Fix critical openPDC openHistorian vulnerabilities like CVE-2026-100730 and CVE-2026-105281. CISA urges patching these severe RCE flaws immediately.

#openPDC #openHistorian #CyberSecurity #Vulnerability #CISA

https://securityonline.info/openpdc-openhistorian-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Fix critical openPDC openHistorian vulnerabilities like CVE-2026-100730 and CVE-2026-105281. CISA urges patching these severe RCE flaws immediately.

#openPDC #openHistorian #CyberSecurity #Vulnerability #CISA

https://securityonline.info/openpdc-openhistorian-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Fix critical openPDC openHistorian vulnerabilities like CVE-2026-100730 and CVE-2026-105281. CISA urges patching these severe RCE flaws immediately.

#openPDC #openHistorian #CyberSecurity #Vulnerability #CISA

https://securityonline.info/openpdc-openhistorian-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Fix critical openPDC openHistorian vulnerabilities like CVE-2026-100730 and CVE-2026-105281. CISA urges patching these severe RCE flaws immediately.

#openPDC #openHistorian #CyberSecurity #Vulnerability #CISA

https://securityonline.info/openpdc-openhistorian-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

A critical Nginx UI RCE vulnerability (CVE-2026-107806) is publicly disclosed with PoC exploit code. Admins must patch now to prevent system takeover.

#NginxUI #RCE #Vulnerability #CVE2026107806 #CyberSecurity

https://securityonline.info/nginx-ui-rce-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

A critical Nginx UI RCE vulnerability (CVE-2026-107806) is publicly disclosed with PoC exploit code. Admins must patch now to prevent system takeover.

#NginxUI #RCE #Vulnerability #CVE2026107806 #CyberSecurity

https://securityonline.info/nginx-ui-rce-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

CVE-2026-88131 - Critical RCE in Microsoft Dataverse via insecure deserialization. CVSS 9.8. Unpatched vulnerability. Mitigate immediately. #CVE #Microsoft #infosec

https://www.valtersit.com/cve/CVE-2026-88131/

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

Microsoft Dataverse is affected by CVE-2026-88131 (CRITICAL, CVSS 9.8): deserialization of untrusted data allows unauthenticated RCE. Patch available — apply ASAP! https://radar.offseq.com/threat/cve-2026-88131-cwe-502-deserialization-of-untrusted-data-in-microsoft-microsoft-dataverse-eba5097c3e4671bb #OffSeq #CVE202688131 #Microsoft #RCE #Infosec

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

Microsoft Azure App Service for Linux hit by CVE-2026-77900 (CRITICAL, CVSS 9.8): missing authentication enables unauthenticated remote code execution. Patch released — update now. https://radar.offseq.com/threat/cve-2026-77900-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-app-service-for-806c7a8fa62ffe41 #OffSeq #Azure #CVE202677900 #Infosec #CloudSecurity

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

CVE-2026-69435: CRITICAL SSRF (CVSS 9.6) in Microsoft Azure SRE Agent. Missing authorization controls let authorized attackers escalate privileges, risking confidentiality & integrity. Microsoft has issued a fix. https://radar.offseq.com/threat/cve-2026-69435-cwe-918-server-side-request-forgery-ssrf-in-microsoft-azure-sre-agent-10f6e62769899cfe #OffSeq #Azure #SSRF #Infosec

🟠 CVE-2026-84058 - High (8.1)

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84058/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-84875 - High (7.5)

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84875/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Discover how critical Apache Camel Karavan vulnerabilities (CVE-2026-103413 and CVE-2026-103412) allow code execution. Update to version 4.22.1 now.

#ApacheCamel #CyberSecurity #Vulnerability #CVE2026103413 #CVE2026103412

https://securityonline.info/apache-camel-karavan-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Discover how critical Apache Camel Karavan vulnerabilities (CVE-2026-103413 and CVE-2026-103412) allow code execution. Update to version 4.22.1 now.

#ApacheCamel #CyberSecurity #Vulnerability #CVE2026103413 #CVE2026103412

https://securityonline.info/apache-camel-karavan-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Discover how critical Apache Camel Karavan vulnerabilities (CVE-2026-103413 and CVE-2026-103412) allow code execution. Update to version 4.22.1 now.

#ApacheCamel #CyberSecurity #Vulnerability #CVE2026103413 #CVE2026103412

https://securityonline.info/apache-camel-karavan-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Discover how critical Apache Camel Karavan vulnerabilities (CVE-2026-103413 and CVE-2026-103412) allow code execution. Update to version 4.22.1 now.

#ApacheCamel #CyberSecurity #Vulnerability #CVE2026103413 #CVE2026103412

https://securityonline.info/apache-camel-karavan-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-19482 - High (8.8)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of command arguments.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19482/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-105436 - High (8.8)

Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object Injection.This issue affects MainWP Child: from n/a through 6.2.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-105436/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-86405 (CRITICAL, CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 – 26.9.1): Improper cryptographic signature checks allow spoofing & data tampering. Patch not confirmed — monitor vendor. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature-in-sipay-electronic-money-and-d1d195a6023ad286 #OffSeq #CVE #vuln #cybersecurity

CVE-2026-86405 (CRITICAL, CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 – 26.9.1): Improper cryptographic signature checks allow spoofing & data tampering. Patch not confirmed — monitor vendor. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature-in-sipay-electronic-money-and-d1d195a6023ad286 #OffSeq #CVE #vuln #cybersecurity

CVE-2026-107406 affects NetScaler ADC and NetScaler Gateway and can lead to remote code execution (RCE) or denial of service (DoS). It carries a CVSS v4.0 score of 9.5. https://www.theregister.com/security/2026/10/09/citrix-gives-netscaler-admins-another-critical-reason-to-patch/5302212

Citrix has released fixes for CVE-2026-107406, a memory overflow flaw in NetScaler ADC and NetScaler Gateway.

Under specific configurations, it could allow remote code execution or denial of service.

The issue requires NetScaler to be configured as a SAML identity provider or service provider; affected releases vary by role and product branch.

It is rated 9.5/10.

There is no evidence the flaw has been exploited in real-world…

https://en.hacks.gr/i-citrix-diorthonei-sovaro-provlima-sta-netscaler-poy-mporoyse-na-epitrepsei-apomakrysmenes-entoles/

#Citrix #NetScaler #CVE2026107406 #SAML

Citrix Patches Flaw That Enables RCE in SAML Deployments

Citrix has patched a critical vulnerability, CVE-2026-107406, with a near-perfect score of 9.5, that could allow devastating remote code execution or denial-of-service attacks in SAML deployments. The flaw can be triggered under specific configuration conditions when NetScaler instances are set up as a SAML identity provider or service provider.

https://osintsights.com/citrix-patches-flaw-that-enables-rce-in-saml-deployments?utm_source=mastodon&utm_medium=social

#RemoteCodeExecution #Cve2026107406 #Citrix #Saml #Netscaler

🚨 CRITICAL CITRIX NETSCALER FLAW: CVSS 9.5

CVE-2026-107406 could let attackers achieve REMOTE CODE EXECUTION or crash NetScaler ADC & Gateway appliances through a memory overflow in SAML processing.

⚠️ No workaround
🔐 SAML configurations are affected
🛠️ Patches are available

Citrix says it has no evidence of exploitation of this specific flaw so far. Don’t wait to patch.

Affected versions, detection commands & fixed builds 👇
https://thecybersecguru.com/uncategorized/citrix-netscaler-cve-2026-107406-rce/

#CyberSecurity #Citrix #ZeroDay #InfoSec

Citrix Patches Critical NetScaler Memory Overflow Flaw (CVSS 9.5) That Enables Remote Code Execution in SAML Deployments

https://thecybersecguru.com/exploits/citrix-netscaler-cve-2026-107406-rce/

Citrix emitiu um aviso urgente para corrigir uma vulnerabilidade crítica nas soluções de rede NetScaler ADC e plataformas de acesso remoto NetScaler Gateway. A falha, identificada como CVE-2026-107406, permite a execução remota de código arbitrário ou negação de serviço. 🚨

🔗 https://tugatech.com.pt/t92412-citrix-alerta-para-falha-critica-de-execucao-remota-de-codigo-no-netscaler

#alerta #falha 

CVE-2026-107406 affects NetScaler ADC and NetScaler Gateway and can lead to remote code execution (RCE) or denial of service (DoS). It carries a CVSS v4.0 score of 9.5. https://www.theregister.com/security/2026/10/09/citrix-gives-netscaler-admins-another-critical-reason-to-patch/5302212

Citrix Patches Critical NetScaler Memory Overflow Flaw (CVSS 9.5) That Enables Remote Code Execution in SAML Deployments

https://thecybersecguru.com/uncategorized/citrix-netscaler-cve-2026-107406-rce/

Citrix emitiu um aviso urgente para corrigir uma vulnerabilidade crítica nas soluções de rede NetScaler ADC e plataformas de acesso remoto NetScaler Gateway. A falha, identificada como CVE-2026-107406, permite a execução remota de código arbitrário ou negação de serviço. 🚨

🔗 https://tugatech.com.pt/t92412-citrix-alerta-para-falha-critica-de-execucao-remota-de-codigo-no-netscaler

#alerta #falha 

Citrix NetScaler instances with SAML enabled are affected by CVE-2026-107406, which can cause remote code execution and crash. Exposed ADC and Gateway systems risk takeover or service disruption, so patching and log review for malicious SAML requests is critical. #NetScaler #Citrix #PatchManagement

https://cyberworldops.eu/en/netscaler-saml-deployments-face-rce-and-crash-risk-from-cve-2026

Critical Citrix NetScaler vulnerability CVE-2026-107406 (CVSS 9.5) can lead to RCE on SAML-configured ADC and Gateway. Upgrade now.

#Citrix #NetScaler #NetScalerGateway #CVE2026107406 #SAML #RCE #PatchNow #Vulnerability

https://securityonline.info/citrix-netscaler-vulnerability-cve-2026-107406/?utm_source=mastodon&utm_medium=jetpack_social

I thought it was a Sunday because Citrix posted another yet another NetScaler security advisory:

CVE-2026-107406 (9.5 critical) pre-auth memory overflow > RCE or DoS

As of the publication of the bulletin, Citrix is not aware of any unmitigated exploits of this vulnerability.

https://support.citrix.com/external/article/CTX697191
https://community.citrix.com/techzone-blogs/110_security-updates/protecting-customers-immediate-guidance-for-cve-2026-107406-in-netscaler-adc-and-netscaler-gateway-r1631/

#citrix #netscaler #cve

There’s yet another Citrix Netscaler vuln (new patch today) which allows unauth RCE - CVE-2026-107406

Same attack surface (SAML) as two of the other vulns exploited in the wild during the past month.

@GossiTheDog https://community.citrix.com/techzone-blogs/110_security-updates/protecting-customers-immediate-guidance-for-cve-2026-107406-in-netscaler-adc-and-netscaler-gateway-r1631/

They did it again :D

I'm tired, boss.

A new #Citrix CVE affecting SAML IdP/SP-configured devices is out.

https://ifin.network/t/cve-2026-107406-somehow-another-citrix-netscaler-saml-vulnerability/891

#ThreatIntel #ThreatIntelligence #IFIN

🟠 CVE-2026-82344 - High (8.1)

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82344/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog after their use by China-linked Flax Typhoon: ProFTPD (CVE-2015-3306), ONLYOFFICE Docs (CVE-2021-3199), Strapi (CVE-2023-22894), Apache Struts (CVE-2016-3081) and ISC BIND (CVE-2015-5477).

The wider operations targeted eight vulnerabilities to gain initial access to organizations and remove sensitive data.

US federal agencies must install require…

https://en.hacks.gr/i-cisa-prosthetei-pente-provlimata-asfaleias-poy-chrisimopoiithikan-se-epitheseis/

#FlaxTyphoon #ProFTPD #ONLYOFFICE #ISC_BIND

🚨 [CISA-2026:1008] CISA Adds 5 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008)

CISA has added 5 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2015-3306 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-3306)
- Name: ProFTPD Improper Access Control Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ProFTPD
- Product: ProFTPD
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: http://www.proftpd.org/ ; https://lists.debian.org/debian-security-announce/2015/msg00154.html ; https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3306

⚠️ CVE-2015-5477 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-5477)
- Name: ISC BIND Data Processing Errors Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ISC
- Product: BIND
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477

⚠️ CVE-2016-3081 (https://secdb.nttzen.cloud/cve/detail/CVE-2016-3081)
- Name: Apache Struts Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Apache
- Product: Struts
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://cwiki.apache.org/confluence/display/WW/S2-032 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2016-3081

⚠️ CVE-2021-3199 (https://secdb.nttzen.cloud/cve/detail/CVE-2021-3199)
- Name: ONLYOFFICE Docs Server Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ONLYOFFICE
- Product: Docs
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2021-3199

⚠️ CVE-2023-22894 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-22894)
- Name: Strapi Cleartext Storage of Sensitive Information Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Strapi
- Product: Strapi
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve ; https://github.com/strapi/strapi/releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-22894

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261008 #cisa20261008 #cve_2015_3306 #cve_2015_5477 #cve_2016_3081 #cve_2021_3199 #cve_2023_22894 #cve20153306 #cve20155477 #cve20163081 #cve20213199 #cve202322894

CVE ID: CVE-2016-3081
Vendor: Apache
Product: Struts
Date Added: 2026-10-08
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2016-3081

🔴 CVE-2026-78406 - Critical (9.8)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78406/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

HPE fixes a critical HPE iLO 7 vulnerability, CVE-2026-79820, and iMC authentication bypass CVE-2026-79842. Update iLO to 1.25.01 now.

#HPE #iLO #iMC #CVE202679820 #CVE202679842 #AuthBypass #ServerSecurity #Vulnerability

https://securityonline.info/hpe-ilo-7-vulnerability-imc-bypass/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-79842 - Critical (9.1)

An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79842/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76459 - High (8.8)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76459/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18740 - High (8.8)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to perform unauthorized actions due to argument injection.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18740/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-19491 - Critical (9.1)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due to improper authentication.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19491/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19493 - High (7.5)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path traversal.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19493/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

PX-lab Zombify ≤1.7.7 is affected by CVE-2026-94503 (CRITICAL, CVSS 10): unrestricted upload of dangerous files enables remote code execution. No patch yet — restrict uploads & monitor for updates. https://radar.offseq.com/threat/cve-2026-94503-unrestricted-upload-of-file-with-dangerous-type-in-px-lab-zombify-8e6fe0b08d444b23 #OffSeq #CVE202694503 #WebSecurity #Infosec

PX-lab Zombify ≤1.7.7 is affected by CVE-2026-94503 (CRITICAL, CVSS 10): unrestricted upload of dangerous files enables remote code execution. No patch yet — restrict uploads & monitor for updates. https://radar.offseq.com/threat/cve-2026-94503-unrestricted-upload-of-file-with-dangerous-type-in-px-lab-zombify-8e6fe0b08d444b23 #OffSeq #CVE202694503 #WebSecurity #Infosec

CVE-2026-93947: CRITICAL SQL Injection in Shinetheme Traveler (0 – 3.2.9). Blind SQLi risk — attackers may access sensitive DB data. Patch when available & monitor your systems. https://radar.offseq.com/threat/cve-2026-93947-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-e7412128f2cf3852 #OffSeq #CVE202693947 #SQLInjection #InfoSec

CVE-2026-93947: CRITICAL SQL Injection in Shinetheme Traveler (0 – 3.2.9). Blind SQLi risk — attackers may access sensitive DB data. Patch when available & monitor your systems. https://radar.offseq.com/threat/cve-2026-93947-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-e7412128f2cf3852 #OffSeq #CVE202693947 #SQLInjection #InfoSec

🟠 CVE-2026-107303 - High (7.6)

JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. Prior to generator-jhipster 9.4.0 and react-jhipster 1.1.0, generated applications can persist attacker-controlled ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107303/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-107510: CRITICAL vuln in Infoblox NIOS 9.0.x – 9.1.0. Auth'd high-priv users can escalate privileges via argument injection. Restrict admin access & watch for vendor updates. https://radar.offseq.com/threat/cve-2026-107510-vulnerability-in-infoblox-nios-dd277637e9e73e9d #OffSeq #Infosec #CVE2026107510

Splunk fixes 22 Splunk Enterprise vulnerabilities, including critical Patroni API flaw CVE-2026-76268 and CVE-2026-76281. Upgrade to 10.4.3 now.

#Splunk #SplunkEnterprise #SIEM #CVE202676268 #CVE202676281 #RCE #PatchNow #Vulnerability

https://securityonline.info/splunk-enterprise-vulnerabilities-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-76268 - Critical (9.8)

In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Interface (API) on a search head cluster member could execute attacker...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76268/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

IBM fixes 23 IBM DataPower Gateway vulnerabilities, including critical RCE flaws CVE-2026-15762 and CVE-2026-16340. Upgrade to 11.0.0.3 now.

#IBM #DataPower #APIGateway #CVE202615762 #CVE202616340 #CVE202614990 #RCE #Vulnerability

https://securityonline.info/ibm-datapower-gateway-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-14502 - Critical (9.8)

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to failure to reject empty passwords during LDAP a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14502/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

CVE-2026-96207 (CRITICAL, CVSS 10) affects Microsoft Partner Center: improper certificate validation (CWE-295) allows remote privilege escalation. Patch available — apply ASAP. No public exploits seen. https://radar.offseq.com/threat/cve-2026-96207-cwe-295-improper-certificate-validation-in-microsoft-microsoft-partner-center-0f13dc5f1a15e1f3 #OffSeq #Microsoft #CVE202696207 #Infosec

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.

1. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)
2. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)
3. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)
4. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)
5. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)
6. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high)
7. https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high)

#microsoft #CVE

CVE-2026-94510 (CRITICAL, CVSS 9.9) in Microsoft Bookings enables remote privilege escalation via authorization bypass (CWE-639). Apply the official Microsoft patch now: https://radar.offseq.com/threat/cve-2026-94510-cwe-639-authorization-bypass-through-user-controlled-key-in-microsoft-microsoft-bookings-0e362c50ebe161b6 #OffSeq #Microsoft #Vuln #CVE #Infosec

🟠 CVE-2026-84057 - High (8.1)

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84057/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-84035 - High (8.1)

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84035/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-84249 - Critical (9.8)

IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84249/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-89091 - High (8.8)

A flaw was found in ansible-core. When installing a collection with
`ansible-galaxy collection install`, the archive extractor validates member
paths using lexical path normalisation (os.path.abspath) instead of resolving
symbolic links (os.path.r...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89091/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107701 - High (8.2)

dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted path to set(). Attackers controlling the path, such as through user-supplied field names, can use ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107701/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-105110 (CRITICAL, CVSS 9.8): Iskratel Innbox GPON ONT devices have an OS command injection flaw in login.xgi. Remote, unauthenticated code execution as root possible. Restrict access & monitor until patch. https://radar.offseq.com/threat/cve-2026-105110-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-2e83a9c5703badaa #OffSeq #infosec #zeroday #vuln

🟠 CVE-2026-107376 - High (8.2)

webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107376/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-95210 - Critical (9.1)

Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95210/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-104078 - High (7.8)

Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a crafted \href value with a TAB byte in the URL scheme, causing filterU...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104078/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-16823 - Critical (9.1)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass security restrictions due to improper authentication.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16823/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-78401 - Critical (9.8)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-78401/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-17189 - High (8.2)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus alt...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-17189/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-16916 - Critical (9.1)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary code due to a protection mechanism failure.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-16916/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-19494 - High (8.1)

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-19494/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-84275 - High (7.5)

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84275/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-107704 - Critical (9.8)

The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizer#identify_format that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Atta...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107704/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-11318 - High (7.8)

Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service w...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-11318/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-107703 - Critical (9.8)

@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107703/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-107699 - Critical (9.8)

ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can append shell metacharacters such as ';' to file ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107699/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-107700 - Critical (9.8)

dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function body in index.js, so attackers can reach co...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107700/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107782 - High (7.8)

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Micr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107782/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-84244 - Critical (9.3)

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute mal...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84244/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-84276 - High (7.5)

IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-84276/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Splunk fixes 22 Splunk Enterprise vulnerabilities, including critical Patroni API flaw CVE-2026-76268 and CVE-2026-76281. Upgrade to 10.4.3 now.

#Splunk #SplunkEnterprise #SIEM #CVE202676268 #CVE202676281 #RCE #PatchNow #Vulnerability

https://securityonline.info/splunk-enterprise-vulnerabilities-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-107779 - Critical (9.8)

Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin JobInfoController endpoints annotated with @PermissionLimit(limit = false). Unauthenticated attackers c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107779/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-62252 - Critical (9.8)

Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an `admin` account with the password `sipcapture` (stored as...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62252/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-107206 - Critical (9.4)

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read envir...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107206/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-107204 - Critical (9.8)

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run_script endpoint. Attackers can recover real builtins through the injected Fast...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107204/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107333 - High (8.1)

Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its Lua based role-based access control (RBAC) authorization layer and nginx's own request routing logic. An authenticated user can craft a specially forma...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107333/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107217 - High (7.5)

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0 in github.com/xuri/excelize/v2 and from 1.1.0 to 1.4.1 in github.com/xuri/excelize, ColumnNameToNumber accumulates a bijective base-26 val...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107217/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107216 - High (7.5)

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-fl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107216/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107215 - High (7.5)

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or si...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107215/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107383 - High (7.5)

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, the GeoJSON Polygon and MultiPolygon binary encoders size a Buffer.allocUnsafe() allocation fro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107383/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107322 - High (7.8)

An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted dat...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107322/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

SANS Stormcast Friday, October 9th, 2026: AI Agent Forensics; AI-Assisted Attack on South Korean Banks; IDN Typosquatting; Cisco Finesse SSRF (CVE-2026-20362)
https://isc.sans.edu/podcastdetail/10130

A Cisco Finesse vulnerability, SSRF flaw CVE-2026-20362, has been publicly disclosed. Fixes arrive in early 2027, with no workarounds.

#Cisco #CiscoFinesse #ContactCenter #CVE202620362 #SSRF #Horizon3 #UnifiedCCX #Vulnerability

https://securityonline.info/cisco-finesse-vulnerability-cve-2026-20362/?utm_source=mastodon&utm_medium=jetpack_social

There are 14 Cisco security advisories that came out today. https://sec.cloudapps.cisco.com/security/center/publicationListing.x

A lot of 9.8 and even 10.0 across multiple products. While there's no mention of exploitation, there's zero-day disclosure pre-patch for Cisco Finesse Server-Side Request Forgery Vulnerability CVE-2026-20362 (7.2)

The Cisco PSIRT is aware that a public announcement is available for the vulnerability that is described in this advisory.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-ssrf-mmSuyugS

#cisco #CVE

Two more Cisco advisories today addressing critical vulnerabilities:

- CVE-2026-76471: Cisco NX-OS Software NX-API Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j

- CVE-2026-76463, CVE-2026-76464, and CVE-2026-76467: Cisco Meraki Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH @TalosSecurity #infosec #Cisco #vulnerability

🟠 CVE-2026-76467 - High (7.5)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses mult...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76467/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Two more Cisco advisories today addressing critical vulnerabilities:

- CVE-2026-76471: Cisco NX-OS Software NX-API Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j

- CVE-2026-76463, CVE-2026-76464, and CVE-2026-76467: Cisco Meraki Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH @TalosSecurity #infosec #Cisco #vulnerability

🟠 CVE-2026-76463 - High (8.8)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses mult...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76463/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76456 - High (8.6)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76456/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-76454 - Critical (9.1)

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS c...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76454/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76453 - High (8.8)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76453/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76457 - High (8.6)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76457/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-76482 - Critical (10)

As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76482/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco License On-Prem vulnerabilities include CVSS 10 flaw CVE-2026-76482 and password reset bug CVE-2026-20328. APIC and Meraki also patched.

#Cisco #SmartLicensing #APIC #Meraki #CVE202676482 #CVE202620328 #PatchNow #Vulnerability

https://securityonline.info/cisco-license-on-prem-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-76472 - High (8.8)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multipl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76472/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76470 - High (8.8)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses mult...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76470/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-76486 - Critical (9.8)

A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Denial-of-Serv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76486/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-76501 - Critical (9.8)

A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privilege...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76501/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107384 - High (8.1)

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.2.0 until 3.2.5, 3.3.4, 3.4.7, and 3.5.4, applications that enable permitSetMultiParamEntries can pass objects whose keys are exp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107384/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog after their use by China-linked Flax Typhoon: ProFTPD (CVE-2015-3306), ONLYOFFICE Docs (CVE-2021-3199), Strapi (CVE-2023-22894), Apache Struts (CVE-2016-3081) and ISC BIND (CVE-2015-5477).

The wider operations targeted eight vulnerabilities to gain initial access to organizations and remove sensitive data.

US federal agencies must install require…

https://en.hacks.gr/i-cisa-prosthetei-pente-provlimata-asfaleias-poy-chrisimopoiithikan-se-epitheseis/

#FlaxTyphoon #ProFTPD #ONLYOFFICE #ISC_BIND

🚨 [CISA-2026:1008] CISA Adds 5 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008)

CISA has added 5 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2015-3306 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-3306)
- Name: ProFTPD Improper Access Control Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ProFTPD
- Product: ProFTPD
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: http://www.proftpd.org/ ; https://lists.debian.org/debian-security-announce/2015/msg00154.html ; https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3306

⚠️ CVE-2015-5477 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-5477)
- Name: ISC BIND Data Processing Errors Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ISC
- Product: BIND
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477

⚠️ CVE-2016-3081 (https://secdb.nttzen.cloud/cve/detail/CVE-2016-3081)
- Name: Apache Struts Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Apache
- Product: Struts
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://cwiki.apache.org/confluence/display/WW/S2-032 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2016-3081

⚠️ CVE-2021-3199 (https://secdb.nttzen.cloud/cve/detail/CVE-2021-3199)
- Name: ONLYOFFICE Docs Server Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ONLYOFFICE
- Product: Docs
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2021-3199

⚠️ CVE-2023-22894 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-22894)
- Name: Strapi Cleartext Storage of Sensitive Information Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Strapi
- Product: Strapi
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve ; https://github.com/strapi/strapi/releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-22894

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261008 #cisa20261008 #cve_2015_3306 #cve_2015_5477 #cve_2016_3081 #cve_2021_3199 #cve_2023_22894 #cve20153306 #cve20155477 #cve20163081 #cve20213199 #cve202322894

CVE ID: CVE-2015-5477
Vendor: ISC
Product: BIND
Date Added: 2026-10-08
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2015-5477

CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog after their use by China-linked Flax Typhoon: ProFTPD (CVE-2015-3306), ONLYOFFICE Docs (CVE-2021-3199), Strapi (CVE-2023-22894), Apache Struts (CVE-2016-3081) and ISC BIND (CVE-2015-5477).

The wider operations targeted eight vulnerabilities to gain initial access to organizations and remove sensitive data.

US federal agencies must install require…

https://en.hacks.gr/i-cisa-prosthetei-pente-provlimata-asfaleias-poy-chrisimopoiithikan-se-epitheseis/

#FlaxTyphoon #ProFTPD #ONLYOFFICE #ISC_BIND

🚨 [CISA-2026:1008] CISA Adds 5 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008)

CISA has added 5 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2015-3306 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-3306)
- Name: ProFTPD Improper Access Control Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ProFTPD
- Product: ProFTPD
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: http://www.proftpd.org/ ; https://lists.debian.org/debian-security-announce/2015/msg00154.html ; https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3306

⚠️ CVE-2015-5477 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-5477)
- Name: ISC BIND Data Processing Errors Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ISC
- Product: BIND
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477

⚠️ CVE-2016-3081 (https://secdb.nttzen.cloud/cve/detail/CVE-2016-3081)
- Name: Apache Struts Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Apache
- Product: Struts
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://cwiki.apache.org/confluence/display/WW/S2-032 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2016-3081

⚠️ CVE-2021-3199 (https://secdb.nttzen.cloud/cve/detail/CVE-2021-3199)
- Name: ONLYOFFICE Docs Server Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ONLYOFFICE
- Product: Docs
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2021-3199

⚠️ CVE-2023-22894 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-22894)
- Name: Strapi Cleartext Storage of Sensitive Information Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Strapi
- Product: Strapi
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve ; https://github.com/strapi/strapi/releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-22894

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261008 #cisa20261008 #cve_2015_3306 #cve_2015_5477 #cve_2016_3081 #cve_2021_3199 #cve_2023_22894 #cve20153306 #cve20155477 #cve20163081 #cve20213199 #cve202322894

CVE ID: CVE-2015-3306
Vendor: ProFTPD
Product: ProFTPD
Date Added: 2026-10-08
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2015-3306

CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog after their use by China-linked Flax Typhoon: ProFTPD (CVE-2015-3306), ONLYOFFICE Docs (CVE-2021-3199), Strapi (CVE-2023-22894), Apache Struts (CVE-2016-3081) and ISC BIND (CVE-2015-5477).

The wider operations targeted eight vulnerabilities to gain initial access to organizations and remove sensitive data.

US federal agencies must install require…

https://en.hacks.gr/i-cisa-prosthetei-pente-provlimata-asfaleias-poy-chrisimopoiithikan-se-epitheseis/

#FlaxTyphoon #ProFTPD #ONLYOFFICE #ISC_BIND

🚨 [CISA-2026:1008] CISA Adds 5 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008)

CISA has added 5 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2015-3306 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-3306)
- Name: ProFTPD Improper Access Control Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ProFTPD
- Product: ProFTPD
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: http://www.proftpd.org/ ; https://lists.debian.org/debian-security-announce/2015/msg00154.html ; https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3306

⚠️ CVE-2015-5477 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-5477)
- Name: ISC BIND Data Processing Errors Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ISC
- Product: BIND
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477

⚠️ CVE-2016-3081 (https://secdb.nttzen.cloud/cve/detail/CVE-2016-3081)
- Name: Apache Struts Command Injection Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Apache
- Product: Struts
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://cwiki.apache.org/confluence/display/WW/S2-032 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2016-3081

⚠️ CVE-2021-3199 (https://secdb.nttzen.cloud/cve/detail/CVE-2021-3199)
- Name: ONLYOFFICE Docs Server Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: ONLYOFFICE
- Product: Docs
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2021-3199

⚠️ CVE-2023-22894 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-22894)
- Name: Strapi Cleartext Storage of Sensitive Information Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Strapi
- Product: Strapi
- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve ; https://github.com/strapi/strapi/releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-22894

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261008 #cisa20261008 #cve_2015_3306 #cve_2015_5477 #cve_2016_3081 #cve_2021_3199 #cve_2023_22894 #cve20153306 #cve20155477 #cve20163081 #cve20213199 #cve202322894

CVE ID: CVE-2021-3199
Vendor: ONLYOFFICE
Product: Docs
Date Added: 2026-10-08
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2021-3199

🟠 CVE-2026-104077 - High (7.8)

Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is pro...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-104077/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107377 - High (7.5)

datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAK_IMPORT_PATTERN and consumed by _write_mi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107377/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107375 - High (8.8)

JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107375/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107302 - High (7.5)

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before validating that the complete five-byte header is available. A truncated map32 header therefore caus...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107302/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107300 - High (7.5)

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each complete MessagePack value remaining in a chunk. A remote peer can send one chunk containing many small ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107300/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107352 - High (7.7)

Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata (AWS account identifiers and SQL statement text) from other AWS accounts. Query results, creden...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107352/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Two Apache Jackrabbit vulnerabilities, including critical session hijack flaw CVE-2026-92414 (CVSS 9.3), are fixed. Upgrade to 2.23.6 now.

#Apache #Jackrabbit #WebDAV #CVE202692414 #CVE202692415 #SessionHijack #Java #Vulnerability

https://securityonline.info/apache-jackrabbit-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-95606: CRITICAL deserialization of untrusted data in The Events Calendar (<=6.17.4) enables remote object injection & code execution. No patch confirmed — review vendor advisory. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-liquid-web-stellarwp-the-events-calendar-allows-c423d4d18fa2f1a5 #OffSeq #WordPress #Vulnerability #CVE202695606

🔴 CVE-2026-95606 - Critical (9.8)

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection.

This issue affects The Events Calendar: from n/a through 6.17.4.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95606/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107295 - High (7.6)

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 1.107.4 and 2.28.0, the Agent.to_web() and clai web development chat endpoint has missing request content-type validation. A webs...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107295/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107212 - High (7.5)

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows without applying the limit enforced by Rows.Next. File.GetRows relies on Row...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107212/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107214 - High (7.5)

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and parameter validation before standard and agile decryptors slice, index, allo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107214/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Six Apache DolphinScheduler vulnerabilities, including CVE-2026-71896 and Kubernetes credential leak CVE-2026-71895, are fixed in 3.4.3.

#Apache #DolphinScheduler #Kubernetes #CVE202671896 #CVE202671895 #AccessControl #DataSecurity #Vulnerability

https://securityonline.info/apache-dolphinscheduler-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-9209 - Critical (9.8)

mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQuery_Server PageMethod execute caller-supplied SQL against the backing...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9209/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-93017 - High (7.7)

The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster.

...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93017/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-14992 - Critical (9.8)

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerable to buffer overflow.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14992/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-14497 - High (8.1)

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to bypass security restrictions due to improper verification of cryptogr...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14497/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

IBM fixes 23 IBM DataPower Gateway vulnerabilities, including critical RCE flaws CVE-2026-15762 and CVE-2026-16340. Upgrade to 11.0.0.3 now.

#IBM #DataPower #APIGateway #CVE202615762 #CVE202616340 #CVE202614990 #RCE #Vulnerability

https://securityonline.info/ibm-datapower-gateway-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-16340 (CRITICAL, CVSS 9.8): IBM DataPower Gateway 10.5.0.0 – 10.5.0.22, 10.6.0.0 – 10.6.0.10, 10.6.1 – 10.6.6, 11.0.0.0 – 11.0.0.2 vulnerable to remote code execution via out-of-bounds write. Patch priority high. https://radar.offseq.com/threat/cve-2026-16340-cwe-787-out-of-bounds-write-in-ibm-datapower-gateway-106cd-0c7cd2fb359c85f5 #OffSeq #IBM #Vuln #Cybersecurity

Six Apache DolphinScheduler vulnerabilities, including CVE-2026-71896 and Kubernetes credential leak CVE-2026-71895, are fixed in 3.4.3.

#Apache #DolphinScheduler #Kubernetes #CVE202671896 #CVE202671895 #AccessControl #DataSecurity #Vulnerability

https://securityonline.info/apache-dolphinscheduler-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-12260: CRITICAL SQL injection in NetBoard CRM Demo (user-name param in /module/auth/recovery.php). Exploitable via multiple SQLi techniques — data theft or CRM compromise possible. Mitigation needed now. https://radar.offseq.com/threat/cve-2026-12260-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-0022aae9b62fa698 #OffSeq #SQLi #NetBoardCRM #CVE202612260

Openfind SecuShare Pro v4 is affected by CVE-2026-107459 (CRITICAL, CVSS 9.3) — unauthenticated OS command injection allows remote code execution. No patch yet; restrict access and monitor activity. https://radar.offseq.com/threat/cve-2026-107459-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-864ce7371e089cbd #OffSeq #CVE #Vuln

CRITICAL: CVE-2026-17609 in Super Forms – Drag & Drop Form Builder (<=6.3.316) lets unauthenticated attackers recursively delete server directories if 'Delete files after form submissions' is enabled. Disable it! https://radar.offseq.com/threat/cve-2026-17609-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-webrehab-super-forms-drag-f4228d5a610b35bd #OffSeq #WordPress #Vuln #Infosec

🏆 New Achievement! The Keys to the Vault Were Under the Mat!

Magnificent. Truly, someone looked at a backup server — the one room that holds the skeleton keys to your entire infrastructure — and said, let's let low-privileged users knock it over. CVE-2025-64393 is a critical remote code execution flaw in Veeam Backup & Replication version 12, and it hands full control of the backup server to anyone with the Backup Viewer role. (1/3)

Veeam Patches Critical Remote Code Execution Flaw in Backup & Replication Software

Veeam patched four vulnerabilities in Backup & Replication version 12, including a critical RCE flaw (CVE-2025-64393) that allows low-privileged users to take control of the backup server.

**If you use Veeam Backup & Replication version 12, update ASAP to 12.3.2 P4 (build 12.3.2.4934). Review and remove the Backup Viewer role from anyone who doesn't really need it, and keep your backup servers isolated from the rest of the network.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/veeam-patches-critical-remote-code-execution-flaw-in-backup-replication-software-9-s-8-u-1/gD2P6Ple2L

Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2 P4 from 10/6

CVE-2025-64393 (9.4 critical) low-privileged RCE

https://www.veeam.com/kb4934

#veeam #cve

🟠 CVE-2026-107161 - High (7.5)

A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107161/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-76266 - High (7.7)

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating-sy...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76266/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-107219 - High (7.5)

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount and performs that many password-key derivation iterations before verifier valid...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-107219/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Two more Cisco advisories today addressing critical vulnerabilities:

- CVE-2026-76471: Cisco NX-OS Software NX-API Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j

- CVE-2026-76463, CVE-2026-76464, and CVE-2026-76467: Cisco Meraki Security Hardening Release: October 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH @TalosSecurity #infosec #Cisco #vulnerability

🔴 CVE-2026-76471 - Critical (9.8)

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device.&nbsp;

The vulnerabi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76471/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Cisco NX-OS vulnerabilities fixed, including critical NX-API RCE flaw CVE-2026-76471 and CVE-2026-76455, across Nexus, MDS and UCS gear. Patch now.

#Cisco #NXOS #Nexus #CVE202676471 #CVE202676455 #RCE #NetworkSecurity #Vulnerability

https://securityonline.info/cisco-nx-os-vulnerabilities-nx-api-rce/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-76465 (CRITICAL, CVSS 9.8) in Cisco NX-OS for Nexus 3000/9000: Remote, unauthenticated attackers can gain root or cause DoS via crafted MPLS echo-requests. Patch status unknown — check Cisco advisories. https://radar.offseq.com/threat/a-vulnerability-in-the-mpls-operation-administration-and-maintenance-oam-feature-of-cisco-nx-os-d888a485aa841e27 #OffSeq #Cisco #Vulnerability #CVE202676465

🔴 CVE-2026-76465 - Critical (9.8)

A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbit...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76465/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Four critical Cisco Nexus vulnerabilities, including CVE-2026-76485 and CVE-2026-76465 (CVSS 9.8), allow root RCE on NX-OS switches. Patch now.

#Cisco #Nexus #NXOS #CVE202676485 #CVE202676465 #RCE #NetworkSecurity #Vulnerability

https://securityonline.info/cisco-nexus-vulnerabilities-oam-rce/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-76485: CRITICAL (CVSS 9.8) vulnerability in Cisco NX-OS NGOAM allows remote code execution or DoS via crafted packets. Disable NGOAM if unused. Awaiting official patch. Details: https://radar.offseq.com/threat/a-vulnerability-in-the-vxlan-operation-administration-and-maintenance-oam-feature-of-cisco-nx-os-41bf2bad6a99d754 #OffSeq #Cisco #CVE202676485 #Infosec

🔴 CVE-2026-76485 - Critical (9.8)

A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Denial-of-Serv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76485/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Four critical Cisco Nexus vulnerabilities, including CVE-2026-76485 and CVE-2026-76465 (CVSS 9.8), allow root RCE on NX-OS switches. Patch now.

#Cisco #Nexus #NXOS #CVE202676485 #CVE202676465 #RCE #NetworkSecurity #Vulnerability