🟠 CVE-2026-79896 - High (7.5)

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is nor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79896/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-79896 - High (7.5)

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is nor...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79896/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

ASUS Routers hit by CRITICAL vuln: CVE-2026-14157 (CVSS 9.4). Remote authenticated users can execute arbitrary commands via crafted file upload in web interface. Restrict access, monitor closely. https://radar.offseq.com/threat/cve-2026-14157-cwe-134-use-of-externally-controlled-format-string-in-asus-router-2ad64f03a537627f #OffSeq #CVE202614157 #ASUS #Vuln #BlueTeam

🔴 CVE-2026-12627 - Critical (9.8)

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12627/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-12627 - Critical (9.8)

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12627/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-101283: CRITICAL heap buffer overflow in esnet iperf3 (v3.20 & v3.21). Unauthenticated attackers can trigger memory corruption via decrypt_rsa_message(). Upgrade to 3.22 ASAP. https://radar.offseq.com/threat/cve-2026-101283-cwe-122-heap-based-buffer-overflow-in-esnet-iperf3-1608d23cd8415ceb #OffSeq #CVE2026101283 #infosec #vulnerability

🟠 CVE-2026-102831 - High (8.1)

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0....

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-102831/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97297 - High (7.6)

Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97297/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97297 - High (7.6)

Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97297/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97284 - High (8.8)

Contributor PHP Object Injection in Icegram <= 3.1.31 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97284/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97284 - High (8.8)

Contributor PHP Object Injection in Icegram <= 3.1.31 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97284/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97277 - High (7.6)

Subscriber Broken Access Control in Social Boost <= 3.6.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97277/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97277 - High (7.6)

Subscriber Broken Access Control in Social Boost <= 3.6.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97277/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-92966: CRITICAL code injection in LatePoint Appointment Booking Plugin (<=5.7.0) for WordPress. Unauthenticated attackers can inject & execute shortcodes, risking full site compromise. Disable plugin or restrict access until patched. https://radar.offseq.com/threat/cve-2026-92966-cwe-94-improper-control-of-generation-of-code-code-injection-in-latepoint-appointment-0d4b3da3082989fe #OffSeq #WordPress #CVE202692966

🔴 CVE-2026-79901 - Critical (9.9)

In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79901/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-79901 - Critical (9.9)

In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79901/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Fuck this bullshit. This 2024 CVE was just published today. Which, fine, whatever. It happens. Except it specifically says it was observed EITW in July 2024.

https://www.cve.org/CVERecord?id=CVE-2024-58388

Exploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30.

Witholding a CVE for something known to be EITW for over two years is fucking bullshit. Especially when the PoC was published in June 2024:

https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html#pre-auth-lfi

But at least there's a Nuclei template:

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/crocus-lfi.yaml

Fuck this bullshit. This 2024 CVE was just published today. Which, fine, whatever. It happens. Except it specifically says it was observed EITW in July 2024.

https://www.cve.org/CVERecord?id=CVE-2024-58388

Exploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30.

Witholding a CVE for something known to be EITW for over two years is fucking bullshit. Especially when the PoC was published in June 2024:

https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html#pre-auth-lfi

But at least there's a Nuclei template:

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/crocus-lfi.yaml

🟠 CVE-2026-66246 - High (8.8)

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references (IDOR), enabling privilege escalation and the unauthorized modification or d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66246/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-66246 - High (8.8)

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references (IDOR), enabling privilege escalation and the unauthorized modification or d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-66246/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62059 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62059/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62059 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62059/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Kiteworks vulnerabilities fixed in 9.5.1 include CVE-2026-102115, a 9.8 password reset flaw that enables admin account takeover. Patch now.

#Kiteworks #KiteworksVulnerabilities #CVE2026102115 #CVE2026102149 #CVE2026102147 #EmailSecurity #SSRF #PatchNow

https://securityonline.info/kiteworks-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔴 New security advisory:

CVE-2026-102427 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-102427-joomla-cck-unauthenticated-rce-poc

by Yazoul AI

#Cybersecurity #PatchNow #InfoSecCommunity

🚨 EUVD-2026-90745

📊 Score: 4.8/10 (CVSS v3.1)
📦 Product: Entradium
🏢 Vendor: Crocantickets
📅 Updated: 2026-10-01

📝 CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90745

#cybersecurity #infosec #euvd #cve #vulnerability

🔒 New CSAF advisory published

VDE-2025-102
WAGO: Multiple Devices are affected by a Vulnerability in BACnet IP Stack
CVE-2025-41753

Multiple WAGO devices are affected by a vulnerability in the dynamic creation of BACnet File Objects. The object name is used as a file path without sufficient validation and is not restricted to the intend…

HTML: https://certvde.com/en/advisories/VDE-2025-102
CSAF JSON: https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-102.json

#OT #Advisory

🚨 EUVD-2026-90744

📊 Score: 4.8/10 (CVSS v3.1)
📦 Product: Entradium
🏢 Vendor: Crocantickets
📅 Updated: 2026-10-01

📝 CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Specifically, in the Name and Field parameters of the endpoint /tools/discount_wizard/discount_config during the process of creating discounts assigned to an eve...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90744

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-90746

📊 Score: 4.8/10 (CVSS v3.1)
📦 Product: Entradium
🏢 Vendor: Crocantickets
📅 Updated: 2026-10-01

📝 CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-<event_city>/custom_form/edit during the process of creating or modifying forms associated with ticket sales for an event, which allows for the injection of JavaSc...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90746

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-90743

📊 Score: 4.8/10 (CVSS v3.1)
📦 Product: Entradium
🏢 Vendor: Crocantickets
📅 Updated: 2026-10-01

📝 CVE-2026-7173: Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to the victim and steal their session data.

* (Stored XSS) The City...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90743

#cybersecurity #infosec #euvd #cve #vulnerability

This is an interesting vuln and one that can be a great example of why a sev:CRIT may not be high priority.

sev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

MISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor. Because the system did not record whether a given TOTP period had already been consumed, the same code remained valid for its entire time window (typically 30 seconds). An attacker who captures a legitimate code during a user's login could replay it to authenticate a second session as that user. Preconditions: - The target user has TOTP-based two-factor authentication enabled. - The attacker is in a position to observe or intercept the TOTP code during a legitimate login (e.g., network-level interception, shoulder surfing, or a compromised client). - The replay must occur within the TOTP validity period. Security impact: - Unauthorized account access by replaying a captured one-time code. - Potential compromise of threat-intelligence data and administrative functions accessible to the targeted user. Affected versions: <v2.5.48.

https://nvd.nist.gov/vuln/detail/cve-2026-103655

This is an interesting vuln and one that can be a great example of why a sev:CRIT may not be high priority.

sev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

MISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor. Because the system did not record whether a given TOTP period had already been consumed, the same code remained valid for its entire time window (typically 30 seconds). An attacker who captures a legitimate code during a user's login could replay it to authenticate a second session as that user. Preconditions: - The target user has TOTP-based two-factor authentication enabled. - The attacker is in a position to observe or intercept the TOTP code during a legitimate login (e.g., network-level interception, shoulder surfing, or a compromised client). - The replay must occur within the TOTP validity period. Security impact: - Unauthorized account access by replaying a captured one-time code. - Potential compromise of threat-intelligence data and administrative functions accessible to the targeted user. Affected versions: <v2.5.48.

https://nvd.nist.gov/vuln/detail/cve-2026-103655

CVE-2026-78210: HIGH severity in Octopus Server (CVSS 7.1) lets users with scoped permissions execute unauthorized scripts in certain environments. Patch status unknown — minimize permissions and monitor for updates. https://radar.offseq.com/threat/cve-2026-78210-cwe-863-incorrect-authorization-in-octopus-deploy-octopus-server-50d97dfe20efe99c #OffSeq #OctopusDeploy #Vuln #CVE202678210

CVE-2026-78210: HIGH severity in Octopus Server (CVSS 7.1) lets users with scoped permissions execute unauthorized scripts in certain environments. Patch status unknown — minimize permissions and monitor for updates. https://radar.offseq.com/threat/cve-2026-78210-cwe-863-incorrect-authorization-in-octopus-deploy-octopus-server-50d97dfe20efe99c #OffSeq #OctopusDeploy #Vuln #CVE202678210

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

CISA’s active exploitation verification of CVE-2026-76504 demands an immediate, high-priority posture adjustment across all Cisco Catalyst SD-WAN Manager…...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager-4/

CISA Flags Exploited Cisco SD-WAN Flaw

A critical vulnerability in Cisco SD-WAN Manager, known as CVE-2026-76504, has been flagged by CISA and is being actively exploited, allowing hackers to gain admin-level access with a CVSS score of 9.8. This hex encoding flaw could let unauthenticated attackers remotely access and control affected systems.

https://osintsights.com/cisa-flags-exploited-cisco-sd-wan-flaw?utm_source=mastodon&utm_medium=social

#CiscoSdwan #Cve202676504 #Cisa #ExploitedVulnerabilities #KnownExploitedVulnerabilities

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

CISA’s active exploitation verification of CVE-2026-76504 demands an immediate, high-priority posture adjustment across all Cisco Catalyst SD-WAN Manager…...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager-3/

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

Strategic Threat Advisory: CVE-2026-76504 Affected Vendor & Product: Cisco - Catalyst SD-WAN Manager Vulnerability Class (CWE):...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager-2/

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

Threat Advisory: CVE-2026-76504 Affected Vendor/Product: Cisco - Catalyst SD-WAN Manager Vulnerability Type (CWE): N/A Operational Threat Level:...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager/

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

CISA’s active exploitation verification of CVE-2026-76504 demands an immediate, high-priority posture adjustment across all Cisco Catalyst SD-WAN Manager…...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager-4/

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

CISA’s active exploitation verification of CVE-2026-76504 demands an immediate, high-priority posture adjustment across all Cisco Catalyst SD-WAN Manager…...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager-3/

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

Strategic Threat Advisory: CVE-2026-76504 Affected Vendor & Product: Cisco - Catalyst SD-WAN Manager Vulnerability Class (CWE):...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager-2/

Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

Threat Advisory: CVE-2026-76504 Affected Vendor/Product: Cisco - Catalyst SD-WAN Manager Vulnerability Type (CWE): N/A Operational Threat Level:...

https://thecybermind.co/2026/10/01/cve-2026-76504-catalyst-sd-wan-manager/

Cisco Patches Actively Exploited Zero-Day in Catalyst SD-WAN Manager

Cisco released security updates for a zero-day vulnerability (CVE-2026-76504) in Catalyst SD-WAN Manager that attackers are actively exploiting to gain admin privileges. The flaw allows unauthenticated remote access to the management API through URI encoding bypasses.

**If you run Cisco Catalyst SD-WAN Manager, make sure it is isolated from the internet and reachable from trusted networks only, then patch it ASAP to the fixed version for your release (or migrate if you're on anything older than 20.9). Before patching, save an admin-tech file and check the logs for suspicious j_security_check requests or activity from viptela-reserved- accounts. If you find any, assume your whole SD-WAN network is compromised and call in incident response.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisco-patches-actively-exploited-zero-day-in-catalyst-sd-wan-manager-2-0-z-t-k/gD2P6Ple2L

🚨 [CISA-2026:0930] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-76504 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76504)
- Name: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Catalyst SD-WAN Manager
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76504

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260930 #cisa20260930 #cve_2026_76504 #cve202676504

Cisco confirmed active exploitation of CVE-2026-76504, an authentication bypass in Catalyst SD-WAN Manager API session handling. It allows unauthenticated remote admin access, enabling full control of SD-WAN fabrics. Prioritize patching and review management-plane logs for abuse. #CiscoSecurity #SdWan #AuthBypass

https://cyberworldops.eu/en/cisco-sd-wan-authentication-flaw-gives-remote-attackers-full

🚨 Cisco warns critical SD-WAN Manager zero-day is actively exploited

CVE-2026-76504 is a critical authentication bypass affecting Cisco Catalyst SD-WAN Manager.

The flaw allows an unauthenticated remote attacker to send a crafted HTTP request that bypasses an API authentication rule and grants access with admin privileges.
⠀
The vulnerability carries a CVSS score of 9.8 and affects the product regardless of its configuration.

Cisco became aware of active exploitation in September after investigating a support case.
⠀
There are no workarounds. Administrators should install a fixed release immediately and investigate internet-facing systems for signs of compromise.

Source: https://www.bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks/

Well would you look at that; it's Cisco 0-day o'clock again.

https://ifin.network/t/cve-2026-76504-cisco-sd-wan-auth-bypass-actively-exploited/874

#ThreatIntel #ThreatIntelligence #IFIN

CVE ID: CVE-2026-76504
Vendor: Cisco
Product: Catalyst SD-WAN Manager
Date Added: 2026-09-30
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-76504

Cisco SD-WAN Manager zero-day CVE-2026-76504 exploited

https://fawkes.rocks/2026/09/30/cisco-sd-wan-manager-zero-day-cve-2026-76504-exploited/

🏆 New Achievement! Unauthenticated and Loving It!

Welcome to Module 7: API Authentication and Why Your Vendor Forgot To Include It. Today's learning objective is CVE-2026-76504, a critical zero-day in Cisco Catalyst SD-WAN Manager. Attackers are actively exploiting a flaw in the API authentication mechanism to gain full administrator privileges on your systems. Without a username. Without a password. Without so much as a polite knock. (1/3)

New advisory, new flaw.

Cisco: CRITICAL CVE-2026-76504: Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU @TalosSecurity #Cisco

More on that Cisco vulnerability:

Rapid7: Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504) https://www.rapid7.com/blog/post/etr-critical-cisco-catalyst-sd-wan-manager-api-authentication-bypass-exploited-in-the-wild-cve-2026-76504/ @Rapid7Official

Also:

Broadcom has several advisories today, three of them addressing critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom #infosec #vulnerability

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are...

🔗️ [Bleepingcomputer] https://link.is.it/cZgOkH

Attackers exploit CVE-2026-76504, a 9.8 authentication bypass in Cisco SD-WAN Manager that grants admin API access. Patch now.

#Cisco #SDWAN #CVE202676504 #AuthenticationBypass #ActivelyExploited #CyberSecurity

https://securityonline.info/cisco-sd-wan-manager-cve-2026-76504/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-47600 - High (7.8)

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47600/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-13313 (HIGH, CVSS 8.9) in ASUS routers: Authenticated attackers can enable Telnet via debug code, gaining root command execution. Restrict management access & monitor Telnet until patch info is released. https://radar.offseq.com/threat/cve-2026-13313-cwe-489-active-debug-code-in-asus-router-57f2c007e7c82b59 #OffSeq #ASUS #Infosec #Vuln

CVE-2026-13313 (HIGH, CVSS 8.9) in ASUS routers: Authenticated attackers can enable Telnet via debug code, gaining root command execution. Restrict management access & monitor Telnet until patch info is released. https://radar.offseq.com/threat/cve-2026-13313-cwe-489-active-debug-code-in-asus-router-57f2c007e7c82b59 #OffSeq #ASUS #Infosec #Vuln

Learn how to patch critical ASUS security vulnerabilities like CVE-2026-13313 to protect your routers and motherboards from severe network exploits.

#ASUS #Cybersecurity #Vulnerability #Router #Hardware

https://securityonline.info/asus-security-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-102823 - High (7.5)

Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs forwards CHANNEL_DATA, CHANNEL_EXTENDED_DATA, CHANNEL_EOF, CHANNEL_CLOSE, CHANNEL_OPEN_FAILURE, CHANNEL_SUCCESS, CHANNEL_FAI...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-102823/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-101276: esnet iperf3 3.21 suffers a CRITICAL remote use-after-free (CVSS 9.2). Unauthenticated attackers can trigger memory corruption or RCE. Upgrade to 3.22+ now. Details: https://radar.offseq.com/threat/cve-2026-101276-cwe-416-use-after-free-in-esnet-iperf3-8a664a87c0e694fb #OffSeq #CVE2026101276 #iperf3 #infosec

HPE fixed 18 HPE Instant ON vulnerabilities in its access points, including CVSS 9.8 RCE flaws CVE-2026-76721 and CVE-2026-76722. Update to 3.4.2.0.

#HPE #InstantON #HPENetworking #CVE202676721 #WiFiSecurity #AccessPoint #RCE #PatchNow

https://securityonline.info/hpe-instant-on-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-76722 - Critical (9.8)

Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation could result ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76722/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

HPE fixed 18 HPE Instant ON vulnerabilities in its access points, including CVSS 9.8 RCE flaws CVE-2026-76721 and CVE-2026-76722. Update to 3.4.2.0.

#HPE #InstantON #HPENetworking #CVE202676721 #WiFiSecurity #AccessPoint #RCE #PatchNow

https://securityonline.info/hpe-instant-on-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🔴 CVE-2026-76721 - Critical (9.8)

Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execut...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76721/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-76723 - Critical (9.6)

Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arb...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76723/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62146 - High (7.8)

A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62146/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103111 - High (7.6)

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103111/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103106 - High (7.8)

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker t...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103106/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🏆 New Achievement! Root in the Wild!

Observe the Zammad ticketing system in its natural habitat — quietly managing support queues, utterly unaware it carries two zero-days, CVE-2026-102489 and CVE-2026-102490, like a doomed species bearing a genetic flaw it cannot name. An autonomous AI agent, patient and efficient as a nature film's apex predator, chained the pair together: session hijack, remote code execution, root escalation — all in mere seconds. The herd had no warning. (1/2)

🟠 CVE-2026-79625 - High (8.1)

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated re...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-79625/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 New CSAF advisory published

VDE-2026-097
CODESYS Control Runtime - Improper Synchronization in Monitoring
CVE-2026-79625

The monitoring functionality of affected CODESYS Control runtime systems processes read and write requests to PLC application data sent by the CODESYS Development System and other clients suc…

HTML: https://www.certvde.com/en/advisories/VDE-2026-097/
CSAF JSON: https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-12_vde-2026-097.json

#OT #Advisory

🟠 CVE-2026-102826 - High (8.1)

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsafeOperationsPlugin does not completely reject configuration includes...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-102826/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-102827 - High (8.1)

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsafeOperationsPlugin compares parsed option names with literal dangero...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-102827/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Five high-severity Electron vulnerabilities, including CVE-2026-102676, CVE-2026-102673 and CVE-2026-102674, weaken sandbox isolation. Update Electron now.

#Electron #ElectronJS #CVE2026102676 #AppSecurity #Sandbox #JavaScript #DesktopApps #PatchNow

https://securityonline.info/electron-vulnerabilities-sandbox-bypass/?utm_source=mastodon&utm_medium=jetpack_social

🏆 New Achievement! Root in the Wild!

Observe the Zammad ticketing system in its natural habitat — quietly managing support queues, utterly unaware it carries two zero-days, CVE-2026-102489 and CVE-2026-102490, like a doomed species bearing a genetic flaw it cannot name. An autonomous AI agent, patient and efficient as a nature film's apex predator, chained the pair together: session hijack, remote code execution, root escalation — all in mere seconds. The herd had no warning. (1/2)

🟠 CVE-2026-47593 - High (7.8)

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47593/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47592 - High (7.8)

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of serv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47592/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47599 - High (7.8)

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerab...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47599/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47601 - High (7.8)

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user could cause improper preservation of memory access permissions when importing a read-onl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47601/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47591 - High (7.8)

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write access to memory marked read-only. A successfu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47591/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

@hlux @bkastl Im Prinzip stimmt das mit meiner Wahrnehmung überein, vor allem im Vergleich mit Citrix, Ivanti, Fortinet, Cisco. Aber auch hier gab's neulich was Spannendes: https://www.netspi.com/blog/technical-blog/web-application-pentesting/cve-2026-78902-xss-to-rce-in-pfsense-with-one-dns-request/

@hlux @bkastl Im Prinzip stimmt das mit meiner Wahrnehmung überein, vor allem im Vergleich mit Citrix, Ivanti, Fortinet, Cisco. Aber auch hier gab's neulich was Spannendes: https://www.netspi.com/blog/technical-blog/web-application-pentesting/cve-2026-78902-xss-to-rce-in-pfsense-with-one-dns-request/

🟠 CVE-2026-103108 - High (7.5)

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of service

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103108/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92871 - High (7.5)

A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92871/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 New security advisory:

CVE-2026-76570 affects multiple systems.

• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems

Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-76570-joomla-jctables-sqli-reads-and-writes-data-poc

by Yazoul AI

#InfoSec #VulnerabilityManagement #CyberSec

New. This relates to CVE-2026-76570.

VulnCheck: JCTables for Joomla: When "Already Escaped" Means Injectable https://www.vulncheck.com/blog/jctables-unauthenticated-sql-rw-to-rce @vulncheck #infoec #vulnerability #SQL

🟠 CVE-2026-103099 - High (7.5)

Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of service.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103099/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103105 - High (8.8)

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within a Pexip Infinity installation to execute arbitrary code as an unpriv...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103105/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103104 - High (7.5)

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort resulting in a denial of service.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103104/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103109 - High (7.7)

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a denial of service. A crafted m...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103109/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-102455 - Critical (9.8)

EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-102455/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-75098 - High (7.5)

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrar...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75098/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-18783 - High (8.8)

Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass.

This issue affects Trex MES: through 2026-09-29.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18783/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-6806 - High (7.5)

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stm_lat/stm_lng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the u...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6806/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-62097 - High (7.6)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-62097/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Update to 15.82 now. Five high-severity TeamViewer vulnerabilities include CVE-2026-92370, CVE-2026-19743 and CVE-2026-92368 in Full Client and Host.

#TeamViewer #RemoteAccess #CVE202692370 #PrivilegeEscalation #Windows #Linux #macOS #PatchNow

https://securityonline.info/teamviewer-vulnerabilities-15-82/?utm_source=mastodon&utm_medium=jetpack_social

A critical Apache PLC4X vulnerability, CVE-2026-102508, lets attackers impersonate OPC UA servers and steal credentials. Upgrade to PLC4X 1.0.0 now.

#ApachePLC4X #PLC4X #OPCUA #CVE2026102508 #ICSSecurity #OTSecurity #PLC #Apache

https://securityonline.info/apache-plc4x-vulnerability-cve-2026-102508/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-93994 - High (8.1)

Apache MINA SSHD is a Java library for client-side and server-side SSH. SSH servers can be configured to require multi-authentication schemes, for instance two different public keys, not just one. In OpenSSH, this would be done by setting in sshd_...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-93994/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-94053 - Critical (9.1)

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5.

Apache MINA SSHD is a Java library for client-side and server-side SSH.
The optional sshd-ldap component p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-94053/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-18782 - Critical (9.8)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Command Line Execution through SQL Injection.

This issue affects Trex MES: through...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-18782/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-82307 - Critical (9.8)

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Dolusoft Software Technologies SOPLOG allows SQL Injection.

This issue affects SOPLOG: before Soplog 2026.9.4.1.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-82307/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97240 - High (7.5)

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools &lt;= 2.2.7 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97240/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97244 - High (7.5)

Contributor Path Traversal in Creator LMS &lt;= 1.2.19 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97244/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-96837 - High (8.8)

Contributor Remote Code Execution (RCE) in CartFlows &lt;= 3.2.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-96837/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-97274 - Critical (9.8)

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) &lt;= 7.1.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97274/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97293 - High (8.5)

Contributor SQL Injection in Media LIbrary Assistant &lt;= 3.41 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97293/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97287 - High (8.5)

Contributor SQL Injection in Event Tickets &lt;= 5.29.5 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97287/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-97248 - Critical (9.8)

Unauthenticated PHP Object Injection in Booking Activities &lt;= 1.18.7.1 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97248/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97241 - High (7.5)

Unauthenticated Sensitive Data Exposure in BackupEase &lt;= 2.2.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97241/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-97197 - High (7.5)

Unauthenticated Broken Access Control in WordPress Backup & Migration &lt;= 1.6.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97197/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Google's Chrome security update 154.0.8037.92 fixes 33 flaws, including critical ANGLE bug CVE-2026-102331 and six V8 issues. Update Chrome now.

#Chrome #GoogleChrome #ChromeSecurityUpdate #CVE2026102331 #V8 #BrowserSecurity #ANGLE #PatchNow

https://securityonline.info/chrome-154-security-update/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-76992 - High (7.5)

The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-76992/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔒 New CSAF advisory published

VDE-2026-094
CODESYS Gateway Client - Uncontrolled Memory Allocation
CVE-2026-76992

The CODESYS Gateway Client (CmpGatewayClient) is used by various CODESYS products to establish PLC communication via the CODESYS Gateway.

Due to missing limits on memory allocations derived from a si…

HTML: https://www.certvde.com/en/advisories/VDE-2026-094/
CSAF JSON: https://codesys.csaf-tp.certvde.com/.well-known/csaf/white/2026/advisory2026-11_vde-2026-094.json

#OT #Advisory

🔴 CVE-2026-94052 - Critical (9.1)

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks.

Apache MINA SSHD is a Java library for client-side and server-side SSH. T...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-94052/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-94002 - High (7.5)

Possible memory exhaustion in SFTP clients (DefaultSftpClient) in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5.

Apache
MINA SSHD is a Java library for client-side and server-side SSH. The sshd-sftp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-94002/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-77185 - Critical (9.1)

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server.

Apache MINA SSHD is a Java library for client- and server-side SSH. In the s...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-77185/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Apache MINA SSHD auth bypass (CVE-2026-77185, CRITICAL, CVSS 9.1): Async public-key/hostbased auth can be skipped, risking full SSH compromise. Affected: 2.0.0 – 2.19.x, 3.0.0-M1 – M5. Patch to 2.20.0/3.0.0-M6. https://radar.offseq.com/threat/cve-2026-77185-cwe-305-authentication-bypass-by-primary-weakness-in-apache-software-foundation-apache-18a51f96ab18bde1 #OffSeq #Apache #Infosec

🟠 CVE-2026-10764 - High (8.7)

Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10764/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-89294 - High (7.5)

The Simply Schedule Appointments plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.12.27 via the 'ssa_locale' parameter parameter. This makes it possible for authenticated attackers, with subscrib...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-89294/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-92867 - High (8.8)

An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92867/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-102458 - Critical (9.8)

EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords through a specific API.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-102458/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CRITICAL vuln in DigiWin EasyFlow .NET (CVE-2026-102458, CVSS 9.3): Missing authentication allows remote attackers to obtain plaintext passwords via API. Affects 6.6 – 6.6.19, 8.1 – 8.1.5. Patch ASAP! https://radar.offseq.com/threat/cve-2026-102458-cwe-306-missing-authentication-for-critical-function-in-digiwin-easyflow-net-3e9316754f2dea13 #OffSeq #CVE2026_102458 #infosec #appsec

🔴 CVE-2026-97196 - Critical (9.1)

Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass.

This issue affects GiveWP: from n/a through 4.16.9.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-97196/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

GiveWP (Liquid Web/StellarWP) CRITICAL vuln (CVE-2026-97196): Improper input validation leads to auth bypass (CVSS 9.1). Affects up to 4.16.9. Patch when available. Details: https://radar.offseq.com/threat/cve-2026-97196-cwe-1289-improper-validation-of-unsafe-equivalence-in-input-in-liquid-web-stellarwp-ea2f97fd9b30ac84 #OffSeq #Vulnerability #WordPress

🟠 CVE-2026-92870 - High (7.5)

A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-92870/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-103110: CRITICAL out-of-bounds write in Pexip Infinity (CVSS 9.8) allows remote code execution as unprivileged user. Versions <38.2, 39.0, 39.1, 40.0 affected. Patch status unknown. See details: https://radar.offseq.com/threat/cve-2026-103110-cwe-787-out-of-bounds-write-in-pexip-infinity-cbbf16ed7e7beca0 #OffSeq #CVE #Pexip #AppSec

🔴 CVE-2026-103110 - Critical (9.8)

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a Pexip Infinity Conferencing Node.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103110/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-102911 - Critical (9.9)

A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wiki_capture_source MCP tool. Executing a manipulation of the argument url can lead to os command injection. The a...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-102911/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-102911: zosmaai pi-llm-wiki (v0.11.0 – 0.11.7) suffers CRITICAL OS command injection in mcp/index.ts. Public exploit available — remote code execution possible. Upgrade to 0.11.8 ASAP. https://radar.offseq.com/threat/cve-2026-102911-os-command-injection-in-zosmaai-pi-llm-wiki-28aaee951c4eb21f #OffSeq #CVE2026102911 #Vuln #Infosec

🟠 CVE-2026-95373 - High (8.8)

Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95373/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103088 - High (7.5)

Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded strings, whereas the template file is opened through ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103088/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103102 - High (8.6)

Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gatewa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103102/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103101 - High (8.6)

Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to render a Pexip Infinity node inaccessible.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103101/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-103100 - High (7.5)

Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a denial of service.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-103100/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

WatchGuard Patches Multiple Flaws, One Critical in Fireware OS

WatchGuard patched 15 Fireware OS vulnerabilities, the worst a critical code injection flaw (CVE-2026-86131) that lets a malicious remote BOVPN-over-TLS server run root commands on a connecting Firebox, along several pre-authentication remote code execution and DoS bugs in services such as fingerd, spamd, iked and samld.

**If you run WatchGuard Firebox appliances, upgrade Fireware OS to a fixed version ASAP (2026.3.2, 2026.2.3, 12.12.3, or 12.5.21 on T15/T35). There are 15 flaws, including a critical one with no workaround, so prioritize devices that use Branch Office VPN over TLS. Until you patch, make sure the firewall's management interface is reachable only from trusted admin networks, and only connect VPN tunnels to servers you fully control.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/watchguard-patches-multiple-flaws-one-critical-in-fireware-os-w-l-q-u-2/gD2P6Ple2L

WatchGuard patched CVE-2026-86131 (CVSS 9.2) in Fireware OS, allowing a malicious VPN server to achieve root RCE on connecting Firebox appliances. Unpatched edge devices risk full takeover and network compromise, so prioritize updates and review VPN peers. #WatchGuard #FirewareOS #VulnManagement

https://cyberworldops.eu/en/malicious-vpn-server-could-seize-root-control-of-watchguard-firebox

CRITICAL RCE (CVE-2026-86131) in WatchGuard Fireware OS enables root code execution via BOVPN over TLS. Multiple high-severity flaws also patched. No known in-the-wild attacks, but update ASAP. https://radar.offseq.com/threat/watchguard-patches-critical-fireware-os-code-injection-vulnerability-36035f2a6c97cfc4 #OffSeq #Vuln #WatchGuard #PatchTuesday #InfoSec

Another one from Watch Guard.

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox.

https://psirt.watchguard.com/CVE-2026-86131

WatchGuard patched 14 Fireware OS vulnerabilities, including CVSS 9.2 RCE flaw CVE-2026-86131 in BOVPN Over TLS. Update Firebox appliances now.

#WatchGuard #FirewareOS #Firebox #CVE202686131 #FirewallSecurity #VPN #NetworkSecurity #PatchNow

https://securityonline.info/watchguard-fireware-os-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-86131: CRITICAL code injection in WatchGuard Fireware OS BOVPN Over TLS. Attackers controlling a VPN server can execute root commands on Firebox devices. Avoid untrusted VPNs until patched. https://radar.offseq.com/threat/a-code-injection-vulnerability-in-watchguard-fireware-oss-bovpn-over-tls-client-configuration-handling-678dbd9b2069781f #OffSeq #WatchGuard #FirewareOS #Vuln

CISA warns of 10 Toptech TMS7 vulnerabilities, including CVSS 10.0 flaw CVE-2026-71379 that exposes database tables. Upgrade TMS7 to 7.8 now.

#Toptech #TMS7 #TopHAT #ICSSecurity #CISA #CVE202671379 #CriticalInfrastructure #OTSecurity

https://securityonline.info/toptech-tms7-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-102794: Ziroom ZHOME A0101 v1.0.1.0 is affected by a CRITICAL command injection flaw (CVSS 9.1) in /api/ZRnetwork/ping. No patch, public exploit out. Restrict access & monitor usage. https://radar.offseq.com/threat/a-vulnerability-has-been-found-in-ziroom-zhome-a0101-1010-cve-2026-102794-9a56d1624759c7e9 #OffSeq #Vulnerability #InfoSec

CVE-2026-102794: Ziroom ZHOME A0101 v1.0.1.0 has a CRITICAL command injection vuln in /api/ZRnetwork/ping (url param). Public exploit available, vendor silent. Remediate ASAP if deployed. https://radar.offseq.com/threat/cve-2026-102794-command-injection-in-ziroom-zhome-a0101-70f3389000d03735 #OffSeq #CVE2026102794 #Infosec #IoT

CISA warns the Viidure dashcam app leaks hardcoded cloud credentials (CVE-2026-96587) and public storage (CVE-2026-94204). The vendor has not responded.

#Viidure #Dashcam #CISA #CVE202696587 #HardcodedCredentials #CloudSecurity #AndroidSecurity #IoTSecurity

https://securityonline.info/viidure-dashcam-app-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CISA issued ICSA-26-272-04 for CVE-2026-96274, an uncaught-exception flaw in Baicells Nova 430H eNodeB (pBS3101SH). It can be triggered from radio range to disrupt cellular service, exposing small-cell deployments to remote DoS. Operators should review affected BaiBLQ versions and apply CISA guidance. #Baicells #TelecomSecurity #DenialOfService

https://cyberworldops.eu/en/radio-range-flaw-can-disrupt-baicells-nova-430h-cellular-service

CISA warns the Viidure dashcam app leaks hardcoded cloud credentials (CVE-2026-96587) and public storage (CVE-2026-94204). The vendor has not responded.

#Viidure #Dashcam #CISA #CVE202696587 #HardcodedCredentials #CloudSecurity #AndroidSecurity #IoTSecurity

https://securityonline.info/viidure-dashcam-app-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

🟠 CVE-2026-95372 - High (8.3)

Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity:...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-95372/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📢 Correctifs haute sévérité dans OpenSSL et WolfSSL : authentification et fuites mémoire

Cet article couvre les correctifs de sécurité publiés par les équipes des bibliothèques cryptographiques open source OpenSSL et WolfSSL. La dernière version d'OpenSSL corrige 14 vulnérabilités, dont : CVE-2026-84782 (CVSS 8.2 — haute sévérité) : un pair distant peut…

📖 cyberveille : https://cyberveille.ch/posts/2026-10-01-correctifs-haute-severite-dans-openssl-et-wolfssl-authentification-et-fuites-memoire/
🌐 source : https://www.securityweek.com/high-severity-vulnerabilities-patched-in-openssl-wolfssl/
🟢 vérification factuelle haute
#OpenSSL #WolfSSL #Cyberveille

OpenSSL disclosed CVE-2026-84782, a high-severity bug in DTLS handshake retransmission that can leak unencrypted heap data to peers or crash the process. Ubuntu describes the impact as incorrect handshake behavior or denial of service. Patch affected builds and audit DTLS-exposed services. #OpenSSL #Dtls #VulnManagement

https://cyberworldops.eu/en/openssl-dtls-retransmission-bug-can-leak-heap-data-or-terminate

OpenSSL patched 14 OpenSSL vulnerabilities, including high-severity DTLS flaw CVE-2026-84782 that can leak heap memory. Upgrade to 4.0.3 now.

#OpenSSL #OpenSSLVulnerabilities #CVE202684782 #DTLS #QUIC #TLS #Cryptography #PatchNow

https://securityonline.info/openssl-vulnerabilities-sept-2026/?utm_source=mastodon&utm_medium=jetpack_social

Update to 15.82 now. Five high-severity TeamViewer vulnerabilities include CVE-2026-92370, CVE-2026-19743 and CVE-2026-92368 in Full Client and Host.

#TeamViewer #RemoteAccess #CVE202692370 #PrivilegeEscalation #Windows #Linux #macOS #PatchNow

https://securityonline.info/teamviewer-vulnerabilities-15-82/?utm_source=mastodon&utm_medium=jetpack_social

Update to 15.82 now. Five high-severity TeamViewer vulnerabilities include CVE-2026-92370, CVE-2026-19743 and CVE-2026-92368 in Full Client and Host.

#TeamViewer #RemoteAccess #CVE202692370 #PrivilegeEscalation #Windows #Linux #macOS #PatchNow

https://securityonline.info/teamviewer-vulnerabilities-15-82/?utm_source=mastodon&utm_medium=jetpack_social

Five high-severity Electron vulnerabilities, including CVE-2026-102676, CVE-2026-102673 and CVE-2026-102674, weaken sandbox isolation. Update Electron now.

#Electron #ElectronJS #CVE2026102676 #AppSecurity #Sandbox #JavaScript #DesktopApps #PatchNow

https://securityonline.info/electron-vulnerabilities-sandbox-bypass/?utm_source=mastodon&utm_medium=jetpack_social

Five high-severity Electron vulnerabilities, including CVE-2026-102676, CVE-2026-102673 and CVE-2026-102674, weaken sandbox isolation. Update Electron now.

#Electron #ElectronJS #CVE2026102676 #AppSecurity #Sandbox #JavaScript #DesktopApps #PatchNow

https://securityonline.info/electron-vulnerabilities-sandbox-bypass/?utm_source=mastodon&utm_medium=jetpack_social

Researchers published the first public PoC for CVE-2026-86950, an Apple CoreGraphics out-of-bounds write via crafted PDF font data. The PoC shows crash and controlled write only, but Apple reports targeted exploitation in the wild, raising immediate patching priority. #AppleSecurity #CoreGraphics #VulnManagement

https://cyberworldops.eu/en/public-coregraphics-poc-raises-pressure-to-patch-apple-devices-under

Researchers published the first public PoC for CVE-2026-86950, an Apple CoreGraphics out-of-bounds write via crafted PDF font data. The PoC shows crash and controlled write only, but Apple reports targeted exploitation in the wild, raising immediate patching priority. #AppleSecurity #CoreGraphics #VulnManagement

https://cyberworldops.eu/en/public-coregraphics-poc-raises-pressure-to-patch-apple-devices-under

Geopolitical: Iran warned UAE following Netanyahu's visit (Sept 30) amidst regional tensions, while Russia conducted a drone strike on Ukraine's National Academy of Sciences (Sept 29).

Technology: OpenAI launched "dots" agents and GPT-6.1 Sol (Sept 29), despite shelving a prior AI model (Astra) due to safety concerns. SpaceX's Starship successfully completed its first orbital flight (Sept 28-29).

Cybersecurity: Urgent advisories were issued for actively exploited Citrix NetScaler zero-days (Sept 30), mandating federal agency patching. Apple also patched a CoreGraphics zero-day (CVE-2026-86950) used in targeted attacks (Sept 29).

#AnonNews_irc #Cybersecurity #News

#Apple released a #security update for #iOS 26, #iPadOS 26, and #macOS 26 to fix a #vulnerability in the #graphicsengine that could be exploited for sophisticated attacks. The bug, CVE-2026-86950, was discovered by Meta and could potentially allow hackers to steal personal data. A separate zero-click bug, CVE-2026-86869, was also fixed, preventing silent data theft via malicious iMessages. https://techcrunch.com/2026/09/29/still-running-ios-26-update-your-iphones-ipads-and-macs-for-this-urgent-security-fix/

Apple released the urgent iOS 26.7.1 update to patch a critical zero-day vulnerability (CVE-2026-86950) in CoreGraphics, preventing arbitrary code execution.

#AppleSecurity #iOSUpdate #ZeroDay #CyberSecurity #TechNews

https://dailytechnow.com/apple-patches-zero-day-ios-26-7-1/

Apple Patches Actively Exploited Zero-Day in iOS 26, iPadOS 26 and macOS

Apple patched a zero-click vulnerability (CVE-2026-86950) in iOS 26 and macOS 26 that allow remote code execution and data theft, and has been exploited

**If you use an iPhone, iPad or Mac, update it right now to iOS/iPadOS 26.7.1, macOS Tahoe 26.7.1 or macOS Sequoia 15.8.1. Alterantively, where possible, move to iOS 27. Attackers are already using this flaw to take over devices and steal personal data. If you're a likely target, such as a journalist, activist or executive, consider turning on Lockdown Mode for extra protection.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/apple-patches-actively-exploited-zero-day-in-ios-26-ipados-26-and-macos-p-i-5-p-7/gD2P6Ple2L

Apple a corrigé une faille CoreGraphics exploitée pour cibler des utilisateurs d’iPhone (CVE-2026-86950) https://www.it-connect.fr/apple-cve-2026-86950-faille-zero-day-coregraphics/ #ActuCybersécurité #Cybersécurité #Vulnérabilité #Apple

(CISA TS+SOC) CVE-2026-86950 – Apple CoreGraphics Out-of-Bounds Write Briefing

Active exploitation of CVE-2026-88650 [CVE-2026-86950] in Apple CoreGraphics requires immediate patch deployment and forensic triage. Review integrated TSUITE + SOC intelligence assets....

https://thecybermind.co/2qk4

Apple squashes zero-day bug exploited in ”extremely sophisticated” attack (CVE-2026-86950) – Help Net Security https://www.macken.xyz/2026/09/apple-squashes-zero-day-bug-exploited-in-extremely-sophisticated-attack-cve-2026-86950-help-net-security/?utm_source=dlvr.it&utm_medium=mastodon

Apple fixes CoreGraphics zero-day CVE-2026-86950

https://fawkes.rocks/2026/09/29/apple-fixes-coregraphics-zero-day-cve-2026-86950/

LevelBlue THOR observed active exploitation of CVE-2026-88771 in Citrix NetScaler ADC and Gateway for unauthenticated command execution. Payloads establish reverse shells, create persistent superuser accounts, and hide web shells as CSS URLs while staging configs. This enables long-term persistence and credential access on edge devices. #NetScaler #Citrix #ThreatIntel

https://cyberworldops.eu/en/netscaler-attack-payloads-aim-for-superuser-persistence-and-css-masked

Mandiant and GTIG confirm active exploitation of NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 on ADC and Gateway appliances. Edge compromise can escalate to root-level network access, bypassing perimeter controls. Immediate patching and compromise hunting are required. #NetScaler #ZeroDay #ThreatIntel

https://cyberworldops.eu/en/netscaler-intrusions-turn-a-gateway-flaw-into-root-level-network

Great IOCs on the follow up spray and pray activity on #PitScaler so far.

For context this activity definitely is not related to the inital threat actor activity in early September. This is new stuff.

https://github.com/rtkwlf/wolf-tools/tree/main/pack_alerts/202609-citrix-netscaler-active-exploitation-cve-2026-88771

CERT-EU shares their insights on CVE-2026-88771 exploitation and provides threat hunting tips in different logs.

https://cert.europa.eu/blog/taking-execute-logging-a-bit-too-literally-cve-2026-88771

#threatintel #threathunting #citrix #netscaler

Critical Citrix NetScaler RCE (CVE-2026-88772) exploited in the wild: a deep dive into the DTLS buffer overflow

https://thecybersecguru.com/news/citrix-netscaler-cve-2026-88772-rce/

Mandiant and Google Threat Intelligence Group describe in-the-wild exploitation CVE-2026-88771 and CVE-2026-88772 against Citrix NetScaler ADC and NetScaler Gateway appliances globally. Indicators of compromise and YARA rules are included.

https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances?e=48754805

#threatintel #citrix #netscaler #kev #zeroday #ioc

Citrix NetScaler CVE-2026-88771 now under mass attack

https://fawkes.rocks/2026/09/29/citrix-netscaler-cve-2026-88771-now-under-mass-attack/

Attackers exploit Citrix NetScaler zero-day CVE-2026-88772 for root access, then hide WHIPSHOT web shells and a SLAPSHOT tunneler. Patch now.

#CitrixNetScaler #ZeroDay #CVE202688772 #CVE202688771 #WHIPSHOT #SLAPSHOT #Mandiant #CyberSecurity

https://securityonline.info/citrix-netscaler-zero-day/?utm_source=mastodon&utm_medium=jetpack_social

Mandiant and GTIG confirm active exploitation of NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 on ADC and Gateway appliances. Edge compromise can escalate to root-level network access, bypassing perimeter controls. Immediate patching and compromise hunting are required. #NetScaler #ZeroDay #ThreatIntel

https://cyberworldops.eu/en/netscaler-intrusions-turn-a-gateway-flaw-into-root-level-network

CVE-2026-88772, a Citrix NetScaler DTLS memory overflow, is exploited in the wild. A watchTowr PoC and full details are now public. Patch NetScaler now.

#Citrix #NetScaler #CVE202688772 #DTLS #watchTowr #KEV #ZeroDay #RCE

https://securityonline.info/citrix-netscaler-cve-2026-88772-poc-exploited/?utm_source=mastodon&utm_medium=jetpack_social

Two Citrix NetScaler zero-days (CVE-2026-88772/88771) gave attackers pre-auth root on the box that fronts your whole network. GTIG traced exploitation to early September, weeks before the patch existed.

Once inside, their C2 leaves from your own public IP. No strange domain, no foreign address to block. The call is coming from inside the house.

Reputation Radar #13:
https://www.reput.io/blog/reputation-radar-13

#ThreatIntel #NetScaler #SOC

NetScaler CVE-2026-88772 zero-day tied to state hackers

https://fawkes.rocks/2026/09/30/netscaler-cve-2026-88772-zero-day-tied-to-state-hackers/

Nice blog post on Citrix CVE-2026-88772 exploit:

https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances

#citrix #cve_2026_88772 #pitscaler

Critical Citrix NetScaler RCE (CVE-2026-88772) exploited in the wild: a deep dive into the DTLS buffer overflow

https://thecybersecguru.com/news/citrix-netscaler-cve-2026-88772-rce/

"Hackers exploit Citrix NetScaler zero-day to deploy web shells"

"[...] Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into internal networks."

https://www.bleepingcomputer.com/news/security/hackers-exploit-citrix-netscaler-zero-day-to-deploy-web-shells/

#Cybersecurity

We had first POC yes, but what about second POC? watchTowr breaks down CVE-2026-88772 and provides a "detection artifact generator"

https://labs.watchtowr.com/here-we-go-again-citrix-netscaler-dtls-preauth-memory-overflow-cve-2026-88772/

#citrix #netscaler #poc #zeroday #kev

Mandiant and Google Threat Intelligence Group describe in-the-wild exploitation CVE-2026-88771 and CVE-2026-88772 against Citrix NetScaler ADC and NetScaler Gateway appliances globally. Indicators of compromise and YARA rules are included.

https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances?e=48754805

#threatintel #citrix #netscaler #kev #zeroday #ioc

(CISA TS+SOC) CVE-2026-87902 WORDPRESS CODE REMOTE FILE INCLUSION

Active exploitation of CVE-2026-87902 WordPress requires immediate patch deployment and forensic triage. Review integrated TSUITE + SOC intelligence assets....

https://thecybermind.co/go2d

(CISA TS+SOC) CVE-2026-87902 WORDPRESS CODE REMOTE FILE INCLUSION

Active exploitation of CVE-2026-87902 WordPress requires immediate patch deployment and forensic triage. Review integrated TSUITE + SOC intelligence assets....

https://thecybermind.co/go2d

CVE-2026-87902 scored 9.2 out of 10, affected every WordPress version since 2016, and was actively exploited within 24 hours of disclosure — no login required. Most site owners never heard a word about it. That silence is the real vulnerability. Knowing your site runs WordPress is not the same as knowing what is happening to it.

#WordPress #WordPressSecurity #CyberSecurity #SecurityHardening

https://wpguy.uk/blog/cve-2026-87902-the-wordpress-flaw-most-owners-missed/

📈 CVE Published in last 30 days (2026-09-01 - 2026-09-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1417
- High: 5956
- Medium: 4625
- Low: 927
- None: 1743

Status:
- : 93
- Analyzed: 3418
- Awaiting Analysis: 2780
- Deferred: 5097
- Modified: 128
- Received: 2835
- Rejected: 130
- Undergoing Analysis: 187

CISA KEVs:
- CISA-2026:0902 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0902)
- CISA-2026:0904 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0904)
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0914 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0916 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916)
- CISA-2026:0918 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)
- CISA-2026:0921 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0921)
- CISA-2026:0922 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0922)
- CISA-2026:0924 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0924)
- CISA-2026:0925 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0925)
- CISA-2026:0927 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0927)
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)

Top CNAs:
- kernel.org: 2117
- VulnCheck: 1638
- GitHub, Inc.: 1424
- Microsoft Corporation: 1000
- VulDB: 900
- Oracle: 634
- WPScan: 552
- MITRE: 497
- Chrome: 467
- Wordfence: 408

Top Affected Products:
- UNKNOWN: 11109
- Microsoft Windows Server 2025: 648
- Microsoft Windows Server 2022: 611
- Microsoft Windows 11 24h2: 600
- Microsoft Windows 11 26h1: 600
- Microsoft Windows 11 25h2: 599
- Microsoft Windows Server 2019: 586
- Microsoft Windows 10 1809: 582
- Microsoft Windows 11 23h2: 574
- Microsoft Windows 10 21h2: 541

Top EPSS Score:
- CVE-2026-85706 - 91.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85706)
- CVE-2026-85046 - 48.88 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85046)
- CVE-2026-76461 - 28.27 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76461)
- CVE-2026-87902 - 19.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-87902)
- CVE-2026-93616 - 19.65 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93616)
- CVE-2026-76460 - 14.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76460)
- CVE-2026-86218 - 12.93 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86218)
- CVE-2026-83549 - 10.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83549)
- CVE-2026-83548 - 8.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83548)
- CVE-2026-85102 - 7.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85102)

#ZEN #SecDB #InfoSec

Attackers exploit CVE-2026-100382, a CVSS 10 unauthenticated MediaWiki RCE in External Data. PoC is public. Upgrade to 3.7 now.

#MediaWiki #ExternalData #CVE2026100382 #RCE #CommandInjection #ExploitedInTheWild #PoC

https://securityonline.info/mediawiki-rce-cve-2026-100382/?utm_source=mastodon&utm_medium=jetpack_social

[🚨 #MediaWiki vulnerable extension]

If you are running a MediaWiki instance with Extension:External_Data < v3.7, your instance is vulnerable to arbitrary file loading and #RemoteCodeExecution.

The vulnerability was apparently publicly known since August, but due to the lack of communication, instance admins learned about it due to that vulnerability being exploited en masse.

If you know and like a MediaWiki instance, you can check their Special:Version page to see if they are using the External_Data extension to warn them.

More info:
- https://lists.wikimedia.org/hyperkitty/list/mediawiki-l@lists.wikimedia.org/thread/5N55R3XNFE7BXQLGWKZI7Q4ZXZSF4C5I/
- https://www.cve.org/CVERecord?id=CVE-2026-100382

#infosec #wikipedia #wikidata #adminsys #CVE #pwned cc @mediawiki

📈 CVE Published in last 30 days (2026-09-01 - 2026-09-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1417
- High: 5956
- Medium: 4625
- Low: 927
- None: 1743

Status:
- : 93
- Analyzed: 3418
- Awaiting Analysis: 2780
- Deferred: 5097
- Modified: 128
- Received: 2835
- Rejected: 130
- Undergoing Analysis: 187

CISA KEVs:
- CISA-2026:0902 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0902)
- CISA-2026:0904 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0904)
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0914 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0916 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916)
- CISA-2026:0918 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)
- CISA-2026:0921 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0921)
- CISA-2026:0922 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0922)
- CISA-2026:0924 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0924)
- CISA-2026:0925 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0925)
- CISA-2026:0927 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0927)
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)

Top CNAs:
- kernel.org: 2117
- VulnCheck: 1638
- GitHub, Inc.: 1424
- Microsoft Corporation: 1000
- VulDB: 900
- Oracle: 634
- WPScan: 552
- MITRE: 497
- Chrome: 467
- Wordfence: 408

Top Affected Products:
- UNKNOWN: 11109
- Microsoft Windows Server 2025: 648
- Microsoft Windows Server 2022: 611
- Microsoft Windows 11 24h2: 600
- Microsoft Windows 11 26h1: 600
- Microsoft Windows 11 25h2: 599
- Microsoft Windows Server 2019: 586
- Microsoft Windows 10 1809: 582
- Microsoft Windows 11 23h2: 574
- Microsoft Windows 10 21h2: 541

Top EPSS Score:
- CVE-2026-85706 - 91.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85706)
- CVE-2026-85046 - 48.88 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85046)
- CVE-2026-76461 - 28.27 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76461)
- CVE-2026-87902 - 19.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-87902)
- CVE-2026-93616 - 19.65 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93616)
- CVE-2026-76460 - 14.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76460)
- CVE-2026-86218 - 12.93 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86218)
- CVE-2026-83549 - 10.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83549)
- CVE-2026-83548 - 8.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83548)
- CVE-2026-85102 - 7.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85102)

#ZEN #SecDB #InfoSec

From Check Point Research: Exploitation of CVE-2026-85102 and CVE-2026-93616

Check Point has observed active exploitation of two critical pre-authentication vulnerabilities with CVSS scores of 9.8 - CVE-2026-85102 and CVE-2026-93616. The flaws affect Security Gateway and Security Management products and can enable remote code execution. Fixes for both vulnerabilities are available.

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

#CheckPoint #CheckPointSoftwareTechnologies #CVE #CVE202685102 #CVE202693616

From Check Point Research: Exploitation of CVE-2026-85102 and CVE-2026-93616

Check Point has observed active exploitation of two critical pre-authentication vulnerabilities with CVSS scores of 9.8 - CVE-2026-85102 and CVE-2026-93616. The flaws affect Security Gateway and Security Management products and can enable remote code execution. Fixes for both vulnerabilities are available.

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

#CheckPoint #CheckPointSoftwareTechnologies #CVE #CVE202685102 #CVE202693616

📈 CVE Published in last 30 days (2026-09-01 - 2026-09-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1417
- High: 5956
- Medium: 4625
- Low: 927
- None: 1743

Status:
- : 93
- Analyzed: 3418
- Awaiting Analysis: 2780
- Deferred: 5097
- Modified: 128
- Received: 2835
- Rejected: 130
- Undergoing Analysis: 187

CISA KEVs:
- CISA-2026:0902 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0902)
- CISA-2026:0904 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0904)
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0914 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0916 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916)
- CISA-2026:0918 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)
- CISA-2026:0921 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0921)
- CISA-2026:0922 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0922)
- CISA-2026:0924 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0924)
- CISA-2026:0925 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0925)
- CISA-2026:0927 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0927)
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)

Top CNAs:
- kernel.org: 2117
- VulnCheck: 1638
- GitHub, Inc.: 1424
- Microsoft Corporation: 1000
- VulDB: 900
- Oracle: 634
- WPScan: 552
- MITRE: 497
- Chrome: 467
- Wordfence: 408

Top Affected Products:
- UNKNOWN: 11109
- Microsoft Windows Server 2025: 648
- Microsoft Windows Server 2022: 611
- Microsoft Windows 11 24h2: 600
- Microsoft Windows 11 26h1: 600
- Microsoft Windows 11 25h2: 599
- Microsoft Windows Server 2019: 586
- Microsoft Windows 10 1809: 582
- Microsoft Windows 11 23h2: 574
- Microsoft Windows 10 21h2: 541

Top EPSS Score:
- CVE-2026-85706 - 91.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85706)
- CVE-2026-85046 - 48.88 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85046)
- CVE-2026-76461 - 28.27 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76461)
- CVE-2026-87902 - 19.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-87902)
- CVE-2026-93616 - 19.65 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93616)
- CVE-2026-76460 - 14.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76460)
- CVE-2026-86218 - 12.93 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86218)
- CVE-2026-83549 - 10.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83549)
- CVE-2026-83548 - 8.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83548)
- CVE-2026-85102 - 7.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85102)

#ZEN #SecDB #InfoSec

From Check Point Research: Exploitation of CVE-2026-85102 and CVE-2026-93616

Check Point has observed active exploitation of two critical pre-authentication vulnerabilities with CVSS scores of 9.8 - CVE-2026-85102 and CVE-2026-93616. The flaws affect Security Gateway and Security Management products and can enable remote code execution. Fixes for both vulnerabilities are available.

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

#CheckPoint #CheckPointSoftwareTechnologies #CVE #CVE202685102 #CVE202693616

From Check Point Research: Exploitation of CVE-2026-85102 and CVE-2026-93616

Check Point has observed active exploitation of two critical pre-authentication vulnerabilities with CVSS scores of 9.8 - CVE-2026-85102 and CVE-2026-93616. The flaws affect Security Gateway and Security Management products and can enable remote code execution. Fixes for both vulnerabilities are available.

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

#CheckPoint #CheckPointSoftwareTechnologies #CVE #CVE202685102 #CVE202693616

📈 CVE Published in last 30 days (2026-09-01 - 2026-09-01)
See more at https://secdb.nttzen.cloud/dashboard

Total CVEs:

Severity:
- Critical: 1417
- High: 5956
- Medium: 4625
- Low: 927
- None: 1743

Status:
- : 93
- Analyzed: 3418
- Awaiting Analysis: 2780
- Deferred: 5097
- Modified: 128
- Received: 2835
- Rejected: 130
- Undergoing Analysis: 187

CISA KEVs:
- CISA-2026:0902 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0902)
- CISA-2026:0904 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0904)
- CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908)
- CISA-2026:0909 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909)
- CISA-2026:0914 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914)
- CISA-2026:0911 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911)
- CISA-2026:0910 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910)
- CISA-2026:0916 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916)
- CISA-2026:0918 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)
- CISA-2026:0921 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0921)
- CISA-2026:0922 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0922)
- CISA-2026:0924 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0924)
- CISA-2026:0925 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0925)
- CISA-2026:0927 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0927)
- CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929)
- CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)

Top CNAs:
- kernel.org: 2117
- VulnCheck: 1638
- GitHub, Inc.: 1424
- Microsoft Corporation: 1000
- VulDB: 900
- Oracle: 634
- WPScan: 552
- MITRE: 497
- Chrome: 467
- Wordfence: 408

Top Affected Products:
- UNKNOWN: 11109
- Microsoft Windows Server 2025: 648
- Microsoft Windows Server 2022: 611
- Microsoft Windows 11 24h2: 600
- Microsoft Windows 11 26h1: 600
- Microsoft Windows 11 25h2: 599
- Microsoft Windows Server 2019: 586
- Microsoft Windows 10 1809: 582
- Microsoft Windows 11 23h2: 574
- Microsoft Windows 10 21h2: 541

Top EPSS Score:
- CVE-2026-85706 - 91.43 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85706)
- CVE-2026-85046 - 48.88 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85046)
- CVE-2026-76461 - 28.27 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76461)
- CVE-2026-87902 - 19.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-87902)
- CVE-2026-93616 - 19.65 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-93616)
- CVE-2026-76460 - 14.03 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76460)
- CVE-2026-86218 - 12.93 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-86218)
- CVE-2026-83549 - 10.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83549)
- CVE-2026-83548 - 8.76 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-83548)
- CVE-2026-85102 - 7.55 % (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85102)

#ZEN #SecDB #InfoSec

CVE-2026-93710 Dancer2 2.0.0-2.2.0 for Perl dispatch routes a dying hook refused, letting a halted exception handler run refused routes. CVSS 7.5. Patched in 2.2.0, update now. https://www.valtersit.com/cve/CVE-2026-93710/ #CVE #infosec #Perl

CVE-2026-88738 Jazzware RT1000 Edge webUI RCE via unrestricted file upload. CVSS 8.8, no patch yet. Patch now or restrict upload access. https://www.valtersit.com/cve/CVE-2026-88738/ #CVE #infosec #cybersecurity

CVE-2026-87079 Net::IDN::Punycode for Perl, CVSS 7.5. Decoding a long label triggers quadratic CPU exhaustion (DoS). No patch yet, only under review, so isolate untrusted punycode input now. https://www.valtersit.com/cve/CVE-2026-87079/ #CVE #Perl #infosec

CVE-2026-93556: CVSS 9.8. Broken JWT validation in /password/guardarClau/recover lets unauthenticated attackers reset any password, including admin. Patch status unknown. Assume exposed and mitigate now. https://www.valtersit.com/cve/CVE-2026-93556/ #CVE #infosec #cybersecurity

CVE-2026-93556: CVSS 9.8. Broken JWT validation in /password/guardarClau/recover lets unauthenticated attackers reset any password, including admin. Patch status unknown. Assume exposed and mitigate now. https://www.valtersit.com/cve/CVE-2026-93556/ #CVE #infosec #cybersecurity

CVE-2026-94426: reflected XSS in Xxl Job up to 3.5.0, /jobgroup/insert. CVSS 3.5, exploit public, vendor unresponsive. No patch yet - restrict access now.
https://www.valtersit.com/cve/CVE-2026-94426/
#CVE #infosec #cybersecurity