🟠 CVE-2026-120194 - High (7.5)

A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forc...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120194/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Out-of-bounds write (CWE-787) in MediaTek chipsets' modem (CVE-2026-68589, HIGH) allows local privilege escalation for attackers with System privilege. Patch: MOLY01320076. Fix now! https://radar.offseq.com/threat/cve-2026-68589-cwe-787-out-of-bounds-write-in-mediatek-inc-mediatek-chipset-743516bd3729fd5f #OffSeq #MediaTek #Vulnerability #Security

Out-of-bounds write (CWE-787) in MediaTek chipsets' modem (CVE-2026-68589, HIGH) allows local privilege escalation for attackers with System privilege. Patch: MOLY01320076. Fix now! https://radar.offseq.com/threat/cve-2026-68589-cwe-787-out-of-bounds-write-in-mediatek-inc-mediatek-chipset-743516bd3729fd5f #OffSeq #MediaTek #Vulnerability #Security

🔴 CVE-2026-120280 - Critical (10)

A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_id/group_name leads to os c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120280/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120280 - Critical (10)

A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_id/group_name leads to os c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120280/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120283 - Critical (10)

A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120283/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120283 – CRITICAL stack buffer overflow in Linksys E8450 v1.2.00.360516. Remote, unauthenticated RCE possible via /www/cgi-bin/portal.cgi (hidden_timezone). No patch from vendor. Restrict access ASAP. https://radar.offseq.com/threat/cve-2026-120283-stack-based-buffer-overflow-in-linksys-e8450-ba4aff2d530ff600 #OffSeq #CVE2026120283 #InfoSec #RouterSecurity

🔴 CVE-2026-120283 - Critical (10)

A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120283/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120283 – CRITICAL stack buffer overflow in Linksys E8450 v1.2.00.360516. Remote, unauthenticated RCE possible via /www/cgi-bin/portal.cgi (hidden_timezone). No patch from vendor. Restrict access ASAP. https://radar.offseq.com/threat/cve-2026-120283-stack-based-buffer-overflow-in-linksys-e8450-ba4aff2d530ff600 #OffSeq #CVE2026120283 #InfoSec #RouterSecurity

🔴 CVE-2026-120282 - Critical (9.9)

A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120282/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120282 - Critical (9.9)

A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120282/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120281 - Critical (10)

A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120281/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120281 - Critical (10)

A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack ma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120281/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WAVLINK WN536AX6-A V260507 is impacted by CVE-2026-120279 (CRITICAL, CVSS 10) – remote OS command injection via /protocol.csp openvpn_cli Handler. Exploit is public. Patch or isolate devices now! https://radar.offseq.com/threat/a-flaw-has-been-found-in-wavlink-wn536ax6-a-v260507-cve-2026-120279-f78efd8cb5e677e8 #OffSeq #Vulnerability #CVE2026120279

🔴 CVE-2026-120279 - Critical (10)

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120279/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WAVLINK WN536AX6-A V260507 is impacted by CVE-2026-120279 (CRITICAL, CVSS 10) – remote OS command injection via /protocol.csp openvpn_cli Handler. Exploit is public. Patch or isolate devices now! https://radar.offseq.com/threat/a-flaw-has-been-found-in-wavlink-wn536ax6-a-v260507-cve-2026-120279-f78efd8cb5e677e8 #OffSeq #Vulnerability #CVE2026120279

🔴 CVE-2026-120279 - Critical (10)

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120279/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Apache Wicket vulnerabilities: a security update fixes 19 flaws, including CVE-2026-84170 upload DoS and XSS bugs. Upgrade to 8.20.0, 9.25.0 or 10.12.0.

#ApacheWicket #Java #CVE202684170 #CVE202683594 #XSS #WebSecurity #PatchNow #Vulnerability

https://securityonline.info/apache-wicket-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Apache Wicket vulnerabilities: a security update fixes 19 flaws, including CVE-2026-84170 upload DoS and XSS bugs. Upgrade to 8.20.0, 9.25.0 or 10.12.0.

#ApacheWicket #Java #CVE202684170 #CVE202683594 #XSS #WebSecurity #PatchNow #Vulnerability

https://securityonline.info/apache-wicket-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-120277 - Critical (10)

A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120277/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120277: CRITICAL OS command injection in WAVLINK WN536AX6-A (V260507_2.0.0). Remote attackers can execute OS commands – no patch yet. Restrict access & monitor for updates. Exploit code is public. https://radar.offseq.com/threat/cve-2026-120277-os-command-injection-in-wavlink-wn536ax6-a-51fe2fe977f184ad #OffSeq #CVE #Infosec #IoT

🔴 CVE-2026-120277 - Critical (10)

A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120277/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120277: CRITICAL OS command injection in WAVLINK WN536AX6-A (V260507_2.0.0). Remote attackers can execute OS commands – no patch yet. Restrict access & monitor for updates. Exploit code is public. https://radar.offseq.com/threat/cve-2026-120277-os-command-injection-in-wavlink-wn536ax6-a-51fe2fe977f184ad #OffSeq #CVE #Infosec #IoT

🔴 CVE-2026-120276 - Critical (10)

A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120276/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120276 - Critical (10)

A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120276/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120240 - Critical (9.9)

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120240/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120240 - Critical (9.9)

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120240/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120241 - High (7.5)

A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120241 - High (7.5)

A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118638 - High (7.5)

The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post data, allowing unauthenticated attackers to overwrite the title of arbitrary posts, create arbitrary published posts, a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118638/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118638 - High (7.5)

The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post data, allowing unauthenticated attackers to overwrite the title of arbitrary posts, create arbitrary published posts, a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118638/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-94361 – HIGH severity in Payable Payment Gateway for WooCommerce <1.3.1: missing authorization lets unauthenticated users change any order's payment status. Patch to 1.3.1+ ASAP. Details: https://radar.offseq.com/threat/cve-2026-94361-cwe-862-missing-authorization-in-payable-payment-gateway-for-woocommerce-b6e3b17dee967e2d #OffSeq #WooCommerce #Infosec #WordPress

🔴 CVE-2026-62048 - Critical (9.3)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62048/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62048 - Critical (9.3)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62048/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120239 - Critical (9.9)

A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument file_id results in os command ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120239/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120239 - Critical (9.9)

A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument file_id results in os command ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120239/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120238 - Critical (9.9)

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of the argument file_id leads to os command injection. The attack ca...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120238/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120238 - Critical (9.9)

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of the argument file_id leads to os command injection. The attack ca...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120238/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118185 - High (7.5)

The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for a pending login, allowing an attacker who already knows a user's password to brute force the second factor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118185/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118185 - High (7.5)

The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that can be submitted for a pending login, allowing an attacker who already knows a user's password to brute force the second factor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118185/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Prefab UI's opt-in Generative UI sandbox has a bypass (CVE-2026-120338). The Pyodide/Deno boundary let caller-supplied Python read and write host files as the server OS user.

Relevant to FastMCP servers that expose generate_prefab_ui. Unauthenticated exposure depends on the server's access controls.

Fixed in prefab-ui 0.21.0, released Oct 26. Check versions and tool access.

https://github.com/PrefectHQ/prefab/pull/538

#Cybersecurity #Infosec #AppSec #MCP

🔴 CVE-2026-120338 - Critical (10)

Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120338/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Prefab UI's opt-in Generative UI sandbox has a bypass (CVE-2026-120338). The Pyodide/Deno boundary let caller-supplied Python read and write host files as the server OS user.

Relevant to FastMCP servers that expose generate_prefab_ui. Unauthenticated exposure depends on the server's access controls.

Fixed in prefab-ui 0.21.0, released Oct 26. Check versions and tool access.

https://github.com/PrefectHQ/prefab/pull/538

#Cybersecurity #Infosec #AppSec #MCP

🔴 CVE-2026-120338 - Critical (10)

Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120338/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120229 - Critical (9.1)

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. The attack is possible to be carried out re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120229/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120229 - Critical (9.1)

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. The attack is possible to be carried out re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120229/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120232 - High (8.8)

A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120232/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120232 - High (8.8)

A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120232/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120227 - Critical (9.9)

A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file static_route_setting.sh of the component ioos Web Backend. Performing a manipulation of the argument rule_name results in os comman...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120227/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120308 - Critical (9.9)

A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub configuration. Nothing checks t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120308/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120308 (CRITICAL, CVSS 9.9): Path traversal in beam-cloud Beta9 gateway (<0.1.776/0.1.756) lets tenants with workspace tokens read/write any worker files. Upgrade gateway & worker ASAP to fix. https://radar.offseq.com/threat/cve-2026-120308-cwe-22-path-traversal-in-beam-cloud-beta9-gateway-9721aa33b77da3f8 #OffSeq #CVE2026120308 #infosec #CloudSecurity

🔴 CVE-2026-120306 - Critical (9.9)

Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAH_ISOLATION=chroot, and no buildah invocation passes --isolation, so the step only...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120306/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WAVLINK WN553X1-B firmware V260403_2.0.0 has authenticated command injection (CVE-2026-120231). A researcher reproduced root execution in emulated firmware. Default passwords raise the risk.

MSPs: inventory devices, change defaults, and restrict management access. No confirmed vendor fix or in-the-wild exploitation.

https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK%20WN553X1-B%20Router/WAVLINK_WN553X1-B_openvpn_cli_command_injection.md

#Cybersecurity #Infosec #NetworkSecurity #MSP

🔴 CVE-2026-120231 - Critical (9.9)

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument file_id causes os command injection. I...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120231/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WAVLINK WN553X1-B firmware V260403_2.0.0 has authenticated command injection (CVE-2026-120231). A researcher reproduced root execution in emulated firmware. Default passwords raise the risk.

MSPs: inventory devices, change defaults, and restrict management access. No confirmed vendor fix or in-the-wild exploitation.

https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK%20WN553X1-B%20Router/WAVLINK_WN553X1-B_openvpn_cli_command_injection.md

#Cybersecurity #Infosec #NetworkSecurity #MSP

🔴 CVE-2026-120231 - Critical (9.9)

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument file_id causes os command injection. I...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120231/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120230 - Critical (9.9)

A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web Backend. The manipulation of the argument vlan_name results in os command injection. The attack may be performed from remote. Th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120230/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120230 - Critical (9.9)

A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web Backend. The manipulation of the argument vlan_name results in os command injection. The attack may be performed from remote. Th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120230/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120228 - Critical (9.9)

A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120228/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120228 - Critical (9.9)

A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120228/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120307 - Critical (9.9)

The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into a worker path. If the unresolved path starts with a mount destination, including the default upload mount ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120307/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120225 (CVSS 9.4) affects Oray Pugongying X5 Pro v7.6.0 & v7.6.1 – critical path traversal in config_restore_ex lets remote attackers access/modify files. Public exploit code, no patch. Restrict access & monitor logs. https://radar.offseq.com/threat/cve-2026-120225-relative-path-traversal-in-oray-pugongying-x5-pro-9cee731f9b642b58 #OffSeq #CVE2026120225 #infosec #IoT

🔴 CVE-2026-120225 - Critical (9.1)

A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function config_restore_ex of the file /etc/openwrt_release. This manipulation of the argument filename causes relative path traversal. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120225/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-120224 - Critical (9.9)

A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_by_json/run_async_task of the component API Authorization. The manipulation results in improper authorization. The attack can be launched ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120224/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Gitea has released version 28.3, addressing 20 security vulnerabilities alongside performance improvements.

Key fixes include resolution for CVE-2026-120263, an OAuth2 account takeover vulnerability affecting installations with automatic account linking and open registration, and CVE-2026-118386 regarding workflow execution permissions.

The update also tackles private repository access controls, runner token handling, and migration…

https://en.hacks.gr/i-gitea-kykloforei-nea-ekdosi-poy-diorthonei-eikosi-provlimata-asfaleias/

#Gitea #OAuth2 #DevOps #OpenSource

CW: CVE-2026-120263, CVE-2026-118386 — OAuth2 alapú fiókátvétel és Actions workflow-k kihasználása; összesen 20 biztonsági javítás. Emellett több teljesítmény- és Actions-fejlesztés. Saját Gitea-t üzemeltetsz? Frissíts 28.3-ra. Részletek: https://linuxmint.hu/hir/2026/11/megjelent-a-gitea-283-20-biztonsagi-javitas-es-teljesitmenybeli-fejlesztes
#Gitea #Linux #OpenSource #Security

Gitea has released version 28.3, addressing 20 security vulnerabilities alongside performance improvements.

Key fixes include resolution for CVE-2026-120263, an OAuth2 account takeover vulnerability affecting installations with automatic account linking and open registration, and CVE-2026-118386 regarding workflow execution permissions.

The update also tackles private repository access controls, runner token handling, and migration…

https://en.hacks.gr/i-gitea-kykloforei-nea-ekdosi-poy-diorthonei-eikosi-provlimata-asfaleias/

#Gitea #OAuth2 #DevOps #OpenSource

CW: CVE-2026-120263, CVE-2026-118386 — OAuth2 alapú fiókátvétel és Actions workflow-k kihasználása; összesen 20 biztonsági javítás. Emellett több teljesítmény- és Actions-fejlesztés. Saját Gitea-t üzemeltetsz? Frissíts 28.3-ra. Részletek: https://linuxmint.hu/hir/2026/11/megjelent-a-gitea-283-20-biztonsagi-javitas-es-teljesitmenybeli-fejlesztes
#Gitea #Linux #OpenSource #Security

WAVLINK WL-WN530BE1-A V251117 is impacted by CRITICAL CVE-2026-120198 (CVSS 10) – remote, unauthenticated command injection in /protocol.csp. Exploit code is public, no patch yet. Isolate devices from untrusted networks now. https://radar.offseq.com/threat/a-vulnerability-has-been-found-in-wavlink-wl-wn530be1-a-v251117-cve-2026-120198-6f356a0bfcb26716 #OffSeq #CVE2026120198 #infosec

🔴 CVE-2026-120198 - Critical (10)

A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120198/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120198 — CRITICAL command injection (CVSS 10) in WAVLINK WL-WN530BE1-A via con_check_read_finish in /protocol.csp. Remote code execution possible; public exploit out, no patch yet. Restrict device access & monitor for updates: https://radar.offseq.com/threat/cve-2026-120198-command-injection-in-wavlink-wl-wn530be1-a-ba1bf1be0ae2942e #OffSeq #Vuln #IoT

WAVLINK WL-WN530HG4B M_V260724 has a CRITICAL OS command injection (CVE-2026-120197, CVSS 9.9). Exploit code is public, no patch yet. Restrict management interface access. https://radar.offseq.com/threat/a-flaw-has-been-found-in-wavlink-wl-wn530hg4b-mv260724-cve-2026-120197-caef8b3ed7bd13a6 #OffSeq #CVE2026120197 #RouterVuln #Infosec

🔴 CVE-2026-120197 - Critical (9.9)

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120197 (CRITICAL, CVSS 9.4): WAVLINK WL-WN530HG4B routers have an OS command injection flaw in port_forward (/cgi-bin/wapi.cgi). Public exploit code exists. Restrict access, monitor devices, and check for updates. https://radar.offseq.com/threat/cve-2026-120197-os-command-injection-in-wavlink-wl-wn530hg4b-b13519810fe65740 #OffSeq #Vulnerability #IoTSecurity

🔴 CVE-2026-120195 - Critical (10)

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlan_ssi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120195/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WAVLINK WN579X3-D V250402 hit by CRITICAL OS command injection (CVE-2026-120196, CVSS 9.9). Public exploits available; no patch yet. Restrict device access, disable remote management. https://radar.offseq.com/threat/a-vulnerability-was-detected-in-wavlink-wn579x3-d-v250402-cve-2026-120196-2bf24d3ff2b5dc6b #OffSeq #infosec #CVE #IoT

🔴 CVE-2026-120196 - Critical (9.9)

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection. The attack may be performed from remote. The ex...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120196/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120192: MEDIUM severity info disclosure in Presenton ≤0.9.11-beta. Remote, unauthenticated exploitation via /app_data — public exploit code exists. Patch: upgrade to 0.9.12-beta. https://radar.offseq.com/threat/cve-2026-120192-information-disclosure-in-presenton-7ee6bdee4c432f8b #OffSeq #Vulnerability #Infosec #CVE2026_120192

🔴 CVE-2026-120189 - Critical (10)

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120189/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-120189: CRITICAL buffer overflow in D-Link DIR-505 v1.10B02 (TFTP handler). Remote, unauthenticated code execution possible. Exploit code public; patch unknown. Disable/restrict TFTP access ASAP. https://radar.offseq.com/threat/cve-2026-120189-stack-based-buffer-overflow-in-d-link-dir-505-3cde01417e371d27 #OffSeq #CVE #IoTSecurity

CVE-2026-118636: CRITICAL RCE in Apache MINA 3.0.0 codec via unsafe deserialization in JavaNativeMessageDecoder. No fix – 3.0.0 is unsupported. Immediate migration to 2.2.x recommended. Details: https://radar.offseq.com/threat/unsupported-when-assigned-javanativemessagedecoder-in-the-mina-30-codec-module-calls-6e22dafb201ce016 #OffSeq #ApacheMINA #RCE #JavaSecurity

🔴 CVE-2026-118636 - Critical (9.8)

**UNSUPPORTED WHEN ASSIGNED** 

JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class filter, so an
application that puts it in front of an untrusted peer is open to gadget-chain R...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118636/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Anza has urged Solana mainnet-beta validators to act on CVE-2026-98432, a critical Linux kernel use-after-free bug scored 9.8 that lets a remote attacker run commands as root. Ubuntu still lists the fix as work in progress, so operators should disable Multipath TCP. A host takeover could expose the validator identity key. https://thedefiant.io/news/security/anza-urges-solana-validators-to-act-on-critical-linux-flaw #Web3 #Blockchain #Solana

🐧 SIGINT // Linux Watch — 2026-11-02

A critical kernel flaw reaching back to 4.4 touches Ubuntu, RHEL and Rocky, with some distros patched and others (Ubuntu) still cooking. Check your update channels now, since a kernel this old means a lot of boxes are exposed.

🔗 https://the420.in/tech-talk/critical-linux-kernel-vulnerability-cve-2026-98432/

#Linux #OpenSource #FOSS

🐧 SIGINT // Ubuntu Watch — 2026-11-02

A remote 9.8 TCP use-after-free in the kernel handshake path is exactly the sort of thing that ruins a weekend. This one covers Ubuntu patch status and warns not to trust live-patch claims unless the vendor names the CVE. Otherwise: install the fixed kernel and reboot.

🔗 https://www.penligent.ai/hackinglabs/cve-2026-98432/

#Ubuntu #Linux #infosec

what the heck?

CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. Ubuntu and RHEL haven't shipped a fixed kernel yet.

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

An unreleased Claude needed 53 minutes to take over Linux servers through a flaw Ubuntu and Red Hat haven’t fixed
CVE-2026-98432 is a critical Linux kernel flaw an unreleased Claude model turned into a 53-minute remote root exploit. Ubuntu and RHEL have no fix yet.

#Linux #Claude #AI

https://madrobot.blog/2026/11/01/claude-linux-cve-2026-98432-root-exploit/

📰 Today's Top 18 Hacker News Stories (Sorted by Score) 📰
----------------------------------------
🔖 Title: HackerTube: YouTube built from videos recommended by HN
🔗 URL: https://karpathy.bearblog.dev/hacker-tube/
👍 Score: [1979]
💬 Discussion: https://news.ycombinator.com/item?id=50319510
----------------------------------------
🔖 Title: An Italian farmer found some unknown seeds in his attic and planted them
🔗 URL: https://www.smithsonianmag.com/science-nature/italian-farmer-found-unknown-seeds-attic-with-nothing-lose-planted-them-result-biblical-180989644/
👍 Score: [698]
💬 Discussion: https://news.ycombinator.com/item?id=50320963
----------------------------------------
🔖 Title: TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
🔗 URL: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
👍 Score: [643]
💬 Discussion: https://news.ycombinator.com/item?id=50319143
----------------------------------------
🔖 Title: Show HN: HackerBooks – HackerTube, but for books mentioned on HN
🔗 URL: https://hackerbooks.org
👍 Score: [475]
💬 Discussion: https://news.ycombinator.com/item?id=50326821
----------------------------------------
🔖 Title: Memdoor: A team of 5 Qwen3.8-27B models beats Fable 5 on LiveCodeBench Hard
🔗 URL: https://github.com/guregodevo/memdoor/tree/main/examples/workflows/team-solve
👍 Score: [393]
💬 Discussion: https://news.ycombinator.com/item?id=50320995
----------------------------------------
🔖 Title: Police chief unplugs Flock cameras after company ignores contract cancellation
🔗 URL: https://www.tomshardware.com/tech-industry/big-tech/police-chief-physically-unplugs-flock-cameras-after-the-company-ignores-contract-cancellation-city-takes-matters-into-its-own-hands-amid-privacy-controversies
👍 Score: [357]
💬 Discussion: https://news.ycombinator.com/item?id=50326118
----------------------------------------
🔖 Title: Brazilian Court Sanctions Lawyers for Prompt Injection in Court Filing
🔗 URL: https://jetstream.security/insights/brazilian-court-sanctions-prompt-injection-filing/
👍 Score: [275]
💬 Discussion: https://news.ycombinator.com/item?id=50322173
----------------------------------------
🔖 Title: Lenovo's 'encrypted' fingerprint USB is just an unencrypted SD card in a case
🔗 URL: https://www.reddit.com/r/technology/comments/1xl2pr3/lenovos_encrypted_fingerprint_usb_drive_is_just/
👍 Score: [265]
💬 Discussion: https://news.ycombinator.com/item?id=50326099
----------------------------------------
🔖 Title: The AI cost of JavaScript frameworks
🔗 URL: https://nolanlawson.com/2026/10/28/the-ai-cost-of-javascript-frameworks/
👍 Score: [243]
💬 Discussion: https://news.ycombinator.com/item?id=50323088
----------------------------------------
🔖 Title: Patrick Stewart taught us what good men do with power
🔗 URL: https://www.vox.com/politics/508526/patrick-stewart-jean-luc-picard-star-trek-liberalism
👍 Score: [209]
💬 Discussion: https://news.ycombinator.com/item?id=50327650
----------------------------------------
🔖 Title: Frontier Airlines Likely Breached
🔗 URL: https://www.reddit.com/r/frontierairlines/comments/1xl20e8/psa_email_scam/
👍 Score: [108]
💬 Discussion: https://news.ycombinator.com/item?id=50327266
----------------------------------------
🔖 Title: Seoul Viosys begins production of rare-earth-free white light emitter
🔗 URL: https://www.semiconductor-today.com/news_items/2026/oct/seoul-291026.shtml
👍 Score: [94]
💬 Discussion: https://news.ycombinator.com/item?id=50327058
----------------------------------------
🔖 Title: Radiation Map of the World
🔗 URL: https://radiaverse.com/
👍 Score: [90]
💬 Discussion: https://news.ycombinator.com/item?id=50280131
----------------------------------------
🔖 Title: One-minute frequency disturbances from synchronization in power systems
🔗 URL: https://www.nature.com/articles/s41560-026-02144-0
👍 Score: [89]
💬 Discussion: https://news.ycombinator.com/item?id=50314617
----------------------------------------
🔖 Title: Proving and improving the Platonic Representation Hypothesis with JEPAs
🔗 URL: https://arxiv.org/abs/2610.39302
👍 Score: [84]
💬 Discussion: https://news.ycombinator.com/item?id=50325454
----------------------------------------
🔖 Title: Novellas with Groff
🔗 URL: https://movq.de/blog/postings/2026-10-31/0/POSTING-en.html
👍 Score: [79]
💬 Discussion: https://news.ycombinator.com/item?id=50325694
----------------------------------------
🔖 Title: Copper – A minimal low-level programming language with OOP and generics
🔗 URL: https://tibleiz.net/copper/
👍 Score: [74]
💬 Discussion: https://news.ycombinator.com/item?id=50308754
----------------------------------------
🔖 Title: Nurses Sound Alarm as 'Uber for Nursing' Apps Push to Deregulate Healthcare
🔗 URL: https://nurse.org/news/uber-for-nursing-gig-apps-report/
👍 Score: [72]
💬 Discussion: https://news.ycombinator.com/item?id=50328487
----------------------------------------

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

#linux

Linux's October 2026 TCP Use-After-Free: CVE-2026-98432 — Atlas
-> mptcp
-> IPv4 packets with options

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

CVE-2026-98432, compromised eMudhra certificates
- Rust ecosystem tools (GRDB.swift, kube for Kubernetes 1.37, typoxide static site generator, find_conflict CLI)
- Chess engine releases (Stockfish derivatives: C_Dragon 3.5, Hlamnick, Rodent V)
- Retro computing/Z80 development (ZX Spectrum Next tools: FantASM assembler, Bizmuth debugger, 0x1DE VS Code extension) [2/2]

Blip blop, I'm a #mastobot.
Here is a summary (in beta) of the latest posts in #technologyAtKukei https://masto.kukei.eu/browse/technology category:
- AI backlash and "slop" criticism: Proton CEO's forced AI adoption triggering user revolt, Sam Altman claiming personal PC RAM is inefficient for AI, and Jepsen takedown of vibe-coded ParticleDB
- Major security incidents: $6.3B Binance crypto heist attributed to North Korea, critical Linux kernel TCP use-after-free (CVE-2026-98432, CVSS 9.8), [1/3]

Anza has urged Solana mainnet-beta validators to act on CVE-2026-98432, a critical Linux kernel use-after-free bug scored 9.8 that lets a remote attacker run commands as root. Ubuntu still lists the fix as work in progress, so operators should disable Multipath TCP. A host takeover could expose the validator identity key. https://thedefiant.io/news/security/anza-urges-solana-validators-to-act-on-critical-linux-flaw #Web3 #Blockchain #Solana

what the heck?

CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. Ubuntu and RHEL haven't shipped a fixed kernel yet.

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

#linux

Linux's October 2026 TCP Use-After-Free: CVE-2026-98432 — Atlas
-> mptcp
-> IPv4 packets with options

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

Si portes Linux, això et toca avui: CVE-2026-98432, use-after-free a l'handshake TCP IPv4, CVSS 9.8. S'arriba per xarxa, abans de qualsevol autenticació.

✅ Debian, SUSE, Oracle UEK, Amazon: pedaç llest
❌ Ubuntu (totes) i RHEL 8/9/10: encara res

🔎 uname -r · ss -Mlnp #Linux #CVE #seguretat
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

https://ubuntu.com/security/CVE-2026-98432

Ubuntu still haven’t released this fix? It’s been days since Debian released the new kernel? Wtf is going on Shuttleworth

Linux kernel CVE-2026-98432 is a use-after-free in the IPv4 TCP handshake that a remote, unauthenticated peer can reach. Upstream is fixed, but Ubuntu's tracker still lists its kernels as vulnerable and Red Hat lists RHEL 8, 9 and 10 as affected. Anthropic says Claude built a root exploit for servers with a multipath TCP listener, which Go 1.24+ enables by default. The Go team says the bug is not specific to MPTCP.

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

#LinuxKernel #InfoSec

CVE-2026-98432: blocking the Linux TCP bug until Ubuntu and Red Hat ship a fix https://getrff.com/blog/cve-2026-98432-linux-tcp-ip-options-block/

ioquake3.org will be offline for a bit. Ubuntu hasn’t patched this yet https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

This includes all services (irc relay, directory server) as this looks severe and I don’t have time right now to look into it more.

這年頭架服務真是有夠苦

https://blog.gslin.org/archives/2026/11/01/13313/linux-%E9%80%99%E6%AC%A1-mptcp-%E7%9A%84-use-after-free-%E6%BC%8F%E6%B4%9E-cve-2026-98432/

Did Canonical meanwhile communicate why their kernel fixes are still missing? https://ubuntu.com/security/CVE-2026-98432?utm_source=eckes

🏆 New Achievement! Cursed Kernel (Soulbound, No Refund)!

Item: Linux Kernel — IPv4 TCP Networking Code. Rarity: Ubiquitous. Hidden Stat: CVE-2026-98432, a use-after-free flaw scoring 9.8 out of 10. Effect: Unauthenticated remote attackers may execute commands as root on any server running an MPTCP listener. Side Effects: Also degrades ordinary TCP connections. Lore Text: Researchers at Anthropic have already crafted a working exploit. Distributions affected include Ubuntu and Red Hat. (1/2)

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

@thilo CVE-2026-98432 requires close monitoring because it is a remotely trigger-able Linux kernel use-after-free vulnerability with demonstrated root-level exploitation.

Although kernel fixes exist upstream, they are not yet available or deployed across all distributions and supported kernel versions.

The demonstrated exploit currently requires MPTCP, but the underlying vulnerability affects ordinary TCP as well.

A use-after-free has already been demonstrated without MPTCP, although a complete exploit chain has not.

Disabling MPTCP is therefore not a reliable security boundary. It is a bandage.

A working exploit (which is not impossible) against ordinary TCP listeners could suddenly and dramatically expand the attack surface, potentially exposing virtually any unpatched Linux server running a reachable TCP service.

The key uncertainty is not whether ordinary TCP is vulnerable, but how far an attacker can exploit it. That makes continued attention essential.

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
https://news.ycombinator.com/item?id=50319143

#hackernews #tech

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Comments: https://news.ycombinator.com/item?id=50319143

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Link: https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
Discussion: https://news.ycombinator.com/item?id=50319143

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

#linux

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

Comments: https://news.ycombinator.com/item?id=50319143

#HackerNews

Linux CVE-2026-98432 is a TCP use-after-free. Anthropic demonstrated remote root against an MPTCP listener in a lab, not known in-the-wild exploitation. The underlying flaw is not limited to MPTCP.

Go 1.24+ enables MPTCP on Linux listeners by default. Inventory exposed services, check distro advisories and deploy fixed kernels.

https://www.anthropic.com/research/discovering-vulnerabilities-with-claude

#Cybersecurity #Infosec #Linux #PatchManagement

CVE-2026-98432: Linux IPv4 UAF https://nvd.nist.gov/vuln/detail/cve-2026-98432

Um modelo do assistente Claude desenvolveu uma ferramenta de ataque a servidores Linux sem autenticação. A falha crítica CVE-2026-98432 foi identificada com uma pontuação de 9,8 em 10 pela equipa de segurança do kernel Linux." 🤖

🔗 https://tugatech.com.pt/t93788-anthropic-usa-modelo-claude-para-explorar-falha-critica-de-98-no-kernel-linux

#anthropic #claude #falha #kernel #linux 

Go programs are vulnerable to CVE-2026-98432 (Linux RCE) https://groups.google.com/g/golang-announce/c/PCoQcdxoScw?pli=1

Patching is taking some time on this potentially serious Linux kernel vulnerability. While we wait, we have a rundown of the partial mitigations for the known attack path.

https://ifin.network/t/cve-2026-98432-unexpected-ipv4-options-lead-to-use-after-free-code-execution-in-linux/946

#ThreatIntel #ThreatIntelligence

@da_667 this one is fun too - https://nvd.nist.gov/vuln/detail/cve-2026-98432

🐧 SIGINT // Linux Watch — 2026-10-31

CVE-2026-98432 is a 9.8 TCP use-after-free reaching back to kernel 4.4, with an AI-built exploit giving remote root on MPTCP listeners. Ubuntu and RHEL reportedly lack fixes, so check whether MPTCP is enabled and disable it where you can.

🔗 https://www.bleepingcomputer.com/news/security/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers/

#Linux #OpenSource #FOSS

LINODE Customer Security Advisory: CVE-2026-98432 https://status.linode.com/incidents/nt58zhx3pmgm

"Akamai is aware of the recently published remote code execution CVE-2026-98432. We are actively investigating and taking the appropriate mitigation actions, while we continue to monitor our platform in parallel.”

Worst. Month. Ever.

⚠️ Linode Status - Customer Security Advisory: CVE-2026-98432

https://status.linode.com/incidents/nt58zhx3pmgm

#linode #cybersecurity

Linode's status page says Akamai is investigating Linux kernel flaw CVE-2026-98432 and has not yet posted mitigation status. Anthropic demonstrated a remote root exploit with no credentials against servers with a Multipath TCP listener, which Go 1.24+ programs open by default. The Go team says the bug is not MPTCP-specific. Upstream kernels are fixed, but Ubuntu's tracker still lists its main kernels as work in progress.

https://status.linode.com/incidents/nt58zhx3pmgm

#LinuxKernel #InfoSec

VulnCheck reports CVE-2026-120209 in AJ-Report ≤1.7.1. A hard-coded JWT signing secret can enable forged share tokens and unauthenticated remote code execution.

No in-the-wild exploitation or fixed release was confirmed in the sources checked. Admins: inventory installations, restrict exposure and track vendor guidance.

https://www.vulncheck.com/advisories/aj-report-through-1.7.1-authentication-bypass-leading-to-rce-via-share-token

#Cybersecurity #Infosec #VulnerabilityManagement #SysAdmin

🔴 CVE-2026-120209 - Critical (9.8)

AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which passes scripts to Gro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120209/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120205 - High (8)

Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows unauthenticated attackers to inject scripts via unescaped customer names. Attackers can register with a script payload as their ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120205/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120203 - High (8.8)

ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parenth...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120203/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

VulnCheck: Jpom 2.10.0–2.11.12 (CVE-2026-120201) mishandles JPOM-USER-TOKEN, allowing unauthenticated admin access and command execution via scripts.

No confirmed in-the-wild exploitation or fixed release in checked sources. Admins: inventory deployments, restrict management access and monitor vendor updates.

https://www.vulncheck.com/advisories/jpom-2.10.0-through-2.11.12-authentication-bypass-via-jpom-user-token-header

#Cybersecurity #Infosec #SysAdmin #VulnerabilityManagement

🔴 CVE-2026-120201 - Critical (9.8)

Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. Attackers can send a value like 'is...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120201/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120208 - High (7.5)

libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::processTile() that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craf...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120208/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-109197 - High (7.5)

The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all versions up to, and including, 1.6.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76010 - High (8.8)

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the render_image function. This is due to unrestricted mass assignment ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76010/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120070 - High (8.8)

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.3.13 via the `...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120070/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-118235: SimpleForm WP plugin ≤3.10.2 suffers CRITICAL file upload vuln (CVSS 9.8). Unauthenticated RCE possible due to weak validation and exposed nonce. Remove/disable plugin or restrict shortcode pages. https://radar.offseq.com/threat/the-simpleform-form-maker-to-chat-apps-with-quiz-poll-and-multi-lead-notifications-plugin-for-ca822acaff1ee58b #OffSeq #WordPress #CVE2026118235 #infosec

🔴 CVE-2026-118235 - Critical (9.8)

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handle_upload function. This is due to missing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118235/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104012 - High (8.8)

The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for WordPress is vulnerable to Privilege Escalation via Mass Assignment in all versions up to, and including, 1.3.1 This is due to the public `/rox-appointment-booking/...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104012/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-116512 - Critical (9.8)

The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116512/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Acadlix LMS WordPress plugin ≤1.1.9 is affected by CRITICAL CVE-2026-103882: arbitrary file deletion due to weak path validation & nonce checks. Leads to potential RCE. No patch — restrict access/disable plugin. https://radar.offseq.com/threat/the-acadlix-lms-ai-quiz-maker-online-exam-course-plugin-for-wordpress-plugin-for-wordpress-is-ed3b7965b634be4e #OffSeq #WordPress #CVE2026103882 #Infosec

🔴 CVE-2026-103882 - Critical (9.1)

The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the post_delete_assessment_file_by_id function in all versions u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103882/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-103882: Acadlix LMS plugin for WordPress (≤1.1.9) has a CRITICAL path traversal flaw — attackers can delete any file, risking RCE. No patch yet; disable/remove plugin. More info: https://radar.offseq.com/threat/cve-2026-103882-cwe-22-path-traversal-in-acadlix-acadlix-lms-ai-quiz-maker-online-exam-course-plugin-50f69a0020b49e4a #OffSeq #WordPress #Vuln #infosec

🟠 CVE-2026-117681 - High (8)

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security (TLS) certificate verification for connections to internal backend services in environment...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-117681/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116086 - High (8.8)

A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information disclosure by providing crafted issue titles to workflow scripts. The affected script incorporates user-provided titles directl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-114217 - High (8.6)

A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in plaintext on the runner without cleaning them up after execution. A local attacker with access to the CI environment can read th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114217/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119163 - High (7.5)

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfan_cart_id' parameter in all versions up to, and including, 3.8.5.2 due to insu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119163/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-89270 - Critical (9.1)

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.5 This is due to the plugin not properly verifying that a user i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89270/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-116557 (CRITICAL, CVSS 9.1) in WP Booking System – Booking Calendar (<=2.1.0.5): Subscriber+ users can delete any calendar note due to missing authorization. Limit low-level access & monitor events. https://radar.offseq.com/threat/cve-2026-116557-cwe-862-missing-authorization-in-murgroland-wp-booking-system-booking-calendar-624e8257b57395b6 #OffSeq #WordPress #CVE2026

🔴 CVE-2026-116557 - Critical (9.1)

The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpbs_action_ajax_calendar_remove_note() function in versions up to, and including, 2.1.0.5 Th...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116557/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116964 - High (8.4)

A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the Continuous Integration and Continuous Delivery (CI/CD) workflow environment. By injecting shell commands into environment expo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116964/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-119096 | CRITICAL auth bypass in Uncanny Toolkit for LearnDash <=3.8.2. Attackers with creds for unverified/suspended accounts can log in via a parser-differential flaw. No patch yet — monitor logins & restrict access. https://radar.offseq.com/threat/the-uncanny-toolkit-for-learndash-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-in-4518772708010c6f #OffSeq #WordPress #Infosec

🔴 CVE-2026-119096 - Critical (9.8)

The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the `email` parameter of the `uo_login_action()` function. This is due to a parser-differential flaw in which...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119096/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103898 - High (8.1)

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.2.2. This is due to the social login REST callback registered at `/wp-json/wslu-social-login/type/{...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103898/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-120040 - High (7.5)

The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.0 via the 'message' parameter. This makes it possible for authenticated attackers, with subscriber-level acce...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-120040/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-109220 - Critical (9.8)

The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.1.1 via the 'customer_note' parameter parameter. This is due to insufficient saniti...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-109220/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119977 - High (8.1)

WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119977/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Install the latest JetBrains security update to fix critical JetBrains IDE vulnerabilities CVE-2026-118697 and CVE-2026-118696 affecting trusted certificates.

#JetBrains #IntelliJIDEA #Cybersecurity #Vulnerability #eMudhra #InfoSec #AppSec

https://securityonline.info/jetbrains-ide-vulnerabilities-emudhra-certificates-patched/?utm_source=mastodon&utm_medium=jetpack_social

🏆 New Achievement! Add to Cart, Subtract Your Security!

This achievement is brought to you by Deferred Patch Fridays — "Why update today when you can audit your orders in a cold sweat next quarter?" Drupal's Commerce Core module, the thing powering your shopping cart and checkout, is sitting on a highly critical access bypass flaw, CVE-2026-118539, scored 21 out of 25 on the risk scale. (1/3)

🟠 CVE-2026-111578 - High (7.5)

The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16.5 does not properly escape several customer-supplied order fields — including the billing and shipping address values and the customer order note — befor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-111578/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alpine Linux Rebuilds GitLab After RCE Attack Attempt

The Alpine Linux team took a cautious approach after a potential code execution attack on their GitLab instance, rebuilding it from scratch to ensure safety. This drastic measure was prompted by a severe vulnerability, CVE-2026-97229, that could allow unauthenticated remote code execution if exploited through a specially crafted regular expression in a…

https://osintsights.com/alpine-linux-rebuilds-gitlab-after-rce-attack-attempt?utm_source=mastodon&utm_medium=social

#Gitlab #AlpineLinux #Cve202697229 #RceAttack #SupplyChain

📈 CVE Published in last 30 days (2026-10-01 - 2026-10-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1496
- High: 6581
- Medium: 6261
- Low: 974
- None: 2143

Status:
- : 158
- Analyzed: 3213
- Awaiting Analysis: 4580
- Deferred: 7093
- Modified: 114
- Received: 1280
- Rejected: 418
- Undergoing Analysis: 599

CISA KEVs:
- CISA-2026:1001 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)
- CISA-2026:1002 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1002)
- CISA-2026:1004 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004)
- CISA-2026:1008 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008)
- CISA-2026:1013 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1013)
- CISA-2026:1014 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1014)
- CISA-2026:1015 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1015)
- CISA-2026:1016 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1016)
- CISA-2026:1020 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1020)
- CISA-2026:1023 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1023)
- CISA-2026:1026 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1026)
- CISA-2026:1027 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1027)
- CISA-2026:1028 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1028)
- CISA-2026:1029 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1029)
- CISA-2026:1030 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1030)

Top CNAs:
- VulnCheck: 2504
- GitHub, Inc.: 1548
- Microsoft Corporation: 1475
- Oracle: 1078
- Patchstack: 1039
- kernel.org: 971
- VulDB: 753
- Chrome: 732
- Wordfence: 656
- WPScan: 555

Top Affected Products:
- UNKNOWN: 11846
- Microsoft Windows Server 2025: 1050
- Microsoft Windows 11 25h2: 1018
- Microsoft Windows 11 24h2: 1018
- Microsoft Windows 11 26h1: 1010
- Microsoft Windows Server 2022: 985
- Microsoft Windows 11 23h2: 973
- Microsoft Windows 11 26h2: 959
- Microsoft Windows Server 2019: 920
- Microsoft Windows 10 22h2: 905

Top EPSS Score:
- CVE-2026-109618 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109618)
- CVE-2026-109619 - 100.00 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-109619)
- CVE-2026-21589 - 99.48 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-21589)
- CVE-2026-104935 - 86.77 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-104935)
- CVE-2026-111497 - 82.64 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-111497)
- CVE-2026-105134 - 81.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105134)
- CVE-2026-105133 - 79.47 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-105133)
- CVE-2026-110447 - 73.31 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-110447)
- CVE-2026-59774 - 28.31 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-59774)
- CVE-2026-97229 - 26.57 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-97229)

#ZEN #SecDB #InfoSec

(CISA TS+SOC) The Cyber Mind TSUITE Brief: CVE-2026-97229 – GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

An exhaustive technical breakdown of CVE-2026-97229 targeting GitLab CI/CD pipelines, complete with multi-vendor SIEM detection logic, behavior tracking, and pipeline hardening controls....

https://thecybermind.co/vrrh

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-97229 – GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

An executive-level strategic brief analyzing CVE-2026-97229 for CEOs and Boards, focusing on DevOps governance, asset inventory integrity, and software supply chain risk mitigation....

https://thecybermind.co/1x6z

🟠 CVE-2026-16760 - High (8.8)

In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported name to the likely_safe_imports set whenever the source module is present in sys.stdlib_module_names and the name is absent from the UNSAFE_IMPORT...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16760/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118938 - High (8.8)

In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname__ (for example "Values.read_file") is resolved by pickle's find_class through _getattribute to an arbitrary attribute path rather than to a module...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118938/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-63338 - High (8.3)

IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated user can view and edit a resource belonging to another user without authorization. The API-key edit/update path in `ApiKeyC...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63338/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-116852 - Critical (9.1)

Author Remote Code Execution (RCE) in Widget Options &lt;= 4.2.5 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116852/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-116852 - Critical (9.1)

Author Remote Code Execution (RCE) in Widget Options &lt;= 4.2.5 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116852/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116401 - High (7.5)

Unauthenticated Broken Access Control in HUSKY &lt;= 1.4.6 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116401/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116401 - High (7.5)

Unauthenticated Broken Access Control in HUSKY &lt;= 1.4.6 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116401/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-63182 - High (8.1)

LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate support, and message bindings. Prior to 4.7.1 and 5.0.1, LightSAML and xmlseclibs disagree about which assertion an inbound SAML sig...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-63182/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL: Multiple vulns in Red Hat IdM (FreeIPA) incl. DoS, privilege escalation, XSS, LDAP & credential theft (CVE-2026-11861). Impacts RHEL 7 ELS. Apply patches ASAP. Details: https://radar.offseq.com/threat/red-hat-security-advisory-ipa-security-update-3b3e10aafe14e014 #OffSeq #RedHat #Vuln #LinuxSec

🟠 CVE-2026-116243 - High (7.5)

pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server mode the binary path was refused only when it lay under the per-user storage directory (STORAGE_DIR), not under a SHARED_STORA...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116243/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116245 - High (8.2)

libpq looks a connection service up in the service file of the operating-system account running pgAdmin 4, and an entry there can hold a password or name a password file or client certificate. In server mode any user could set a server's Service, ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116245/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116238 - High (8.1)

In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit could be bypassed, giving an unauthenticated attacker an unlimited number of password guesses against any internal account, includi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116238/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118086 - High (8.8)

Subscriber Privilege Escalation in WP BASE Booking &lt;= 6.5.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118086 - High (8.8)

Subscriber Privilege Escalation in WP BASE Booking &lt;= 6.5.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118086/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-39738 - Critical (9.8)

Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39738/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118090 - High (8.8)

Subscriber PHP Object Injection in MasterStudy LMS &lt;= 3.7.55 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118090/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-118090 - High (8.8)

Subscriber PHP Object Injection in MasterStudy LMS &lt;= 3.7.55 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-118090/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-119526 - Critical (9.8)

Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection.

This issue affects Royal Event: from n/a through 2.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119526/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-119526 - Critical (9.8)

Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection.

This issue affects Royal Event: from n/a through 2.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119526/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116242 - High (8.2)

pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so it always loaded the unencrypted private keys in ~/.ssh of the operating-system account running pgAdmin, read that account's ~...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116242/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116862 - High (7.5)

Unauthenticated Broken Access Control in WP REST Cache &lt;= 2026.3.1 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116862/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116862 - High (7.5)

Unauthenticated Broken Access Control in WP REST Cache &lt;= 2026.3.1 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116862/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62967 - High (8.1)

ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenticated low-privilege user can permanently deactivate another account, including an administrator, through `POST /api/auth/user/i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62967/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62958 - High (7.9)

libriscv is a RISC-V sandbox and emulator. Prior to 1.18, a crafted ELF binary can cause out-of-bounds reads in the host emulator. `Memory::binary_loader` checks `PT_LOAD` program-header bounds, but `Memory::serialize_execute_segment` trusts secti...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62958/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62864 - High (7.5)

Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack. Prior to 1.15.5, `wrap-nested-params` in the `ring.middleware.nested-params` namespace uses a backtracking regular expression to match parameter names from URL q...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62864/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62863 - Critical (9.6)

MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse` and `/message` HTTP endpoints do not authenticate requests and the `mcp-go` dependency sets `Access-Control-Allow-Origin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62863/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62297 - High (7.5)

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, `readPsd()` commits image and layer buffers from attacker-declared PSD geometry before validating t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62297/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-58412 - High (8.2)

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. Prior to 1.1.0, the upload GitHub Action's fork detection in `upload-action/src/build.js` checks only `event.pull_request`. In the documented two-workf...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-58412/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-40573 - High (8.6)

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the `Nova` interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious `.nv` script through the shell permits a l...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40573/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62331 - High (8.2)

praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in `internal/telegram/bot.go` concatenate the attacker-controlled document fil...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62331/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-119332 - High (8.8)

Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cleanup() in Libraries/LibJS/Runtime/FinalizationRegistry.cpp removed a dead record from m_records, retained an iterator to the n...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-119332/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116249 - High (8.4)

In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relative to the user's storage directory, but get_complete_file_path() only stripped leading slashes before joining the two. A path ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116249/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116247 - High (8.2)

When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the configured one could not be found, pgAdmin left the parameter out of the connection and libpq fell back to the defaults of the operating-system ac...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116247/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116244 - High (8.2)

When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME from its environment, so the Kerberos library fell back to the default credential cache, or a client keytab, of the operating-syst...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116244/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

The PostgreSQL project resolved 15 critical pgAdmin 4 vulnerabilities in version 9.19, fixing command injection flaw CVE-2026-116241 and credential leaks.

#pgAdmin4 #PostgreSQL #DatabaseSecurity #CVE2026116241 #RCE #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/pgadmin-4-vulnerabilities-fixed-9-19/?utm_source=mastodon&utm_medium=jetpack_social

The PostgreSQL project resolved 15 critical pgAdmin 4 vulnerabilities in version 9.19, fixing command injection flaw CVE-2026-116241 and credential leaks.

#pgAdmin4 #PostgreSQL #DatabaseSecurity #CVE2026116241 #RCE #Cybersecurity #Vulnerability #InfoSec

https://securityonline.info/pgadmin-4-vulnerabilities-fixed-9-19/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-116241 - Critical (9.9)

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are balanced so that nothing can escape the wrapper. The check rejected a backslash inside a single-quoted str...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116239 - High (8.5)

In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an internal account and an LDAP account. After LDAP or Kerberos authenticated a user, pgAdmin chose the account to log in by usern...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116239/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-116386 - Critical (9.8)

Unauthenticated Privilege Escalation in SMS Alert Order Notifications &lt;= 4.0.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116386/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-116386 - Critical (9.8)

Unauthenticated Privilege Escalation in SMS Alert Order Notifications &lt;= 4.0.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116386/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116861 - High (7.5)

Unauthenticated Sensitive Data Exposure in Flexible Chat &lt;= 1.1.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116861/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-116861 - High (7.5)

Unauthenticated Sensitive Data Exposure in Flexible Chat &lt;= 1.1.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-116861/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-39734 - High (7.5)

Unauthenticated Path Traversal in WP EasyPay &lt;= 4.5.4 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39734/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-39732 - Critical (9.3)

Unauthenticated SQL Injection in Transliterator &lt;= 2.5.13 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39732/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack