🟠 CVE-2026-53843 - High (8.8)

OpenClaw before 2026.5.26 contains an authorization bypass vulnerability where a surviving pairing-scoped device session can re-establish node token authority after revocation. Attackers with a paired device can regain WebSocket node-level access ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53843/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53849 - High (8.1)

OpenClaw before 2026.5.7 contains a privilege escalation vulnerability where the allowFrom feature improperly validates Discord account identity using mutable display names instead of immutable user IDs. Attackers with Discord accounts can change ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53849/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53853 - High (8.3)

OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attackers to execute disallowed arguments for allowlisted executables on Linux and macOS systems. Attackers can bypass configured argPattern...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53853/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53866 - High (8.1)

OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows authenticated operators to execute unapproved commands. A command request using shell inline-command forms could route through a parse...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53866/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-3894 (CRITICAL, CVSS 9.2): Out-of-bounds read in RTI Connext Professional (versions 7.4.0, 7.0.0, 6.1.0, 6.0.0, 5.3.0, 5.0.0). Remote exploitation possible, no patch yet. Monitor vendor updates! https://radar.offseq.com/threat/cve-2026-3894-cwe-125-out-of-bounds-read-in-rti-co-970a787b05fc31ca #OffSeq #CVE20263894 #ICS #vuln

CVE-2026-3894 (CRITICAL, CVSS 9.2): Out-of-bounds read in RTI Connext Professional (versions 7.4.0, 7.0.0, 6.1.0, 6.0.0, 5.3.0, 5.0.0). Remote exploitation possible, no patch yet. Monitor vendor updates! https://radar.offseq.com/threat/cve-2026-3894-cwe-125-out-of-bounds-read-in-rti-co-970a787b05fc31ca #OffSeq #CVE20263894 #ICS #vuln

Oh my.

https://nvd.nist.gov/vuln/detail/CVE-2026-55200

sev:HIGH 8.1 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution.

Oh my.

https://nvd.nist.gov/vuln/detail/CVE-2026-55200

sev:HIGH 8.1 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution.

Zero-Day 'RoguePlanet' in Microsoft Defender Grants System-Level Control

Microsoft Defender에서 발견된 'RoguePlanet' 제로데이 취약점은 TOCTOU 경쟁 조건을 악용해 일반 사용자 권한으로 SYSTEM 권한을 획득할 수 있는 심각한 로컬 권한 상승(LPE) 문제입니다. 이 취약점은 2026년 6월 패치 이후에도 작동하며, 공격자는 악성 파일을 Defender가 검사하는 순간 심볼릭 링크로 교체해 보호된 시스템 파일에 임의 쓰기 및 코드 실행이 가능합니다. Microsoft는 CVE-2026-50656으로 공식...

https://cyber.netsecops.io/articles/rogueplanet-zero-day-in-microsoft-defender-allows-full-system-control/

New zero-day Local Privilege Escalation (EoP) flaw in Microsoft Defender: CVE-2026-50656 (RoguePlanet)! 🚨

Low-privilege users can abuse a TOCTOU race condition to hijack system paths and spawn an NT AUTHORITY\SYSTEM shell. Deep dive analysis here:👇

https://denizhalil.com/2026/06/18/cve-2026-50656-microsoft-defender-eop-vulnerability-analysis/

#CVE202650656 #MicrosoftDefender #infosec

New.

Tenable research advisories:

CRITICAL: CVE-2026-8024: iba ibaPDA / ibaDatCoordinator .NET Deserialization Remote Code Execution https://www.tenable.com/security/research/tra-2026-49 @tenable

Cisco:

CRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Three others of medium-severity: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity

Broadcom:

Several critical and high-severity vulnerabilities. A login is needed for details https://support.broadcom.com/web/ecx/security-advisory

Dell:

Several advisories, one of them critical:

CRITICAL: Security Update for Dell Data Protection Central Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000478330/dsa-2026-284-security-update-for-dell-data-protection-central-multiple-third-party-component-vulnerabilities

More: https://www.dell.com/support/security/en-us

Google:

Chrome Beta for iOS Update https://chromereleases.googleblog.com/

Yesterday:

Microsoft:

CVE-2026-50656: Microsoft Defender Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656

Nvidia:

Security Bulletin addressing CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228:

NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia #Dell #Cisco #infosec #vulnerability #threatresearch #Broadcom #Google #Chrome #Microsoft #Windows

New.

Tenable research advisories:

CRITICAL: CVE-2026-8024: iba ibaPDA / ibaDatCoordinator .NET Deserialization Remote Code Execution https://www.tenable.com/security/research/tra-2026-49 @tenable

Cisco:

CRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Three others of medium-severity: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity

Broadcom:

Several critical and high-severity vulnerabilities. A login is needed for details https://support.broadcom.com/web/ecx/security-advisory

Dell:

Several advisories, one of them critical:

CRITICAL: Security Update for Dell Data Protection Central Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000478330/dsa-2026-284-security-update-for-dell-data-protection-central-multiple-third-party-component-vulnerabilities

More: https://www.dell.com/support/security/en-us

Google:

Chrome Beta for iOS Update https://chromereleases.googleblog.com/

Yesterday:

Microsoft:

CVE-2026-50656: Microsoft Defender Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656

Nvidia:

Security Bulletin addressing CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228:

NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia #Dell #Cisco #infosec #vulnerability #threatresearch #Broadcom #Google #Chrome #Microsoft #Windows

🟠 CVE-2026-50656 - High (7.8)

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". We are working to provide a high quality security update that addresses this vulnera...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-50656/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Nightmare Eclipses RoguePlanet now has a CVE 🎉: https://nvd.nist.gov/vuln/detail/cve-2026-50656

Not any new detail in there & no fix yet (has only been a week, give them some time...).

Much less relevant but annoying me personally: It taking them a week to ... sorry, shit this out. Broken description in the CVE form & even in the MSRC page it's pretty obvious no one even proofread the non-description. Also empty Acknoledgement section despite link to the Github (not the first time btw)... at least they didn't have it taken down this time? 🙃

Alert: CVE-2026-48907. A severe access control flaw in Widget Factory Joomla Content Editor allows unauthenticated PHP script execution. Lock down your CMS. Read our tactical engineering runbook for full IOCs and endpoint hardening steps. https://thecybermind.co/unjv

🛡️ #CyberSecurity #CVE #ThreatIntel

URGENT: CVE-2026-48907 is seeing active exploitation in Joomla! JCE extensions. This critical RCE flaw allows unauthenticated attackers to take full control. Read our executive remediation brief to harden your environment now.
https://thecybermind.co/ic6z
#CyberSecurity #Joomla #Infosec #KEV

Alert: CVE-2026-48907. A severe access control flaw in Widget Factory Joomla Content Editor allows unauthenticated PHP script execution. Lock down your CMS. Read our tactical engineering runbook for full IOCs and endpoint hardening steps. https://thecybermind.co/unjv

🛡️ #CyberSecurity #CVE #ThreatIntel

URGENT: CVE-2026-48907 is seeing active exploitation in Joomla! JCE extensions. This critical RCE flaw allows unauthenticated attackers to take full control. Read our executive remediation brief to harden your environment now.
https://thecybermind.co/ic6z
#CyberSecurity #Joomla #Infosec #KEV

⚠️ Vous administrez un site Joomla ?

Petit point sécurité : la faille CVE-2026-48907 touche l’extension **JCE / Joomla Content Editor **et elle est déjà exploitée automatiquement sur Internet.
👇 🩹
https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites

En clair : un site vulnérable peut être compromis même sans compte public ni inscription ouverte.

À faire dès que possible:
• mettre JCE à jour en 2.9.99.6 ou plus récent
• vérifier les profils/comptes suspects
• changer les mots de passe admin, base de données et hébergement
• lancer un scan serveur

(La mise à jour ferme la porte, mais ne nettoie pas forcément ce qui aurait déjà été déposé.)

🔍
⬇️
https://vulnerability.circl.lu/vuln/cve-2026-48907

#CyberVeille #Joomla

🚨 New critical improper access control vulnerability tagged CVE-2026-48907, affecting Widget Factory Joomla Content Editor is seeing active exploitation in the wild as reported by CISA.

Vulnerability detection script available below:
https://github.com/rxerium/rxerium-templates/blob/main/2026/CVE-2026-48907.yaml

Patches and mitigations are available:
https://www.sentinelone.com/vulnerability-database/cve-2026-48907/

🚨 [CISA-2026:0616] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0616)

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-48907 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-48907)
- Name: Widget Factory Joomla Content Editor Improper Access Control Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Widget Factory
- Product: Joomla Content Editor
- Notes: https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites ; https://www.joomlacontenteditor.net/support/changelog/editor ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48907

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260616 #cisa20260616 #cve_2026_48907 #cve202648907

CVE ID: CVE-2026-48907
Vendor: Widget Factory
Product: Joomla Content Editor
Date Added: 2026-06-16
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-48907

New.

Tenable research advisories:

CRITICAL: CVE-2026-8024: iba ibaPDA / ibaDatCoordinator .NET Deserialization Remote Code Execution https://www.tenable.com/security/research/tra-2026-49 @tenable

Cisco:

CRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Three others of medium-severity: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity

Broadcom:

Several critical and high-severity vulnerabilities. A login is needed for details https://support.broadcom.com/web/ecx/security-advisory

Dell:

Several advisories, one of them critical:

CRITICAL: Security Update for Dell Data Protection Central Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000478330/dsa-2026-284-security-update-for-dell-data-protection-central-multiple-third-party-component-vulnerabilities

More: https://www.dell.com/support/security/en-us

Google:

Chrome Beta for iOS Update https://chromereleases.googleblog.com/

Yesterday:

Microsoft:

CVE-2026-50656: Microsoft Defender Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656

Nvidia:

Security Bulletin addressing CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228:

NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia #Dell #Cisco #infosec #vulnerability #threatresearch #Broadcom #Google #Chrome #Microsoft #Windows

New.

Tenable research advisories:

CRITICAL: CVE-2026-8024: iba ibaPDA / ibaDatCoordinator .NET Deserialization Remote Code Execution https://www.tenable.com/security/research/tra-2026-49 @tenable

Cisco:

CRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Three others of medium-severity: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity

Broadcom:

Several critical and high-severity vulnerabilities. A login is needed for details https://support.broadcom.com/web/ecx/security-advisory

Dell:

Several advisories, one of them critical:

CRITICAL: Security Update for Dell Data Protection Central Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000478330/dsa-2026-284-security-update-for-dell-data-protection-central-multiple-third-party-component-vulnerabilities

More: https://www.dell.com/support/security/en-us

Google:

Chrome Beta for iOS Update https://chromereleases.googleblog.com/

Yesterday:

Microsoft:

CVE-2026-50656: Microsoft Defender Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656

Nvidia:

Security Bulletin addressing CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228:

NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia #Dell #Cisco #infosec #vulnerability #threatresearch #Broadcom #Google #Chrome #Microsoft #Windows

New.

Tenable research advisories:

CRITICAL: CVE-2026-8024: iba ibaPDA / ibaDatCoordinator .NET Deserialization Remote Code Execution https://www.tenable.com/security/research/tra-2026-49 @tenable

Cisco:

CRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Three others of medium-severity: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity

Broadcom:

Several critical and high-severity vulnerabilities. A login is needed for details https://support.broadcom.com/web/ecx/security-advisory

Dell:

Several advisories, one of them critical:

CRITICAL: Security Update for Dell Data Protection Central Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000478330/dsa-2026-284-security-update-for-dell-data-protection-central-multiple-third-party-component-vulnerabilities

More: https://www.dell.com/support/security/en-us

Google:

Chrome Beta for iOS Update https://chromereleases.googleblog.com/

Yesterday:

Microsoft:

CVE-2026-50656: Microsoft Defender Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656

Nvidia:

Security Bulletin addressing CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228:

NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia #Dell #Cisco #infosec #vulnerability #threatresearch #Broadcom #Google #Chrome #Microsoft #Windows

🚨 CRITICAL: CVE-2026-20181 in Cisco ISE (v3.1 – 3.5) allows authenticated attackers to run OS commands & escalate to root, risking DoS. Restrict admin access & monitor for patches. https://radar.offseq.com/threat/cve-2026-20181-improper-limitation-of-a-pathname-t-3c6d1c8d7d1de462 #OffSeq #Cisco #Vuln #BlueTeam

New.

Tenable research advisories:

CRITICAL: CVE-2026-8024: iba ibaPDA / ibaDatCoordinator .NET Deserialization Remote Code Execution https://www.tenable.com/security/research/tra-2026-49 @tenable

Cisco:

CRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Three others of medium-severity: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity

Broadcom:

Several critical and high-severity vulnerabilities. A login is needed for details https://support.broadcom.com/web/ecx/security-advisory

Dell:

Several advisories, one of them critical:

CRITICAL: Security Update for Dell Data Protection Central Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000478330/dsa-2026-284-security-update-for-dell-data-protection-central-multiple-third-party-component-vulnerabilities

More: https://www.dell.com/support/security/en-us

Google:

Chrome Beta for iOS Update https://chromereleases.googleblog.com/

Yesterday:

Microsoft:

CVE-2026-50656: Microsoft Defender Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656

Nvidia:

Security Bulletin addressing CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228:

NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia #Dell #Cisco #infosec #vulnerability #threatresearch #Broadcom #Google #Chrome #Microsoft #Windows

🚨 CRITICAL: CVE-2026-20181 in Cisco ISE (v3.1 – 3.5) allows authenticated attackers to run OS commands & escalate to root, risking DoS. Restrict admin access & monitor for patches. https://radar.offseq.com/threat/cve-2026-20181-improper-limitation-of-a-pathname-t-3c6d1c8d7d1de462 #OffSeq #Cisco #Vuln #BlueTeam

CVE-2026-54187 - Critical SQLi in JetEngine <= 3.8.10.1. Unauthenticated exploit. CVSS 9.3. Update immediately. #CVE #WordPress #infosec

https://www.valtersit.com/cve/CVE-2026-54187/

🔴 CRITICAL: CVE-2026-12442 — Chrome on Android <149.0.7827.155 has a use-after-free vuln in Passwords. Remote attackers can execute code via crafted HTML. Update Chrome now! https://radar.offseq.com/threat/cve-2026-12442-use-after-free-in-google-chrome-a5d127b6 #OffSeq #Chrome #Android #Vuln #InfoSec

Oracle's June 2026 CRITICAL update fixes 245 vulns (incl. CVE-2026-46850) in MySQL Shell, Router, NDB Cluster, Server (8.0.11-8.0.46, 8.4.0-8.4.9, 9.0.0-9.7.0, 2026.2.0+9.6.1). Patch promptly — no exploits yet. https://radar.offseq.com/threat/kwetsbaarheden-verholpen-in-oracle-mysql-producten-948cec13 #OffSeq #MySQL #Oracle #CVE202646850

🟠 CVE-2026-5079 - High (7.5)

Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested field names in multipart form data. The append-field dependency parses bracket notation in field names with no limit on nesting d...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5079/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

CVE-2026-39560 - Critical PHP Object Injection in Hiroshi <= 1.5.1. Unauthenticated exploit. CVSS 8.1. No patch available. Disable immediately. #CVE #infosec #PHP

https://www.valtersit.com/cve/CVE-2026-39560/

Command injection and hardcoded creds in Radiflow iSAP Smart Collector. Nice.

https://www.cve.org/CVERecord?id=CVE-2026-22313

https://www.cve.org/CVERecord?id=CVE-2026-22312

🔴 CVE-2026-22313 - Critical (9.1)

The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting an OS command injection vulnerability an authenticated attacker can send
arbitrary commands to the device that are executed with...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22313/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47750 - High (7.8)

stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. In versions prior to master-584-0a7ae07, the pickle .ckpt parser in src/model.cpp contained a heap bu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47750/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

All* CVE reference URLs are either http, https, or ftp. Y'all need to up your weird protocol games!

*: There is one CVE with a typo in the reference url, https:/ (CVE-2019-25293)

🚨 CRITICAL: CVE-2026-12440 in Chrome DigitalCredentials (Windows <149.0.7827.155) allows remote sandbox escape. Patch to 149.0.7827.155 ASAP! Exploitation risk is high. https://radar.offseq.com/threat/cve-2026-12440-use-after-free-in-google-chrome-c0fe93a4 #OffSeq #Chrome #InfoSec #Vulnerability

🔒 CRITICAL: CVE-2026-12441 in Chrome <149.0.7827.155 on Linux — use-after-free in File Input. Remote attacker can trigger heap corruption via crafted HTML. Update Chrome ASAP! https://radar.offseq.com/threat/cve-2026-12441-use-after-free-in-google-chrome-643def61 #OffSeq #Chrome #Linux #Vuln

🚩 CRITICAL: Chrome Web Authentication use-after-free (CVE-2026-12443) enables remote code execution in versions <149.0.7827.155. Patch immediately to stay secure. Vendor fix available. https://radar.offseq.com/threat/cve-2026-12443-use-after-free-in-google-chrome-564c6d01 #OffSeq #Chrome #InfoSec #Vuln

🟠 CVE-2026-47964 - High (7.8)

DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47964/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

New.

Tenable research advisories:

CRITICAL: CVE-2026-8024: iba ibaPDA / ibaDatCoordinator .NET Deserialization Remote Code Execution https://www.tenable.com/security/research/tra-2026-49 @tenable

Cisco:

CRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Three others of medium-severity: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity

Broadcom:

Several critical and high-severity vulnerabilities. A login is needed for details https://support.broadcom.com/web/ecx/security-advisory

Dell:

Several advisories, one of them critical:

CRITICAL: Security Update for Dell Data Protection Central Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000478330/dsa-2026-284-security-update-for-dell-data-protection-central-multiple-third-party-component-vulnerabilities

More: https://www.dell.com/support/security/en-us

Google:

Chrome Beta for iOS Update https://chromereleases.googleblog.com/

Yesterday:

Microsoft:

CVE-2026-50656: Microsoft Defender Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656

Nvidia:

Security Bulletin addressing CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228:

NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia #Dell #Cisco #infosec #vulnerability #threatresearch #Broadcom #Google #Chrome #Microsoft #Windows

New.

Tenable research advisories:

CRITICAL: CVE-2026-8024: iba ibaPDA / ibaDatCoordinator .NET Deserialization Remote Code Execution https://www.tenable.com/security/research/tra-2026-49 @tenable

Cisco:

CRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Three others of medium-severity: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity

Broadcom:

Several critical and high-severity vulnerabilities. A login is needed for details https://support.broadcom.com/web/ecx/security-advisory

Dell:

Several advisories, one of them critical:

CRITICAL: Security Update for Dell Data Protection Central Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000478330/dsa-2026-284-security-update-for-dell-data-protection-central-multiple-third-party-component-vulnerabilities

More: https://www.dell.com/support/security/en-us

Google:

Chrome Beta for iOS Update https://chromereleases.googleblog.com/

Yesterday:

Microsoft:

CVE-2026-50656: Microsoft Defender Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656

Nvidia:

Security Bulletin addressing CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228:

NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia #Dell #Cisco #infosec #vulnerability #threatresearch #Broadcom #Google #Chrome #Microsoft #Windows

🟠 CVE-2026-24228 - High (7.8)

NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and informatio...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24228/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Nvidia has a new advisory relating to CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228, all high-severity:

Security Bulletin: NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia

Broadcom:

Seven advisories addressing one critical vulnerability and several high-severity flaws: You'll need a login for details.

CRITICAL: MICS 14.3, 14.4, and 14.5 Vulnerabilities

More: https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Yesterday:

Google:

Chrome Dev for Desktop Update https://chromereleases.googleblog.com/ #Google #Chrome

Dell:

Update for a critical vulnerability yesterday that encompasses multiple CVEs:

Security Update for Dell PowerProtect DP Series Appliance (IDPA) Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000368282/dsa-2025-300-security-update-for-dell-powerprotect-dp-series-appliance-idpa-multiple-third-party-component-vulnerabilities #Dell #infosec #vulnerability

New.

Tenable research advisories:

CRITICAL: CVE-2026-8024: iba ibaPDA / ibaDatCoordinator .NET Deserialization Remote Code Execution https://www.tenable.com/security/research/tra-2026-49 @tenable

Cisco:

CRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Three others of medium-severity: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity

Broadcom:

Several critical and high-severity vulnerabilities. A login is needed for details https://support.broadcom.com/web/ecx/security-advisory

Dell:

Several advisories, one of them critical:

CRITICAL: Security Update for Dell Data Protection Central Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000478330/dsa-2026-284-security-update-for-dell-data-protection-central-multiple-third-party-component-vulnerabilities

More: https://www.dell.com/support/security/en-us

Google:

Chrome Beta for iOS Update https://chromereleases.googleblog.com/

Yesterday:

Microsoft:

CVE-2026-50656: Microsoft Defender Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656

Nvidia:

Security Bulletin addressing CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228:

NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia #Dell #Cisco #infosec #vulnerability #threatresearch #Broadcom #Google #Chrome #Microsoft #Windows

New.

Tenable research advisories:

CRITICAL: CVE-2026-8024: iba ibaPDA / ibaDatCoordinator .NET Deserialization Remote Code Execution https://www.tenable.com/security/research/tra-2026-49 @tenable

Cisco:

CRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Three others of medium-severity: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity

Broadcom:

Several critical and high-severity vulnerabilities. A login is needed for details https://support.broadcom.com/web/ecx/security-advisory

Dell:

Several advisories, one of them critical:

CRITICAL: Security Update for Dell Data Protection Central Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000478330/dsa-2026-284-security-update-for-dell-data-protection-central-multiple-third-party-component-vulnerabilities

More: https://www.dell.com/support/security/en-us

Google:

Chrome Beta for iOS Update https://chromereleases.googleblog.com/

Yesterday:

Microsoft:

CVE-2026-50656: Microsoft Defender Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656

Nvidia:

Security Bulletin addressing CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228:

NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia #Dell #Cisco #infosec #vulnerability #threatresearch #Broadcom #Google #Chrome #Microsoft #Windows

🟠 CVE-2026-24155 - High (7.8)

NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24155/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Nvidia has a new advisory relating to CVE-2026-24155, CVE-2026-24252, and CVE-2026-24228, all high-severity:

Security Bulletin: NVIDIA NeMo - June 2026 https://nvidia.custhelp.com/app/answers/detail/a_id/5839 #Nvidia

Broadcom:

Seven advisories addressing one critical vulnerability and several high-severity flaws: You'll need a login for details.

CRITICAL: MICS 14.3, 14.4, and 14.5 Vulnerabilities

More: https://support.broadcom.com/web/ecx/security-advisory #Broadcom

Yesterday:

Google:

Chrome Dev for Desktop Update https://chromereleases.googleblog.com/ #Google #Chrome

Dell:

Update for a critical vulnerability yesterday that encompasses multiple CVEs:

Security Update for Dell PowerProtect DP Series Appliance (IDPA) Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000368282/dsa-2025-300-security-update-for-dell-powerprotect-dp-series-appliance-idpa-multiple-third-party-component-vulnerabilities #Dell #infosec #vulnerability

Command injection and hardcoded creds in Radiflow iSAP Smart Collector. Nice.

https://www.cve.org/CVERecord?id=CVE-2026-22313

https://www.cve.org/CVERecord?id=CVE-2026-22312

🟠 CVE-2026-22312 - High (8.6)

The device has a webserver that exposes a REST API authenticated with a constant token. The unauthenticated API can be used by an attacker to get access to system settings, modify the configuration
and execute some commands (e.g. system reboot).

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22312/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8176 - High (7.5)

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 5.5.1. The plugin chains three independent flaws that together allo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8176/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-5416 - High (8.8)

Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resulting in full system compromise.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5416/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

#OT #Advisory VDE-2026-038
TURCK: Multiple Vulnerabilities in Managed Ethernet Switches

Multiple vulnerabilities have been identified in the TBEN-Lx-SE-M2 firmware prior to version 2.1.2.0 in Managed Ethernet Switches.
#CVE CVE-2025-68615, CVE-2026-5416

https://certvde.com/en/advisories/vde-2026-038/

#CSAF https://turck.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-038.json

🔴 CVE-2026-52715 - Critical (9.3)

Unauthenticated SQL Injection in GEO my WordPress &lt;= 4.5.5 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52715/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49110 - High (7.5)

Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce &lt;= 3.1.4 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49110/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49109 - Critical (9.8)

Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms &lt;= 1.4.3 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49109/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49106 - Critical (9.8)

Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact &lt;= 1.1.6 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49106/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49105 - Critical (9.8)

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms &lt;= 1.1.4 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49105/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49104 - Critical (9.8)

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms &lt;= 1.2.1 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49104/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49085 - Critical (9.8)

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms &lt;= 1.1.4 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49085/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49068 - High (7.5)

Subscriber Sensitive Data Exposure in Coupon Affiliates &lt;= 7.8.1 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49068/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49066 - High (7.5)

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway &lt;= 6.0.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49066/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49065 - High (8.2)

Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce &lt;= 1.9.5 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49065/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49064 - High (7.5)

Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data.

This issue affects GetPaid: from n/a through 2.8.49.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49064/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49062 - High (8.8)

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation.

This issue affects Faust.Js: from n/a through 1.8.7.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49062/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49061 - High (7.5)

Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce &lt;= 3.2.1 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49061/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CRITICAL: elixir-grpc grpc (0.4.0-<1.0.0) vulnerable to unauthenticated RCE & DoS via unsafe :erlang.binary_to_term/1 use. Patch status pending — restrict 'application/grpc+erlpack' inputs now! CVE-2026-48853 https://radar.offseq.com/threat/cve-2026-48853-cwe-502-deserialization-of-untruste-dc5cfe73 #OffSeq #elixir #CVE202648853 #infosec

Just two recent examples of vulnerablities from 7-Zip and RAR.

Also keep in mind that distros are not always great at updating and if you installed one of these yourself, it is also on you (plus neither autoupdate on Windows or macOS).

• 7-Zip: https://nvd.nist.gov/vuln/detail/cve-2026-48095

• WinRAR: https://nvd.nist.gov/vuln/detail/cve-2025-8088

🟠 CVE-2026-47777 - High (7.5)

Mastodon is a free, open-source social network server based on ActivityPub. In versions there is a missing condition in the check if remote accounts consented to be featured in a remote Collection could lead to attackers bypassing the check and fa...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47777/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-47749 - High (7.8)

stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Versions prior to master-584-0a7ae07 are vulnerable to heap buffer overflow in SHORT_BINUNICODE parsin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-47749/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-39581 - High (8.5)

Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic &lt;= 1.1.4 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39581/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CRITICAL: Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

Fortinet FortiSandbox is under active exploitation for three critical unauthenticated RCE vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089). All three bypass authentication and allow arbitrary command execution via HTTP requests. Organizations running FortiSandbox are at immediate ri…

https://threatnoir.com/focus

#infosec #cybersecurity

🔴 CVE-2026-12205 - Critical (9.1)

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery.

Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it.

The first sign() on a Key object p...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12205/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12161 - High (8.8)

Improper input validation in the SSH Elevate Shell feature in
Devolutions Remote Desktop Manager 2026.2.7 allows an authenticated user
with permission to create or modify a shared SSH entry to execute
arbitrary commands on a remote SSH host usi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12161/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-12087 - Critical (9.1)

Socket versions before 2.041 for Perl have an out-of-bounds heap read.

In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding mu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12087/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-11832 - Critical (9.1)

Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce.

The default nonce was generated using an MD5 hash of the epoch time, which is predictable.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-11832/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

https://www.cve.org/CVERecord?id=CVE-2026-0843 - do I dare click that reference... :neocat_scream_scared:

Just two recent examples of vulnerablities from 7-Zip and RAR.

Also keep in mind that distros are not always great at updating and if you installed one of these yourself, it is also on you (plus neither autoupdate on Windows or macOS).

• 7-Zip: https://nvd.nist.gov/vuln/detail/cve-2026-48095

• WinRAR: https://nvd.nist.gov/vuln/detail/cve-2025-8088

🟠 CVE-2025-71261 - High (8.6)

An attacker with network-level access between the SUSE Virtualization
and Rancher Manager in SUSE Harvester before 1.8.0 could interfere with the TLS handshake and abuse it
to bypass TLS as a security control.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71261/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Here, have some CVE references pointing to facebook posts...
https://www.cve.org/CVERecord?id=CVE-2019-16534
https://nvd.nist.gov/vuln/detail/CVE-2019-16533
https://nvd.nist.gov/vuln/detail/CVE-2019-16193
... would you be surprised they are all dead?

This one links a Facebook video which is also dead. At least it also links a Twitter post by the same person...
https://www.cve.org/CVERecord?id=CVE-2017-9542
...which just links to the dead Facebook post.

Here, have some CVE references pointing to facebook posts...
https://www.cve.org/CVERecord?id=CVE-2019-16534
https://nvd.nist.gov/vuln/detail/CVE-2019-16533
https://nvd.nist.gov/vuln/detail/CVE-2019-16193
... would you be surprised they are all dead?

This one links a Facebook video which is also dead. At least it also links a Twitter post by the same person...
https://www.cve.org/CVERecord?id=CVE-2017-9542
...which just links to the dead Facebook post.

Here, have some CVE references pointing to facebook posts...
https://www.cve.org/CVERecord?id=CVE-2019-16534
https://nvd.nist.gov/vuln/detail/CVE-2019-16533
https://nvd.nist.gov/vuln/detail/CVE-2019-16193
... would you be surprised they are all dead?

This one links a Facebook video which is also dead. At least it also links a Twitter post by the same person...
https://www.cve.org/CVERecord?id=CVE-2017-9542
...which just links to the dead Facebook post.

🟠 CVE-2026-12317 - High (7.5)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12317/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-12316 - Critical (9.1)

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12316/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12314 - High (7.5)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12314/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12305 - High (7.5)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12305/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53864 - High (8.1)

OpenClaw before 2026.5.26 contains an insufficient sanitization vulnerability in the host environment sanitizer that allows Node.js control variables to bypass validation. Attackers with access to workspace .env files, tool environment overrides, ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53864/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53855 - High (8.1)

OpenClaw before 2026.4.2 contains an inline-eval bypass vulnerability allowing authenticated operators to weaken strict allowlist checks via shell positional parameters. Attackers can combine allowlisted tools with shell positional arguments to pl...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53855/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-53857 - High (8.1)

OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutable display metadata could match allowFrom policy entries through display name changes. Attackers with mutable display names could receive agent resp...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-53857/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Who is affected by CVE-2026-12003? Anyone running CPython on Windows across 3.11.15, 3.12.13, 3.13.14, 3.14.6, 3.15.0b2 and earlier. Jake Yamaki of Bishop Fox showed that a low-privilege user can create a path CPython checks for in-tree builds and inject malicious library folders to escalate privileges. It is rated CVSSv4 5.3. With this many affected versions, how do you even inventory every CPython on a Windows fleet?

#Python #Security

Jake Yamaki of Bishop Fox disclosed CVE-2026-12003 in CPython. The interpreter's VPATH variable, combined with a Modules/setup.local landmark used to locate in-tree builds, lets a low-privilege Windows user create that path outside the install directory and inject malicious library folders, escalating privileges. Rated CVSSv4 5.3, it affects 3.11.15, 3.12.13, 3.13.14, 3.14.6, 3.15.0b2 and earlier. Should build-detection logic ever survive into a release binary?

#Python #Security

Who is affected by CVE-2026-12003? Anyone running CPython on Windows across 3.11.15, 3.12.13, 3.13.14, 3.14.6, 3.15.0b2 and earlier. Jake Yamaki of Bishop Fox showed that a low-privilege user can create a path CPython checks for in-tree builds and inject malicious library folders to escalate privileges. It is rated CVSSv4 5.3. With this many affected versions, how do you even inventory every CPython on a Windows fleet?

#Python #Security

Jake Yamaki of Bishop Fox disclosed CVE-2026-12003 in CPython. The interpreter's VPATH variable, combined with a Modules/setup.local landmark used to locate in-tree builds, lets a low-privilege Windows user create that path outside the install directory and inject malicious library folders, escalating privileges. Rated CVSSv4 5.3, it affects 3.11.15, 3.12.13, 3.13.14, 3.14.6, 3.15.0b2 and earlier. Should build-detection logic ever survive into a release binary?

#Python #Security

🟠 CVE-2026-12312 - High (7.5)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12312/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12310 - High (7.5)

Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12310/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-12315 - Critical (9.1)

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12315/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-10649 - High (8.6)

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacke...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-10649/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-12304 - Critical (9.1)

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12304/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12289 - High (8.8)

Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, and Firefox ESR 115.37.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12289/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44932 - High (8.8)

Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 could be used by attackers operating a malicious DHCP server to execute code on the local machine.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44932/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-12328 - High (8.1)

Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12328/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) https://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/

The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring system. https://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.html

🟠 CVE-2026-12398 - High (7.5)

A command injection vulnerability was found in galaxy_ng. The do_git_checkout() function in the legacy role import API (v1) interpolates unsanitized git ref names (branch/tag names) into shell commands executed via subprocess.run() with shell=True...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12398/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📰 CISA Warns of Disruptive DoS Flaw in Rockwell Automation Industrial Controllers

🏭 CISA WARNING 🏭 A denial-of-service flaw (CVE-2026-11317) affects widely-used Rockwell Automation industrial controllers. Exploitation can cause a major fault, halting operations. Isolate your ICS networks now! #ICS #OTsecurity #CISA #Vulnerability

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/cisa-warns-of-dos-flaw-cve-2026-11317-in-rockwell-automation-ics-controll…

🔴 CVE-2026-40750 - Critical (9.9)

Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a Web Shell to a Web Server.

This issue affects Kids Online Store: from n/a through 0.8.9.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40750/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8442 - High (8.1)

The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 12.6.8. This is due to missing authorization checks on the wpfb_hide_review and wprp_save_review_admin AJAX handlers combined wi...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8442/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2025-68045 - High (7.5)

Unauthenticated Broken Access Control in WP Event SOlution &lt;= 4.1.12 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-68045/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52712 - High (7.6)

Subscriber SQL Injection in Attendance Manager &lt;= 0.6.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52712/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52711 - High (7.5)

Unauthenticated Broken Access Control in WooCommerce POS &lt;= 1.8.14 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52711/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49774 - Critical (9.9)

Improper Control of Generation of Code ('Code Injection') vulnerability in Filipe Nasc RD Station allows Remote Code Inclusion.

This issue affects RD Station: from n/a through 5.6.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49774/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49772 - Critical (9.3)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events Calendar allows Blind SQL Injection.

This issue affects The Events Calendar: from 6.15.12 through 6.16.2.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49772/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-39574 - Critical (9.3)

Unauthenticated SQL Injection in InPost Gallery &lt;= 2.1.4.6 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39574/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-39490 - High (7.5)

Unauthenticated Broken Access Control in JupiterX Core &lt;= 4.14.1 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-39490/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8444 - High (8.8)

The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'curselrevs[]' parameter of the wpfb_find_reviews AJAX action in versions up to, and including, 12.6.8. This is due to the handler reading $_POST['curselrevs'] ra...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8444/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-8443 - High (8.8)

The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'stypes' and 'slocations' parameters of the wppro_get_overall_chart_data AJAX action in versions up to, and including, 12.6.8. This is due to the use of stripslas...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-8443/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-6933 - High (8.8)

The Premmerce Dev Tools plugin for WordPress is vulnerable to Remote Code Execution via missing authorization in versions up to and including 2.0. This is due to the 'generatePluginHandler' function lacking any authorization check before processin...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-6933/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-7273 - High (8.8)

A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-7273/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📰 Actively Exploited Cisco SD-WAN Flaw Added to CISA KEV Catalog

⚠️ Cisco Catalyst SD-WAN Manager flaw CVE-2026-20262 is actively exploited! The bug allows root privilege escalation. CISA has added it to the KEV catalog, mandating a patch by June 29. Update now! #Cisco #CVE #CyberSecurity #KEV

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/cisco-catalyst-sd-wan-vulnerability-cve-2026-20262-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write. https://www.securityweek.com/cisco-patches-another-sd-wan-zero-day-exploited-in-attacks/

CRITICAL: Cisco Catalyst SD-WAN Manager CVE-2026-20262 is under active exploitation. Path traversal flaw allows unauthorized file access. Review our TSUITE forensic intelligence brief to secure your SD-WAN perimeter and prevent persistence https://thecybermind.co/jt3x

CSUITE CRITICAL: Cisco Catalyst SD-WAN Manager CVE-2026-20262 is under active exploitation. Path traversal flaw allows unauthorized file access. Review our full forensic intelligence brief to secure your SD-WAN perimeter and prevent persistence. Act now. https://thecybermind.co/8bs2

#CiscoSecurity #CVE202620262 #CyberMindCo

Cisco Patches Actively Exploited Zero-Day in Catalyst SD-WAN Manager

Cisco patched an actively exploited zero-day vulnerability (CVE-2026-20262) in its Catalyst SD-WAN Manager that allows authenticated attackers to gain root access through arbitrary file writes.

**Make sure your Cisco Catalyst SD-WAN Manager is isolated from the internet and reachable only from trusted networks. This is an actively exploited flaw so don't ignore it. Update ASAP to one of the fixed versions (20.9.9.2, 20.12.7.2, 20.15.4.5, 20.15.5.3, 20.18.3.1, or 26.1.1.2) and check your logs for suspicious uploads like `.war` or `index.jsp` files.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisco-patches-actively-exploited-zero-day-in-catalyst-sd-wan-manager-o-3-y-2-f/gD2P6Ple2L

📺 https://peer.adalta.social/w/bStPSWakC38ot6mLXeR2AS
🔗 [🇩🇪🇺🇸🇫🇷](https://adalta.info/articles/116759030500907559_fr)
🔗 [ℹ️](https://www.pc-fluesterer.info/wordpress/2026/06/16/neue-woche-neues-zero-day-sicherheitsloch-bei-cisco/")

La vulnérabilité CVE-2026-20262 confirme la cadence infernale des correctifs chez le géant américain, exposant des milliers de réseaux d'entreprise à une prise de contrôle distante.

#cve #sicherheit #rce #exploit #loi

🚨 CRITICAL: Cisco Catalyst SD-WAN Manager zero-day (CVE-2026-20262) exploited in the wild. Attackers w/ write access can escalate to root via crafted HTTP requests. Patch now & review access controls! https://radar.offseq.com/threat/cisco-patches-another-sd-wan-zero-day-exploited-in-e2c68ff5 #OffSeq #Cisco #ZeroDay #Vuln

🚨 [CISA-2026:0615] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0615)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-20262 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20262)
- Name: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Catalyst SD-WAN Manager
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20262

⚠️ CVE-2026-54420 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-54420)
- Name: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: LiteSpeed
- Product: cPanel Plugin
- Notes: https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-54420

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260615 #cisa20260615 #cve_2026_20262 #cve_2026_54420 #cve202620262 #cve202654420

CVE ID: CVE-2026-20262
Vendor: Cisco
Product: Catalyst SD-WAN Manager
Date Added: 2026-06-15
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-20262

Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks

Cisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was exploited in...

🔗️ [Bleepingcomputer] https://link.is.it/fhfuuC

Broadcom has a new advisory for a critical vulnerability:

Endevor Bridge for Git 2.4.4 to 2.15.19 Vulnerabilities https://support.broadcom.com/web/ecx/security-advisory

Cisco:

Medium-severity: CVE-2026-20262: Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ

Cisco has also tagged Microsoft for a zero-day report, expected on June 16 https://talosintelligence.com/vulnerability_info @TalosSecurity
#Cisco #Broadcom #infosec #vulnerability

🟠 CVE-2026-49112 - High (7.5)

Unauthenticated Path Traversal in Shared Files &lt;= 1.7.64 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49112/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CVE-2026-49781 (CRITICAL): Brainstorm Force OttoKit <=1.1.27 is vulnerable to unauthenticated PHP object injection (CWE-502). Full system compromise possible. No patch — restrict access & monitor for threats. https://radar.offseq.com/threat/cve-2026-49781-cwe-502-deserialization-of-untruste-18974828 #OffSeq #Vulnerability #AppSec #PHP

🔴 CVE-2026-49781 - Critical (9.8)

Unauthenticated PHP Object Injection in OttoKit &lt;= 1.1.27 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49781/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CRITICAL: CVE-2026-52693 in impleCode eCommerce Product Catalog <=3.5.5 enables unauthenticated SQL Injection. Sensitive data at risk — patch status unconfirmed. Apply input validation & watch for vendor updates. https://radar.offseq.com/threat/cve-2026-52693-cwe-89-improper-neutralization-of-s-53fcc5a2 #OffSeq #SQLInjection #Infosec #Vuln

🔴 CVE-2026-52693 - Critical (9.3)

Unauthenticated SQL Injection in eCommerce Product Catalog &lt;= 3.5.5 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52693/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49769 - Critical (9.8)

Unauthenticated PHP Object Injection in wpForo Forum &lt;= 3.1.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49769/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49768 - Critical (9.8)

Unauthenticated PHP Object Injection in Happyforms &lt;= 1.26.13 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49768/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49766 - Critical (9.9)

Subscriber Arbitrary File Deletion in WP User Manager &lt;= 2.9.16 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49766/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49765 - Critical (9.8)

Unauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms &lt;= 1.1.8 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49765/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49764 - Critical (9.8)

Unauthenticated Broken Authentication in RegistrationMagic &lt;= 6.0.8.6 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49764/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

⚠️ CRITICAL: CVE-2026-52703 in Ninja Team FastDup (<=2.7.2) enables unauthenticated path traversal. Attackers could access restricted files. Monitor for vendor updates and restrict access! https://radar.offseq.com/threat/cve-2026-52703-cwe-35-path-traversal-in-ninja-team-07f46330 #OffSeq #vulnerability #infosec

🔴 CVE-2026-52703 - Critical (9.6)

Unauthenticated Path Traversal in FastDup &lt;= 2.7.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52703/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49763 - Critical (9.8)

Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot &lt;= 1.3.7 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49763/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49780 - High (8.8)

Customer Privilege Escalation in Dokan &lt;= 5.0.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49780/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49776 - Critical (9.3)

Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites &lt;= 2.32.6 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49776/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49770 - Critical (9.8)

Unauthenticated PHP Object Injection in WP Travel Engine &lt;= 6.7.12 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49770/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52692 - High (7.5)

Unauthenticated Sensitive Data Exposure in Affiliates Manager &lt;= 2.9.50 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52692/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52700 - High (8.5)

Subscriber SQL Injection in WCMultiShipping &lt;= 3.0.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52700/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52699 - High (7.5)

Unauthenticated Insecure Direct Object References (IDOR) in VikRentCar &lt;= 1.4.5 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52699/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52697 - High (8.5)

Subscriber SQL Injection in Taskbuilder &lt;= 5.0.7 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52697/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52695 - High (7.5)

Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout &lt;= 1.8.2 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52695/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-9691 - Critical (9.8)

Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms &lt;= 1.1.1 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9691/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-52694 - High (7.5)

Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce &lt;= 2.0 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52694/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-49067 - Critical (9.3)

Unauthenticated SQL Injection in Advanced 301 and 302 Redirect &lt;= 1.6.9 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49067/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-49083 - High (7.5)

Contributor Privilege Escalation in LatePoint &lt;= 5.5.1 versions.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49083/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔵 THREAT INTELLIGENCE

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

Vulnerability | CRITICAL
CVEs: CVE-2026-54420

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an...

Full analysis:
https://www.yazoul.net/news/article/cisa-flags-litespeed-cpanel-plugin-flaw-exploited-for-root-privilege-escalation

#CyberSecurity #APT #IncidentResponse

"CISA warns of another cPanel plugin flaw exploited in attacks"

"[...] government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end plugin. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. The U.S."

https://www.bleepingcomputer.com/news/security/cisa-warns-of-another-actively-exploited-cpanel-plugin-flaw/

#Cybersecurity

Stop symlink privilege escalation in its tracks. The Cyber Mind Co. has deployed the T-Suite Defense Playbook for CVE-2026-54420, featuring kernel overrides and FIM rules to protect LiteSpeed cPanel environments. Lock down your shared hosting infrastructure now: https://thecybermind.co/q7ni

Active exploitation verified by CISA: CVE-2026-54420 exposes LiteSpeed cPanel environments to critical symlink privilege escalation. Threat actors are actively breaching shared hosting isolation. Read the full high-authority C-Suite briefing from The Cyber Mind Co. to harden your perimeter right now. https://thecybermind.co/ez9o

🚨 [CISA-2026:0615] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0615)

CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

⚠️ CVE-2026-20262 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-20262)
- Name: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: Cisco
- Product: Catalyst SD-WAN Manager
- Notes: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20262

⚠️ CVE-2026-54420 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-54420)
- Name: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset&#39;s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Known To Be Used in Ransomware Campaigns? Unknown
- Vendor: LiteSpeed
- Product: cPanel Plugin
- Notes: https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-54420

#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20260615 #cisa20260615 #cve_2026_20262 #cve_2026_54420 #cve202620262 #cve202654420

CVE ID: CVE-2026-54420
Vendor: LiteSpeed
Product: cPanel Plugin
Date Added: 2026-06-15
CVE URL: https://nvd.nist.gov/vuln/detail/CVE-2026-54420

Perl's GD module released 2.86 to fix CVE-2026-11526, a command-injection flaw where GD::Image constructors passed untrusted filenames to Perl's 2-argument open(), so a name beginning or ending with a pipe, or starting with a redirect, ran as a shell command or truncated a file. The fix opens filenames with a 3-argument read open. In-memory Data constructors were never affected. Is 2-arg open() still lurking in your dependencies?
#Perl #security

🟠 CVE-2026-9863 - High (7.5)

Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be ab...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9863/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-9862 - Critical (9.8)

Fortra's 
Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileg...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-9862/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CRITICAL: CVE-2026-9862 in Fortra Core Privileged Access Manager (BoKS) allows unauthenticated remote OS command injection via boks_autoregisterd (CVSS 9.8). Restrict network access & monitor activity. No patch yet. https://radar.offseq.com/threat/cve-2026-9862-cwe-78-improper-neutralization-of-sp-0a9c664a #OffSeq #CVE20269862 #Infosec

🟠 CVE-2026-49111 - High (8.8)

Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation.

This issue affects Masteriyo - LMS: from n/a through 2.2.0.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-49111/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🔴 CVE-2026-52704 - Critical (10)

Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerce PDF Invoice Builder allows Remote Code Inclusion.

This issue affects WooCommerce PDF Invoice Builder: from n/a through 2.0.8.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-52704/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚨 CRITICAL: CVE-2026-52704 in WooCommerce PDF Invoice Builder ≤2.0.8 enables remote code execution via code injection (CWE-94). No patch yet — disable/remove plugin to prevent full system compromise. More info: https://radar.offseq.com/threat/cve-2026-52704-cwe-94-improper-control-of-generati-76aad4c5 #OffSeq #WordPress #Vuln

🟠 CVE-2026-5242 - High (8.8)

Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc. Pizzy Library allows Code Injection.

This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5242/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Trawling recent CVEs to make my brain stfu, stumbled across these:
https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-wertheim-safecontroller-hardware-for-vault-rooms-safe-deposit-locker-system-microcontroller/ / https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-wertheim-safecontroller-software-for-vault-rooms-safe-deposit-locker-system/ / https://db.gcve.eu/search?vendor=Wertheim+GmbH&sort_sources%5B%5D=cvelistv5

I dont know much about safes & stuff so I won't comment on impact but a few things stood out to me:

• Disclosure timeline: Man, this is fucked, this shit ran for 3 years?
• CVE-2026-34022: "The Safecontroller Family 65000 is secured with weak and custom cryptographic algorithms with hard-coded keys." "Cannot be fixed due to missing hardware support." "Proof of concept removed because no patch will be provided" :eyes_squint:
• RCE on the server: This is actually a quite neat chaining of vulnerabilities/"features" being used in the second advisory to get from Arbitrary File read & Directory Traversal Upload to RCE :blobcatsurprised:

🚨 CVE-2026-5482 (CRITICAL): Tecrail Responsive FileManager ≤9.14.0 lets unauth'd attackers upload dangerous files via dialog.php, leading to RCE. Project is unmaintained — no patch. Restrict access & monitor now. https://radar.offseq.com/threat/cve-2026-5482-cwe-434-unrestricted-upload-of-file--d1d3c74e #OffSeq #RCE #Vulnerability

🟠 CVE-2026-12057 - High (8.6)

When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-12057/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🚩 Red Hat Ansible Automation Platform 2.7 container update resolves HIGH severity issues (CVE-2026-44188 & more). Flaws include resource mgmt errors & info exposure. No known exploitation, but update ASAP after prior errata. https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-ansible-automati-6de4942c #OffSeq #RedHat #Ansible #Vuln

⚠️ CVE-2026-11860 (HIGH): OpenSolution Quick.CMS vulnerable to deserialization of untrusted data over HTTP. Remote code execution possible if admin accesses panel. Upgrade to v6.8+ to enforce HTTPS and mitigate risk. https://radar.offseq.com/threat/cve-2026-11860-cwe-502-deserialization-of-untruste-3d43127c #OffSeq #infosec #vuln #php

🔎 CVE-2026-12221: HIGH severity stack-based buffer overflow in Yealink SIP-T46U (108.86.0.118). Exploitable via local network — potential code execution or DoS. No fix yet; restrict device access & monitor updates. https://radar.offseq.com/threat/cve-2026-12221-stack-based-buffer-overflow-in-yeal-97330930 #OffSeq #VoIP #Infosec

🟠 CVE-2026-44488 - High (7.5)

Axios is a promise based HTTP client for the browser and Node.js. Axios versions 1.7.0 through 1.15.x did not enforce configured request and response size limits when requests were sent with the fetch adapter. Applications that selected adapter: '...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44488/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

🟠 CVE-2026-44487 - High (7.5)

Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct redirect flows. This affec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44487/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

📢 CVE-2026-48558 : Contournement d'authentification critique dans SimpleHelp via OIDC
📝 ## 🔍 Contexte

Le 12 juin 2026, Horizon3.ai publie une divulgation technique concernant **CVE-2026-4855...
📖 cyberveille : https://cyberveille.ch/posts/2026-06-17-cve-2026-48558-contournement-d-authentification-critique-dans-simplehelp-via-oidc/
🌐 source : https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/
#CVE_2026_48558 #IOC #Cyberveille

📢 CVE-2026-48558 : Contournement d'authentification critique dans SimpleHelp via OIDC
📝 ## 🔍 Contexte

Le 12 juin 2026, Horizon3.ai publie une divulgation technique concernant **CVE-2026-4855...
📖 cyberveille : https://cyberveille.ch/posts/2026-06-17-cve-2026-48558-contournement-d-authentification-critique-dans-simplehelp-via-oidc/
🌐 source : https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/
#CVE_2026_48558 #IOC #Cyberveille