWG Files; Ledger Wallet Hardware Implants; Docker Hub Token Bug (CVE-2026-105445); curl HTTP/2 RCE
https://isc.sans.edu/podcastdetail/10138

Docker Hub Fixes Critical Token Flaw Enabling User Impersonation

Docker Hub resolved a critical vulnerability (CVE-2026-105445) that allowed attackers to impersonate users and tamper with container images by exploiting a flaw in the account conversion process.

**Check your email for a notification from Docker to see if your account was part of the affected group. Even if you were not notified, rotate your personal access tokens regularly and limit their permissions to only what is necessary.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/docker-hub-fixes-critical-token-flaw-enabling-user-impersonation-1-2-w-t-a/gD2P6Ple2L

Read the latest Docker Hub security advisory regarding CVE-2026-105445. Learn how this critical access token vulnerability impacts supply chain security.

#DockerHub #SecurityAdvisory #CVE2026105445 #CyberSecurity #SupplyChain

https://securityonline.info/docker-hub-security-advisory-cve-2026-105445/?utm_source=mastodon&utm_medium=jetpack_social

"Docker Hub flaw let attackers impersonate users, tamper with images"

"[...] Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT)."

https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/

#Docker

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT). https://www.bleepingcomputer.com/news/security/docker-hub-flaw-let-attackers-impersonate-users-tamper-with-images/

Docker Hub flaw let attackers impersonate users, tamper with images

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using...

🔗️ [Bleepingcomputer] https://link.is.it/OuRC7Q

Docker fixed critical CVE-2026-105445 in Docker Hub. A holder of a personal access token could impersonate another user at registry level, accessing private repositories and tampering with images. This matters because trusted images become a supply-chain attack vector. #DockerHub #SupplyChainSecurity #ContainerSecurity

https://cyberworldops.eu/en/docker-hub-fixes-cve-2026-105445-blocking-token-based-user

Don't use Docker.

https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/

Hypervisor escape patches for XenServer 8.4 and XenServer 9

CVE-2026-79610
CVE-2026-102700
CVE-2026-102701

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697170&articleTitle=XenServer_Security_Update_for_CVE_2026_79610_CVE_2026_79610_CVE_2026_102700_and_CVE_2026_102701

Hypervisor escape patches for XenServer 8.4 and XenServer 9

CVE-2026-79610
CVE-2026-102700
CVE-2026-102701

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697170&articleTitle=XenServer_Security_Update_for_CVE_2026_79610_CVE_2026_79610_CVE_2026_102700_and_CVE_2026_102701

🚨 Rapid Response: Ivanti Connect Secure Authentication Bypass (CVE-2026-104935)

Ivanti confirms active exploitation of a high-severity (CVSS 8.6) authentication bypass vulnerability in Ivanti Connect Secure that allows unauthenticated attackers to execute arbitrary commands. CISA added the flaw to its Known Exploited Vulnerabilities (KEV) catalog on October 13.

Censys currently observes 7,604 Internet-exposed hosts and 269,319 web properties running Ivanti Connect Secure, excluding honeypots. These are total product exposures, not confirmed vulnerable systems.

Full Censys ARC advisory, including affected versions, available patches, and remediation guidance: https://censys.com/advisory/cve-2026-104935/

#CensysARC #Ivanti #Cybersecurity #VulnerabilityManagement #InfoSec

CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on. https://www.darkreading.com/vulnerabilities-threats/ivanti-ics-zero-day-attacks-vendor-patching

🚨 Rapid Response: Ivanti Connect Secure Authentication Bypass (CVE-2026-104935)

Ivanti confirms active exploitation of a high-severity (CVSS 8.6) authentication bypass vulnerability in Ivanti Connect Secure that allows unauthenticated attackers to execute arbitrary commands. CISA added the flaw to its Known Exploited Vulnerabilities (KEV) catalog on October 13.

Censys currently observes 7,604 Internet-exposed hosts and 269,319 web properties running Ivanti Connect Secure, excluding honeypots. These are total product exposures, not confirmed vulnerable systems.

Full Censys ARC advisory, including affected versions, available patches, and remediation guidance: https://censys.com/advisory/cve-2026-104935/

#CensysARC #Ivanti #Cybersecurity #VulnerabilityManagement #InfoSec

CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on. https://www.darkreading.com/vulnerabilities-threats/ivanti-ics-zero-day-attacks-vendor-patching

CW: Riasztás — Ivanti Connect Secure (CVE-2026-104935) és Microsoft Windows Shell (CVE-2026-96951) aktívan kihasznált, magas kockázatú sérülékenységek. Ivanti: érintett 25.1.3.0/25.1.3.1 és 22.8R2.5 előtti verziók; 25.1.1.2+ javasolt. Microsoft: MotW megkerülés, e-mail/üzenet útján terjesztett támadások. Frissíts, ellenőrizd naplókat és EDR-forensic vizsgálatokat. #Ivanti #CVE-2026-104935 #CVE-2026-96951 #Windows #infosec https://linuxmint.hu/hir/2026/10/riasztas-az-ivanti-connect-secure-es-a-microsoft-windows-shell-serulekenysegeirol

**Latest Global Updates (October 14-15, 2026)**

Cybersecurity: CISA urged immediate updates for Ivanti Connect Secure due to an actively exploited zero-day (CVE-2026-104935) found on Oct 14, 2026, enabling remote command execution. A global operation also disrupted a massive cybercriminal phishing network.

Technology: Samsung hosted its Future Wireless Summit on Oct 15, 2026, focusing on advancements in 6G and AI.

Geopolitics: FBI Director Kash Patel is reportedly in Russia (Oct 14-15, 2026) for high-level discussions on Ukraine and bilateral relations.

#AnonNews_irc #Cybersecurity #News

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-104935 – Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Executive briefing on CVE-2026-104935 impacting Ivanti Connect Secure, featuring active exploitation telemetry, backdoor removal strategies, and endpoint hardening protocols....

https://thecybermind.co/veou

⚠️Alerte CERT-FR⚠️

La vulnérabilité CVE-2026-CVE-2026-104935 permet à un attaquant non authentifié l'exécution de code arbitraire à distance dans Ivanti Connect Secure. Elle est activement exploitée.
https://cert.cyber.gouv.fr/alerte/CERTFR-2026-ALE-013/

(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2026-104935 – Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

CVE-2026-104935 calls for version-specific review of Ivanti Connect Secure deployments. This technical brief covers vulnerability impact, remediation decisions, and investigation priorities while clearly identifying the limits of unvalidated detection content....

https://thecybermind.co/kjcm

Ivanti Connect Secure Zero-Day Chain Exploited for Root Access

Ivanti patched a zero-day chain (CVE-2026-104935) in its Connect Secure VPN that allowed attackers to gain root access and steal Active Directory credentials.

**If you use Ivanti Connect Secure VPN, this is urgent. Update right away to a fixed version (25.1.1.2, 25.1.3.0, 25.1.3.1 or 22.8R2.5) and run Ivanti's Integrity Checker Tool. Don't rely on a clean result alone, because the attackers hide in memory and erase their tracks. If your VPN was exposed, assume your network is compromised: get a full forensic review, and reset every domain, admin and LAPS password and BitLocker recovery key that could have passed through it.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/ivanti-connect-secure-zero-day-chain-exploited-for-root-access-l-a-l-7-8/gD2P6Ple2L

Discover how a critical Ivanti Connect Secure vulnerability (CVE-2026-104935) is chained in zero-day attacks to gain root access and steal network secrets.

#Ivanti #ConnectSecure #Cybersecurity #ZeroDay #InfoSec

https://securityexpress.info/ivanti-connect-secure-vulnerability-cve-2026-104935/?utm_source=mastodon&utm_medium=jetpack_social

CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which allows remote, unauthenticated execution of arbitrary commands, to conduct credential theft and data exfiltration. CISA added CVE-2026-104935 to its Known Exploited Vulnerabilities (KEV) Catalog on Oct. 13, 2026.

https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure

#CISA #KEV #Ivanti #zeroday

Placeholder CISA blog post about Ivanti Connect Secure zero-day CVE-2026-104935 and Microsoft Windows Shell Security Feature Bypass zero-day CVE-2026-96951

https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-adds-two-known-exploited-vulnerabilities-catalog

#CISA #KEV #eitw #zeroday #PatchTuesday

Ivanti disclosed a zero-day chain in Connect Secure (CVE-2026-104935) allowing unauthenticated root access. The flaw affects internet-facing VPN appliances widely used for remote access, making mass exploitation likely. Prioritize patching and compromise hunting over basic remediation. #Ivanti #ConnectSecure #ZeroDay

https://cyberworldops.eu/en/ivanti-connect-secure-zero-day-chain-gives-attackers-unauthenticated

New.

CISA has added the latest Ivanti flaw to the catalogue.

- CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-104935 #infosec #vulnerability #CISA #Ivanti

🚨 [CISA-2026:1013] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1013)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-104935 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-104935)
- Name: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Ivanti
- Product: Connect Secure
- Notes: https:/forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935 ; https://nvd.nist.gov/vuln/detail/CVE-2026-104935

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261013 #cisa20261013 #cve_2026_104935 #cve2026104935

New Ivanti zero-day

https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US

UTA0576 chained an Ivanti Connect Secure zero-day, CVE-2026-104935, with a root exploit to steal AD credentials. Patch now and check memory.

#Ivanti #ZeroDay #CVE2026104935 #UTA0576 #Volexity #VPN #ActiveDirectory #Cybersecurity

https://securityonline.info/ivanti-connect-secure-zero-day-cve-2026-104935/?utm_source=mastodon&utm_medium=jetpack_social

An Ivanti 0-day auth bypass is being exploited in the wild with significant post-exploitation activity.

https://ifin.network/t/cve-2026-104935-ivanti-connect-secure-auth-bypass-exploited-for-privilege-escalation-code-execution/900

#ThreatIntel #ThreatIntelligence #IFIN

Volexity has identified active in-the-wild exploitation of a vulnerability chain allowing unauthenticated remote code execution in Ivanti Connect Secure VPN devices. Ivanti has published an advisory (CVE-2026-104935) providing upgrade instructions to customers. Systems exhibiting signs of compromise, such as attempts to move laterally originating from the ICS VPN device, should be forensically investigated to ensure no breach has occurred.

https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/

#ivanti #volexity #ivanticonnectsecure #zeroday #kev #eitw #cve

@GossiTheDog CVE-2026-104935 is now live in CISA's KEV Catalog. https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2026-104935+&field_date_added_wrapper=all&field_cve=&sort_by=field_date_added&items_per_page=20&url=

CVE ID: CVE-2026-104935
Vendor: Ivanti
Product: Connect Secure
Date Added: 2026-10-13
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-104935

Ivanti Connect Secure vulnerability CVE-2026-104935 is exploited in the wild, letting unauthenticated attackers run commands. Update to 25.1.1.2 now.

#Ivanti #ConnectSecure #CVE2026104935 #ExploitedInTheWild #VPNSecurity #ZeroDay #PatchNow #CyberSecurity

https://securityonline.info/ivanti-connect-secure-cve-2026-104935-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Ivanti Secure Connect has an in the wild zero day allowed unauth RCE, patch is out

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US

CVE-2026-104935

related to the above

Ivanti Connect Secure zero-day CVE-2026-104935 (8.6 high)
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands.

We are aware of exploitation in the wild affecting a limited number of customers at the time of disclosure.

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US

#ivanti #ics #zeroday #eitw #cve

🟠 CVE-2026-65198 - High (8.6)

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-65198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-95680 - High (8)

IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95680/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

NVIDIA AIStore vulnerabilities, including a CVSS 10.0 flaw enabling remote code execution, lead 18 fixes across NVIDIA AI tools. Upgrade to AIStore 5.0.

#NVIDIA #AIStore #CVE202665162 #CVE202665173 #CVE202665172 #AISecurity #MegatronLM #CyberSecurity

https://securityonline.info/nvidia-aistore-vulnerabilities-cve-2026-65162/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-89107 lands a 9.9, injecting arbitrary ABAP code into S/4HANA, while CVE-2026-89108 sneaks an unauthorized admin account onto your Java app server via Manufacturing Integration and Intelligence. The defender is down in three corners simultaneously — that's just bad ring awareness.

Apply SAP's October 2026 Security Patch Day updates to NetWeaver, S/4HANA, and related products immediately.

Reward: You've unlocked the Folding Chair of Humility — spectators only get one. (2/3)

🏆 New Achievement! CVSS Perfect Ten, Crowd Goes Wild!

AND WE ARE LIVE, folks, because SAP's October 2026 Patch Day just delivered a four-bug card and the crowd is absolutely losing it! In the blue corner, CVE-2026-89111 — a flawless CVSS 10.0 OAuth2 SSRF in Cloud SDK for Python — lets a low-privileged attacker redirect requests through your tenant subdomain and invoke internal operations on remote systems. Full compromise, clean knockout. The crowd loves it.

Not done! (1/3)

SAP Patches Critical CVSS 10.0 Flaw in Cloud SDK for Python

SAP’s October 2026 security patch delivers 22 notes, including four critical flaws led by CVE-2026-89111.

🔗️ [Thecyberexpress] https://link.is.it/SGH13d

CVE-2026-89107 lands a 9.9, injecting arbitrary ABAP code into S/4HANA, while CVE-2026-89108 sneaks an unauthorized admin account onto your Java app server via Manufacturing Integration and Intelligence. The defender is down in three corners simultaneously — that's just bad ring awareness.

Apply SAP's October 2026 Security Patch Day updates to NetWeaver, S/4HANA, and related products immediately.

Reward: You've unlocked the Folding Chair of Humility — spectators only get one. (2/3)

🚨 Rapid Response: Critical AnyDesk Linux Vulnerability (CVE-2026-109390)

A critical pre-authentication vulnerability in AnyDesk for Linux could allow an unauthenticated attacker to execute code as root without user interaction. A working proof-of-concept exploit is now publicly available.

Censys currently detects 175,838 Internet-exposed AnyDesk hosts on TCP port 7070. This figure represents total AnyDesk exposure on the default direct-connection port, not just vulnerable hosts.

Full Censys ARC advisory, including affected versions, exposure data, and remediation guidance: https://censys.com/advisory/cve-2026-109390/